check_snmp_int.pl (http://nagios.manubulon.com/snmp_int.html) is my go to when it comes to interface utilisation monitoring for many years. But I had no luck trying the "colon" [:] or the "dash" [-] syntax.
check_snmp_netint.pl (http://william.leibzon.org/nagios/) also didn't seem to work with the "colon" [:] syntax.
BUT...I did find the "dash" [-] syntax seemed to do what I needed. I was wanting to get an alert if there was low (eg. no) traffic inbound on a link. After getting errors that -c couldn't be less than -w I thought to disable the -w alert and just get a -c alert.
I ended up with this...
/check_snmp_int.pl -H [snipped] -C [snipped] -2 -n ethernet0/1.18 -d 60 -k -B -w 0,0 -c 5-100000,0
This seems to cut alert when utilisation is below 5 Kbps or above 100,000 Kbps.
I just made the upper value excessively high as I know there will never be that much traffic on this particular link.