
9-49
Cisco PIX Firewall and VPN Configuration Guide
78-15033-01
Chapter 9 Accessing and Monitoring PIX Firewall
Using SNMP
Viewing The Connection Count
You can view the number of connections in use from the cfwConnectionStatTable in the Cisco Firewall
MIB. From the PIX
Firewall command line, you can view the connection count with the show conn
command. The following is sample output from the show conn command to demonstrate where the
information in cfwConnectionStatTable originates.
pix(config)# show conn
15 in use, 88 most used
The cfwConnectionStatTable object table can be accessed from the following path:
.iso.org.dod.internet.private.enterprises.cisco.ciscoMgmt.ciscoFirewallMIB.
ciscoFirewallMIBObjects.cfwSystem.cfwStatistics.cfwConnectionStatTable
Table 9-12 lists which objects provide connection count information.
Ta b l e 9-12 Connection Count Objects
Object Object Type Row 1: Returned Value Row 2: Returned Value
cfwConnectionStatService
(Table index)
Services 40 (IP protocol) 40 (IP protocol)
cfwConnectionStatType
(Table index)
ConnectionStat 6 (Current connections in
use)
7 (High)
cfwConnectionStatDescription SnmpAdminString number of connections
currently in use by the entire
firewall
highest number of
connections in use at any one
time since system startup
cfwConnectionStatCount Counter32 0 (Not used) 0 (Not used)
cfwConnectionStatValue Gauge32 integer (In use number) integer (Most used number)
In the HP OpenView Browse MIB application’s “MIB values” window, a sample MIB query yields the
following information:
cfwConnectionStatDescription.40.6 :number of connections currently in use by the entire firewall
cfwConnectionStatDescription.40.7 :highest number of connections in use at any one time since system startup
cfwConnectionStatCount.40.6 :0
cfwConnectionStatCount.40.7 :0
cfwConnectionStatValue.40.6 :15
cfwConnectionStatValue.40.7 :88
From this listing, the table index, cfwConnectionStatService, appears as the .40 appended to each
subsequent object and the table index, cfwConnectionStatType, appears as either .6 to indicate the
number of connections in use or .7 to indicate the most used number of connections. The
cfwConnectionStatValue object then lists the connection count. The cfwConnectionStatCount object
always returns 0 (zero).
Komentáře k této Příručce