Internet Engineering Task Force (IETF) T. Dietz, Ed.
Request for Comments: 6727 NEC Europe Ltd.
Category: Standards Track B. Claise
ISSN: 2070-1721 Cisco Systems, Inc.
J. Quittek
NEC Europe Ltd.
October 2012
Internet Engineering Task Force (IETF) T. Dietz, Ed.
Request for Comments: 6727 NEC Europe Ltd.
Category: Standards Track B. Claise
ISSN: 2070-1721 Cisco Systems, Inc.
J. Quittek
NEC Europe Ltd.
October 2012
Definitions of Managed Objects for Packet Sampling
数据包采样的托管对象定义
Abstract
摘要
This memo defines a portion of the Management Information Base (MIB) for use with network management protocols in the Internet community. In particular, it describes extensions to the IPFIX-SELECTOR-MIB module. For IP Flow Information eXport (IPFIX) implementations that use Packet Sampling (PSAMP) techniques, this memo defines the PSAMP-MIB module containing managed objects for providing information on applied packet selection functions and their parameters.
此备忘录定义了管理信息库（MIB）的一部分，用于Internet社区中的网络管理协议。特别是，它描述了IPFIX-SELECTOR-MIB模块的扩展。对于使用数据包采样（PSAMP）技术的IP流信息导出（IPFIX）实现，本备忘录定义了包含托管对象的PSAMP-MIB模块，用于提供有关应用数据包选择函数及其参数的信息。
Status of This Memo
关于下段备忘
This is an Internet Standards Track document.
这是一份互联网标准跟踪文件。
This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 5741.
本文件是互联网工程任务组（IETF）的产品。它代表了IETF社区的共识。它已经接受了公众审查，并已被互联网工程指导小组（IESG）批准出版。有关互联网标准的更多信息，请参见RFC 5741第2节。
Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc6727.
有关本文件当前状态、任何勘误表以及如何提供反馈的信息，请访问http://www.rfc-editor.org/info/rfc6727.
Copyright Notice
版权公告
Copyright (c) 2012 IETF Trust and the persons identified as the document authors. All rights reserved.
版权所有（c）2012 IETF信托基金和确定为文件作者的人员。版权所有。
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.
本文件受BCP 78和IETF信托有关IETF文件的法律规定的约束(http://trustee.ietf.org/license-info)自本文件出版之日起生效。请仔细阅读这些文件，因为它们描述了您对本文件的权利和限制。从本文件中提取的代码组件必须包括信托法律条款第4.e节中所述的简化BSD许可证文本，并提供简化BSD许可证中所述的无担保。
Table of Contents
目录
1. The Internet-Standard Management Framework . . . . . . . . . . 3
2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3
3. Overview of PSAMP Documents . . . . . . . . . . . . . . . . . 4
4. Related IPFIX Documents . . . . . . . . . . . . . . . . . . . 4
5. Structure of the PSAMP MIB module . . . . . . . . . . . . . . 4
5.1. Textual Conventions . . . . . . . . . . . . . . . . . . . 5
5.2. Packet Selection Functions . . . . . . . . . . . . . . . . 6
5.2.1. Systematic Count-Based Sampling . . . . . . . . . . . 6
5.2.2. Systematic Time-Based Sampling . . . . . . . . . . . . 6
5.2.3. Random n-out-of-N Sampling . . . . . . . . . . . . . . 7
5.2.4. Uniform Probabilistic Sampling . . . . . . . . . . . . 7
5.2.5. Property Match Filtering . . . . . . . . . . . . . . . 7
5.2.6. Hash-Based Filtering . . . . . . . . . . . . . . . . . 8
6. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 9
7. Security Considerations . . . . . . . . . . . . . . . . . . . 25
8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 25
9. Acknowledgment . . . . . . . . . . . . . . . . . . . . . . . . 26
10. References . . . . . . . . . . . . . . . . . . . . . . . . . . 26
10.1. Normative References . . . . . . . . . . . . . . . . . . . 26
10.2. Informative References . . . . . . . . . . . . . . . . . . 27
1. The Internet-Standard Management Framework . . . . . . . . . . 3
2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3
3. Overview of PSAMP Documents . . . . . . . . . . . . . . . . . 4
4. Related IPFIX Documents . . . . . . . . . . . . . . . . . . . 4
5. Structure of the PSAMP MIB module . . . . . . . . . . . . . . 4
5.1. Textual Conventions . . . . . . . . . . . . . . . . . . . 5
5.2. Packet Selection Functions . . . . . . . . . . . . . . . . 6
5.2.1. Systematic Count-Based Sampling . . . . . . . . . . . 6
5.2.2. Systematic Time-Based Sampling . . . . . . . . . . . . 6
5.2.3. Random n-out-of-N Sampling . . . . . . . . . . . . . . 7
5.2.4. Uniform Probabilistic Sampling . . . . . . . . . . . . 7
5.2.5. Property Match Filtering . . . . . . . . . . . . . . . 7
5.2.6. Hash-Based Filtering . . . . . . . . . . . . . . . . . 8
6. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 9
7. Security Considerations . . . . . . . . . . . . . . . . . . . 25
8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 25
9. Acknowledgment . . . . . . . . . . . . . . . . . . . . . . . . 26
10. References . . . . . . . . . . . . . . . . . . . . . . . . . . 26
10.1. Normative References . . . . . . . . . . . . . . . . . . . 26
10.2. Informative References . . . . . . . . . . . . . . . . . . 27
For a detailed overview of the documents that describe the current Internet-Standard Management Framework, please refer to section 7 of RFC 3410 [RFC3410].
有关描述当前互联网标准管理框架的文件的详细概述，请参阅RFC 3410[RFC3410]第7节。
Managed objects are accessed via a virtual information store, termed the Management Information Base or MIB. MIB objects are generally accessed through the Simple Network Management Protocol (SNMP). Objects in the MIB are defined using the mechanisms defined in the Structure of Management Information (SMI). This memo specifies a MIB module that is compliant to the SMIv2, which is described in STD 58, RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58,RFC 2580 [RFC2580].
托管对象通过虚拟信息存储（称为管理信息库或MIB）进行访问。MIB对象通常通过简单网络管理协议（SNMP）进行访问。MIB中的对象是使用管理信息结构（SMI）中定义的机制定义的。本备忘录规定了符合SMIv2的MIB模块，如STD 58、RFC 2578[RFC2578]、STD 58、RFC 2579[RFC2579]和STD 58、RFC 2580[RFC2580]所述。
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119].
本文件中的关键词“必须”、“不得”、“必需”、“应”、“不应”、“建议”、“不建议”、“可”和“可选”应按照RFC 2119[RFC2119]中的说明进行解释。
This document is a product of the IP Flow Information eXport (IPFIX) Working Group (WG). Work on this document was started in the Packet Sampling (PSAMP) WG and moved to the IPFIX WG when the PSAMP WG was concluded.
本文件是IP流量信息导出（IPFIX）工作组（WG）的产品。关于本文档的工作在数据包采样（PSAMP）工作组中开始，并在PSAMP工作组结束时转移到IPFIX工作组。
Its purpose is to define managed objects for monitoring, PSAMP Devices performing packet selection by Sampling and Filtering as described in [RFC5475].
其目的是定义用于监控的托管对象，PSAMP设备通过[RFC5475]中所述的采样和过滤执行数据包选择。
It is assumed that packet Sampling is performed according to the framework defined in [RFC5474]. In this document, the PSAMP terms that appear capitalized are used as defined in [RFC5475].
假设根据[RFC5474]中定义的框架执行数据包采样。在本文件中，出现大写的PSAMP术语按照[RFC5475]中的定义使用。
Managed objects in the PSAMP MIB module are defined as an extension of the IPFIX-MIB and IPFIX-SELECTOR-MIB modules [RFC6615]. Since the IPFIX MIB module is only for monitoring the same holds true for the PSAMP MIB module defined in this document. The definition of objects is in line with the PSAMP information model [RFC5477].
PSAMP MIB模块中的托管对象定义为IPFIX-MIB和IPFIX-SELECTOR-MIB模块[RFC6615]的扩展。由于IPFIX MIB模块仅用于监控，因此本文档中定义的PSAMP MIB模块也是如此。对象的定义符合PSAMP信息模型[RFC5477]。
Section 3 gives an overview of the PSAMP documents, while Section 4 refers to the related IPFIX documents. Section 5 describes the structure of the PSAMP MIB module, and Section 6 contains the formal definition. Security issues are discussed in Section 7.
第3节概述了PSAMP文档，而第4节则介绍了相关的IPFIX文档。第5节描述了PSAMP MIB模块的结构，第6节包含了形式化定义。第7节讨论了安全问题。
[RFC5474]: "A Framework for Packet Selection and Reporting" describes the PSAMP framework for network elements to select subsets of packets by statistical and other methods, and to export a stream of reports on the selected packets to a Collector.
[RFC5474]：“数据包选择和报告框架”描述了PSAMP框架，用于网络元件通过统计和其他方法选择数据包子集，并将所选数据包的报告流导出到收集器。
[RFC5475]: "Sampling and Filtering Techniques for IP Packet Selection" describes the set of packet selection techniques supported by PSAMP.
[RFC5475]：“IP数据包选择的采样和过滤技术”描述了PSAMP支持的数据包选择技术集。
[RFC5476]: "Packet Sampling (PSAMP) Protocol Specifications" specifies the export of packet information from a PSAMP Exporting Process to a PSAMP Collecting Process.
[RFC5476]：“数据包采样（PSAMP）协议规范”指定将数据包信息从PSAMP导出进程导出到PSAMP收集进程。
[RFC5477]: "Information Model for Packet Sampling Exports" defines an information and data model for PSAMP.
[RFC5477]：“数据包采样导出的信息模型”定义了PSAMP的信息和数据模型。
This document: "Definitions of Managed Objects for Packet Sampling" describes the PSAMP Management Information Base.
本文档：“数据包采样的托管对象定义”描述了PSAMP管理信息库。
The IPFIX protocol provides network administrators with access to IP Flow information.
IPFIX协议为网络管理员提供了访问IP流信息的权限。
[RFC5101]: "Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information" specifies how IPFIX Data Records and Templates are carried via a congestion-aware transport protocol from IPFIX Exporting Processes to IPFIX Collecting Processes. It also specifies the data types used in the PSAMP MIB module and their encoding.
[RFC5101]：“交换IP流量信息的IP流量信息导出（IPFIX）协议规范”指定如何通过拥塞感知传输协议将IPFIX数据记录和模板从IPFIX导出进程传送到IPFIX收集进程。它还指定PSAMP MIB模块中使用的数据类型及其编码。
[RFC6615]: The IPFIX-MIB "Definitions of Managed Objects for IP Flow Information Export" is the basis for this document because it extends the IPFIX SELECTOR MIB module defined there.
[RFC6615]：IPFIX-MIB“用于IP流信息导出的托管对象定义”是本文档的基础，因为它扩展了其中定义的IPFIX选择器MIB模块。
The IPFIX-MIB module defined in [RFC6615] has the concept of a packet Selection Process containing a set of Selector function instances. Selection Processes and functions are referenced in the ipfixSelectionProcessTable of the IPFIX-MIB module. The ipfixSelectionProcessTable identifies an instance of a Selector function by an OID. The OID points to an object that describes the Selector function. For simple Selector functions without parameters, the OID refers to an object that contains only one additional object indicating the current availability of the function. For functions
[RFC6615]中定义的IPFIX-MIB模块具有包含一组选择器功能实例的数据包选择过程的概念。IPFIX-MIB模块的ipfixSelectionProcessTable中引用了选择过程和功能。ipfixSelectionProcessTable通过OID标识选择器函数的实例。OID指向描述选择器功能的对象。对于没有参数的简单选择器函数，OID指的是仅包含一个额外对象的对象，该对象指示函数的当前可用性。功能
that have one or more parameters, the object has a subtree that, in addition to an availability object, contains a table with a conceptual column for each parameter. Entries (conceptual rows) in this table represent different combinations of parameter values for instances of the Selector function.
如果具有一个或多个参数，则对象具有子树，该子树除包含可用性对象外，还包含一个表，每个参数都有一个概念列。此表中的条目（概念行）表示选择器函数实例的不同参数值组合。
The object ipfixSelectorFunctions in the IPFIX SELECTOR MIB module serves as the root for objects that describe instances of packet Selector functions. The IPFIX SELECTOR MIB module is a very small module that is defined in [RFC6615]. The top-level OIDs of the parameter trees located beneath ipfixSelectorFunctions are maintained by IANA. In the IPFIX SELECTOR MIB module as defined by [RFC6615], the object ipfixSelectorFunctions contains just a single trivial packet Selector function called ipfixFuncSelectAll that selects every packet and has no parameter:
IPFIX选择器MIB模块中的对象ipfixSelectorFunctions用作描述数据包选择器函数实例的对象的根。IPFIX选择器MIB模块是[RFC6615]中定义的一个非常小的模块。位于IPFixSelector函数下的参数树的顶级OID由IANA维护。在[RFC6615]定义的IPFIX选择器MIB模块中，对象ipfixSelectorFunctions只包含一个名为IPFIXSelectAll的普通数据包选择器函数，该函数选择每个数据包，并且没有参数：
ipfixSelectorMIB
+- ipfixSelectorObjects(1)
+- ipfixSelectorFunctions(1)
+- ipfixFuncSelectAll(1)
+- ipfixFuncSelectAllAvail(1)
ipfixSelectorMIB
+- ipfixSelectorObjects(1)
+- ipfixSelectorFunctions(1)
+- ipfixFuncSelectAll(1)
+- ipfixFuncSelectAllAvail(1)
The PSAMP MIB module defined in this document registers additional top-level OIDs for the parameter subtrees of its Selector functions in the IPFIX-SELECTOR-MIB Function sub-registry according to the procedures defined in [RFC6615]. It introduces six new subtrees beneath ipfixSelectorFunctions. Each of them describes a packet Selector function with one or more parameters. Naming and ordering of objects is fully in line with the guidelines given in Section 6.1 of [RFC6615]. All functions and their parameters are already listed in the overview of functions given by the table in Section 8.2.1 of [RFC5477].
本文档中定义的PSAMP MIB模块根据[RFC6615]中定义的过程，在IPFIX-Selector-MIB函数子注册表中为其选择器函数的参数子树注册额外的顶级OID。它在IPFixSelector函数下面引入了六个新的子树。它们中的每一个都描述了具有一个或多个参数的数据包选择器函数。对象的命名和排序完全符合[RFC6615]第6.1节中给出的指南。[RFC5477]第8.2.1节表中给出的功能概述中已经列出了所有功能及其参数。
The PSAMP MIB module imports two textual conventions that define data types used in this MIB module from other MIB modules. The Unsigned64TC data type is imported from the APPLICATION MIB module [RFC2564], and the Float64TC data type is imported from the FLOAT-TC-MIB module [RFC6340]. Those data types are defined according to [RFC5101]. Those data types are not an integral part of [RFC2578] but are needed to define objects in this MIB module that conform to the Information Elements defined for those objects in [RFC5477].
PSAMP MIB模块从其他MIB模块导入定义此MIB模块中使用的数据类型的两个文本约定。Unsigned64TC数据类型从应用程序MIB模块[RFC2564]导入，Float64TC数据类型从FLOAT-TC-MIB模块[RFC6340]导入。这些数据类型是根据[RFC5101]定义的。这些数据类型不是[RFC2578]不可分割的一部分，但需要在此MIB模块中定义符合[RFC5477]中为这些对象定义的信息元素的对象。
The Unsigned64TC textual convention describes an unsigned integer of 64 bits. It is imported from the APPLICATION MIB module. The Float64TC textual convention describes the format that is used for 64-bit floating point numbers.
无符号64TC文本约定描述64位的无符号整数。它是从应用程序MIB模块导入的。Float64TC文本约定描述用于64位浮点数的格式。
In general, different packet Selector functions have different parameters. The PSAMP MIB module contains six objects with subtrees that provide information on parameters of function instances of different Selector functions. All objects are named and structured according to Section 8.2.1 of [RFC5477]:
通常，不同的数据包选择器函数具有不同的参数。PSAMP MIB模块包含六个具有子树的对象，这些子树提供关于不同选择器函数的函数实例参数的信息。根据[RFC5477]第8.2.1节对所有对象进行命名和构造：
ipfixSelectorFunctions(1)
+-- psampSampCountBased(2)
+-- psampSampTimeBased(3)
+-- psampSampRandOutOfN(4)
+-- psampSampUniProb(5)
+-- psampFiltPropMatch(6)
+-- psampFiltHash(7)
ipfixSelectorFunctions(1)
+-- psampSampCountBased(2)
+-- psampSampTimeBased(3)
+-- psampSampRandOutOfN(4)
+-- psampSampUniProb(5)
+-- psampFiltPropMatch(6)
+-- psampFiltHash(7)
Indexing of these functions in the PSAMP MIB module starts with index (2). The function ipfixFuncSelectAll with index (1) is already defined in the IPFIX SELECTOR MIB module as shown above.
PSAMP MIB模块中这些函数的索引从索引（2）开始。如上所示，已在IPFIX选择器MIB模块中定义了带有索引（1）的函数ipfixFuncSelectAll。
The object tree for each of these functions is described below. Semantics of all functions and their parameters are described in detail in [RFC5475]. More information on the Selector Reports can also be found in Section 6.5.2 of [RFC5476].
下面描述了每个函数的对象树。[RFC5475]中详细描述了所有函数及其参数的语义。有关选择器报告的更多信息，请参见[RFC5476]的第6.5.2节。
The first Selector function is systematic count-based Sampling. Its availability is indicated by object psampSampCountBasedAvail. The function has two parameters: psampSampCountBasedInterval and psampSampCountBasedSpace. Different combinations of values of these parameters for different instances of the Selector function are represented by different conceptual rows in the table psampSampCountBasedParamSetTable:
第一个选择器功能是基于系统计数的采样。其可用性由对象psampSampCountBasedAvail表示。该函数有两个参数：psampSampCountBasedInterval和psampSampCountBasedSpace。选择器函数不同实例的这些参数值的不同组合由表psampSampCountBasedParamSetTable中的不同概念行表示：
psampSampCountBased(2)
+-- psampSampCountBasedAvail(1)
+-- psampSampCountBasedParamSetTable(2)
+-- psampSampCountBasedParamSetEntry(1) [psampSampCountBasedIndex]
+-- psampSampCountBasedIndex(1)
+-- psampSampCountBasedInterval(2)
+-- psampSampCountBasedSpace(3)
psampSampCountBased(2)
+-- psampSampCountBasedAvail(1)
+-- psampSampCountBasedParamSetTable(2)
+-- psampSampCountBasedParamSetEntry(1) [psampSampCountBasedIndex]
+-- psampSampCountBasedIndex(1)
+-- psampSampCountBasedInterval(2)
+-- psampSampCountBasedSpace(3)
The second Selector function is systematic time-based Sampling. The structure of the subtree for this function is similar to the psampSampCountBased subtree. Parameters are
第二个选择器功能是基于时间的系统采样。此函数的子树结构类似于基于PSAMPSAMPCount的子树。参数为
psampSampTimeBasedInterval and psampSampTimeBasedSpace. They appear to be the same as for count-based Sampling, but their data types are different because they indicate time values instead of numbers of packets:
psampSampTimeBasedInterval和psampSampTimeBasedSpace。它们似乎与基于计数的采样相同，但其数据类型不同，因为它们表示时间值而不是数据包数：
psampSampTimeBased(3)
+-- psampSampTimeBasedAvail(1)
+-- psampSampTimeBasedParamSetTable(2)
+-- psampSampTimeBasedParamSetEntry(1) [psampSampTimeBasedIndex]
+-- psampSampTimeBasedIndex(1)
+-- psampSampTimeBasedInterval(2)
+-- psampSampTimeBasedSpace(3)
psampSampTimeBased(3)
+-- psampSampTimeBasedAvail(1)
+-- psampSampTimeBasedParamSetTable(2)
+-- psampSampTimeBasedParamSetEntry(1) [psampSampTimeBasedIndex]
+-- psampSampTimeBasedIndex(1)
+-- psampSampTimeBasedInterval(2)
+-- psampSampTimeBasedSpace(3)
The third Selector function is random n-out-of-N Sampling. Parameters are psampSampRandOutOfNSize and psampSampRandOutOfNPopulation:
第三个选择器功能是n取n随机采样。参数为psampSampRandOutOfNSize和PSAMPSAMPSAMPRANDOUTOFNpopulation：
psampSampRandOutOfN(4)
+-- psampSampRandOutOfNAvail(1)
+-- psampSampRandOutOfNParamSetTable(2)
+-- psampSampRandOutOfNParamSetEntry(1) [psampSampRandOutOfNIndex]
+-- psampSampRandOutOfNIndex(1)
+-- psampSampRandOutOfNSize(2)
+-- psampSampRandOutOfNPopulation(3)
psampSampRandOutOfN(4)
+-- psampSampRandOutOfNAvail(1)
+-- psampSampRandOutOfNParamSetTable(2)
+-- psampSampRandOutOfNParamSetEntry(1) [psampSampRandOutOfNIndex]
+-- psampSampRandOutOfNIndex(1)
+-- psampSampRandOutOfNSize(2)
+-- psampSampRandOutOfNPopulation(3)
The fourth Selector function is uniform probabilistic Sampling. It has just a single parameter called psampSampUniProbProbability:
第四个选择函数是均匀概率抽样。它只有一个名为PSAMPSAMP的参数：
psampSampUniProb(5)
+-- psampSampUniProbAvail(1)
+-- psampSampUniProbParamSetTable(2)
+-- psampSampUniProbParamSetEntry(1) [psampSampUniProbIndex]
+-- psampSampUniProbIndex(1)
+-- psampSampUniProbProbability(2)
psampSampUniProb(5)
+-- psampSampUniProbAvail(1)
+-- psampSampUniProbParamSetTable(2)
+-- psampSampUniProbParamSetEntry(1) [psampSampUniProbIndex]
+-- psampSampUniProbIndex(1)
+-- psampSampUniProbProbability(2)
The fifth Selector function is property match Filtering. For this Selector function, there is a broad variety of possible parameters that could be used. But, as stated in Section 8.2.1 of [RFC5477], there are no agreed parameters specified and the subtree for this function only contains an object indicating the availability of this function. Parameters cannot be retrieved via the PSAMP MIB module:
第五个选择器功能是属性匹配过滤。对于此选择器功能，可以使用多种可能的参数。但是，如[RFC5477]第8.2.1节所述，没有规定约定的参数，该函数的子树仅包含一个表示该函数可用性的对象。无法通过PSAMP MIB模块检索参数：
psampFiltPropMatch(6)
+-- psampFiltPropMatchAvail(1)
psampFiltPropMatch(6)
+-- psampFiltPropMatchAvail(1)
The sixth Selector function is hash-based Filtering. The object psampFiltHashFunction is an enumeration that specifies the kind of hash function that is applied. These hash functions have quite a number of parameters, and the actual number may vary with the choice of the hash function applied. The common parameter set for all hash-based Filtering functions contains 7 parameters: psampFiltHashInitializerValue, psampFiltHashIpPayloadOffset, psampFiltHashIpPayloadSize, psampFiltHashSelectedRangeMin, psampFiltHashSelectedRangeMax, psampFiltHashOutputRangeMin, and psampFiltHashOutputRangeMax.
第六个选择器函数是基于哈希的过滤。对象psampFiltHashFunction是一个枚举，指定应用的哈希函数的类型。这些散列函数有相当多的参数，实际数量可能因所应用的散列函数的选择而异。所有基于哈希的筛选函数的公共参数集包含7个参数：PSAMPFILTSHASHInitializerValue、PSAMPFILTSHASHIPPAYLOADOFFSET、PSAMPFILTSHASHIPPAYLOADSIZE、PSAMPFILTSELECTEDRANGEMIN、PSAMPFILTSHASHELECTEDRANGEMAX、PSAMPFILTSHASHOUTPUTTRRANGEMIN和PSAMPFILTSHASHOUTPUTTRANGEMAX。
psampFiltHash(7)
+-- psampFiltHashAvail(1)
+-- psampFiltHashCapabilities(2)
+-- psampFiltHashParamSetTable(3)
+-- psampFiltHashParamSetEntry(1) [psampFiltHashIndex]
+-- psampFiltHashIndex(1)
+-- psampFiltHashFunction(2)
+-- psampFiltHashInitializerValue(3)
+-- psampFiltHashIpPayloadOffset(4)
+-- psampFiltHashIpPayloadSize(5)
+-- psampFiltHashSelectedRangeMin(6)
+-- psampFiltHashSelectedRangeMax(7)
+-- psampFiltHashOutputRangeMin(8)
+-- psampFiltHashOutputRangeMax(9)
psampFiltHash(7)
+-- psampFiltHashAvail(1)
+-- psampFiltHashCapabilities(2)
+-- psampFiltHashParamSetTable(3)
+-- psampFiltHashParamSetEntry(1) [psampFiltHashIndex]
+-- psampFiltHashIndex(1)
+-- psampFiltHashFunction(2)
+-- psampFiltHashInitializerValue(3)
+-- psampFiltHashIpPayloadOffset(4)
+-- psampFiltHashIpPayloadSize(5)
+-- psampFiltHashSelectedRangeMin(6)
+-- psampFiltHashSelectedRangeMax(7)
+-- psampFiltHashOutputRangeMin(8)
+-- psampFiltHashOutputRangeMax(9)
Further parameters depend on the applied hash function and are not specified within the PSAMP MIB module.
进一步的参数取决于应用的哈希函数，在PSAMP MIB模块中没有指定。
PSAMP-MIB DEFINITIONS ::= BEGIN
PSAMP-MIB DEFINITIONS ::= BEGIN
IMPORTS MODULE-IDENTITY, OBJECT-TYPE, Integer32, Unsigned32, mib-2 FROM SNMPv2-SMI -- RFC 2578 TruthValue FROM SNMPv2-TC -- RFC 2579 MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF -- RFC 2580 Unsigned64TC FROM APPLICATION-MIB -- RFC 2564 Float64TC FROM FLOAT-TC-MIB -- RFC 6340 ipfixSelectorFunctions FROM IPFIX-SELECTOR-MIB; -- RFC 6615
从SNMPv2 SMI导入MODULE-IDENTITY、OBJECT-TYPE、Integer32、Unsigned32、mib-2——从SNMPv2 TC导入RFC 2578 TruthValue——从SNMPv2 CONF导入RFC 2579 MODULE-COMPLIANCE、OBJECT-GROUP——从APPLICATION-mib导入RFC 2580 Unsigned64TC——从FLOAT-TC-mib导入RFC 2564 Float64TC——从IPFIX-SELECTOR-mib导入RFC 6340 IPFixSelector函数；——RFC 6615
psampMIB MODULE-IDENTITY
LAST-UPDATED "201209051200Z" -- 5 September 2012
ORGANIZATION "IETF IPFIX Working Group"
CONTACT-INFO
"WG charter:
http://datatracker.ietf.org/wg/ipfix/charter/
psampMIB MODULE-IDENTITY
LAST-UPDATED "201209051200Z" -- 5 September 2012
ORGANIZATION "IETF IPFIX Working Group"
CONTACT-INFO
"WG charter:
http://datatracker.ietf.org/wg/ipfix/charter/
Mailing Lists:
General Discussion: ipfix@ietf.org
To Subscribe: https://www.ietf.org/mailman/listinfo/ipfix
Archive:
http://www.ietf.org/mail-archive/web/ipfix/current/maillist.html
Mailing Lists:
General Discussion: ipfix@ietf.org
To Subscribe: https://www.ietf.org/mailman/listinfo/ipfix
Archive:
http://www.ietf.org/mail-archive/web/ipfix/current/maillist.html
Thomas Dietz (editor) NEC Europe Ltd. NEC Laboratories Europe Network Research Division Kurfuersten-Anlage 36 69115 Heidelberg Germany Phone: +49 6221 4342-128 EMail: Thomas.Dietz@neclab.eu
Thomas Dietz（编辑）NEC欧洲有限公司NEC实验室欧洲网络研究部Kurfuersten Anlage 36 69115德国海德堡电话：+49 6221 4342-128电子邮件：Thomas。Dietz@neclab.eu
Benoit Claise Cisco Systems, Inc. De Kleetlaan 6a b1 Diegem 1831 Belgium Phone: +32 2 704 5622 EMail: bclaise@cisco.com
Benoit Claise Cisco Systems，Inc.De Kleetlaan 6a b1 Diegem 1831比利时电话：+32 2 704 5622电子邮件：bclaise@cisco.com
Juergen Quittek NEC Europe Ltd. NEC Laboratories Europe Network Research Division Kurfuersten-Anlage 36 69115 Heidelberg Germany Phone: +49 6221 4342-115 EMail: quittek@neclab.eu" DESCRIPTION "The PSAMP MIB defines managed objects for packet sampling and filtering.
Juergen Quittek NEC欧洲有限公司NEC实验室欧洲网络研究部Kurfuersten Anlage 36 69115德国海德堡电话：+49 6221 4342-115电子邮件：quittek@neclab.eu“说明”PSAMP MIB定义用于数据包采样和筛选的托管对象。
These objects provide information about managed nodes supporting packet sampling, including packet sampling capabilities, configuration, and statistics. The PSAMP MIB module registers additional top-level OIDs for the parameter subtrees of its Selector functions in the IPFIX-SELECTOR-MIB Function sub-registry according to the procedures defined in RFC 6615.
这些对象提供有关支持数据包采样的托管节点的信息，包括数据包采样功能、配置和统计信息。PSAMP MIB模块根据RFC 6615中定义的过程，在IPFIX-Selector-MIB函数子注册表中为其选择器函数的参数子树注册额外的顶级OID。
Copyright (c) 2012 IETF Trust and the persons identified as authors of the code. All rights reserved.
版权所有（c）2012 IETF信托基金和被确定为代码作者的人员。版权所有。
Redistribution and use in source and binary forms, with or without modification, is permitted pursuant to, and subject to the license terms contained in, the Simplified BSD License set forth in Section 4.c of the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info).
根据IETF信托有关IETF文件的法律规定第4.c节规定的简化BSD许可证中包含的许可条款，允许以源代码和二进制格式重新分发和使用，无论是否修改(http://trustee.ietf.org/license-info).
This version of this MIB module is part of RFC 6727; see the
RFC itself for full legal notices."
-- Revision history
REVISION "201209051200Z" -- 5 September 2012
DESCRIPTION
"Initial version, published as RFC 6727."
::= { mib-2 212 }
This version of this MIB module is part of RFC 6727; see the
RFC itself for full legal notices."
-- Revision history
REVISION "201209051200Z" -- 5 September 2012
DESCRIPTION
"Initial version, published as RFC 6727."
::= { mib-2 212 }
-- Top-level structure of the MIB
--MIB的顶层结构
psampObjects OBJECT IDENTIFIER ::= { psampMIB 1 }
psampConformance OBJECT IDENTIFIER ::= { psampMIB 2 }
psampObjects OBJECT IDENTIFIER ::= { psampMIB 1 }
psampConformance OBJECT IDENTIFIER ::= { psampMIB 2 }
--==================================================================
-- Packet selection sampling methods group of objects
--==================================================================
--==================================================================
-- Packet selection sampling methods group of objects
--==================================================================
--==================================================================
--* Method 1: Systematic count-based Sampling
--==================================================================
--==================================================================
--* Method 1: Systematic count-based Sampling
--==================================================================
-- Reference: RFC 5475 (Section 5.1), RFC 5476 (Section 6.5.2.1),
-- and RFC 5477 (Section 8.2)
psampSampCountBased OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 2 }
-- Reference: RFC 5475 (Section 5.1), RFC 5476 (Section 6.5.2.1),
-- and RFC 5477 (Section 8.2)
psampSampCountBased OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 2 }
psampSampCountBasedAvail OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the availability of systematic count-based sampling at the managed node.
psampSampCountBasedAvail对象类型语法TruthValue MAX-ACCESS只读状态当前描述“此对象表示托管节点上基于系统计数的采样的可用性。
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampCountBased 1 }
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampCountBased 1 }
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
psampSampCountBasedParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampCountBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of systematic count-based
packet sampling. A parameter set describing a
configuration contains two parameters: the sampling
interval length and space."
::= { psampSampCountBased 2 }
psampSampCountBasedParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampCountBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of systematic count-based
packet sampling. A parameter set describing a
configuration contains two parameters: the sampling
interval length and space."
::= { psampSampCountBased 2 }
psampSampCountBasedParamSetEntry OBJECT-TYPE
SYNTAX PsampSampCountBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampCountBasedParamSetTable."
INDEX { psampSampCountBasedIndex }
::= { psampSampCountBasedParamSetTable 1 }
psampSampCountBasedParamSetEntry OBJECT-TYPE
SYNTAX PsampSampCountBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampCountBasedParamSetTable."
INDEX { psampSampCountBasedIndex }
::= { psampSampCountBasedParamSetTable 1 }
PsampSampCountBasedParamSetEntry ::=
SEQUENCE {
psampSampCountBasedIndex Integer32,
PsampSampCountBasedParamSetEntry ::=
SEQUENCE {
psampSampCountBasedIndex Integer32,
psampSampCountBasedInterval Unsigned32, psampSampCountBasedSpace Unsigned32 }
psampSampCountBasedInterval Unsigned32，psampSampCountBasedSpace Unsigned32}
psampSampCountBasedIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampSampCountBasedParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampCountBasedParamSetEntry 1 }
psampSampCountBasedIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampSampCountBasedParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampCountBasedParamSetEntry 1 }
psampSampCountBasedInterval OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of packets that are
consecutively sampled. A value of 100 means that 100
consecutive packets are sampled."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampCountBasedParamSetEntry 2 }
psampSampCountBasedInterval OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of packets that are
consecutively sampled. A value of 100 means that 100
consecutive packets are sampled."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampCountBasedParamSetEntry 2 }
psampSampCountBasedSpace OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of packets between two
intervals specified by the object
psampSampCountBasedInterval. A value of 100 means that
the next interval starts 100 packets (which are not sampled)
after the current psampSampCountBasedInterval is over."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampCountBasedParamSetEntry 3 }
psampSampCountBasedSpace OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of packets between two
intervals specified by the object
psampSampCountBasedInterval. A value of 100 means that
the next interval starts 100 packets (which are not sampled)
after the current psampSampCountBasedInterval is over."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampCountBasedParamSetEntry 3 }
--==================================================================
--* Method 2: Systematic time-based Sampling
--==================================================================
--==================================================================
--* Method 2: Systematic time-based Sampling
--==================================================================
-- Reference: RFC 5475 (Section 5.1), RFC 5476 (Section 6.5.2.2),
-- and RFC 5477 (Section 8.2)
psampSampTimeBased OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 3 }
-- Reference: RFC 5475 (Section 5.1), RFC 5476 (Section 6.5.2.2),
-- and RFC 5477 (Section 8.2)
psampSampTimeBased OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 3 }
psampSampTimeBasedAvail OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the availability of systematic time-based sampling at the managed node.
psampSampTimeBasedAvail对象类型语法TruthValue MAX-ACCESS只读状态当前描述“此对象表示受管节点上系统基于时间的采样的可用性。
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampTimeBased 1 }
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampTimeBased 1 }
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
psampSampTimeBasedParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampTimeBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of systematic time-based
packet sampling. A parameter set describing a configuration
contains two parameters: the sampling interval length and
the space."
::= { psampSampTimeBased 2 }
psampSampTimeBasedParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampTimeBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of systematic time-based
packet sampling. A parameter set describing a configuration
contains two parameters: the sampling interval length and
the space."
::= { psampSampTimeBased 2 }
psampSampTimeBasedParamSetEntry OBJECT-TYPE
SYNTAX PsampSampTimeBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampTimeBasedParamSetTable."
INDEX { psampSampTimeBasedIndex }
::= { psampSampTimeBasedParamSetTable 1 }
psampSampTimeBasedParamSetEntry OBJECT-TYPE
SYNTAX PsampSampTimeBasedParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampTimeBasedParamSetTable."
INDEX { psampSampTimeBasedIndex }
::= { psampSampTimeBasedParamSetTable 1 }
PsampSampTimeBasedParamSetEntry ::=
SEQUENCE {
psampSampTimeBasedIndex Integer32,
psampSampTimeBasedInterval Unsigned32,
psampSampTimeBasedSpace Unsigned32
}
PsampSampTimeBasedParamSetEntry ::=
SEQUENCE {
psampSampTimeBasedIndex Integer32,
psampSampTimeBasedInterval Unsigned32,
psampSampTimeBasedSpace Unsigned32
}
psampSampTimeBasedIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampSampTimeBasedParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampTimeBasedParamSetEntry 1 }
psampSampTimeBasedIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampSampTimeBasedParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampTimeBasedParamSetEntry 1 }
psampSampTimeBasedInterval OBJECT-TYPE
SYNTAX Unsigned32
UNITS "microseconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the time interval in microseconds
during which all arriving packets are sampled."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampTimeBasedParamSetEntry 2 }
psampSampTimeBasedInterval OBJECT-TYPE
SYNTAX Unsigned32
UNITS "microseconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the time interval in microseconds
during which all arriving packets are sampled."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampTimeBasedParamSetEntry 2 }
psampSampTimeBasedSpace OBJECT-TYPE
SYNTAX Unsigned32
UNITS "microseconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the time interval in microseconds
between two intervals specified by the object
psampSampTimeBasedInterval. A value of 100 means that the
next interval starts 100 microseconds (during which no
packets are sampled) after the current
psampSampTimeBasedInterval is over."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampTimeBasedParamSetEntry 3 }
psampSampTimeBasedSpace OBJECT-TYPE
SYNTAX Unsigned32
UNITS "microseconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the time interval in microseconds
between two intervals specified by the object
psampSampTimeBasedInterval. A value of 100 means that the
next interval starts 100 microseconds (during which no
packets are sampled) after the current
psampSampTimeBasedInterval is over."
REFERENCE
"RFC 5475 (Section 5.1) and RFC 5477 (Section 8.2)"
::= { psampSampTimeBasedParamSetEntry 3 }
--==================================================================
--* Method 3: Random n-out-of-N Sampling
--==================================================================
--==================================================================
--* Method 3: Random n-out-of-N Sampling
--==================================================================
-- Reference: RFC 5475 (Section 5.2.1), RFC 5476 (Section 6.5.2.3),
-- and RFC 5477 (Section 8.2)
psampSampRandOutOfN OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 4 }
-- Reference: RFC 5475 (Section 5.2.1), RFC 5476 (Section 6.5.2.3),
-- and RFC 5477 (Section 8.2)
psampSampRandOutOfN OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 4 }
psampSampRandOutOfNAvail OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the availability of random n-out-of-N sampling at the managed node.
PSAMPSAMPRANDOUTOFNAVALIE对象类型语法TruthValue MAX-ACCESS只读状态当前描述“此对象表示受管节点上随机n取n采样的可用性。
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampRandOutOfN 1 }
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampRandOutOfN 1 }
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
psampSampRandOutOfNParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampRandOutOfNParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of random n-out-of-N
sampling. A parameter set describing a configuration
contains two parameters: the sampling size and the
parent population."
::= { psampSampRandOutOfN 2 }
psampSampRandOutOfNParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampRandOutOfNParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of random n-out-of-N
sampling. A parameter set describing a configuration
contains two parameters: the sampling size and the
parent population."
::= { psampSampRandOutOfN 2 }
psampSampRandOutOfNParamSetEntry OBJECT-TYPE
SYNTAX PsampSampRandOutOfNParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampRandOutOfNParamSetTable."
INDEX { psampSampRandOutOfNIndex }
::= { psampSampRandOutOfNParamSetTable 1 }
psampSampRandOutOfNParamSetEntry OBJECT-TYPE
SYNTAX PsampSampRandOutOfNParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampRandOutOfNParamSetTable."
INDEX { psampSampRandOutOfNIndex }
::= { psampSampRandOutOfNParamSetTable 1 }
PsampSampRandOutOfNParamSetEntry ::=
SEQUENCE {
psampSampRandOutOfNIndex Integer32,
psampSampRandOutOfNSize Unsigned32,
psampSampRandOutOfNPopulation Unsigned32
}
PsampSampRandOutOfNParamSetEntry ::=
SEQUENCE {
psampSampRandOutOfNIndex Integer32,
psampSampRandOutOfNSize Unsigned32,
psampSampRandOutOfNPopulation Unsigned32
}
psampSampRandOutOfNIndex OBJECT-TYPE SYNTAX Integer32 (1..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION
PSAMPSAMPRANDOUTFINDEX对象类型语法整数32（1..2147483647）MAX-ACCESS不可访问状态当前说明
"The index of this parameter set in the
psampSampRandOutOfNParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampRandOutOfNParamSetEntry 1 }
"The index of this parameter set in the
psampSampRandOutOfNParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampRandOutOfNParamSetEntry 1 }
psampSampRandOutOfNSize OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of elements taken from the
parent Population specified in
psampSampRandOutOfNPopulation."
REFERENCE
"RFC 5475 (Section 5.2.1) and RFC 5477 (Section 8.2)"
::= { psampSampRandOutOfNParamSetEntry 2 }
psampSampRandOutOfNSize OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of elements taken from the
parent Population specified in
psampSampRandOutOfNPopulation."
REFERENCE
"RFC 5475 (Section 5.2.1) and RFC 5477 (Section 8.2)"
::= { psampSampRandOutOfNParamSetEntry 2 }
psampSampRandOutOfNPopulation OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of elements in the parent
Population."
REFERENCE
"RFC 5475 (Section 5.2.1) and RFC 5477 (Section 8.2)"
::= { psampSampRandOutOfNParamSetEntry 3 }
psampSampRandOutOfNPopulation OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the number of elements in the parent
Population."
REFERENCE
"RFC 5475 (Section 5.2.1) and RFC 5477 (Section 8.2)"
::= { psampSampRandOutOfNParamSetEntry 3 }
--==================================================================
--* Method 4: Uniform probabilistic Sampling
--==================================================================
--==================================================================
--* Method 4: Uniform probabilistic Sampling
--==================================================================
-- Reference: RFC 5475 (Section 5.2.2), RFC 5476 (Section 6.5.2.4),
-- and RFC 5477 (Section 8.2)
psampSampUniProb OBJECT IDENTIFIER ::= { ipfixSelectorFunctions 5 }
-- Reference: RFC 5475 (Section 5.2.2), RFC 5476 (Section 6.5.2.4),
-- and RFC 5477 (Section 8.2)
psampSampUniProb OBJECT IDENTIFIER ::= { ipfixSelectorFunctions 5 }
psampSampUniProbAvail OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the availability of random uniform probabilistic sampling at the managed node.
PSAMPSAMPUNIPROVAIL对象类型语法TruthValue MAX-ACCESS只读状态当前描述“此对象表示受管节点上随机均匀概率采样的可用性。
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampUniProb 1 }
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampSampUniProb 1 }
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
-- Reference: RFC 5475 (Section 5.2.2.1) and RFC 5477 (Section 8.2)
psampSampUniProbParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampUniProbParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of random probabilistic
sampling. A parameter set describing a configuration
contains a single parameter only: the sampling probability."
::= { psampSampUniProb 2 }
-- Reference: RFC 5475 (Section 5.2.2.1) and RFC 5477 (Section 8.2)
psampSampUniProbParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampSampUniProbParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of random probabilistic
sampling. A parameter set describing a configuration
contains a single parameter only: the sampling probability."
::= { psampSampUniProb 2 }
psampSampUniProbParamSetEntry OBJECT-TYPE
SYNTAX PsampSampUniProbParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampUniProbParamSetTable."
INDEX { psampSampUniProbIndex }
::= { psampSampUniProbParamSetTable 1 }
psampSampUniProbParamSetEntry OBJECT-TYPE
SYNTAX PsampSampUniProbParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampSampUniProbParamSetTable."
INDEX { psampSampUniProbIndex }
::= { psampSampUniProbParamSetTable 1 }
PsampSampUniProbParamSetEntry ::=
SEQUENCE {
psampSampUniProbIndex Integer32,
psampSampUniProbProbability Float64TC
}
PsampSampUniProbParamSetEntry ::=
SEQUENCE {
psampSampUniProbIndex Integer32,
psampSampUniProbProbability Float64TC
}
psampSampUniProbIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampSampUniProbParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampUniProbParamSetEntry 1 }
psampSampUniProbIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampSampUniProbParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampSampUniProbParamSetEntry 1 }
psampSampUniProbProbability OBJECT-TYPE SYNTAX Float64TC
PSAMPSAMP对象类型语法Float64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the probability that a packet is
sampled, expressed as a value between 0 and 1. The
probability is equal for every packet. A value of 0 means
no packet is sampled since the probability is 0. A value
of 1 means all packets are sampled since the
probability is 1. NaN (not a number) and infinity MUST NOT
be used."
REFERENCE
"RFC 5475 (Section 5.2.2.1) and RFC 5477 (Section 8.2)"
::= { psampSampUniProbParamSetEntry 2 }
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the probability that a packet is
sampled, expressed as a value between 0 and 1. The
probability is equal for every packet. A value of 0 means
no packet is sampled since the probability is 0. A value
of 1 means all packets are sampled since the
probability is 1. NaN (not a number) and infinity MUST NOT
be used."
REFERENCE
"RFC 5475 (Section 5.2.2.1) and RFC 5477 (Section 8.2)"
::= { psampSampUniProbParamSetEntry 2 }
--==================================================================
-- Packet selection filtering methods for a group of objects
--==================================================================
--==================================================================
-- Packet selection filtering methods for a group of objects
--==================================================================
--==================================================================
--* Method 5: Property Match filtering
--==================================================================
--==================================================================
--* Method 5: Property Match filtering
--==================================================================
-- Reserves Method 5; see RFC 5475 (Section 6.1), RFC 5476
-- (Section 6.5.2.5), and RFC 5477
psampFiltPropMatch OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 6 }
-- Reserves Method 5; see RFC 5475 (Section 6.1), RFC 5476
-- (Section 6.5.2.5), and RFC 5477
psampFiltPropMatch OBJECT IDENTIFIER
::= { ipfixSelectorFunctions 6 }
psampFiltPropMatchAvail OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the availability of property match filtering at the managed node.
psampFiltPropMatchAvail对象类型语法TruthValue MAX-ACCESS只读状态当前描述“此对象表示托管节点上的属性匹配筛选的可用性。
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampFiltPropMatch 1 }
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampFiltPropMatch 1 }
--==================================================================
--* Method 6: Hash filtering
--==================================================================
--==================================================================
--* Method 6: Hash filtering
--==================================================================
-- Reference: RFC 5475 (Section 6.2), RFC 5476 (Section 6.5.2.6),
-- and RFC 5477 (Section 8.3)
psampFiltHash OBJECT IDENTIFIER ::= { ipfixSelectorFunctions 7 }
-- Reference: RFC 5475 (Section 6.2), RFC 5476 (Section 6.5.2.6),
-- and RFC 5477 (Section 8.3)
psampFiltHash OBJECT IDENTIFIER ::= { ipfixSelectorFunctions 7 }
psampFiltHashAvail OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the availability of hash filtering at the managed node.
psampFiltHashAvail对象类型语法TruthValue MAX-ACCESS只读状态当前描述“此对象表示托管节点上哈希筛选的可用性。
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampFiltHash 1 }
A Selector may be unavailable if it is implemented but
currently disabled due to, e.g., administrative reasons, lack
of resources, or similar."
::= { psampFiltHash 1 }
psampFiltHashCapabilities OBJECT IDENTIFIER
::= { psampFiltHash 2 }
psampFiltHashCapabilities OBJECT IDENTIFIER
::= { psampFiltHash 2 }
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
-- Parameter Set Table +++++++++++++++++++++++++++++++++++++++++++++
-- Reference: RFC 5475, Sections 6.2, 3.8, and 7.1
psampFiltHashParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampFiltHashParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of hash filtering. A
parameter set describing a configuration contains eight
parameters describing the hash function."
::= { psampFiltHash 3 }
-- Reference: RFC 5475, Sections 6.2, 3.8, and 7.1
psampFiltHashParamSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF
PsampFiltHashParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists configurations of hash filtering. A
parameter set describing a configuration contains eight
parameters describing the hash function."
::= { psampFiltHash 3 }
psampFiltHashParamSetEntry OBJECT-TYPE
SYNTAX PsampFiltHashParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampFiltHashParamSetTable."
INDEX { psampFiltHashIndex }
::= { psampFiltHashParamSetTable 1 }
psampFiltHashParamSetEntry OBJECT-TYPE
SYNTAX PsampFiltHashParamSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Defines an entry in the psampFiltHashParamSetTable."
INDEX { psampFiltHashIndex }
::= { psampFiltHashParamSetTable 1 }
PsampFiltHashParamSetEntry ::=
SEQUENCE {
psampFiltHashIndex Integer32,
psampFiltHashFunction INTEGER,
psampFiltHashInitializerValue Unsigned64TC,
psampFiltHashIpPayloadOffset Unsigned64TC,
psampFiltHashIpPayloadSize Unsigned64TC,
psampFiltHashSelectedRangeMin Unsigned64TC,
psampFiltHashSelectedRangeMax Unsigned64TC,
PsampFiltHashParamSetEntry ::=
SEQUENCE {
psampFiltHashIndex Integer32,
psampFiltHashFunction INTEGER,
psampFiltHashInitializerValue Unsigned64TC,
psampFiltHashIpPayloadOffset Unsigned64TC,
psampFiltHashIpPayloadSize Unsigned64TC,
psampFiltHashSelectedRangeMin Unsigned64TC,
psampFiltHashSelectedRangeMax Unsigned64TC,
psampFiltHashOutputRangeMin Unsigned64TC, psampFiltHashOutputRangeMax Unsigned64TC }
psampFiltHashOutputRangeMin Unsigned64TC，psampFiltHashOutputRangeMax Unsigned64TC}
psampFiltHashIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampFiltHashParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampFiltHashParamSetEntry 1 }
psampFiltHashIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this parameter set in the
psampFiltHashParamSetTable. It is used in the
object ipfixSelectionProcessSelectorFunction entries of
the ipfixSelectionProcessTable in the IPFIX-MIB as reference
to this parameter set."
::= { psampFiltHashParamSetEntry 1 }
psampFiltHashFunction OBJECT-TYPE
SYNTAX INTEGER {
crc32(1),
ipsx(2),
bob(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The hash function used by this filter. The PSAMP-MIB
defines the following hash functions:
psampFiltHashFunction OBJECT-TYPE
SYNTAX INTEGER {
crc32(1),
ipsx(2),
bob(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The hash function used by this filter. The PSAMP-MIB
defines the following hash functions:
crc32(1): The CRC-32 Hash Function as defined in RFC 1141.
crc32（1）：RFC 1141中定义的CRC-32哈希函数。
ipsx(2): The IPSX Hash Function as described in RFC 5475, Appendix A.1.
ipsx（2）：RFC 5475附录A.1中描述的ipsx哈希函数。
bob(3): The BOB Hash Function as described in RFC 5475,
Appendix A.2.
"
REFERENCE
"RFC 5475 (Section 6.2 and Appendixes A.1 and A.2)
and RFC 1141"
::= { psampFiltHashParamSetEntry 2 }
bob(3): The BOB Hash Function as described in RFC 5475,
Appendix A.2.
"
REFERENCE
"RFC 5475 (Section 6.2 and Appendixes A.1 and A.2)
and RFC 1141"
::= { psampFiltHashParamSetEntry 2 }
psampFiltHashInitializerValue OBJECT-TYPE SYNTAX Unsigned64TC MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the initializer value to the hash function."
psampFiltHashInitializerValue对象类型语法Unsigned64TC MAX-ACCESS只读状态当前描述“此对象指定哈希函数的初始值。”
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 3 }
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 3 }
psampFiltHashIpPayloadOffset OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the IP payload offset used by a
Hash-based Selection Selector."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 4 }
psampFiltHashIpPayloadOffset OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the IP payload offset used by a
Hash-based Selection Selector."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 4 }
psampFiltHashIpPayloadSize OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the IP payload size used by a
Hash-based Selection Selector."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 5 }
psampFiltHashIpPayloadSize OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the IP payload size used by a
Hash-based Selection Selector."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 5 }
psampFiltHashSelectedRangeMin OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the beginning of a hash
function's selected range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 6 }
psampFiltHashSelectedRangeMin OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the beginning of a hash
function's selected range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 6 }
psampFiltHashSelectedRangeMax OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the end of a hash
function's selected range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 7 }
psampFiltHashSelectedRangeMax OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the end of a hash
function's selected range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 7 }
psampFiltHashOutputRangeMin OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the beginning of a hash
function's potential output range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 8 }
psampFiltHashOutputRangeMin OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the beginning of a hash
function's potential output range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 8 }
psampFiltHashOutputRangeMax OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the end of a hash
function's potential output range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 9 }
psampFiltHashOutputRangeMax OBJECT-TYPE
SYNTAX Unsigned64TC
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object specifies the value for the end of a hash
function's potential output range."
REFERENCE
"RFC 5475, Sections 6.2, 3.8, and 7.1"
::= { psampFiltHashParamSetEntry 9 }
--==================================================================
-- Conformance information
--==================================================================
--==================================================================
-- Conformance information
--==================================================================
psampCompliances OBJECT IDENTIFIER ::= { psampConformance 1 }
psampGroups OBJECT IDENTIFIER ::= { psampConformance 2 }
psampCompliances OBJECT IDENTIFIER ::= { psampConformance 1 }
psampGroups OBJECT IDENTIFIER ::= { psampConformance 2 }
--==================================================================
-- Compliance statements
--==================================================================
--==================================================================
-- Compliance statements
--==================================================================
psampCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The implementation of all objects is optional and depends on the implementation of the corresponding functionality in the equipment." MODULE -- this module GROUP psampGroupSampCountBased DESCRIPTION "These objects must be implemented if systematic count-based sampling is implemented in the equipment." GROUP psampGroupSampTimeBased DESCRIPTION "These objects must be implemented if systematic time-based sampling is implemented in the equipment."
PSAMPComliance MODULE-COMPLIANCE STATUS当前描述“所有对象的实现都是可选的，取决于设备中相应功能的实现。”模块——此模块组psampGroupSampCountBased描述“如果在设备中实施基于计数的系统采样，则必须实现这些对象。”GROUP PSAMGroupSampTimeBased DESCRIPTION“如果在设备中实施基于时间的系统采样，则必须实现这些对象。”
GROUP psampGroupSampRandOutOfN
DESCRIPTION
"These objects must be implemented if random n-out-of-N
sampling is implemented in the equipment."
GROUP psampGroupSampUniProb
DESCRIPTION
"These objects must be implemented if uniform
probabilistic sampling is implemented in the equipment."
GROUP psampGroupFiltPropMatch
DESCRIPTION
"These objects must be implemented if the property match
filtering is implemented in the equipment."
GROUP psampGroupFiltHash
DESCRIPTION
"These objects must be implemented if hash filtering
is implemented in the equipment."
::= { psampCompliances 1 }
GROUP psampGroupSampRandOutOfN
DESCRIPTION
"These objects must be implemented if random n-out-of-N
sampling is implemented in the equipment."
GROUP psampGroupSampUniProb
DESCRIPTION
"These objects must be implemented if uniform
probabilistic sampling is implemented in the equipment."
GROUP psampGroupFiltPropMatch
DESCRIPTION
"These objects must be implemented if the property match
filtering is implemented in the equipment."
GROUP psampGroupFiltHash
DESCRIPTION
"These objects must be implemented if hash filtering
is implemented in the equipment."
::= { psampCompliances 1 }
--==================================================================
-- MIB groupings
--==================================================================
--==================================================================
-- MIB groupings
--==================================================================
psampGroupSampCountBased OBJECT-GROUP
OBJECTS {
psampSampCountBasedAvail,
psampSampCountBasedInterval,
psampSampCountBasedSpace
}
STATUS current
DESCRIPTION
"These objects are needed if count based sampling is
implemented."
::= { psampGroups 1 }
psampGroupSampCountBased OBJECT-GROUP
OBJECTS {
psampSampCountBasedAvail,
psampSampCountBasedInterval,
psampSampCountBasedSpace
}
STATUS current
DESCRIPTION
"These objects are needed if count based sampling is
implemented."
::= { psampGroups 1 }
psampGroupSampTimeBased OBJECT-GROUP
OBJECTS {
psampSampTimeBasedAvail,
psampSampTimeBasedInterval,
psampSampTimeBasedSpace
}
STATUS current
DESCRIPTION
"These objects are needed if time based sampling is
implemented."
::= { psampGroups 2 }
psampGroupSampTimeBased OBJECT-GROUP
OBJECTS {
psampSampTimeBasedAvail,
psampSampTimeBasedInterval,
psampSampTimeBasedSpace
}
STATUS current
DESCRIPTION
"These objects are needed if time based sampling is
implemented."
::= { psampGroups 2 }
psampGroupSampRandOutOfN OBJECT-GROUP OBJECTS {
PSAMPGroupSampRandoutfn对象组对象{
psampSampRandOutOfNAvail,
psampSampRandOutOfNSize,
psampSampRandOutOfNPopulation
}
STATUS current
DESCRIPTION
"These objects are needed if random n-out-of-N sampling is
implemented."
::= { psampGroups 3 }
psampSampRandOutOfNAvail,
psampSampRandOutOfNSize,
psampSampRandOutOfNPopulation
}
STATUS current
DESCRIPTION
"These objects are needed if random n-out-of-N sampling is
implemented."
::= { psampGroups 3 }
psampGroupSampUniProb OBJECT-GROUP
OBJECTS {
psampSampUniProbAvail,
psampSampUniProbProbability
}
STATUS current
DESCRIPTION
"These objects are needed if uniform probabilistic sampling
is implemented."
::= { psampGroups 4 }
psampGroupSampUniProb OBJECT-GROUP
OBJECTS {
psampSampUniProbAvail,
psampSampUniProbProbability
}
STATUS current
DESCRIPTION
"These objects are needed if uniform probabilistic sampling
is implemented."
::= { psampGroups 4 }
psampGroupFiltPropMatch OBJECT-GROUP
OBJECTS {
psampFiltPropMatchAvail
}
STATUS current
DESCRIPTION
"These objects are needed if property match filtering is
implemented."
::= { psampGroups 5 }
psampGroupFiltPropMatch OBJECT-GROUP
OBJECTS {
psampFiltPropMatchAvail
}
STATUS current
DESCRIPTION
"These objects are needed if property match filtering is
implemented."
::= { psampGroups 5 }
psampGroupFiltHash OBJECT-GROUP
OBJECTS {
psampFiltHashAvail,
psampFiltHashFunction,
psampFiltHashInitializerValue,
psampFiltHashIpPayloadOffset,
psampFiltHashIpPayloadSize,
psampFiltHashSelectedRangeMin,
psampFiltHashSelectedRangeMax,
psampFiltHashOutputRangeMin,
psampFiltHashOutputRangeMax
}
STATUS current
DESCRIPTION
"These objects are needed if hash filtering is implemented."
::= { psampGroups 6 }
psampGroupFiltHash OBJECT-GROUP
OBJECTS {
psampFiltHashAvail,
psampFiltHashFunction,
psampFiltHashInitializerValue,
psampFiltHashIpPayloadOffset,
psampFiltHashIpPayloadSize,
psampFiltHashSelectedRangeMin,
psampFiltHashSelectedRangeMax,
psampFiltHashOutputRangeMin,
psampFiltHashOutputRangeMax
}
STATUS current
DESCRIPTION
"These objects are needed if hash filtering is implemented."
::= { psampGroups 6 }
END
终止
There are no management objects defined in this MIB module that have a MAX-ACCESS clause of read-write and/or read-create. So, if this MIB module is implemented correctly, then there is no risk that an intruder can alter or create any management objects of this MIB module via direct SNMP SET operations.
此MIB模块中未定义具有读写和/或读创建MAX-ACCESS子句的管理对象。因此，如果此MIB模块实现正确，则入侵者不会通过直接的SNMP集操作更改或创建此MIB模块的任何管理对象。
All tables in this MIB module may be considered sensitive or vulnerable in some network environments because objects in the tables may reveal information about the network infrastructure and device configuration. It is thus important to control even GET and/or NOTIFY access to these objects and possibly to even encrypt the values of these objects when sending them over the network via SNMP.
在某些网络环境中，此MIB模块中的所有表都可能被视为敏感或易受攻击，因为表中的对象可能会显示有关网络基础结构和设备配置的信息。因此，在通过SNMP通过网络发送这些对象时，控制甚至获取和/或通知对这些对象的访问，甚至可能加密这些对象的值，这一点非常重要。
SNMP versions prior to SNMPv3 did not include adequate security. Even if the network itself is secure (for example by using IPsec), there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB module.
SNMPv3之前的SNMP版本未包含足够的安全性。即使网络本身是安全的（例如通过使用IPsec），也无法控制安全网络上的谁可以访问和获取/设置（读取/更改/创建/删除）此MIB模块中的对象。
It is RECOMMENDED that implementers consider the security features provided by the SNMPv3 framework (see [RFC3410], section 8), including full support for the SNMPv3 cryptographic mechanisms (for authentication and privacy).
建议实施者考虑SNMPv3框架提供的安全特性（参见[RCFC310]，第8节），包括对SNMPv3加密机制的完全支持（用于身份验证和隐私）。
Further, deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to enable cryptographic security. It is then a customer/operator responsibility to ensure that the SNMP entity giving access to an instance of this MIB module is properly configured to give access to the objects only to those principals (users) who have legitimate rights to GET or SET (change/create/delete) them.
此外，不建议部署SNMPv3之前的SNMP版本。相反，建议部署SNMPv3并启用加密安全性。然后，客户/运营商有责任确保授予访问此MIB模块实例权限的SNMP实体正确配置为仅授予具有获取或设置（更改/创建/删除）对象的合法权限的主体（用户）访问对象。
The MIB module in this document uses the following IANA-assigned OBJECT IDENTIFIER value recorded in the SMI Numbers registry:
本文档中的MIB模块使用SMI编号注册表中记录的以下IANA分配对象标识符值：
Descriptor OBJECT IDENTIFIER value
---------- -----------------------
psampMIB { mib-2 212 }
Descriptor OBJECT IDENTIFIER value
---------- -----------------------
psampMIB { mib-2 212 }
Further, IANA has registered the following top-level OIDs in the IPFIX-SELECTOR-MIB Functions sub-registry at http://www.iana.org/assignments/smi-numbers according to the procedures set forth in [RFC6615]:
此外，IANA在IPFIX-SELECTOR-MIB函数子注册表中注册了以下顶级OIDhttp://www.iana.org/assignments/smi-numbers 根据[RFC6615]中规定的程序：
Decimal Name Description Reference
------- ------------------- -------------------------------- ---------
2 psampSampCountBased Systematic Count-based Sampling [RFC6727]
3 psampSampTimeBased Systematic Time-based Sampling [RFC6727]
4 psampSampRandOutOfN Random n-out-of-N Sampling [RFC6727]
5 psampSampUniProb Universal Probabilistic Sampling [RFC6727]
6 psampFiltPropMatch Property Match Filtering [RFC6727]
7 psampFiltHash Hash-based Filtering [RFC6727]
Decimal Name Description Reference
------- ------------------- -------------------------------- ---------
2 psampSampCountBased Systematic Count-based Sampling [RFC6727]
3 psampSampTimeBased Systematic Time-based Sampling [RFC6727]
4 psampSampRandOutOfN Random n-out-of-N Sampling [RFC6727]
5 psampSampUniProb Universal Probabilistic Sampling [RFC6727]
6 psampFiltPropMatch Property Match Filtering [RFC6727]
7 psampFiltHash Hash-based Filtering [RFC6727]
The prerequisites set forth for addition of these OIDs are to be verified based on the content of this document.
添加这些OID的先决条件将根据本文件的内容进行验证。
This document is a product of the PSAMP and IPFIX WGs. The authors would like to thank the following persons: Paul Aitken for his detailed review, Dan Romascanu, the MIB doctors, and many more, for the technical reviews and feedback.
本文档是PSAMP和IPFIX WGs的产品。作者要感谢以下人员：Paul Aitken的详细审查，Dan Romascanu，MIB医生，以及更多的技术审查和反馈。
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.
[RFC2119]Bradner，S.，“RFC中用于表示需求水平的关键词”，BCP 14，RFC 2119，1997年3月。
[RFC2564] Kalbfleisch, C., Krupczak, C., Presuhn, R., and J. Saperia, "Application Management MIB", RFC 2564, May 1999.
[RFC2564]Kalbflesch，C.，Krupczak，C.，Presohn，R.，和J.Saperia，“应用程序管理MIB”，RFC2564，1999年5月。
[RFC2578] McCloghrie, K., Ed., Perkins, D., Ed., and J. Schoenwaelder, Ed., "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
[RFC2578]McCloghrie，K.，Ed.，Perkins，D.，Ed.，和J.Schoenwaeld，Ed.“管理信息的结构版本2（SMIv2）”，STD 58，RFC 2578，1999年4月。
[RFC2579] McCloghrie, K., Ed., Perkins, D., Ed., and J. Schoenwaelder, Ed., "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999.
[RFC2579]McCloghrie，K.，Ed.，Perkins，D.，Ed.，和J.Schoenwaeld，Ed.“SMIv2的文本约定”，STD 58，RFC 2579，1999年4月。
[RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999.
[RFC2580]McCloghrie，K.，Perkins，D.，和J.Schoenwaeld，“SMIv2的一致性声明”，STD 58，RFC 25801999年4月。
[RFC5101] Claise, B., "Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information", RFC 5101, January 2008.
[RFC5101]Claise，B.，“用于交换IP流量信息的IP流量信息导出（IPFIX）协议规范”，RFC 5101，2008年1月。
[RFC5477] Dietz, T., Claise, B., Aitken, P., Dressler, F., and G. Carle, "Information Model for Packet Sampling Exports", RFC 5477, March 2009.
[RFC5477]Dietz，T.，Claise，B.，Aitken，P.，Dressler，F.，和G.Carle，“数据包抽样出口的信息模型”，RFC 5477，2009年3月。
[RFC6340] Presuhn, R., "Textual Conventions for the Representation of Floating-Point Numbers", RFC 6340, August 2011.
[RFC6340]Presohn，R.“浮点数表示的文本约定”，RFC6340，2011年8月。
[RFC6615] Dietz, T., Kobayashi, A., Claise, B., and G. Muenz, "Definitions of Managed Objects for IP Flow Information Export", RFC 6615, June 2012.
[RFC6615]Dietz，T.，Kobayashi，A.，Claise，B.，和G.Muenz，“IP流信息导出的托管对象定义”，RFC 66152012年6月。
[RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart, "Introduction and Applicability Statements for Internet-Standard Management Framework", RFC 3410, December 2002.
[RFC3410]Case，J.，Mundy，R.，Partain，D.，和B.Stewart，“互联网标准管理框架的介绍和适用性声明”，RFC 34102002年12月。
[RFC5474] Duffield, N., Chiou, D., Claise, B., Greenberg, A., Grossglauser, M., and J. Rexford, "A Framework for Packet Selection and Reporting", RFC 5474, March 2009.
[RFC5474]N.Duffield、Chiou、D.Claise、B.Greenberg、A.Grossglauser、M.和J.Rexford，“数据包选择和报告框架”，RFC 54742009年3月。
[RFC5475] Zseby, T., Molina, M., Duffield, N., Niccolini, S., and F. Raspall, "Sampling and Filtering Techniques for IP Packet Selection", RFC 5475, March 2009.
[RFC5475]Zseby，T.，Molina，M.，Duffield，N.，Niccolini，S.，和F.Raspall，“IP数据包选择的采样和过滤技术”，RFC 5475，2009年3月。
[RFC5476] Claise, B., Johnson, A., and J. Quittek, "Packet Sampling (PSAMP) Protocol Specifications", RFC 5476, March 2009.
[RFC5476]Claise，B.，Johnson，A.，和J.Quittek，“数据包采样（PSAMP）协议规范”，RFC 54762009年3月。
Authors' Addresses
作者地址
Thomas Dietz (editor) NEC Europe Ltd. NEC Laboratories Europe Kurfuersten-Anlage 36 69115 Heidelberg Germany
Thomas Dietz（编辑）NEC欧洲有限公司NEC欧洲实验室Kurfuersten Anlage 36 69115德国海德堡
Phone: +49 6221 4342-128
EMail: dietz@neclab.eu
Phone: +49 6221 4342-128
EMail: dietz@neclab.eu
Benoit Claise Cisco Systems, Inc. De Kleetlaan 6a b1 Diegem 1831 Belgium
Benoit Claise Cisco Systems，Inc.De Kleetlaan 6a b1 Diegem 1831比利时
Phone: +32 2 704 5622
EMail: bclaise@cisco.com
Phone: +32 2 704 5622
EMail: bclaise@cisco.com
Juergen Quittek NEC Europe Ltd. NEC Laboratories Europe Kurfuersten-Anlage 36 69115 Heidelberg Germany
德国海德堡Juergen Quittek NEC欧洲有限公司NEC实验室欧洲Kurfuersten Anlage 36 69115
Phone: +49 6221 4342-115
EMail: quittek@neclab.eu
Phone: +49 6221 4342-115
EMail: quittek@neclab.eu