No, you can't get that data from SNMP. You might be interested in setting up bandwidthd, or netflow. Netflow would let you export the traffic data to another server where it can be graphed.

It doesn't exactly answer your question, but honestly you should be graphing data from both units at once, not just the active/master unit.

Okay, you or he can let me know if you guys need anything else. Thanks!

You cannot pass a command to bsnmpd. It does not support that. The ipfw data may be listed, but I'm not sure what OID it might be under. It doesn't appear to be in any of bsnmpd's MIB files.

pfSense uses bsnmpd, and I don't think it supports viewing the routing table. I looked through a full snmpwalk dump with all of its modules enabled and I didn't see it anywhere inside. If it does support that, it may be in a module that we don't include.

Thanks for the help!

I was afraid so. I'm indeed looking for something to monitor the connection itself (dsl sync, etc), not the interface line up or down. At the moment, as a workaround, I've got Zabbix ping the wan monitor ip (same one as in pfsense), so I'm actually pinging twice.

If you really want to go down that road (which I wouldn't recommend, but I understand the desire to do) you could either look at the jailctl package which would let you run essentially a full freebsd install inside of an isolated location on the firewall, or you could install ESX on that box and have a VM for pfSense and a VM for other services.

Is there an SNMP MIB to show Address Resolution Protocol (ARP) table information? I need both the IP and MAC addresses in the same table. If anybody has any idea about this?

I've heard that this module might help, but I haven't tried it: http://www.freshports.org/net-mgmt/bsnmp-regex/ As for the OIDs, you can do a full snmpwalk and find most of the info there, or look up the bsnmpd MIBs. Some of the info is obtained locally I believe, and isn't done via snmp.

The security offered by snmp v1 and v2 is simple and potentially easy to bypass. All they'd need to do is guess the community string. Even with snmp v3 I wouldn't trust exposing it to the WAN, and I don't think that is supported by bsnmpd as used in pfSense. Plus all of that data is sent unencrypted, exposing what could potentially be some private information to sniffing somewhere along the way. As with other services, you shouldn't expose things to the world on WAN unless you have no other choice, and even then you can probably do it over a VPN tunnel instead and negate any potential security issues.

thanks guys, that worked. I am just a little confused as to what this is and why this is need.

27-bit masks to both wan and dmz (different nets).

Look at: /usr/share/snmp/defs/pf_tree.def (though it seems to be off a little) /usr/share/snmp/mibs/BEGEMOT-PF-MIB.txt pfStateTableCount OBJECT-TYPE     SYNTAX      Unsigned32     MAX-ACCESS  read-only     STATUS      current     DESCRIPTION         "Number of entries in the state table."     ::= { pfStateTable 1 } Leads me to this: 1.3.6.1.4.1.12325.1.200.1.3.1.0 Looks like that gets you the state table size.

for what its worth, an update, just some error correction and tweaks, mainly for the timeout, same link.