One Hat Cyber Team

View File Name : _cisco-ipsec-flow-monitor.yaml

metrics:
  - MIB: CISCO-IPSEC-FLOW-MONITOR-MIB
    table:
      name: cikeTunnelTable
      OID: 1.3.6.1.4.1.9.9.171.1.2.3
    symbols:
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.15
        name: cikeTunLifeTime
        chart_meta:
          description: The negotiated lifetime of the IPsec Phase-1 IKE Tunnel in seconds
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Lifetime'
          unit: "s"
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.19
        name: cikeTunInOctets
        chart_meta:
          description: The total number of octets received by this IPsec Phase-1 IKE Tunnel
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Traffic/In'
          unit: "By"
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.27
        name: cikeTunOutOctets
        chart_meta:
          description: The total number of octets sent by this IPsec Phase-1 IKE Tunnel
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Traffic/Out'
          unit: "By/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.20
        name: cikeTunInPkts
        chart_meta:
          description: The total number of packets received by this IPsec Phase-1 IKE Tunnel
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Packet/In'
          unit: "{packet}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.21
        name: cikeTunInDropPkts
        chart_meta:
          description: The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Drop/In'
          unit: "{drop}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.28
        name: cikeTunOutPkts
        chart_meta:
          description: The total number of packets sent by this IPsec Phase-1 IKE Tunnel
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Packet/Out'
          unit: "{packet}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.29
        name: cikeTunOutDropPkts
        chart_meta:
          description: The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Drop/Out'
          unit: "{drop}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.35
        name: cikeTunStatus
        chart_meta:
          description: The status of the IPsec Phase-1 IKE Tunnel
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Status'
          unit: "{status}"
        mapping:
          1: active
          2: destroy
      - OID: .3.6.1.4.1.9.9.171.1.3.2.1.3
        name: cipSecTunIkeTunnelAlive
        chart_meta:
          description: The existence status of the IPsec Phase-1 IKE Tunnel
          family: 'Network/VPN/IPSec/Phase1/Tunnel/Existence'
          unit: "{status}"
        mapping:
          1: exists
          2: not_exists
    metric_tags:
      - index: 1
        tag: phase_1_tunnel_index
      - tag: peer_local_value
        symbol:
          OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.3
          name: cikeTunLocalValue
      - tag: peer_remote_value
        symbol:
          OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.7
          name: cikeTunRemoteValue
  - MIB: CISCO-IPSEC-FLOW-MONITOR-MIB
    table:
      name: cipSecTunnelTable
      OID: 1.3.6.1.4.1.9.9.171.1.3.2
    symbols:
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.9
        name: cipSecTunLifeTime
        chart_meta:
          description: The negotiated lifetime of the IPsec Phase-2 Tunnel in seconds.
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Lifetime'
          unit: "s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.26
        name: cipSecTunInOctets
        chart_meta:
          description: The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Traffic/In'
          unit: "By/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.27
        name: cipSecTunHcInOctets
        chart_meta:
          description: A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Traffic/In'
          unit: "By/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.32
        name: cipSecTunInPkts
        chart_meta:
          description: The total number of packets received by this IPsec Phase-2 Tunnel
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Packet/In'
          unit: "{packet}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.36
        name: cipSecTunInAuthFails
        chart_meta:
          description: The total number of inbound authentications which ended in failure by this IPsec Phase-2 Tunnel
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Failure/Auth/In'
          unit: "{failure}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.48
        name: cipSecTunOutAuthFails
        chart_meta:
          description: The total number of outbound authentications which ended in failure by this IPsec Phase-2 Tunnel.
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Failure/Auth/Out'
          unit: "{failure}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.38
        name: cipSecTunInDecryptFails
        chart_meta:
          description: The total number of inbound decryptions which ended in failure by this IPsec Phase-2 Tunnel.
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Failure/Decrypt/In'
          unit: "{failure}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.50
        name: cipSecTunOutEncryptFails
        chart_meta:
          description: The total number of outbound encryptions which ended in failure by this IPsec Phase-2 Tunnel.
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Failure/Encrypt/Out'
          unit: "{failure}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.39
        name: cipSecTunOutOctets
        chart_meta:
          description: The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Traffic/Out'
          unit: "By/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.40
        name: cipSecTunHcOutOctets
        chart_meta:
          description: A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Traffic/Out'
          unit: "By/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.45
        name: cipSecTunOutPkts
        chart_meta:
          description: The total number of packets sent by this IPsec Phase-2 Tunnel
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Packet/Out'
          unit: "{packet}/s"
      - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.51
        name: cipSecTunStatus
        chart_meta:
          description: The status of the IPsec Phase-2 Tunnel
          family: 'Network/VPN/IPSec/Phase2/Tunnel/Status'
          unit: "{status}"
        mapping:
          1: active
          2: destroy
    metric_tags:
      - index: 1
        tag: phase_2_tunnel_index
      - tag: phase_1_tunnel_index
        symbol:
          OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.2
          name: cipSecTunIkeTunnelIndex
      - tag: peer_local_address
        symbol:
          OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.4
          name: cipSecTunLocalAddr
      - tag: peer_remote_address
        symbol:
          OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.5
          name: cipSecTunRemoteAddr