From e55c4e9e1e7848bbee96a188d0ee989d4f38f5e0 Mon Sep 17 00:00:00 2001 From: mtentilucci <11222155+mtentilucci@users.noreply.github.com> Date: Tue, 16 May 2023 18:25:29 -0400 Subject: [PATCH] Add support for Trellix NSP devices (#14964) * Add support for Trellix NSP devices - Add discovery for mlos NSP devices - Monitor port statistics from non standard MIBs - Add Trellix MIBs - Add test data * Fix StyleCI findings * Rename MIB files to match MIB names, remove unused MIBs * regenerate mlos-nsp_ns9500.json to account for changes from PR#14963 --- includes/definitions/discovery/mlos-nsp.yaml | 39 + includes/definitions/mlos-nsp.yaml | 17 + includes/discovery/ports.inc.php | 5 + includes/discovery/ports/mlos-nsp.inc.php | 50 + includes/polling/ports/os/mlos-nsp.inc.php | 50 + mibs/trellix/TRELLIX-INTRUVERT-SMI | 67 + mibs/trellix/TRELLIX-INTRUVERT-TC | 406 + mibs/trellix/TRELLIX-SENSOR-CONF-MIB | 10573 +++++++++++++++++ mibs/trellix/TRELLIX-SENSOR-PERF-MIB | 3024 +++++ mibs/trellix/TRELLIX-SENSOR-SMI | 205 + tests/data/mlos-nsp_ns9500.json | 3251 +++++ tests/snmpsim/mlos-nsp_ns9500.snmprec | 785 ++ 12 files changed, 18472 insertions(+) create mode 100644 includes/definitions/discovery/mlos-nsp.yaml create mode 100644 includes/definitions/mlos-nsp.yaml create mode 100644 includes/discovery/ports/mlos-nsp.inc.php create mode 100644 includes/polling/ports/os/mlos-nsp.inc.php create mode 100644 mibs/trellix/TRELLIX-INTRUVERT-SMI create mode 100644 mibs/trellix/TRELLIX-INTRUVERT-TC create mode 100644 mibs/trellix/TRELLIX-SENSOR-CONF-MIB create mode 100644 mibs/trellix/TRELLIX-SENSOR-PERF-MIB create mode 100644 mibs/trellix/TRELLIX-SENSOR-SMI create mode 100644 tests/data/mlos-nsp_ns9500.json create mode 100644 tests/snmpsim/mlos-nsp_ns9500.snmprec diff --git a/includes/definitions/discovery/mlos-nsp.yaml b/includes/definitions/discovery/mlos-nsp.yaml new file mode 100644 index 0000000000..bf138526af --- /dev/null +++ b/includes/definitions/discovery/mlos-nsp.yaml @@ -0,0 +1,39 @@ +mib: TRELLIX-SENSOR-PERF-MIB:TRELLIX-SENSOR-CONF-MIB +modules: + os: + hardware: TRELLIX-SENSOR-CONF-MIB::ivSysModel.0 + serial: TRELLIX-SENSOR-CONF-MIB::ivSysSerialNumber.0 + mempools: + data: + - + percent_used: TRELLIX-SENSOR-PERF-MIB::sysMemUtilisation + processors: + data: + - + oid: 'sensorAvgLoad' + num_oid: '.1.3.6.1.4.1.8962.2.1.3.1.1.5.1.1.{{ $index }}' + sensors: + count: + data: + - + oid: 'sensorPerfTable' + value: 'totalAlertsSentCount' + num_oid: '.1.3.6.1.4.1.8962.2.1.3.1.1.5.1.7.{{ $index }}' + descr: 'Alerts sent to ISM' + index: 'totalAlertsSentCount' + - + oid: 'malwareEngineStatsTable' + value: 'totalMalwareFilesProcessed' + num_oid: '.1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.{{ $index }}' + group: 'Malware Engine File Counters' + descr: '{{ $malwareStatsEngineName }}' + index: '{{ $malwareStatsEngineName }}' + state: + data: + - + oid: 'l2ModeStatus' + num_oid: '.1.3.6.1.4.1.8962.2.1.2.1.18.2.0' + descr: 'Sensor Mode' + states: + - { value: 1, generic: 0, graph: 0, descr: 'Layer 2 Mode' } + - { value: 2, generic: 0, graph: 0, descr: 'IPS Mode' } diff --git a/includes/definitions/mlos-nsp.yaml b/includes/definitions/mlos-nsp.yaml new file mode 100644 index 0000000000..9473cc558a --- /dev/null +++ b/includes/definitions/mlos-nsp.yaml @@ -0,0 +1,17 @@ +os: mlos-nsp +group: trellix +text: 'McAfee Linux OS - NSP' +type: appliance +icon: trellix +mib_dir: trellix +over: + - { graph: device_bits, text: 'Device Traffic' } + - { graph: device_processor, text: 'CPU Usage' } + - { graph: device_mempool, text: 'Memory Usage' } +discovery: + - + sysObjectID: .1.3.6.1.4.1.8072.3.2.10 + snmpget: + oid: .1.3.6.1.4.1.8962.2.1.2.1.1.6.0 + op: contains + value: NETWORK-SECURITY \ No newline at end of file diff --git a/includes/discovery/ports.inc.php b/includes/discovery/ports.inc.php index 659f6ad206..7727baacbd 100644 --- a/includes/discovery/ports.inc.php +++ b/includes/discovery/ports.inc.php @@ -22,6 +22,11 @@ $port_stats = snmpwalk_cache_oid($device, 'ifAlias', $port_stats, 'IF-MIB'); $port_stats = snmpwalk_cache_oid($device, 'ifType', $port_stats, 'IF-MIB', null, $typeSnmpFlags); $port_stats = snmpwalk_cache_oid($device, 'ifOperStatus', $port_stats, 'IF-MIB', null, $operStatusSnmpFlags); +// Get Trellix NSP ports +if ($device['os'] == 'mlos-nsp') { + require base_path('includes/discovery/ports/mlos-nsp.inc.php'); +} + //Get UFiber OLT ports if ($device['os'] == 'edgeosolt') { require base_path('includes/discovery/ports/edgeosolt.inc.php'); diff --git a/includes/discovery/ports/mlos-nsp.inc.php b/includes/discovery/ports/mlos-nsp.inc.php new file mode 100644 index 0000000000..c2fb4228f6 --- /dev/null +++ b/includes/discovery/ports/mlos-nsp.inc.php @@ -0,0 +1,50 @@ + 'intfPortTotalBytesRecv64', + 'ifOutOctets' => 'intfPortTotalBytesSent64', + 'ifInUcastPkts' => 'intfPortTotalUnicastPktsRecv64', + 'ifOutUcastPkts' => 'intfPortTotalUnicastPktsSent64', + 'ifInErrors' => 'intfPortTotalCRCErrorsRecv64', + 'ifOutErrors' => 'intfPortTotalCRCErrorsSent64', +]; + +// port speed, as described in intfPortSpeed +$trellixPortSpeeds = [1 => '10000000', + 2 => '100000000', + 3 => '1000000000', + 4 => '10000000000', + 5 => '40000000000']; + +$mlos_ports = []; + +// ports are indexed by slot then port, loop over the snmpwalk results and gather the information we want for each port +foreach ($mlos_stats as $slotIndex => $slot) { + foreach ($slot as $portIndex => $port) { + $mlos_port = []; + foreach ($required as $ifEntry => $IfxStat) { + $mlos_port[$ifEntry] = $mlos_stats[$slotIndex][$portIndex][$IfxStat]; + } + $mlos_port['ifName'] = $port['intfPortIfDescr']; + $mlos_port['ifDescr'] = $port['intfPortIfDescr']; + $mlos_port['ifDuplex'] = ($mlos_stats[$slotIndex][$portIndex]['intfPortEnableFullDuplex'] == 1 ? 'fullDuplex' : 'halfDuplex'); + if (array_key_exists($mlos_stats[$slotIndex][$portIndex]['intfPortSpeed'], $trellixPortSpeeds)) { + $mlos_port['ifSpeed'] = $trellixPortSpeeds[$mlos_stats[$slotIndex][$portIndex]['intfPortSpeed']]; + } + $mlos_port['ifOperStatus'] = ($mlos_stats[$slotIndex][$portIndex]['intfPortIfOperStatus'] == 1 ? 'up' : 'down'); + $mlos_port['ifType'] = 'ethernetCsmacd'; + $mlos_port['ifAdminStatus'] = ($mlos_stats[$slotIndex][$portIndex]['intfPortIfAdminStatus'] == 1 ? 'up' : 'down'); + array_push($mlos_ports, $mlos_port); + } +} + +$port_stats = array_replace_recursive($mlos_ports, $port_stats); +unset($mlos_ports); diff --git a/includes/polling/ports/os/mlos-nsp.inc.php b/includes/polling/ports/os/mlos-nsp.inc.php new file mode 100644 index 0000000000..c2fb4228f6 --- /dev/null +++ b/includes/polling/ports/os/mlos-nsp.inc.php @@ -0,0 +1,50 @@ + 'intfPortTotalBytesRecv64', + 'ifOutOctets' => 'intfPortTotalBytesSent64', + 'ifInUcastPkts' => 'intfPortTotalUnicastPktsRecv64', + 'ifOutUcastPkts' => 'intfPortTotalUnicastPktsSent64', + 'ifInErrors' => 'intfPortTotalCRCErrorsRecv64', + 'ifOutErrors' => 'intfPortTotalCRCErrorsSent64', +]; + +// port speed, as described in intfPortSpeed +$trellixPortSpeeds = [1 => '10000000', + 2 => '100000000', + 3 => '1000000000', + 4 => '10000000000', + 5 => '40000000000']; + +$mlos_ports = []; + +// ports are indexed by slot then port, loop over the snmpwalk results and gather the information we want for each port +foreach ($mlos_stats as $slotIndex => $slot) { + foreach ($slot as $portIndex => $port) { + $mlos_port = []; + foreach ($required as $ifEntry => $IfxStat) { + $mlos_port[$ifEntry] = $mlos_stats[$slotIndex][$portIndex][$IfxStat]; + } + $mlos_port['ifName'] = $port['intfPortIfDescr']; + $mlos_port['ifDescr'] = $port['intfPortIfDescr']; + $mlos_port['ifDuplex'] = ($mlos_stats[$slotIndex][$portIndex]['intfPortEnableFullDuplex'] == 1 ? 'fullDuplex' : 'halfDuplex'); + if (array_key_exists($mlos_stats[$slotIndex][$portIndex]['intfPortSpeed'], $trellixPortSpeeds)) { + $mlos_port['ifSpeed'] = $trellixPortSpeeds[$mlos_stats[$slotIndex][$portIndex]['intfPortSpeed']]; + } + $mlos_port['ifOperStatus'] = ($mlos_stats[$slotIndex][$portIndex]['intfPortIfOperStatus'] == 1 ? 'up' : 'down'); + $mlos_port['ifType'] = 'ethernetCsmacd'; + $mlos_port['ifAdminStatus'] = ($mlos_stats[$slotIndex][$portIndex]['intfPortIfAdminStatus'] == 1 ? 'up' : 'down'); + array_push($mlos_ports, $mlos_port); + } +} + +$port_stats = array_replace_recursive($mlos_ports, $port_stats); +unset($mlos_ports); diff --git a/mibs/trellix/TRELLIX-INTRUVERT-SMI b/mibs/trellix/TRELLIX-INTRUVERT-SMI new file mode 100644 index 0000000000..f019376c10 --- /dev/null +++ b/mibs/trellix/TRELLIX-INTRUVERT-SMI @@ -0,0 +1,67 @@ + +-- ***************************************************************** +-- TRELLIX CONFIDENTIAL +-- TRELLIX-SMI: +-- Trellix Enterprise Structure of Management Information +-- +-- Copyright (c) 2022 MUSARUBRA US, LLC +-- All rights reserved. +-- +-- ***************************************************************** + +TRELLIX-INTRUVERT-SMI DEFINITIONS ::= BEGIN + +IMPORTS + OBJECT-IDENTITY, MODULE-IDENTITY, enterprises + FROM SNMPv2-SMI; + +trellix-intruvert MODULE-IDENTITY +LAST-UPDATED "200707090000Z" +ORGANIZATION +"MUSARUBRA US LLC" +CONTACT-INFO +"Trellix Customer Service Department + +Postal: 6220 American Center Drive + San Jose CA 95002-2563 + + +Tel: +1 800 338 8754 + +E-mail: support@mcafee.com" +DESCRIPTION +"The Structure of Management Information for the Trellix-Intruvert enterprise. +Initial version of this MIB module." +::= { enterprises 8962 } + + +ivConventions OBJECT-IDENTITY + STATUS current + DESCRIPTION + "" + ::= { trellix-intruvert 1 } + +-- assigned by IANA + +ivProducts OBJECT-IDENTITY + STATUS current + DESCRIPTION + " " + ::= { trellix-intruvert 2 } + +ivInventory OBJECT-IDENTITY + STATUS current + DESCRIPTION + "" + ::= { trellix-intruvert 3 } + +matdProducts OBJECT-IDENTITY + STATUS current + DESCRIPTION + "" + ::= { trellix-intruvert 4 } + +END + + + diff --git a/mibs/trellix/TRELLIX-INTRUVERT-TC b/mibs/trellix/TRELLIX-INTRUVERT-TC new file mode 100644 index 0000000000..3cf650f4a0 --- /dev/null +++ b/mibs/trellix/TRELLIX-INTRUVERT-TC @@ -0,0 +1,406 @@ +-- ***************************************************************** +-- TRELLIX CONFIDENTIAL +-- TRELLIX-INTRUVERT-TC: +-- Trellix (Textual Conventions) +-- +-- Copyright (c) 2022 MUSARUBRA US, LLC +-- All rights reserved. +-- +-- ***************************************************************** + +TRELLIX-INTRUVERT-TC DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, Integer32 + FROM SNMPv2-SMI + TEXTUAL-CONVENTION + FROM SNMPv2-TC + ivConventions + FROM TRELLIX-INTRUVERT-SMI; + +ivTextualConventions MODULE-IDENTITY +LAST-UPDATED "200707090000Z" +ORGANIZATION +"MUSARUBRA US LLC" +CONTACT-INFO +"Trellix Customer Service Department + +Postal: 6220 American Center Drive + San Jose CA 95002-2563 + + +Tel: +1 800 338 8754 + +E-mail: support@mcafee.com" +DESCRIPTION +"This module defines textual conventions used throughout the +Trellix enterprise MIBs." +::= { ivConventions 1 } + + +TrellixEventCategory ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "" + SYNTAX INTEGER { + other (0), + equipment (1), + commnunication (2), + qos (3), + environment (4), + application (5) + } + + +TrellixEventSeverity ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "" + SYNTAX INTEGER { + unknown (0), + inform (1), + clear (2), + warning (3), + error (4), + critical (5) + } + + +TrellixFEType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Specify speed for Fast Ethernet ports. + example: 10 or 100 Mbps" + SYNTAX INTEGER { + other (0), + ten-Mbps (1), + hundred-Mbps (2), + auto-negotiate (3) + } + + +TrellixGEType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Specify speed for Gigabit Ethernet ports." + SYNTAX INTEGER { + other (0), + one-gbps (2), + auto-negotiate (3) + } + + +TrellixIDSAction ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "These specify IDS-specific actions on the management and sensor/analysis card. + " + SYNTAX INTEGER { + other (0), + enable (1), + disable (2), + reset (3), + sigupdate (4), + swupdate (5), + sensordown (6), + certupdate (7), + hitlessreboot (8) + } + + +TrellixIDSActionResult ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Bitmap-encoded integer that indicates detailed results of an action" + SYNTAX Integer32 (0..255) + + +TrellixIDSActionStatus ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Status reflecting action outcome." + SYNTAX INTEGER { + failed (0), + succeeded (1), + sigupdated (2), + enabled (3), + disabled (4) + } + + +TrellixIDSCardType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Card type aplicable to Trellix IPS. + Current support limted to + - Management card + - Sensor Analysis card" + SYNTAX INTEGER { + other (0), + mgmt (1), + sensor (2) + } + + +TrellixIDSOperatingMode ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Operating mode for Trellix IPS Sensor + + inline-fail-open-passive: read and forward packets to destination. This + will be fail-open (passive kit) + monitor-dual-intf: monitor two interfaces using Tap + monitor-single-intf: monitor span/hub + inline-fail-close: Uses span dongle cables for the 10/100 + uses external bypass switch for gigabit + inline-fail-open-active:read and forward packets to destination. This + will be fail-open. This is available on M-series only. + " + SYNTAX INTEGER { + inline-fail-open-passive (1), + monitor-dual-intf (2), + monitor-single-intf (3), + inline-fail-close (4), + inline-fail-open-active (5) + } + + +TrellixIDSPortType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Indicates type of port. + gigabitEthernet supports only 1000Mbps, fastEthernet supports + 10/100 Mbps, copperGigabitEthernet supports 10/100/1000 Mbps and + tenGigabitEthernet supports only 10 Gbps." + SYNTAX INTEGER { + other (0), + gigabitEthernet (1), + fastEthernet (2), + copperGigabitEthernet (3), + tenGigabitEthernet (4), + fortyGigabitEthernet (5), -- support in R-series only + vnic(6) -- support in V-series only + } + + +TrellixIDSResponseMode ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "" + SYNTAX INTEGER { + interace-port(0), + response-port (1), + management-port (2) + } + + +TrellixProductType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "" + SYNTAX INTEGER { + ids (0) + } + + +TrellixTFTPAction ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "" + SYNTAX INTEGER { + other (0), + download-image (1), + download-signature (2), + upload-dos (3), + upload-trace (4), + download-dos (5), + abort-transfer (6), + download-sslcert (7), + download-image-and-signature (8), + download-mpecert (9), + download-sgap-ssl-cert (10), + upload-sgap-ssl-csr (11), + upload-ibac-ad-file (12), + download-ibac-ad-file (13), + upload-sw-tlv-file (14), + download-PacketCaptureFilter-file(15), + upload-PacketCaptureFilter-file(16), + download-geolocation-db-file (17), + upload-PacketCapturePCAP-file(18), + download-usrid-acl-file(19), + download-bot-dat-file(20), + download-ntba-ssl-cert-file(21), + upload-dev-prof-file(22), +-- values 23 and 24 not used as NSM has reserved them for NTBA + download-matd-ssl-cert-file(25), + download-ffp-bulk-update(28), + download-zcenter-ssl-cert(33), + download-gti-pc-ssl-cert(34), + upload-suricata-failed-rules-file(35), + upload-ca-sensor-csr (36), + download-ca-sensor-cert (37), + download-syslog-ssl-cert (38) + } + + +TrellixTFTPFailedResult ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "This object defines reasons for TFTP failure. + Applicable only when the corresponding is set to 'failed'." + SYNTAX INTEGER { + other (0), + invalidFileName (1), + invalidFileType (2), + cannotReachServer (3), + noResponseFromServer (4), + insufficientDiskSpace (5), + decryptionError (6), + accessViolation (7), + fileAlreadyExists (8), + channelOutOfSync (9), + sensorNotInitialized (10), + realtimeUpdateError (11), + sigfile1OpenError (12), + sigfile1StatError (13), + sigfile1MemoryError (14), + sigfile1ReadError (15), + sigfile1NullError (16), + sigfile1MD5Error (17), + sigfile1InsufficientSpaceForTotalRules (18), + sigfile1ConvertError (19), + sigfile1SplitError (20), + sigfile2OpenError (21), + sigfile2StatError (22), + sigfile2MemoryError (23), + sigfile2ReadError (24), + sigfile2NullError (25), + sigfile2MD5Error (26), + sigfile2InsufficientSpaceForTotalRules (27), + sigfile2ConvertError (28), + sigfile2SplitError (29), + initIDConvertTablesError (30), + sigfileMarkError (31), + sigfileUndoMarkError (32), + compareSigfilesError (33), + updateBaseSigfileError (34), + sensorRebootRequired (35), + fileParseError (36), + sigfile1FormatVersionError (37), + sigfile2FormatVersionError (38), + fileDoesNotExists (39), + outOfMemoryError (40), + transferAborted (41), + internalApplyError (42), + incrSigfileUnspportedError (53), + incrSigfileFormatError (61), + incrSigfileHasSigsetMismatchError (62), + incrSigfileMergeError (63) + } + + +TrellixTFTPFileType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "" + SYNTAX INTEGER { + other (0), + image (1), + signature (2), + trace (3), + dos (4), + configuration (5), + sslcert (6), + image-and-signature (7), + mpecert (8) + } + + +TrellixTFTPInProgressResult ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "This object defines user feedback during TFTP progress. + Applicable only when corresponding is set to 'inProgress'. + Indicates percentage of TFTP up/download during the inProgress mode " + SYNTAX Integer32 (0..100) + + +TrellixTFTPStatus ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Indicates status of corresponding TFTP action request." + SYNTAX INTEGER { + other (0), + failed (1), + inProgress (2), + succeeded (3), + dwnldFailed (11), + applyFailed (12), + dwnlding (21), + dwnldingComplete (22), + applying (23), + applyingComplete (24) + } + +TrellixCUGEType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Specify speed for copper gigabit ethernet ports. + example: 10 or 100 or 1000Mbps or auto" + SYNTAX INTEGER { + other (0), + ten-Mbps (1), + hundred-Mbps (2), + auto-negotiate (3), + one-gbps (4) + } + +TrellixPortSpeed ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Specify speed for all types of ports. + example: 10 or 100 or 1000Mbps or auto or 10Gbps" + SYNTAX INTEGER { + other (0), + fixed-ten-Mbps (1), + fixed-hundred-Mbps (2), + auto-negotiate-down-hundred-Mbps(3), + fixed-one-Gbps(4), + fixed-ten-Gbps(5), -- support in M-series only + auto-negotiate-ten-Mbps (6), + auto-negotiate-hundred-Mbps (7), + auto-negotiate-one-Gbps(8), + auto-negotiate-ten-Gbps(9), -- support in M-series only + auto-negotiate-down-one-Gbps(10), + fixed-forty-Gbps(11) -- support in R-series only + } + +TrellixPluggableModuleType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Types of supported pluggable modules." + SYNTAX INTEGER { + other (0), + pluggable-module-qsfp (1), -- two 40 gig QSFP ports + pluggable-module-sfp-plus (2), -- eight SFP+ ports + pluggable-module-qsfp-4 (3), -- four port QSFP + pluggable-module-sfp-plus-12 (4), -- 12 port SFP+ + pluggable-module-rj45-6 (5), -- 6 port RJ45 + pluggable-module-sfp-plus-pfo-4-sm (6), -- 4 port SFP+ BPFO single mode + pluggable-module-sfp-plus-pfo-4-mm-50um (7), -- 4 port SFP+ BPFO multi mode 50um + pluggable-module-sfp-plus-pfo-4-mm-62-5um (8), -- 4 port SFP+ BPFO multi mode 62.5um + fixed-ports-sfp-12 (9), -- twelve SFP ports + pluggable-module-rj45-4 (10) -- 4 port RJ45 + } + +TrellixPortLinearIndex ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "This MIB object type indicates the Linear Index of the monitoring port. This index is + generated by the sensor appliance using the pair of slot index and the port index values. + The other MIB tables would directly use this linear index, whereever applicable." + SYNTAX Integer32 (0..1024) + + +END + diff --git a/mibs/trellix/TRELLIX-SENSOR-CONF-MIB b/mibs/trellix/TRELLIX-SENSOR-CONF-MIB new file mode 100644 index 0000000000..24545410af --- /dev/null +++ b/mibs/trellix/TRELLIX-SENSOR-CONF-MIB @@ -0,0 +1,10573 @@ + +-- ***************************************************************** +-- MUSARUBRA CONFIDENTIAL +-- TRELLIX-SENSOR-CONF-MIB: +-- Trellix (Sensor Configuration MIB) +-- +-- Copyright (c) 2022 MUSARUBRA US, LLC +-- All rights reserved. +-- +-- ***************************************************************** + +TRELLIX-SENSOR-CONF-MIB DEFINITIONS ::= BEGIN + +IMPORTS + OBJECT-TYPE, MODULE-IDENTITY, Integer32, + IpAddress, TimeTicks, Unsigned32 + FROM SNMPv2-SMI + TimeInterval, TruthValue, RowStatus, + MacAddress, DateAndTime, DisplayString + FROM SNMPv2-TC + Ipv6Address + FROM IPV6-TC + ivSensorConfiguration, respPortIndex, intfPortIndex, slotIndex, intfPhysicalPortIndex, ntpServerIndex, sslProbeIpv4Index, sslProbeIpv6Index, processorNumIndex, intfVirtualPortIndex, intfVirtualSlotIndex + FROM TRELLIX-SENSOR-SMI + TrellixFEType, TrellixIDSOperatingMode, TrellixIDSPortType, + TrellixIDSResponseMode, TrellixIDSActionResult, TrellixIDSActionStatus, + TrellixIDSAction, TrellixIDSCardType, TrellixTFTPFileType, + TrellixTFTPFailedResult, TrellixTFTPInProgressResult, TrellixTFTPStatus, + TrellixTFTPAction, TrellixGEType,TrellixCUGEType, TrellixPortSpeed, TrellixPluggableModuleType, + TrellixPortLinearIndex + FROM TRELLIX-INTRUVERT-TC; + +ivSensorConfigurationMIB MODULE-IDENTITY +LAST-UPDATED "200707090000Z" +ORGANIZATION +"MUSARUBRA US LLC" +CONTACT-INFO +"Trellix Customer Service Department + +Postal: 6220 American Center Drive + San Jose CA 95002-2563 + + +Tel: +1 800 338 8754 + +E-mail: support@mcafee.com" +DESCRIPTION +"The Configuration MIB for the Trellix IntruShield product. + +They are furthur broken down into the following groups: + systemGrp - configuration of the IntruShield node identification. + emsGrp - configuration of possible EMSs identification + chassisGrp - configuration of the chassis slots + managementCardGrp - configuration of the management card(s) + tftpGrp - configuration of TFTP based services + sensorCardGp - configuration of the sensor anlysis card(s) + interfacePortGrp - configuration of interface port(s) + responsePortGrp - configuration of response port(s) + pktLogGrp - configuration of the Packet Logging Application + sslGrp - SSL configuration +" + +REVISION "200706140000Z" +DESCRIPTION +"Initial version of this MIB module." +::= { ivSensorConfiguration 1 } + + +--This group contains objects that identify the IntruShield network element. + +systemGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 1 } + + +ivSysName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "An administratively assigned name for this IntruShied node. + By convention, this is the node's fully-qualified domain name." + ::= { systemGrp 1 } + +ivSysLocation OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The physical location of this node (e.g., `Building 6, IS room 443, 3rd floor')." + ::= { systemGrp 2 } + +ivSysContact OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The textual identification of the contact person for this IntruShield node, + together with information on how to contact this person." + ::= { systemGrp 3 } + +ivSysModel OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..32)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is where the manufacturer specifies the model identification + (number or type) of the network element." + ::= { systemGrp 4 } + +-- Support for ivSysSerialNumber is deprecated in V-series sensors(VmIPS). +ivSysSerialNumber OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Manufacturer-provided serial number." + ::= { systemGrp 5 } + +ivSysDescr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual description of the entity. This value should include the full name and version + identification of the system's hardware type, software operating system, and networking + software. It is current that this only contains printable ASCII characters." + ::= { systemGrp 6 } + +ivSysObjectID OBJECT-TYPE + SYNTAX OBJECT IDENTIFIER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The vendor's authoritative identification of the + network management subsystem contained in the + entity. This value is allocated within the SMI + enterprises subtree (1.3.6.1.4.1) and provides an + easy and unambiguous means for determining `what + kind of box' is being managed. For example, if + vendor `Flintstones, Inc.' was assigned the + subtree 1.3.6.1.4.1.4242, it could assign the + identifier 1.3.6.1.4.1.4242.1.1 to its `Fred + Router'." + ::= { systemGrp 7 } + +ivSysUpTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time (in hundredths of a second) since the network management portion of the system + was last re-initialized." + ::= { systemGrp 8 } + +ivSysLastCfgTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Indicates time when configuration was changed last." + ::= { systemGrp 9 } + +-- Support for ivSysDiskSpaceLeft is deprecated in V-series sensors(VmIPS). +ivSysDiskSpaceLeft OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the numbers of kbytes left on the disk." + ::= { systemGrp 10 } + +ivSysAlertChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + down (0), + up (1), + errorInGetTimeFromManager (2), + errorGeneratingCertificates (3), + errorPersistingCertificates (4), + errorConnectingToManager (5), + errorInUntrustedConnectionSetup (6), + errorInInstall (7), + errorPersistingManagerPublicCertificate (8), + errorInMutualTrustMatch (9), + errorInSnmpKeyExchange (10), + errorInInitialProtocolMessageExchange (11), + sensorInstallInProgress (12), + openingAlertChannelInProgress (13), + errorInLinkHenceReopening (14), + errorInChannelReopening (15), + closingChannelInProgress (16), + errorClosingChannel (17), + sendAlertWarning (18), + keepAliveWarning (19), + errorDeletingCerts (20), + errorCreatingSnmpUser (21), + errorChangingSnmpUserKeys (22) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the status of the alert channel connection with + EMS." + ::= { systemGrp 11 } + +ivSysPacketLogChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + down (0), + up (1), + errorInGetTimeFromManager (2), + errorGeneratingCertificates (3), + errorPersistingCertificates (4), + errorConnectingToManager (5), + errorInUntrustedConnectionSetup (6), + errorInInstall (7), + errorPersistingManagerPublicCertificate (8), + errorInMutualTrustMatch (9), + errorInSnmpKeyExchange (10), + errorInInitialProtocolMessageExchange (11), + packetLogInstallInProgress (12), + openingPacketLogInProgress (13), + errorInLinkHenceReopening (14), + errorInChannelReopening (15), + closingChannelInProgress (16), + errorClosingChannel (17), + sendLogWarning (18), + keepAliveWarning (19) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the status of the packet log channel connection with + EMS." + ::= { systemGrp 12 } + +ivSysHealth OBJECT-TYPE + SYNTAX INTEGER { + bad (0), + good (1), + uninitialized (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the health of the sensor. uninitialized means + that the sensor does not have signatures hence does not + detect attacks" + ::= { systemGrp 13 } + +ivSysResetPassword OBJECT-TYPE + SYNTAX INTEGER { + not-applicable (0), + resetPassword (1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to reset the password back to default + value. Returns not-applicable(0) upon read." + ::= { systemGrp 14 } + +ivSysDeleteSignatures OBJECT-TYPE + SYNTAX INTEGER { + not-applicable (0), + deleteSignatures (1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to delete the signatures on the sensor if present. + This also reboots the sensor after deleting the signatures. Does nothing + if signatures are not present. Returns not-applicable(0) upon read." + ::= { systemGrp 15 } + +-- Support for ivSysSlaveSerialNumber is deprecated in V-series sensors(VmIPS). +ivSysSlaveSerialNumber OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Manufacturer-provided slave serial number. This is the serial number + for a cluster-slave in a palomar cluster" + ::= { systemGrp 16 } + +ivSysUIDSeed OBJECT-TYPE + SYNTAX INTEGER (0..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object contains the portion of the seed value to be used for generating + UIDs' for alerts and logs. In case there is a mismatch, the ISM would set the + right value, which would used by the sensor for new alerts and logs." + ::= { systemGrp 17 } + +ivSysFipsMode OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This Object holds the status of the fips mode.If the sensor is operating in FIPS + mode then this Object will have enable value or else disable value." + ::= { systemGrp 18 } + + ivSysNumLbPorts OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is set by the NSM to inform the sensors connected to the Load Balancer(LB) + of the number of ports on the LB switch." + ::= { systemGrp 19 } + +ivSysUpTimeNew OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time (in hundredths of a second) since the network management portion of the system + was last re-initialized." + ::= { systemGrp 20 } + +ivSysCapacityMode OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "To push new license from NSM" + ::= { systemGrp 21 } + +ivSysCurrentCapacityMode OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "To get current license mode of sensor" + ::= { systemGrp 22 } + +ivSysDeviceMode OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "To get current device mode" + ::= { systemGrp 23 } + +ivSysConfDeviceMode OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "To get configured device mode" + ::= { systemGrp 24 } + +ivSysRebootStatus OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "If a system reboot is required and Why + REBOOT_DEFAULT_STATUS (0) // No Reboot Required + REBOOT_UPGRADE_DOWNLOAD (1) + REBOOT_SETUP_CHANGE (2) + REBOOT_IPV6_CONFIG_CHANGE (3) + REBOOT_SSL_MODE_CHANGE (4) + REBOOT_JUMBOFRAMEPARSING_CONFIG_CHANGE (5) + REBOOT_PREV_256BYTES_LOGGING_CONFIG_CHANGE (6) + NMS_USERS_WRITE_ACCESS_CONFIG_CHANGE (7) + REBOOT_LAYER7_DCAP_NUM_FLOWS_CHANGE (8) + REBOOT_LAYER7_DCAP_BUFF_SIZE_CHANGE (9) + REBOOT_LAYER7_DCAP_STATUS_CHANGE (10) + REBOOT_SBC_CORE_INCREMENT_CONFIG_CHANGE (11) + REBOOT_REQUIRED_MAX_SNMPD_RESTART_EXCEEDED (12) + REBOOT_REQUIRED_SBC_TLV_ERROR (13) + REBOOT_SNORT_CONFIG_CHANGE (15) + REBOOT_CAPACITY_MODE_CHANGE (16) + REBOOT_SSL_FLOWALLOC_CHANGE (17) + " + ::= { systemGrp 25 } + +ivSysRebootReason OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains reason for the sensor reboot. + NULL is stored in the object if reboot is not required" + ::= { systemGrp 26 } + +--This group contains objects that identify the IP configuration information for the +--IntruShield network element. +-- + +systemIPCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 2 } + +ivSysIPAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains the IP Address of the management card on the IntruShield node, + that interfaces with the EMS." + ::= { systemIPCfgGrp 1 } + +ivSysMACAddress OBJECT-TYPE + SYNTAX MacAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains the MAC address of the management card on the IntruShield node." + ::= { systemIPCfgGrp 2 } + +ivSysSubnetMask OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the Subnet mask of the management card on the IntruShield node." + ::= { systemIPCfgGrp 3 } + +ivSysGateway OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the gateway address of the management card on the IntruShield node." + ::= { systemIPCfgGrp 4 } + +ivSysIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains the IPv6 Address of the management card on the IntruShield node, + that interfaces with the EMS." + ::= { systemIPCfgGrp 5 } + +ivSysIpv6SubnetMask OBJECT-TYPE + SYNTAX INTEGER (0..128) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the number of bits that need to set to '1' from left to right, + int the Ipv6 address Subnet mask of the management card on the IntruShield node." + ::= { systemIPCfgGrp 6 } + +ivSysIpv6Gateway OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the gateway Ipv6 address of the management card on the IntruShield node." + ::= { systemIPCfgGrp 7 } + +ivSysVmHostIPAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains the IP Address of the Vm Host on which VIPS will be running. + This mib object will be available only on V-series sensors." + ::= { systemIPCfgGrp 8 } + +ivSysVmHostIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains the IP Address of the Vm Host on which VIPS will be running. + This mib object will be available only on v-series sensors." + ::= { systemIPCfgGrp 9 } + +ivSysVmHostName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains the Vm Host name on which VIPS will be running. + This mib object will be available only on V-series sensors." + ::= { systemIPCfgGrp 10 } + +ivSysVmMgmtAdditionalInfo OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing additional information about the management interface. + This mib object will be available only on v-series sensors." + ::= { systemIPCfgGrp 11 } + + + +-- +-- System Failover Group +-- +--This group contains objects that identify the failover configuration information for the +--IntruShield network element. + +systemFailoverGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 3 } + +ivSysFailoverStatus OBJECT-TYPE + SYNTAX INTEGER { + peer-up (1), + peer-down (2), + peer-incompatible (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Indicates if IDS peer is in peer-down or peer-up mode. Default: peer-down (2)." + ::= { systemFailoverGrp 1 } + +ivSysFailoverAction OBJECT-TYPE + SYNTAX INTEGER { + on (1), + off (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to indicate if the sensor is in failover + configuration or not. If the sensors are in failover + configuration, then both sensors have to be set to on(1). + Default: off(2)" + ::= { systemFailoverGrp 2 } + +ivSysFailoverMode OBJECT-TYPE + SYNTAX INTEGER { + standalone (0), + primary (1), + secondary (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Added for the I-3000/I-4010 sensors. + This object is used to specify to the sensor if it is primary + or secondary when failover is enabled. + This value ( 1 or 2) must be set on the sensor prior to + enabling failover. + When failover is disabled, the sensor will automatically + update this object to standalone (0). + The manager can opt to explicitly set this after disabling + failover on the sensor, however it is not necessary. + Default: standalone(0), since failover is disabled" + ::= { systemFailoverGrp 3 } + +ivSysFailopenAction OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to indicate if the sensor should fail-open when + in failover mode. + Default: disable(2)" + ::= { systemFailoverGrp 4 } + + +ivSysSTPForwardConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to indicate if the sensor should forward the STP traffic + through peer in failover mode. + Default: disable(2)" + ::= { systemFailoverGrp 5 } + +-- +-- EmsGrp +-- +-- This group contians the that identifies two EMSs for this sensor +-- They are indexed by and identified by their . +-- The only field that is writable for each EMS is the emsPriority. All +-- the other fields are updated by the sensor itself. +-- +-- An EMS can look at this emsTable to find out the status of sensors +-- connection to EMSs. Any changes at the EMS can be communicated to the sensor +-- using the emsChangeAction mib object. +-- Under error scenarios like sensor getting out of sync with the EMS because it was +-- offline when the change at EMS took place can also be corrected using the same +-- emsChangeAction mib object. +-- +-- + +emsGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 4 } + +emsTable OBJECT-TYPE + SYNTAX SEQUENCE OF EmsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table comprises of exactly two possible EMS entries each defined by . + + + " + ::= { emsGrp 1 } + +emsEntry OBJECT-TYPE + SYNTAX EmsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + Additonaly it contains the and + " + INDEX { emsIndex } + ::= { emsTable 1 } + +EmsEntry ::= SEQUENCE { + emsIndex + Integer32, + emsPriority + INTEGER, + emsIPAddress + IpAddress, + emsHAMode + INTEGER, + emsHAStatus + INTEGER, + emsAlertChannelStatus + INTEGER, + emsPacketLogChannelStatus + INTEGER, + emsIPv6Address + Ipv6Address, + emsIPAddressType + INTEGER, + emsAuthChannelStatus + INTEGER +} + + +emsIndex OBJECT-TYPE + SYNTAX Integer32 (1..2) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Fixed index for the two EMS entries. Valid values are [1,2] only." + ::= { emsEntry 1 } + + +emsPriority OBJECT-TYPE + SYNTAX INTEGER { + primary (1), + secondary (2), + standalone (3), + unknown (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Identifies whether the EMS identifed by the IPAddress is the Primary or Secondary. This value + is only informational from sensor point of view and is set by the EMS when we have established + connection to it. Note that transition at EMS from Primary to Secondary or vice versa will have + no effect on the sensor. The only thing sensor needs to worry about while in MDR mode is the + active/standby status. + " + ::= { emsEntry 2 } + + +emsIPAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "IP Address of a EMS (in this entry)." + ::= { emsEntry 3 } + + +emsHAMode OBJECT-TYPE + SYNTAX INTEGER { + failover (1), + standalone (2), + unknown (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Identifies the MDR mode of the EMS. Initially when the system comes up this would be set to + unknown till we contact the EMS and get its MDR status. This field also gets updated when a + MDR-to-Standalone or Standalone-to-MDR action is triggered. + " + ::= { emsEntry 4 } + +emsHAStatus OBJECT-TYPE + SYNTAX INTEGER { + unknown(1), + active (2), + standby (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies if the EMS is an active or a standby when operating in failover mode" + ::= { emsEntry 5 } + +emsAlertChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + down (0), + up (1), + errorInGetTimeFromManager (2), + errorGeneratingCertificates (3), + errorPersistingCertificates (4), + errorConnectingToManager (5), + errorInUntrustedConnectionSetup (6), + errorInInstall (7), + errorPersistingManagerPublicCertificate (8), + errorInMutualTrustMatch (9), + errorInSnmpKeyExchange (10), + errorInInitialProtocolMessageExchange (11), + sensorInstallInProgress (12), + openingAlertChannelInProgress (13), + errorInLinkHenceReopening (14), + errorInChannelReopening (15), + closingChannelInProgress (16), + errorClosingChannel (17), + sendAlertWarning (18), + keepAliveWarning (19), + errorDeletingCerts (20), + errorCreatingSnmpUser (21), + errorChangingSnmpUserKeys (22) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the status of the alert channel connection with + EMS identifed by the emsIPAddress of this entry." + ::= { emsEntry 6 } + +emsPacketLogChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + down (0), + up (1), + errorInGetTimeFromManager (2), + errorGeneratingCertificates (3), + errorPersistingCertificates (4), + errorConnectingToManager (5), + errorInUntrustedConnectionSetup (6), + errorInInstall (7), + errorPersistingManagerPublicCertificate (8), + errorInMutualTrustMatch (9), + errorInSnmpKeyExchange (10), + errorInInitialProtocolMessageExchange (11), + packetLogInstallInProgress (12), + openingPacketLogInProgress (13), + errorInLinkHenceReopening (14), + errorInChannelReopening (15), + closingChannelInProgress (16), + errorClosingChannel (17), + sendLogWarning (18), + keepAliveWarning (19) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the status of the packet log channel connection with + EMS identified by the emsIPAddress of this entry." + ::= { emsEntry 7 } + +emsIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "IPv6 Address of a EMS (in this entry)." + ::= { emsEntry 8 } + +emsIPAddressType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Identifies the type of EMS IPAddress. If set to ip-v4, then the emsIPAddress object + would be set else if this object is set to ip-v6, then the empIPv6Address object + would be set. + " + ::= { emsEntry 9 } + +emsAuthChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + down (0), + up (1) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the status of the authentication channel connection with + EMS identified by the emsIPAddress of this entry." + ::= { emsEntry 10 } + +emsChangeAction OBJECT-TYPE + SYNTAX INTEGER { + other (0), + standalone-to-ha (1), + ha-to-standalone (2), + switchover (3), + add-ism-sec-ip (4) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to indicate to the sensor, changes in the EMS MDR operation mode." + ::= { emsGrp 2 } + +emsParamIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is one of the parameters that need to be set before emsChangeAction is triggered. + If the action is Switchover this specifies the IP address of the Manager that the sensor should switch to. + If the action is Standalone-to-MDR this specifies the Peer EMS IP address and this will result in using + a free entry in the emsTable. + If the action is MDR-to-Standalone this specifies the future Standalone EMS IP address which should be + one of the two EMSs specified in the emsTable. + The acutal swithover or change in MDR opearation mode will be done when indicated by the Manager through the + emsChangeAction object. + Setting this object would reset the emsParamIpv6Address and emsParamAddIpv6Address objects. + " + ::= { emsGrp 3 } + +emsParamPriority OBJECT-TYPE + SYNTAX INTEGER { + other (0), + primary (1), + secondary (2), + standalone (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object specifies the priority of the EMS setting the standalone-to-MDR change action." + ::= { emsGrp 4 } + +emsParamAddIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object specifies the secondary IP address of the EMS while in MDR mode. If the emsChangeAction + is standalone-to-MDR, this specifies the secondary IP address of the new peer Manager. If the + emsChangeAction is secondary NIC address, this specifies the secondary IP address of the EMS + identified by emsParamIpAddress. + Setting this object would reset the emsParamIpv6Address and emsParamAddIpv6Address objects." + ::= { emsGrp 5 } + +emsParamIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is one of the parameters that need to be set before emsChangeAction is triggered. + If the action is Switchover this specifies the IPv6 address of the Manager that the sensor should switch to. + If the action is Standalone-to-MDR this specifies the Peer EMS IPv6 address and this will result in using + a free entry in the emsTable. + If the action is MDR-to-Standalone this specifies the future Standalone EMS IPv6 address which should be + one of the two EMSs specified in the emsTable. + The acutal swithover or change in MDR opearation mode will be done when indicated by the Manager through the + emsChangeAction object. + Setting this object would reset the emsParamIpAddress and emsParamAddIpAddress objects. + " + ::= { emsGrp 6 } + +emsParamAddIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object specifies the secondary IPv6 address of the EMS while in MDR mode. If the emsChangeAction + is standalone-to-MDR, this specifies the secondary IPV6 address of the new peer Manager. If the + emsChangeAction is secondary NIC address, this specifies the secondary IPv6 address of the EMS + identified by emsParamIpAddress. + Setting this object would reset the emsParamIpAddress and emsParamAddIpAddress objects." + ::= { emsGrp 7 } + +emsTenantId OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(36)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object specifies the TenantId. which identifies unique customer in Trellix eco system" + ::= { emsGrp 8 } + +emsPrimaryNSMGUID OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(36)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object specifies the Primary NSM Server GUID. which identifies unique NSM in Trellix eco system" + ::= { emsGrp 9 } + +emsSecondaryNSMGUID OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(36)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object specifies the Secondary NSM Server GUID. which identifies unique NSM in Trellix eco system" + ::= { emsGrp 10 } + +--This group contains MIB objects for the configuration of the TFTP service. + +tftpGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 5 } + +tftpKey OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This specifies the tftp shared secret key between the IntruShield Sensor and EMS. + Default: All 128 octets filled with '0'." + ::= { tftpGrp 1 } + +tftpFileSize OBJECT-TYPE + SYNTAX Integer32 (0..134217727) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The size of the file in bytes. Default: 0 " + ::= { tftpGrp 2 } + +tftpFileName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This specifies the name of the file to TFTP (with the source path)" + ::= { tftpGrp 3 } + +tftpServerAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "TFTP server IP address. + Is the EMS address when downloading from EMS to management card. + Setting this object would reset the tftpServerIpv6Address objects." + ::= { tftpGrp 4 } + +tftpAction OBJECT-TYPE + SYNTAX TrellixTFTPAction + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Invokes TFTP service using other (required) parameters defined in . + Valid values are : (0)-other, (1)-downloadimage, (2)-downloadsigfile, (3)-uploaddos, + (4)-uploadtrace, (5)-downloaddos, (6)-aborttransfer, (7)-downloadcertfile, + (8)-downloadimageandsigfile, (9)-downloadmperootcertfile, + (10)-download_sgap_ssl_cert, (11)-upload_sgap_ssl_csr, + (12)-upload_ibac_ad_file, (13)-download_ibac_ad_file, + (14)-upload_swh_learned_file, + (15)-downloadPacketCaptureFilterFile ,(16)-uploadPacketCaptureFilterFile, + (17)-downloadGeoLocationDatabase, (18)-uploadPacketCapturePCAPFile, + (19)-download_usrid_acl_file, + (20)-download-bot-dat-file, + (21)-download-ntba-ssl-cert-file,(22)-upload-dev-prof-file, + (25)-download_matd_ssl_cert, (28)-download-ffp-bulk-file, + (33)-download_zcenter_ssl_cert, (34)-download-gti-private-cloud-cert-file, + (35)-upload_suricata_failed_rules, (36)-upload_ca_sensor_csr, + (37)-download_ca_sensor_cert, (38)-download_syslog_ssl_cert, + (39)-download_ca_cert_store" + ::= { tftpGrp 5 } + +tftpActionStatus OBJECT-TYPE + SYNTAX TrellixTFTPStatus + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The status of the current TFTP action" + ::= { tftpGrp 6 } + +tftpActionInProgressResult OBJECT-TYPE + SYNTAX TrellixTFTPInProgressResult + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Specifies TFTP service completion percentage. + " + ::= { tftpGrp 7 } + +tftpActionFailedResult OBJECT-TYPE + SYNTAX TrellixTFTPFailedResult + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "See TrellixTFTPFailedResult" + ::= { tftpGrp 8 } + +tftpActionTransactionId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Used to ensure single file transfer at a time. Default: 0." + ::= { tftpGrp 9 } + +tftpServerIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "TFTP server IPv6 address. + Is the EMS IPv6 address when downloading from EMS to management card. + Either one of the Ipv4 or Ipv6 address should be set by the ISM. + Setting this object would reset the tftpServerIpAddress objects." + ::= { tftpGrp 10 } + +tftpIVKey OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This specifies the tftp Initialization Vector that is used for AES Decryption between the IntruShield Sensor and EMS. + Default: All 128 octets filled with '0'." + ::= { tftpGrp 11 } + +--Trellix IntruShield chassis. +--The chassis may be a slim line enclosure with no explicit slot concept or a larger enclosure +--with multiple slots. +-- +--This MIB does not differentiate between the two and models all it's cards +--as entities that can be associated with a containing slot. +-- Support for chassisGrp is deprecated in V-series sensors(VmIPS). + +chassisGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 7 } + + +temperatureStatus OBJECT-TYPE + SYNTAX INTEGER { + normal (0), + abnormal (1) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "" + ::= { chassisGrp 1 } + +fanStatus OBJECT-TYPE + SYNTAX INTEGER { + normal (0), + abnormal (1), + removed (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "" + ::= { chassisGrp 2 } + +primaryPowerSupplyStatus OBJECT-TYPE + SYNTAX INTEGER { + not-present (0), + present-operational (1), + present-nonoperational (2), + error (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This powerSupply MIB object gives the primary powerSupply status. + (0) - Primary PowerSupply Module is not present. + (1) - Primary PowerSupply Module is present and operational. + (2) - Primary PowerSupply Module is present and its not operational. + (3) - Error while retrieving the powerSupply status, please re-try after some time." + ::= { chassisGrp 3 } + +secondaryPowerSupplyStatus OBJECT-TYPE + SYNTAX INTEGER { + not-present (0), + present-operational (1), + present-nonoperational (2), + error (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This powerSupply MIB object gives the secondary powerSupply status. + (0) - Secondary PowerSupply Module is not present. + (1) - Secondary PowerSupply Module is present and operational. + (2) - Secondary PowerSupply Module is present and its not operational. + (3) - Error while retrieving the powerSupply status, please re-try after some time." + ::= { chassisGrp 4 } + +pciLegacyErrorStatus OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "BMC PCI Legacy Error (parity error (PERR) and system error (SERR))" + ::= { chassisGrp 5 } + +pciFatalError1Status OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "BMC PCI Fatal Error1 Status" + ::= { chassisGrp 6 } + +pciFatalError2Status OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "BMC PCI Fatal Error2 Status (Continuation of Fatat Error 1)" + ::= { chassisGrp 7 } + +systemEventLogStatus OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "BMC System Event Log (SEL buffer) Status" + ::= { chassisGrp 8 } + +bmcWatchdogStatus OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "BMC Watchdog Status" + ::= { chassisGrp 9 } + +processorStatusTable OBJECT-TYPE + SYNTAX SEQUENCE OF ProcessorStatusEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table contain list of processors" + ::= { chassisGrp 10 } + +processorStatusEntry OBJECT-TYPE + SYNTAX ProcessorStatusEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The table entries denotes various processor details for each index (processor) " + INDEX { processorNumIndex } + ::= { processorStatusTable 1 } + +ProcessorStatusEntry ::= SEQUENCE{ + processorStatus + DisplayString, +} + +processorStatus OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Processor Presence Status" + ::= { processorStatusEntry 1 } + +memoryECCStatus OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Memory ECC Status" + ::= { chassisGrp 11 } + +postSysEventStatus OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "POST Sys Event Status" + ::= { chassisGrp 12 } + +postErrorStatus OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..512)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "POST Error Status" + ::= { chassisGrp 13 } + +--Trellix Sensor Slave chassis. + +slave-ChassisGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 9 } + +slaveTemperatureStatus OBJECT-TYPE + SYNTAX INTEGER { + normal (0), + abnormal (1) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "" + ::= { slave-ChassisGrp 1 } + +slaveFanStatus OBJECT-TYPE + SYNTAX INTEGER { + normal (0), + abnormal (1) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "" + ::= { slave-ChassisGrp 2 } + +slavePrimaryPowerSupplyStatus OBJECT-TYPE + SYNTAX INTEGER { + not-present (0), + present-operational (1), + present-nonoperational (2), + error (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This powerSupply MIB object gives the primary powerSupply status. + (0) - Slave Primary PowerSupply Module is not present. + (1) - Slave Primary PowerSupply Module is present and operational. + (2) - Slave Primary PowerSupply Module is present and its not operational. + (3) - Error while retrieving the powerSupply status, please re-try after some time." + ::= { slave-ChassisGrp 3 } + +slaveSecondaryPowerSupplyStatus OBJECT-TYPE + SYNTAX INTEGER { + not-present (0), + present-operational (1), + present-nonoperational (2), + error (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This powerSupply MIB object gives the secondary powerSupply status. + (0) - Slave Secondary PowerSupply Module is not present. + (1) - Slave Secondary PowerSupply Module is present and operational. + (2) - Slave Secondary PowerSupply Module is present and its not operational. + (3) - Error while retrieving the powerSupply status, please re-try after some time." + ::= { slave-ChassisGrp 4 } + +--This group conatins all MIB objects that specify the configuration of the +--Trellix IntrusShield management card. +-- +--The object mgmtCardTable within this group suggest that each IntruShield chassis +--can contain more than one management card, only for standby purposes. + +managementCardGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 8 } + +mgmtCardTable OBJECT-TYPE + SYNTAX SEQUENCE OF MgmtCardEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table contains entries, one per management card, indexed by the appropriate slotIndex." + ::= { managementCardGrp 1 } + +mgmtCardEntry OBJECT-TYPE + SYNTAX MgmtCardEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each management card within the IntruShield node. + This entry is indexed by a fixed value slotIndex of 1 (one) for all models." + INDEX { slotIndex } + ::= { mgmtCardTable 1 } + +MgmtCardEntry ::= SEQUENCE { + mcAction + TrellixIDSAction, + mcActionStatus + TrellixIDSActionStatus, + mcActionResult + TrellixIDSActionResult, + mcHwVersion + DisplayString, + mcCurrentSwVersion + DisplayString, + mcFutureSwFileName + DisplayString, + mcDateAndTime + DateAndTime +} + +mcAction OBJECT-TYPE + SYNTAX TrellixIDSAction + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Actions applicable on this card, uses TC TrellixIDSAction. + Default: other + Only 'reset' and 'swupdate' action are supported." + ::= { mgmtCardEntry 1 } + +mcActionStatus OBJECT-TYPE + SYNTAX TrellixIDSActionStatus + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Outcome of a SNMP set on the mcAction object. Uses TC TrellixIDSActionStatus + + Default: other" + ::= { mgmtCardEntry 2 } + +mcActionResult OBJECT-TYPE + SYNTAX TrellixIDSActionResult + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Detail information when is set to 'reset', based on + + Default: 0, details not defined." + ::= { mgmtCardEntry 3 } + +-- Support for mcHwVersion is deprecated in V-series sensors(VmIPS). +mcHwVersion OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The manufacturer specified hardware version information. + Typically indicated major, minor, patch information for version." + ::= { mgmtCardEntry 4 } + +mcCurrentSwVersion OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The manufacturer specified software version information that is currently running. + Typically indicated major, minor, patch information for version." + ::= { mgmtCardEntry 5 } + +mcFutureSwFileName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The new software (image) file residing on flash." + ::= { mgmtCardEntry 6 } + +mcDateAndTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "System date and time set by EMS." + ::= { mgmtCardEntry 7 } + +--This group conatins all MIB objects that specify the configuration of the +--Trellix IDS sensor (analysis) card. +-- +--The object sensorCardTable within this group suggests that each Trellix IDS chassis +--may contain more than one sensor card. +-- +--Support for each logical function is defined in its own table. +--Each table in this group contains entries, one per sensor card, indexed by + +sensorCardGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 10 } + +sensorCardTable OBJECT-TYPE + SYNTAX SEQUENCE OF SensorCardEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table contains entries, one per sensor card and indexed by the slotIndex. + " + ::= { sensorCardGrp 1 } + +sensorCardEntry OBJECT-TYPE + SYNTAX SensorCardEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each sensor card within the Trellix IDS. + This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { sensorCardTable 1 } + +SensorCardEntry ::= SEQUENCE { + scAction + TrellixIDSAction, + scSigUpdateResult + TrellixIDSActionResult, + scHwVersion + DisplayString, + scCurrentSwVersion + DisplayString, + scFutureSwFileName + DisplayString, + scCurrentSigVersion + DisplayString, + scFutureSigFileName + DisplayString, + scMACAddress + MacAddress, + scCurrentBotDATVersion + DisplayString +} + +scAction OBJECT-TYPE + SYNTAX TrellixIDSAction + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Actions on this card. See TrellixIDSAction + Default: other + Only reset and sigupdate are supported." + ::= { sensorCardEntry 1 } + +scSigUpdateResult OBJECT-TYPE + SYNTAX TrellixIDSActionResult + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Indicates detail results of scAction object. + Default: 0 + + " + ::= { sensorCardEntry 2 } + +-- Support for scHwVersion is deprecated in V-series sensors(VmIPS). +scHwVersion OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The manufacturer specified hardware version information. + Typically indicated major, minor, patch information for version." + ::= { sensorCardEntry 3 } + +scCurrentSwVersion OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The manufacturer specified software version information that is currently running. + Typically indicated major, minor, patch information for version." + ::= { sensorCardEntry 4 } + +scFutureSwFileName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The new software (image) file residing on flash." + ::= { sensorCardEntry 5 } + +scCurrentSigVersion OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The manufacturer specified signature file version information that is currently running. + Typically indicated major, minor, patch information for version." + ::= { sensorCardEntry 6 } + +scFutureSigFileName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The new signature file residing on flash." + ::= { sensorCardEntry 7 } + +scMACAddress OBJECT-TYPE + SYNTAX MacAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "ReadOnly parameter, to allow SNMP manager to view the MAC address of this card." + ::= { sensorCardEntry 8 } + +scCurrentBotDATVersion OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The manufacturer specified BotDAT file version information that is currently running." + ::= { sensorCardEntry 9 } + + +-- +-- IP table +-- +ipTable OBJECT-TYPE + SYNTAX SEQUENCE OF IpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table contains entries that define the IP + configuration objects per sensor card." + ::= { sensorCardGrp 6 } + +ipEntry OBJECT-TYPE + SYNTAX IpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table entry contains the sensor card specific ( based) + IP configuration objects. + This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { ipTable 1 } + +IpEntry ::= SEQUENCE { + ipFragmentTimer + INTEGER, + ipOverlapOption + INTEGER, + ipTTLConfigMode + INTEGER, + ipTTLThreshold + INTEGER, + ipTTLResetValue + INTEGER, + ipSmallestFragmentSize + INTEGER, + ipSmallFragmentThreshold + INTEGER, + ipFragmentReassemblyOption + INTEGER, + ipv6OverlapOption + INTEGER, + ipv6SmallestFragmentSize + INTEGER, + ipv6SmallFragmentThreshold + INTEGER + +} + +ipFragmentTimer OBJECT-TYPE + SYNTAX INTEGER (3..180) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP fragment reassembly timer + Default: 30 seconds + + " + ::= { ipEntry 1 } + +ipOverlapOption OBJECT-TYPE + SYNTAX INTEGER { + oldData (1), + newData (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to oldData(1), ip reassembly module takes old data. + Otherwise it takes new data. + + Default: oldData (1)" + ::= { ipEntry 2 } + +ipTTLConfigMode OBJECT-TYPE + SYNTAX INTEGER { + noTTLChecking (1), + checkThreshold (2), + resetTTL (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to noTTLChecking(1), the TTL in the packet is not + checked. If set to checkThreshold(2), then TTL is checked + against the value in ipTTLThreshold object. If set to + resetTTL(3), the TTL value is reset to the value set by + ipTTLResetValue object. + + Default: noTTLChecking (1)" + ::= { ipEntry 3 } + +ipTTLThreshold OBJECT-TYPE + SYNTAX INTEGER (1..255) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the minimum threshold for the TTL value. The TTL + in the packet is checked against the value configured here. + If TTL is less than the value configured here, an alert is + raised. + + Default: 32" + ::= { ipEntry 4 } + +ipTTLResetValue OBJECT-TYPE + SYNTAX INTEGER (1..255) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the value that TTL should be reset to. + + Default: 32" + ::= { ipEntry 5 } + +ipSmallestFragmentSize OBJECT-TYPE + SYNTAX INTEGER (8..1480) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the smallest fragment size that is acceptable. + Any fragments smaller than the size specified here (other + than the last one) will be counted and an alert raised if + exceeds the threshold configured. The size should be multiple + of 8. + + Default: 256" + ::= { ipEntry 6 } + +ipSmallFragmentThreshold OBJECT-TYPE + SYNTAX INTEGER (100..100000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Count of acceptable small fragments as specified by + ipSmallestFragmentSize in 1 minute. + + Default: 10000" + ::= { ipEntry 7 } + +ipFragmentReassemblyOption OBJECT-TYPE + SYNTAX INTEGER{ + enable (0), + disable (1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Flag to indicate if sensor should reassemble IP Framgments. Default: enable" + ::= { ipEntry 8 } + +ipv6OverlapOption OBJECT-TYPE + SYNTAX INTEGER { + oldData (1), + newData (2), + drop (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to oldData(1), ipv6 reassembly module takes old data. + Otherwise it takes new data. + + Default: oldData (1)" + ::= { ipEntry 9 } + +ipv6SmallestFragmentSize OBJECT-TYPE + SYNTAX INTEGER (40..1280) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the smallest ipv6 fragment size that is acceptable. + Any fragments smaller than the size specified here (other + than the last one) will be counted and an alert raised if + exceeds the threshold configured. The size should be multiple + of 8. + + Default: 48" + ::= { ipEntry 10 } + +ipv6SmallFragmentThreshold OBJECT-TYPE + SYNTAX INTEGER (100..100000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Count of acceptable small fragments as specified by + ipSmallestFragmentSize in 1 minute. + + Default: 10000" + ::= { ipEntry 11 } + +-- +-- TCP Table +-- +tcpTable OBJECT-TYPE + SYNTAX SEQUENCE OF TcpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table contains entries that define the TCP configuration objects per sensor card." + ::= { sensorCardGrp 7 } + +tcpEntry OBJECT-TYPE + SYNTAX TcpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table entry contains the sensor card specific ( based) + TCP configuration objects. + This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { tcpTable 1 } + +TcpEntry ::= SEQUENCE { + supportedUDPFlows + Integer32, + tcbInactivityTimer + INTEGER, + tcpSegmentTimer + INTEGER, + tcp2MSLTimer + INTEGER, + inactiveFlowsRSTEnabled + TruthValue, + dropReTxTCPEnabled + TruthValue, + coldStartTime + INTEGER, + coldStartDropAction + INTEGER, + normalizationOnOffOption + INTEGER, + tcpOverlapOption + INTEGER, + sAckPermittedOption + INTEGER, + tTCPOptionThreshold + INTEGER, + dropOnPAWSFail + INTEGER, + timestampEchoMatchFail + INTEGER, + dropMD5Option + INTEGER, + unsolicitedUDPPacketsTimeout + INTEGER, + synProxyEnable + INTEGER, + ackScanDiscardTime + INTEGER, + halfOpenConnectionResetEnable + INTEGER, + outOfContextTcpPktEnable + INTEGER, + synCookieConfig + INTEGER, + synCookieInboundThreshold + INTEGER, + synCookieOutboundThreshold + INTEGER, + synCookieMss + INTEGER, + sinkHoleTimeToLive + INTEGER, + sinkHoleIpAddress + IpAddress + +} + +supportedUDPFlows OBJECT-TYPE + SYNTAX Integer32 (8..1000000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Number of UDP flows supported. + Deafult: 1 million, UDP and TCP combined. + + Default: 100000 for I4000, 25000 for I2600, 5000 for I1200, 10000 for I1400" + ::= { tcpEntry 1 } + +tcbInactivityTimer OBJECT-TYPE + SYNTAX INTEGER (3..1200) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "TCB inactivity timeout + + Default: 10 minutes" + ::= { tcpEntry 2 } + +tcpSegmentTimer OBJECT-TYPE + SYNTAX INTEGER (10..120) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "TCP segment reassembly timer. + + Default: 60 seconds + " + ::= { tcpEntry 3 } + +tcp2MSLTimer OBJECT-TYPE + SYNTAX INTEGER (3..120) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "TCP 2MSL timer + + Default: 10 seconds" + ::= { tcpEntry 4 } + +inactiveFlowsRSTEnabled OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to RST incative flows enabled (TRUE) or not (FALSE). + + Default: FALSE" + ::= { tcpEntry 5 } + +dropReTxTCPEnabled OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IntruShield may get TCP segments which have already been processed by it apriori + (due to the segments being dropped in between it and the destination). + By default, forward it without any processing, but provide the user with an option + to drop such selectively retransmitted segments. + + This object enables the dropping of retransmitted TCP packets. + + Default: FALSE" + ::= { tcpEntry 6 } + +coldStartTime OBJECT-TYPE + SYNTAX INTEGER (0..10080) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "When sensor powers up, it will treat the packets for flows + that did not exist without valid TCB as valid packets. After + the time configured with this object, packets without valid + flows are considered invalid packets. + + Default: 60min" + ::= { tcpEntry 7 } + +coldStartDropAction OBJECT-TYPE + SYNTAX INTEGER { + dropFlows (1), + forwardFlows (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "When this object is set to dropFlows(1), in inline mode + sensor will drop the packets without valid TCB. + + When this object is set to forwardFlows(2), in inline mode + sensor will forward the packets until coldStartTime. After + that it will drop the packets without valid TCB. + + Default: forwardFlows(2)" + ::= { tcpEntry 8 } + +normalizationOnOffOption OBJECT-TYPE + SYNTAX INTEGER { + on (1), + off (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Enable or Disable normalization + + Default: off(2)" + ::= { tcpEntry 9 } + +tcpOverlapOption OBJECT-TYPE + SYNTAX INTEGER { + oldData (1), + newData (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If this object is set to oldData(1), tcp reassembly module + will use the old data. Otherwise it will use the newer data. + + Default: newData(2)" + ::= { tcpEntry 10 } + +sAckPermittedOption OBJECT-TYPE + SYNTAX INTEGER { + on (1), + off (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to on, removes in SYN and clears in further packets. + This applies only in inline mode." + ::= { tcpEntry 11 } + +tTCPOptionThreshold OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Generate alert if too many. TBD" + ::= { tcpEntry 12 } + +dropOnPAWSFail OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to enable, drop if fails PAWS test. If set to disable + always forward the packet." + ::= { tcpEntry 13 } + +timestampEchoMatchFail OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to enable, drop if TS-echo was one not sent earlier. + If set to disable always forward the packet." + ::= { tcpEntry 14 } + +dropMD5Option OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to enable, drop packet if SYN=0 and it contains + no MD5 but MD5 was used at setup. If set to disable always + forward the packet." + ::= { tcpEntry 15 } + +unsolicitedUDPPacketsTimeout OBJECT-TYPE + SYNTAX INTEGER (10..3600) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If a UDP response packet is received without a request + packet, the packet will be dropped. This object configures + the acceptable request to response time. + + Default: 60" + ::= { tcpEntry 16 } + +synProxyEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to enable, sensor will do SYN proxy for every SYN + request. SYN proxy is done only when TCP SYN flood is + detected." + ::= { tcpEntry 17 } + +ackScanDiscardTime OBJECT-TYPE + SYNTAX INTEGER (0..1440) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The time in which ACK scan messages should be discarded. + Default 15 minutes" + ::= { tcpEntry 18 } + +halfOpenConnectionResetEnable OBJECT-TYPE + SYNTAX INTEGER { + resetDisable (1), + resetAllUnfinished3WHConns (2), + resetDosUnfinished3WHConns (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Resets either all or only DOS packets whose 3 Way Handshake has not finished. Default: Disable(1). " + ::= { tcpEntry 19 } + +outOfContextTcpPktEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2), + permit-out-of-order (3), + deny-no-tcb (4), + stateless-inspection (5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Used to en/dis able processing of out of context TCP packets. Enable aka PERMIT, Disable aka DENY, PERMIT_OUT_OF_ORDER(3), DENY-NO-TCB (4) aka PERMIT-ACL-MODE, STATELESS_INSPECTION (5). Default: PERMIT(1)" + ::= { tcpEntry 20 } + +synCookieConfig OBJECT-TYPE + SYNTAX INTEGER { + disable (0), + enable-inbound (1), + enable-outbound (2), + enable-in-out (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object specifies the directions in which to enable syn cookie when there is a + SYN flood. This option is valid only for monitoring ports operating in inline mode. + Default: 0" + ::= { tcpEntry 21 } + +synCookieInboundThreshold OBJECT-TYPE + SYNTAX INTEGER (0..420000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the threshold value for the number of incomplete SYNs from outside + network beyond which SYN cookie mechanism has to be enabled. + Default: 4096" + ::= { tcpEntry 22 } + +synCookieOutboundThreshold OBJECT-TYPE + SYNTAX INTEGER (0..420000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the threshold value for the number of incomplete SYNs from inside + network beyond which SYN cookie mechanism has to be enabled. + Default: 4096" + ::= { tcpEntry 23 } + +synCookieMss OBJECT-TYPE + SYNTAX INTEGER (536..1460) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the maximum segment size to be sent in SYN Ack, with SYN cookie mechanism enabled. + Default: 536" + ::= { tcpEntry 24 } + +sinkHoleTimeToLive OBJECT-TYPE + SYNTAX INTEGER (6..18) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the TTL duration for sinkhole. TTL duration can range from 6 hours to 18 hours, + Default: 12 hours" + ::= { tcpEntry 25 } + +sinkHoleIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure IPv4 address of sinkhole. It can be any valid ip address apart from + broadcast and multicast address. + Default: 127.0.0.1" + ::= { tcpEntry 26 } + +-- +-- TCP/UDP session reset and log table +-- +sessionTable OBJECT-TYPE + SYNTAX SEQUENCE OF SessionEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Session table is used by user to configure TCP and UDP flows + in the sensor." + ::= { sensorCardGrp 8 } + +sessionEntry OBJECT-TYPE + SYNTAX SessionEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed with 5-tuple flow parameters and VIDS identifier. + This table is used only to send sets to the sensor. Doing + GET on this table will not return any information." + INDEX {sessionSrcIpAddress, sessionDestIpAddress, + sessionSrcPortNo, sessionDestPortNo, sessionProtocol, + sessionVIDSIdentifier } + ::= { sessionTable 1 } + +SessionEntry ::= SEQUENCE { + sessionSrcIpAddress + IpAddress, + sessionDestIpAddress + IpAddress, + sessionSrcPortNo + INTEGER, + sessionDestPortNo + INTEGER, + sessionProtocol + INTEGER, + sessionVIDSIdentifier + INTEGER, + sessionConfigAction + INTEGER, + sessionLogTime + INTEGER, + sessionIntfPortNo + TrellixPortLinearIndex +} + +sessionSrcIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Source ip address." + ::= { sessionEntry 1 } + +sessionDestIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Destination ip address." + ::= { sessionEntry 2 } + +sessionSrcPortNo OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Source port number." + ::= { sessionEntry 3 } + +sessionDestPortNo OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Destination port number." + ::= { sessionEntry 4 } + +sessionProtocol OBJECT-TYPE + SYNTAX INTEGER { + tcp (1), + udp (2) + } + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Protocol type." + ::= { sessionEntry 5 } + +sessionVIDSIdentifier OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "VIDS identifier that owns this flow. If VIDS is not + enabled, this oject will be ignored." + ::= { sessionEntry 6 } + +sessionConfigAction OBJECT-TYPE + SYNTAX INTEGER { + resetSession (1), + logSession (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Setting this object to resetSession(1) causes the flow + to be reset. + + Setting this object to logSession(2) causes the flow to be + logged for the time specified with sessionLogTime object." + ::= { sessionEntry 7 } + +sessionLogTime OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The time for which the packet needs to be logged." + ::= { sessionEntry 8 } + +sessionIntfPortNo OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The sensor linear interface port index on which the attack has been detected. + This is mandatory when the sessionConfigAction is resetSession. " + ::= { sessionEntry 9 } + + +-- +-- IPV6 TCP/UDP session reset and log table +-- + +sessionV6Table OBJECT-TYPE + SYNTAX SEQUENCE OF SessionV6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Session table v6 is used by user to configure TCP and UDP flows + over Ipv6 in the sensor." + ::= { sensorCardGrp 9 } + +sessionV6Entry OBJECT-TYPE + SYNTAX SessionV6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed with 5-tuple flow parameters and VIDS identifier. + This table is used only to send sets to the sensor. Doing + GET on this table will not return any information." + INDEX {sessionSrcIpv6Address, sessionDestIpv6Address, + sessionv6SrcPortNo, sessionv6DestPortNo, sessionv6Protocol, + sessionv6VIDSIdentifier } + ::= { sessionV6Table 1 } + +SessionV6Entry ::= SEQUENCE { + sessionSrcIpv6Address + Ipv6Address, + sessionDestIpv6Address + Ipv6Address, + sessionv6SrcPortNo + INTEGER, + sessionv6DestPortNo + INTEGER, + sessionv6Protocol + INTEGER, + sessionv6VIDSIdentifier + INTEGER, + sessionv6ConfigAction + INTEGER, + sessionv6LogTime + INTEGER, + sessionv6IntfPortNo + TrellixPortLinearIndex +} + +sessionSrcIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Source ipv6 address." + ::= { sessionV6Entry 1 } + +sessionDestIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Destination ipv6 address." + ::= { sessionV6Entry 2 } + +sessionv6SrcPortNo OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Source port number." + ::= { sessionV6Entry 3 } + +sessionv6DestPortNo OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Destination port number." + ::= { sessionV6Entry 4 } + +sessionv6Protocol OBJECT-TYPE + SYNTAX INTEGER { + tcp (1), + udp (2) + } + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Protocol type." + ::= { sessionV6Entry 5 } + +sessionv6VIDSIdentifier OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "VIDS identifier that owns this flow. If VIDS is not + enabled, this oject will be ignored." + ::= { sessionV6Entry 6 } + +sessionv6ConfigAction OBJECT-TYPE + SYNTAX INTEGER { + resetSession (1), + logSession (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Setting this object to resetSession(1) causes the flow + to be reset. + + Setting this object to logSession(2) causes the flow to be + logged for the time specified with sessionLogTime object." + ::= { sessionV6Entry 7 } + +sessionv6LogTime OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The time for which the packet needs to be logged." + ::= { sessionV6Entry 8 } + +sessionv6IntfPortNo OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The sensor linear interface port index on which the attack has been detected. + This is mandatory when the sessionConfigAction is resetSession " + ::= { sessionV6Entry 9 } + +pluggableModuleState OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Indicates the state of the pluggable modules in the system. Applicable + for Rubicon models only. 32 bit starting from LSB, 4 bits for each + slot starting from 2, will contain the moduleSysType enum + => 0000 0000 0000 0000 0000 0000." + ::= { sensorCardGrp 10 } + +-- This group conatins all MIB objects that specify the configuration of +-- the IntruShield interface port. +-- +-- The object intfPortTable within this group suggests that the MIB is +-- designed to support sensor cards that can contain more than one interface +-- port. +-- + +interfacePortGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 11 } + +intfPortTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each interface port (indexed via intfPortIndex) + on each sensor card (indexed via appropriate slotIndex). + + This table contains Trellix specific configuration objects. + Tables that contain MIB objects borrowed from MIB-II are in the + TRELLIX-SENSOR-PERF-MIB." + ::= { interfacePortGrp 1 } + +intfPortEntry OBJECT-TYPE + SYNTAX IntfPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each interface port on each IntruShield sensor card. + Indexed by slotIndex/intfPortIndex" + INDEX { slotIndex, + intfPortIndex } + ::= { intfPortTable 1 } + +IntfPortEntry ::= SEQUENCE { + intfPortIfDescr + DisplayString, + intfPortIfType + TrellixIDSPortType, + intfPortIfAdminStatus + INTEGER, + intfPortIfOperStatus + INTEGER, + intfPortOperatingMode + TrellixIDSOperatingMode, + intfPortEnableFullDuplex + TruthValue, + intfPortFullDuplexPeer + Integer32, + intfPortSpeed + INTEGER, + intfPortSpeedConfig + TrellixPortSpeed, -- was TrellixFEType, now deprecated + intfPortEnableInternalTap + TruthValue, + intfPortInOutType + INTEGER, + intfGEPortSpeedConfig + INTEGER, + intfFailOpenSwitchStatus + INTEGER, + intfFailOpenPortStatus + INTEGER, + intfPortEnableAntiSpoofing + INTEGER, + intfPortHostQRActionStatus + INTEGER, + intfPortMpeQRActionStatus + INTEGER, + intfPortAllowlistACLLookupStatus + INTEGER, + intfPortPeerDeviceAdvtStatus + INTEGER, + intfPortIsMcafeeConnector + TruthValue, + intfPortAllowAnyConnector + TruthValue, + intfPortCageType + INTEGER, + intfPortGetMediaType + INTEGER, + intfPortSetMediaType + INTEGER, + intfPortAdditionalInfo + DisplayString, + intfPortMonPortIpAddress + IpAddress, + intfPortMonPortNetMask + IpAddress, + intfPortGatewayIpAddress + IpAddress, + intfPortNbadConfigStatus + TruthValue, + intfPortVlanId + Integer32, + intfPortAppIdStatsConfigStatus + TruthValue, + intfPortConnectorType + INTEGER, + intfPortLinearIndex + TrellixPortLinearIndex, + intfPortFecConfig + INTEGER, + intfPortTranceiverSerialNumber + DisplayString +} + +intfPortIfDescr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing information about the interface. + Returns the string that is printed on the box." + ::= { intfPortEntry 1 } + +intfPortIfType OBJECT-TYPE + SYNTAX TrellixIDSPortType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of interface, distinguished according to the + physical/link protocol(s) immediately 'below' the network + layer in the protocol stack. + + For brevity, Trellix options are as specified by the TC, + TrellixIDSPortType. + + However, the SNMP MIB-II - Interfaces MIB specifies many more + valid options. See comments section for details. + " + ::= { intfPortEntry 2 } + +intfPortIfAdminStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The desired state of the interface. + The testing(3) state indicates that no operational packets + can be passed. + + Default: down" + ::= { intfPortEntry 3 } + +intfPortIfOperStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The current operational state of the interface. + The testing(3) state indicates that no operational packets + can be passed. + + Default: down" + ::= { intfPortEntry 4 } + +intfPortOperatingMode OBJECT-TYPE + SYNTAX TrellixIDSOperatingMode + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "ReadWrite parameter specifies the operating mode for the + Trellix IDS sensor to be used. Different modes supported are + inline-fo-passive(1), non-inline or tap(2), span(3) and + inlne-fc(4), inline-fo-active kit(5 - available on M-series only). + + Default: non-inline" + ::= { intfPortEntry 5 } + +-- Support for intfPortEnableFullDuplex is deprecated in V-series sensors(VmIPS). +intfPortEnableFullDuplex OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Sets interface port to work as a full-duplex one. + Otherwise as half-duplex. + + Default: True" + ::= { intfPortEntry 6 } + +-- Support for intfPortFullDuplexPeer is deprecated in V-series sensors(VmIPS). +intfPortFullDuplexPeer OBJECT-TYPE + SYNTAX Integer32 (1..32) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object returns the intfPortIndex value of the + interface port that is a peer. Used only when operating mode + is inline(1) or monitor-dual-intf(2)." + ::= { intfPortEntry 7 } + +-- Support for intfPortSpeed is deprecated in V-series sensors(VmIPS). +intfPortSpeed OBJECT-TYPE + SYNTAX INTEGER { + other (0), + ten-Mbps (1), + hundred-Mbps (2), + one-Gbps(3), -- renamed from gig-Mbps + ten-Gbps(4), -- support in M-series and R-series only + forty-Gbps(5) -- support in R-series only + } + + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Get current speed/negotiation on the interface." + ::= { intfPortEntry 8 } + +-- Support for intfPortSpeedConfig is deprecated in V-series sensors(VmIPS). +intfPortSpeedConfig OBJECT-TYPE + SYNTAX TrellixPortSpeed -- was TrellixFEType, now deprecated + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Set desired speed/negotiation on the interface. + Default values are as follows: + I-Series - + fixed-hundred-Mbps (infinity/hichborn/2x00(1a-3b) + auto-gig-Mbps on 3000/4010/4000/2x00(4a,4b) + M-Series - + auto-ten-gig-Mbps on palomar/pyramid(1a-4b),auto-gig-Mbps(5a-8b) + Default: see above" + ::= { intfPortEntry 9 } + + +intfPortEnableInternalTap OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Set to TRUE to enable feature. Applies to Fast Ethernet (FE) + ports only (see TrellixIDSPortType). + For non FE ports, set to 'FALSE' . + Setting this to 'TRUE' requires that + is already set to + 'monitor-dual-intf' + Default: True" + + ::= { intfPortEntry 10 } + +intfPortInOutType OBJECT-TYPE + SYNTAX INTEGER { + inside (1), + outside (2), + not-specified (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object reflects the Input or Output labeling + of this interface port. Used only when operating mode + is inline(1) or monitor-dual-intf(2). + + Default: not-specified(3)" + ::= { intfPortEntry 11 } + +-- Definition of intfGEPortSpeedConfig OID stays in the MIB +-- Support for intfGEPortSpeedConfig is deprecated in sensors using new MIB. +-- Support for intfGEPortSpeedConfig is deprecated in M-series sensors and V-series sensors(VmIPS). +intfGEPortSpeedConfig OBJECT-TYPE + SYNTAX TrellixGEType + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Only applicable to gigabit-ethernet ports, to specify + whether auto or 1 Gbps + See TrellixGEType + + Default: 'auto-negotiate'" + ::= { intfPortEntry 12 } + +-- Support for intfFailOpenSwitchStatus is availble in V-series sensors(VmIPS) +-- only when port operting mode is inline-fo-active +intfFailOpenSwitchStatus OBJECT-TYPE + SYNTAX INTEGER { + not-applicable(1), + present(2), + not-present(3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the status of the external optical bypass switch + status. For FE ports, this object will return + not-applicable(1). For GE ports, if external optical bypass + switch is connected to sensor ports, this will return + present(2). Otherwise, it will return not-present(3)." + ::= { intfPortEntry 13 } + +-- Support for intfFailOpenPortStatus is availble in V-series sensors(VmIPS) +-- only when port operting mode is inline-fo-active +intfFailOpenPortStatus OBJECT-TYPE + SYNTAX INTEGER { + not-applicable(1), + inline-fail-open(2), + bypass(3), + tap (4), + absent (5), + unknown (6), + layer2-bypass (7) + + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Returns the packet forwarding status of the sensor ports connected to the optical bypass switch. + If status is inline-fail-open(2), sensor is doing the + forwarding. If status is bypass(3), the bypass switch is + doing the forwarding and sensor will not process any + traffic in this mode. Tap(4), absent(5) , unknown (6) and layer2-bypass(7) + are available only in M-series for non RJ45(captive) ports + when connected to active FO kit and sensor operating mode + is inline-fail-open-active-kit. + tap - operational status(up), kit(present), heart-beat(tap) + absent - operational status(up), kit(absent), hear-beat(none) + unknown - operational status(down), kit(absent), heart-beat(not available)." + ::= { intfPortEntry 14 } + +intfPortEnableAntiSpoofing OBJECT-TYPE + SYNTAX INTEGER { + disable-bothsides-spoof-detect (1), + enable-inside-spoof-detect (2), + enable-outside-spoof-detect (3), + enable-bothsides-spoof-detect (4) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "spoofed packet detect rcvd on the both sides . + + Default: 'disable-bothsides-spoof-detect' (0) " + ::= { intfPortEntry 15 } + +-- unallocated ::= { intfPortEntry 16 } +-- unallocated ::= { intfPortEntry 17 } + +intfPortHostQRActionStatus OBJECT-TYPE + SYNTAX INTEGER { + disabled(0), + quarantine(1), + remediate(2) + } + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "This object depicts the sensor level host quarantine and remediation action status + for the specific interface port. The value 'quarantine' indicates just quarantine the host and + the value 'remediate' indicates both quarantining and remediating the host. + Default: disabled" + ::= { intfPortEntry 18 } + + +intfPortMpeQRActionStatus OBJECT-TYPE + SYNTAX INTEGER { + disabled(0), + mpeNotify(1), + mpeQuarantine(2), + mpeRemediate(3) + } + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "This object depicts the MPE respone based host quarantine and remediation action status for the + specific interface port. The value 'mpeNotify' indicates just informing the MPE server + about the problem host; the value 'mpeQuarantine' indicates first informing the MPE server + about the problem host and then quarantine the host based on the response from the MPE-server + and the MPE based Quarantine and Remediation scope mib object value; and the value 'mpeRemediate' + indicates first informing the MPE server about the problem host and then remediating the host + based on the response from the MPE-server and the MPE based Quarantine and Remediation scope + mib object value. + Default: disabled" + ::= { intfPortEntry 19 } + +intfPortAllowlistACLLookupStatus OBJECT-TYPE + SYNTAX INTEGER { + disabled(0), + enabled(1) + } + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "This object indicates the status of allowlist ACL lookup for this interface port. + Default: disabled" + ::= { intfPortEntry 20 } + +-- intfPortPeerDeviceAdvtStatus support in M-series sensor only +intfPortPeerDeviceAdvtStatus OBJECT-TYPE + SYNTAX INTEGER { + other (0) -- need to provide enum list + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Applicable if sensor port is set to auto-negotiate, else other(0). Specifies the advertised speed-duplex of the peer appliance port connected to this sensor port." + ::= { intfPortEntry 21 } + +-- intfPortIsMcafeeConnector support in M-series sensor only +intfPortIsMcafeeConnector OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "True: connector is not inserted. + True: connector is inserted in port and McAfee certified. + False: connector is inserted and not McAfee certified. " + ::= { intfPortEntry 22 } + +-- intfPortAllowAnyConnector support in M-series sensor only +intfPortAllowAnyConnector OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Permit usage of any connector for port. + False: Restrict usage to McAfee certified connector only. + Default: False" + ::= { intfPortEntry 23 } + +-- intfPortCageType support in M-series and R-series sensor only +intfPortCageType OBJECT-TYPE + SYNTAX INTEGER { + other (0), + rJ-45 (1), + rJ-11 (2), + gBIC (3), + sFP (4), + xFP (5), + sFP-plus (6), -- support in R-series only + qSFP (7), -- support in R-series only + rJ-45-plus (8), -- support in R-series only + sFP-plus-BPFO (9) -- support in R-series only + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Physical connector cage type on sensor chassis panel." + ::= { intfPortEntry 24 } + +-- intfPortGetMediaType support in M-series sensor only +intfPortGetMediaType OBJECT-TYPE + SYNTAX INTEGER { + none (0), + optical (1), + electrical (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Gets the media of the connector present in the port cage. None (0) if cage is empty." + ::= { intfPortEntry 25 } + +-- intfPortSetMediaType support in M-series sensor only +intfPortSetMediaType OBJECT-TYPE + SYNTAX INTEGER { + optical(1), + electrical (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Sets the media of the connector the user desired for the port. + Default: optical" + ::= { intfPortEntry 26 } + +intfPortAdditionalInfo OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing information about the interface. + Typically returns connector specific information. + For V-series sensors(vmips) this object will return monitoring ports label." + ::= { intfPortEntry 27 } + +intfPortMonPortIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve the IPv4 address of the monitoring port. + Default: 0.0.0.0" + ::= { intfPortEntry 28 } + +intfPortMonPortNetMask OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve netmask for the IPv4 address of the monitoring port. + Default: 0.0.0.0" + ::= { intfPortEntry 29 } + +intfPortGatewayIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve the IPv4 address of the gateway. + Default: 0.0.0.0" + ::= { intfPortEntry 30 } + +intfPortNbadConfigStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that flow record generation + to be sent to the NBAD server, is enabled over this monitoring port. + Default: False" + ::= { intfPortEntry 31 } + +intfPortVlanId OBJECT-TYPE + SYNTAX Integer32 (0..2164326399) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object indicates the Vlan ID of the VLAN to which the monitoring + port is connected." + ::= { intfPortEntry 32 } + +intfPortAppIdStatsConfigStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that the appId stats collection is enabled + over this monitoring port. + Default: True" + ::= { intfPortEntry 33 } + +-- intfPortConnectorType support in R-series sensor only +intfPortConnectorType OBJECT-TYPE + SYNTAX INTEGER { + other (0), + qSFP (1), + sFP-plus (2), + sFP-fiber (3), + sFP-copper (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Physical connector type plugged into the port cage." + ::= { intfPortEntry 34 } + +intfPortLinearIndex OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object indicates the Linear Index of the monitoring port. This index is + generated by the sensor appliance using the pair of slot index and the port index values. + The other MIB tables would directly use this linear index, whereever applicable." + ::= { intfPortEntry 35 } + +intfPortFecConfig OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure FEC" + ::= { intfPortEntry 36 } + +intfPortTranceiverSerialNumber OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing information about the interface. + Typically returns transceiver's serial number." + ::= { intfPortEntry 37 } + +-- Support for intfPortGBICHotSwapTime is deprecated in V-series sensors(VmIPS). +intfPortGBICHotSwapTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Indicates time when the front end GBIC for any port was hot swapped last." + ::= { interfacePortGrp 2 } + +--This group contains all MIB objects that specify the configuration of the IntruShield +--response port. +-- +--The object respPortTable within this group suggests that the MIB is designed to support +--response cards that can contain more than one response port. + +responsePortGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 12 } + +respPortTable OBJECT-TYPE + SYNTAX SEQUENCE OF RespPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each response port (indexed via respPortIndex) + on each sensor card (indexed via valid slotIndex). + + This table contains Trellix specific MIB objects. + " + ::= { responsePortGrp 1 } + +respPortEntry OBJECT-TYPE + SYNTAX RespPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each response port within the Trellix IDS sensor card. + Indexed by slotIndex/respPortIndex" + INDEX { slotIndex, + respPortIndex } + ::= { respPortTable 1 } + +RespPortEntry ::= SEQUENCE { + respPortDescr + DisplayString, + respPortType + TrellixIDSPortType, + respPortAdminStatus + INTEGER, + respPortOperStatus + INTEGER, + respPortEnableFullDuplex + TruthValue, + respPortSpeed + TrellixPortSpeed, -- was TrellixFEType, + respPortPktDestination + INTEGER, + respPortMacAddress + MacAddress, + respCUGEPortSpeed + TrellixCUGEType, + respAdditionalInfo + DisplayString +} + +respPortDescr OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing information about the interface. + Returns the string that is printed on the box." + ::= { respPortEntry 1 } + +respPortType OBJECT-TYPE + SYNTAX TrellixIDSPortType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of interface, distinguished according to the + physical/link protocol(s) immediately 'below' the network + layer in the protocol stack. + + See TrellixIDSPortType. + " + ::= { respPortEntry 2 } + +respPortAdminStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The desired state of the interface. + + Default: Up" + ::= { respPortEntry 3 } + +respPortOperStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The current operational state of the interface. + The testing(3) state indicates that no operational packets + can be passed." + ::= { respPortEntry 4 } + +-- Support for respPortEnableFullDuplex is deprecated in V-series sensors(VmIPS). +respPortEnableFullDuplex OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Sets response port to work as a full-duplex one. + otherwise as half-duplex. + If True, respPortFullDuplexPeer must be specified. + + Default: False + " + ::= { respPortEntry 5 } + +-- Support for respPortSpeed is deprecated in V-series sensors(VmIPS). +respPortSpeed OBJECT-TYPE + SYNTAX TrellixPortSpeed + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "See TrellixPortSpeed + + Default: fixed-hundred-Mbps (2)" + ::= { respPortEntry 6 } + +respPortPktDestination OBJECT-TYPE + SYNTAX INTEGER { + switch (1), + router (2) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used when response ports are chosen for + sending response packets. When router mode is chosen, + packets will be sent to router with destination MAC as + defined in intfRespMacAddress. + + Default value is switch (1)." + ::= { respPortEntry 7 } + +respPortMacAddress OBJECT-TYPE + SYNTAX MacAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the macaddress of the router to which the response + packets have to be sent to." + ::= { respPortEntry 8 } + +-- Support for respCUGEPortSpeed is deprecated in V-series sensors(VmIPS). +respCUGEPortSpeed OBJECT-TYPE + SYNTAX TrellixCUGEType + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Only applicable to copper-gigabit-ethernet ports, to specify whether + 10mbps or 100mbps or 1-gbps or auto-neg. See TrellixCUGEType + + Default: auto-negotiate" + ::= { respPortEntry 9 } + + +respAdditionalInfo OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing additional information about the response interface. + This mib object will be available only on V-series sensors." + ::= { respPortEntry 11 } + + +-- respPortPktDestination OBJECT-TYPE +-- +-- Interface Response Table +-- +intfRespTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfRespEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each interface port. The + table describes how responses have to be sent in monitoring + mode." + ::= { responsePortGrp 2 } + +intfRespEntry OBJECT-TYPE + SYNTAX IntfRespEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by slotIndex/intfPortIndex" + INDEX { slotIndex, intfPortIndex } + ::= { intfRespTable 1 } + +IntfRespEntry ::= SEQUENCE { + intfRespType + INTEGER, + intfRespPortNo + INTEGER +} + +intfRespType OBJECT-TYPE + SYNTAX INTEGER { + responsePort (1), + inline (2) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Setting this object to responsePort (2) causes responses + to be sent via the response port. The response port no that + needs to be used is specified with intfRespPortNo object. + + Setting this object to inline (3) causes responses to be + sent inline. Note that in monitoring mode, responses can + only be sent inline when the monitoring port is in + half-duplex mode. + + Default action will be responsePort (1)." + ::= { intfRespEntry 1 } + +intfRespPortNo OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the response port number that needs to be used + for this monitoring port. The response ports are configured + by respPortTable." + ::= { intfRespEntry 2 } + + +-- +-- DOS Configuration Group +-- +dosConfigGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 14 } + +dosLearningModeAction OBJECT-TYPE + SYNTAX INTEGER { + forceDetection (1), + learning (2), + reloadProfile (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to switch the mode to DOS learning or + force detection mode . + + The saved profile can be reloaded by setting the object to + reloadProfile(3). + + When set to forceDetection (1), user must be warned as follows, + Warning: You are about to force the sensor into Detection Mode + before the required 48-hour learning period. + The traffic profile learned by the sensor may not be + adequate for DOS attack detection and prevention. + It is desirable to place the sensor in learning mode + while receiving normal traffic for at least 48 hours. + " + ::= {dosConfigGrp 1 } + +-- +-- DOS Profile Table +-- +-- This table will only support GET requests +-- +dosProfileTable OBJECT-TYPE + SYNTAX SEQUENCE OF DosProfileEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table defines profile data for each DOS VPT entry." + ::= { dosConfigGrp 2 } + +dosProfileEntry OBJECT-TYPE + SYNTAX DosProfileEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by VIDS ID and Profile ID." + INDEX { dosProfileVidsId, dosProfileId } + ::= { dosProfileTable 1 } + +DosProfileEntry ::= SEQUENCE { + dosProfileVidsId + Unsigned32, + dosProfileId + Unsigned32, + dosProfileStatus + INTEGER, + dosProfileLearningTime + Unsigned32 +} + +dosProfileVidsId OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The virtual admin domain identifier." + ::= { dosProfileEntry 1 } + +dosProfileId OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The identifier of the profile." + ::= { dosProfileEntry 2 } + +dosProfileStatus OBJECT-TYPE + SYNTAX INTEGER { + learning(1), + detection(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The status of the profile entry." + ::= { dosProfileEntry 3 } + +dosProfileLearningTime OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time (in hundredths of a second) since learning was started for the profile." + ::= { dosProfileEntry 4 } + + +-- +-- DOS Profile Bulk Table +-- +dosProfileBulkTable OBJECT-TYPE + SYNTAX SEQUENCE OF DosProfileBulkEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table defines profile data for each DOS VPT entry. This table + is primarily used to get the GETNEXT and GETBULK." + ::= { dosConfigGrp 3 } + +dosProfileBulkEntry OBJECT-TYPE + SYNTAX DosProfileBulkEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by profile index." + INDEX { dosProfileBulkIndex } + ::= { dosProfileBulkTable 1 } + +DosProfileBulkEntry ::= SEQUENCE { + dosProfileBulkIndex + INTEGER, + dosProfileBulkVidsId + Unsigned32, + dosProfileBulkId + Unsigned32, + dosProfileBulkStatus + INTEGER, + dosProfileBulkLearningTime + Unsigned32 +} + +dosProfileBulkIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The index of the profile table." + ::= { dosProfileBulkEntry 1 } + +dosProfileBulkVidsId OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The virtual admin domain identifier." + ::= { dosProfileBulkEntry 2 } + +dosProfileBulkId OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The identifier of the profile." + ::= { dosProfileBulkEntry 3 } + +dosProfileBulkStatus OBJECT-TYPE + SYNTAX INTEGER { + learning(1), + detection(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The status of the profile entry." + ::= { dosProfileBulkEntry 4 } + +dosProfileBulkLearningTime OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time (in hundredths of a second) since learning was started for the profile." + ::= { dosProfileBulkEntry 5 } + + +-- +-- DOS ShortTerm LongTerm Profile Table +-- This table will onl support GET requests +-- +dosProfileShortAndLongTermTable OBJECT-TYPE + SYNTAX SEQUENCE OF DosProfileShortAndLongTermEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table defines short term and long term profile data per DOS measure per VPT. Each VPT is indexed by the global VIDSID, global NIId." + ::= { dosConfigGrp 4 } + +dosProfileShortAndLongTermEntry OBJECT-TYPE + SYNTAX DosProfileShortAndLongTermEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by global VIDSIndex, global NIIndex & measureId." + INDEX { dosProfileShortAndLongTermVIDSIndex, dosProfileShortAndLongTermNIIndex, dosProfileShortAndLongTermMeasureIndex } + ::= { dosProfileShortAndLongTermTable 1 } + +DosProfileShortAndLongTermEntry ::= SEQUENCE { + dosProfileShortAndLongTermVIDSIndex + Unsigned32, + dosProfileShortAndLongTermNIIndex + Unsigned32, + dosProfileShortAndLongTermMeasureIndex + INTEGER, + dosProfileShortAndLongTermBinCount + INTEGER, + dosProfileShortTermContent + OCTET STRING, + dosProfileLongTermContent + OCTET STRING +} + +dosProfileShortAndLongTermVIDSIndex OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The VIDS id index." + ::= { dosProfileShortAndLongTermEntry 1 } + +dosProfileShortAndLongTermNIIndex OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The NI id index." + ::= { dosProfileShortAndLongTermEntry 2 } + +dosProfileShortAndLongTermMeasureIndex OBJECT-TYPE + SYNTAX INTEGER (1..10) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The measure id index." + ::= { dosProfileShortAndLongTermEntry 3 } + +dosProfileShortAndLongTermBinCount OBJECT-TYPE + SYNTAX INTEGER (1..32) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The count indicates the number of short or long term values to be interpreted in their respective content objects. Max value is 32. If the value is set to 10, then only the first 80 bytes in each of the strings have valid data. Note: that 256 octet strings can accomodate a max of 32 values (3 octects each) " + ::= { dosProfileShortAndLongTermEntry 4 } + +dosProfileShortTermContent OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This specifies the short term profile data. + Default: All 256 octets filled with '0'." + ::= { dosProfileShortAndLongTermEntry 5 } + +dosProfileLongTermContent OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This specifies the long term profile data. + Default: All 256 octets filled with '0'." + ::= { dosProfileShortAndLongTermEntry 6 } + +enableDosPktLogging OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to turn on/off the logging od DOS packets. Default: disable (2)." + ::= { dosConfigGrp 6 } + +-- +-- Timed Drop DOS Pkt Table +-- This table does not support GET NEXT requests +-- +timedDosPktDropTable OBJECT-TYPE + SYNTAX SEQUENCE OF TimedDosPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table defines action and duration to enable/disable/extend the duration for which DOS pkts are to be drpped. Also provides the absolute time remaining till when it the sensor will drop these packets. " + ::= { dosConfigGrp 7 } + +timedDosPktDropEntry OBJECT-TYPE + SYNTAX TimedDosPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by VIDS ID NI ID and MeasureId." + INDEX { timedDosPktDropVidsIdIndex, timedDosPktDropNiIdIndex, timedDosPktDropMsrIdIndex } + ::= { timedDosPktDropTable 1 } + +TimedDosPktDropEntry ::= SEQUENCE { + timedDosPktDropVidsIdIndex + Unsigned32, + timedDosPktDropNiIdIndex + Unsigned32, + timedDosPktDropMsrIdIndex + INTEGER, + timedDosPktDropAction + INTEGER, + timedDosPktDropDuration + Unsigned32, + timedDosPktDropEndTime + Unsigned32 +} + +timedDosPktDropVidsIdIndex OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The Vids identifier." + ::= { timedDosPktDropEntry 1 } + +timedDosPktDropNiIdIndex OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The NI identifier." + ::= { timedDosPktDropEntry 2 } + +timedDosPktDropMsrIdIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The MeasureId identifier." + ::= { timedDosPktDropEntry 3 } + +timedDosPktDropAction OBJECT-TYPE + SYNTAX INTEGER { + enable(1), + disable(2), + extend(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The action tells the bulkTimedDosPktDropTable to add(enable the duration for), delete(disable), modify(extend the duration for) an entry." + + ::= { timedDosPktDropEntry 4 } + +timedDosPktDropDuration OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The duration for which the DOS pkt drop has been enabled or extended." + ::= { timedDosPktDropEntry 5 } + +-- +timedDosPktDropEndTime OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The absolute end time when the duration for intended action expires." + ::= { timedDosPktDropEntry 6 } + +-- +-- Bulk Timed Drop DOS Pkt Table +-- +bulkTimedDosPktDropTable OBJECT-TYPE + SYNTAX SEQUENCE OF BulkTimedDosPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table lists entries indexed by the bulkTimedDosPktDropIndex, each returns the corresponding VidsId, NiId, MeasureId and the EndTime value." + ::= { dosConfigGrp 8 } + +bulkTimedDosPktDropEntry OBJECT-TYPE + SYNTAX BulkTimedDosPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by bulk index." + INDEX { bulkTimedDosPktDropIndex } + ::= { bulkTimedDosPktDropTable 1 } + +BulkTimedDosPktDropEntry ::= SEQUENCE { + bulkTimedDosPktDropIndex + INTEGER, + bulkTimedDosPktDropVidsId + Unsigned32, + bulkTimedDosPktDropNiId + Unsigned32, + bulkTimedDosPktDropMsrId + INTEGER, + bulkTimedDosPktDropEndTime + Unsigned32 +} + +bulkTimedDosPktDropIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The bulk index ." + ::= { bulkTimedDosPktDropEntry 1 } + +bulkTimedDosPktDropVidsId OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The Vids identifier." + ::= { bulkTimedDosPktDropEntry 2 } + +bulkTimedDosPktDropNiId OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The NI identifier." + ::= { bulkTimedDosPktDropEntry 3 } + +bulkTimedDosPktDropMsrId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The MeasureId identifier." + ::= { bulkTimedDosPktDropEntry 4 } + +bulkTimedDosPktDropEndTime OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The absolute end time when the duration for intended action expires." + ::= { bulkTimedDosPktDropEntry 5 } + +internalVLANId OBJECT-TYPE + SYNTAX INTEGER (0..4095) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object identifies the VLAN ID to be used by the sensor to tag + any untagged pkts on Rx, and untag them on Tx. It must not match any + other VLAN ID assigned for the customer network. Default: 4095 + " + ::= { dosConfigGrp 9 } + +--This group contians MIB objects for configuration of packet logging. +--The identifies the IP address of the server +--receiving packets that the Sensor logs when detecting attacks. +--The identifies the TCP port on this server +--that receives the logged packets. + +pktLogGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 15 } + +pktLogServerIPAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP Address" + ::= { pktLogGrp 1 } + +pktLogServerPort OBJECT-TYPE + SYNTAX Integer32 (1..10000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "TCP Port on which the pkt log server can receive packet + logs from the IntruShield IDS." + ::= { pktLogGrp 2 } + +pktLogMaxPacketsPerFlow OBJECT-TYPE + SYNTAX Integer32 (0..64000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Number of packets per flow which need to be logged, + 0 means log entire flow. + Default: 1000" + ::= { pktLogGrp 3 } + +pktLogEncryptionEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable encryption of packet log channel. + RC4 will be used for encryption. + Default: enable (1)" + ::= { pktLogGrp 4 } + +pktLogServerIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPv6 Address of the ISM to which the logs need to be delivered. + ISM should set either the Ipv4 or the Ipv6 address." + ::= { pktLogGrp 5 } + +--This group contians MIB objects for configuration of alert throttling. + +pktAlertThrottleGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 16 } + +pktAlertThrottleGlobalThreshold OBJECT-TYPE + SYNTAX INTEGER (1..32) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Once this threshold is exceeded, sensor will only send one + summary alert for all addresses (srcip's and destip's) that + match the attackid/vidsid. + + Default: 10" + ::= { pktAlertThrottleGrp 1 } + +pktAlertThrottleInterval OBJECT-TYPE + SYNTAX INTEGER (1..3600) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If the number of alerts exceeds the amount configured + in pktAlertThrottleThreshold or + pktAlertThrottleGlobalThreshold in pktAlertThrottleInterval + seconds, alerts will be throttled. + + Units are in seconds. + + Default: 120 seconds" + ::= { pktAlertThrottleGrp 2 } + +pktAlertThrottleAction OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable and disable alert + throttling. + + Default: enable(1)" + ::= { pktAlertThrottleGrp 3 } + +pktAlertThrottleThreshold OBJECT-TYPE + SYNTAX INTEGER (1..25) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the number of alerts that + need to be sent before sensor starts to throttle the alerts. + For example if this value is 10, it will send the first 10 + alerts with the following key: attackid/vidsid/srcip/destip. + This parameters will use the pktAlertThrottleInterval as the + interval. + + Default: 5" + ::= { pktAlertThrottleGrp 4 } + +pktAlertCorrelationTime OBJECT-TYPE + SYNTAX INTEGER (1..20) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the time that the sensor will + correlate multiple signatures for a single attack and only send + the signature with the lowest benign trigger probability. + + Default: 5 secs" + ::= { pktAlertThrottleGrp 5 } + + +sslConfigGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 17 } + +sslSessionCacheLifetime OBJECT-TYPE + SYNTAX INTEGER (0..4294967296) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Duration in minutes for which the SSL Session is kept alive, inspite of no + SSL data transfer between the client/server . + Default: 5" + ::= { sslConfigGrp 1 } + +sslSupportAction OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable support for specific ssl flow count (non 0) + and disable SSL (0) on sensor. Sensor reboot is typically required to activate + support of requested flow count. + EMS must check for max requested ssl flows based on product type: + I4000: 100K, I2600: 25K , I1200: not supported. + Default: not supported (0)" + ::= { sslConfigGrp 2 } + +sslSupportStatus OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object can be used to get SSL support status on sensor. It will show 0 if disabled, or a non 0 value indicating the ssl flow count currently supported. User must reboot sensor to ensure that requested flow count is actually supported by sensor. + EMS must check for max supported ssl flows based on product type: + I4000: 100K, I2600: 25K , I1200: not supported. + Default: not supported (0)" + ::= { sslConfigGrp 3 } + +sslSessionRemoveCerts OBJECT-TYPE + SYNTAX INTEGER { + reset (0) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Delete all ssl certs, thereby terminating decryption of related ssl traffic, but leave ssl support enabled within sensor." + ::= { sslConfigGrp 4 } + +sslPktLoggingEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies if sensor should log decrypted SSL packets or not. + + Default: 2, disabled" + ::= { sslConfigGrp 5 } + +sslModesofOperation OBJECT-TYPE + SYNTAX INTEGER{ + disable (0), + inbound-known-key-only(1), + outbound-proxy-only (2), + inbound-proxy-only (3), + inbound-and-outbound-proxy (4), + inbound-known-key-and-outbound-proxy (5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Determines the SSL decryption direction and method. + disable(0) - No SSL decryption performed for traffic. + inbound known key only(1) - Only Inbound SSL decryption using RSA key exchange. + outbound proxy only(2) - Only Outbound SSL using MITM proxy + inbound proxy only(3) - Only Inbound SSL using MITM Proxy + inbound and outbound proxy(4) - Inbound and Outbound proxy using MITM Proxy + inbound known key and outbound proxy(5) - Inbound using RSA key exchange and Outbound using MITM Proxy + Default: disable (0)" + ::= { sslConfigGrp 6 } + +sslSessionCacheLifetimeOutbound OBJECT-TYPE + SYNTAX INTEGER (0..4294967296) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Duration in minutes for which the SSL Session is kept alive, inspite of no + SSL data transfer between the client/server. This setting will be applied for + SSL traffic in Outbound direction. + This is not applicable on I-series and M-series + Default: 5" + ::= { sslConfigGrp 7 } + +sslPktLoggingOutboundEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies if sensor should log decrypted SSL packets or not on the Outbound direction. + This is not applicable on I-series and M-series + Default: 2, disabled" + ::= { sslConfigGrp 8 } + +sslProxyOutboundUnknownServerCertificate OBJECT-TYPE + SYNTAX INTEGER { + ignore (1), + block (2), + decrypt (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object will be used to configure the action that the sensor will need to + take when the sensor is unable to verify the validaity of the certificate. + This is not applicable on I-series and M-series + Default: decrypt(3)" + ::= { sslConfigGrp 9 } + + +sslProxyOutboundUntrustedServerCertficate OBJECT-TYPE + SYNTAX INTEGER { + ignore (1), + block (2), + decrypt (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object will be used to configure the action that the sensor will need to take + when the sensor receives an untrusted certificate from the external server. This could + be either due to certificate not being trusted by any root CA, expired, revoked etc. + This is not applicable on I-series and M-series + Default: decrypt (3)" + ::= { sslConfigGrp 10 } + +sslProxyOutboundUnsupportedCipherSuite OBJECT-TYPE + SYNTAX INTEGER { + ignore (1), + block (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object will be used to configure the action that the sensor will need to take when an + internal client sends a list of ciphers and the sensor does not support any of the cipher suite + This is not applicable on I-series and M-series + Default: ignore (1)" + ::= { sslConfigGrp 11 } + +sslProxyInboundUnsupportedCipherSuite OBJECT-TYPE + SYNTAX INTEGER { + ignore (1), + block (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This is reserved for future used. This object is not currently implemented. + This object will be used to configure the action that the sensor will need to take when an + external client sends a list of ciphers and the sensor does not support any of the cipher suite + This is not applicable on I-series and M-series + Default: ignore (1)" + ::= { sslConfigGrp 12 } + +sslProxyOutboundUnsupportedServerCertificate OBJECT-TYPE + SYNTAX INTEGER { + ignore (1), + block (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object will be used to configure the action that the sensor will need to take + when the sensor encounters an unsupported server certificate in an outbound direction. + This is not applicable on I-series and M-series + Default: ignore (1)" + ::= { sslConfigGrp 13 } + +sslProxyInboundUnsupportedServerCertificate OBJECT-TYPE + SYNTAX INTEGER { + ignore (1), + block (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This is reserved for future used. This object is not currently implemented. + This object will be used to configure the action that the sensor will need to take + when the sensor encounters an unsupported server certificate in an inbound direction. + This is not applicable on I-series and M-series + Default: ignore (1)" + ::= { sslConfigGrp 14 } + +maxSslFlowSupportedInSslDisableMode OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the max number of SSL flows supported when SSL is disabled on the sensor." + ::= { sslConfigGrp 15 } + +maxFlowSupportedInSslDisableMode OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the max number of flows supported by sensor when SSL is disabled on the sensor." + ::= { sslConfigGrp 16 } + +maxSslFlowSupportedInSslInboundLegacyMode OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the max number of SSL flows supported when SSL is enabled in inbound legacy mode." + ::= { sslConfigGrp 17 } + +maxFlowSupportedInSslInboundLegacyMode OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the max number of flows supported by sensor when SSL is enabled in inbound legacy mode" + ::= { sslConfigGrp 18 } + +maxSslFlowSupportedInSslOutboundMode OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the max number of SSL flows supported when SSL is enabled in outbound mode." + ::= { sslConfigGrp 19 } + +maxFlowSupportedInSslOutboundMode OBJECT-TYPE + SYNTAX INTEGER (0..100000) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the max number of flows supported by sensor when SSL is enabled in outbound mode" + ::= { sslConfigGrp 20 } + +sslModesofOperationStatus OBJECT-TYPE + SYNTAX INTEGER{ + disable (0), + inbound-known-key-only(1), + outbound-proxy-only (2), + inbound-proxy-only (3), + inbound-and-outbound-proxy (4), + inbound-known-key-and-outbound-proxy (5) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Provides current SSL decryption method used in Sensor for inbound traffic. + disable(0) - No SSL decryption performed for traffic. + inbound known key only(1) - Only Inbound SSL decryption using RSA key exchange. + outbound proxy only(2) - Only Outbound SSL using MITM proxy + inbound proxy only(3) - Only Inbound SSL using MITM Proxy + inbound and outbound proxy(4) - Inbound and Outbound proxy using MITM Proxy + inbound known key and outbound proxy(5) - Inbound using RSA key exchange and Outbound using MITM Proxy + Default: disable (0)" + ::= { sslConfigGrp 21 } + +sslProxyOutboundUnknownURLCategory OBJECT-TYPE + SYNTAX INTEGER { + ignore (1), + decrypt (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object will be used to configure the action that the sensor will need to take + when the sensor identifies an unknown url category in the ssl packet. This configuration + is only supported in case of outbound ssl. + This is not applicable on I-series and M-series + Default: ignore (1)" + ::= { sslConfigGrp 22 } + +sslShKeyDecryptEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies if sensor should decrypt using shared keys from SSL probes. + Default: 2, disabled" + ::= { sslConfigGrp 23 } + +--- +--- +--- + + +l2ConfigGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 18 } + +l2ModeEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This specifies if sensor is configured to detect failure and go into L2 mode on exceeding cfg threshold within cfg duration. + + Default: 2, disabled" + ::= { l2ConfigGrp 1 } + +l2ModeStatus OBJECT-TYPE + SYNTAX INTEGER { + layer2Mode(1), + ipsMode(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object identifies the mode the sensor is currently in." + + ::= { l2ConfigGrp 2 } + +l2ModeCfgDuration OBJECT-TYPE + SYNTAX INTEGER (1..60) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the time duration input criteria for enabling the sensor in layer2 mode. + + Default: 10 mins" + ::= { l2ConfigGrp 3 } + +l2ModeCfgThreshold OBJECT-TYPE + SYNTAX INTEGER (1..10) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the event frequency input criteria for enabling the sensor in layer2 mode. + + Default: 1" + ::= { l2ConfigGrp 4 } + +l2ModeOccCount OBJECT-TYPE + SYNTAX INTEGER (0..10) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object identifies the frequency of event occurence when ensor was last enabled in layer2 mode. + + " + ::= { l2ConfigGrp 5 } + +l2ModeReason OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..127)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object contains reason for sensor to enter into Layer-2 mode." + ::= { l2ConfigGrp 6 } + + +-- acl Logging support on the Sensor + +aclLogAlertGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 19 } + +aclAlertLogging OBJECT-TYPE + SYNTAX INTEGER { + g-enable-dropped (1), + g-enable-allowed (2), + g-enable-all (3), + enable-per-acl (4), + disable (5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies various ways to enable ACL Alert logging or disable it altogether. + This is applicable on a sensor wide basis for all ports in inline mode. + Default: disable (5)" + ::= { aclLogAlertGrp 1 } + +aclAlertThrottleMaxIpPair OBJECT-TYPE + SYNTAX INTEGER (1..32) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Once this threshold is exceeded, sensor will only send one + summary acl alert for all addresses (srcip's and destip's) that + match the aclid/vidsid. + + Default: 10" + ::= { aclLogAlertGrp 2 } + +aclAlertThrottleInterval OBJECT-TYPE + SYNTAX INTEGER (1..3600) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If the number of acl alerts exceeds the amount configured + in aclAlertThrottleThreshold in aclAlertThrottleInterval + seconds, alerts will be throttled. + + Units are in seconds. + + Default: 120 seconds" + ::= { aclLogAlertGrp 3 } + + +aclAlertThrottleAction OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable and disable acl alert + throttling. + + Default: enable(1)" + ::= { aclLogAlertGrp 4 } + +aclAlertThrottleThreshold OBJECT-TYPE + SYNTAX INTEGER (1..25) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the number of alerts that + need to be sent before sensor starts to throttle the alerts. + For example if this value is 10, it will send the first 10 + alerts with the following key: aclid/vidsid/srcip/destip. + This parameters will use the aclAlertThrottleInterval as the + interval. + + Default: 5" + ::= { aclLogAlertGrp 5 } + +aclAlertDirectToSyslog OBJECT-TYPE + SYNTAX INTEGER { + sendViaNSM (1), + sendDirect (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable sending acl logs directly to syslog viewer instead of sending it via NSM. + Default: sendViaNSM (1)" + ::= { aclLogAlertGrp 6 } + +--User authentication using TACACS+ + +tacacsPlusAuthGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 20 } + +enableTacacsPlusAuth OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable or disable user authentication & accounting using TACACS+. + Default: disable (2)" + ::= { tacacsPlusAuthGrp 1} + +enableTacacsPlusTrafficEncr OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable or disable encryption of TACACS+ traffic. + Default: disable (2)" + ::= { tacacsPlusAuthGrp 2} + +tacacsPlusEncrSecret OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..64)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the secret to be used in generating the encrypted TACACS+ traffic" + ::= { tacacsPlusAuthGrp 3} + + +tacacsPlusServerIPTable OBJECT-TYPE + SYNTAX SEQUENCE OF TacacsPlusServerIPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table contains entries that specifiy the IP addresses of the TACACS+ servers" + ::= { tacacsPlusAuthGrp 4} + +tacacsPlusServerIPEntry OBJECT-TYPE + SYNTAX TacacsPlusServerIPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table entry specifies the IP address of the TACACS+ server" + INDEX { tacIndex } + ::= { tacacsPlusServerIPTable 1 } + + +TacacsPlusServerIPEntry ::= SEQUENCE { + tacIndex + INTEGER, + tacacsPlusServerIPAddr + IpAddress + } + +tacIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Fixed index for the four TACACS+ Server entries. Valid values are [1,2,3,4] only." + ::= { tacacsPlusServerIPEntry 1 } + +tacacsPlusServerIPAddr OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the IP Address of the TACACS+ server" + ::= { tacacsPlusServerIPEntry 2 } + +enableTacacsPlusAuthorization OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "To enable TACACS Plus authorization" + ::= { tacacsPlusAuthGrp 5 } + +-- ipV6 support on sensor + +ipV6ConfigGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 21 } + +ipV6TrafficHandling OBJECT-TYPE + SYNTAX INTEGER { + dont-parse-block-inline (1), + dont-parse-allow-inline (2), + parse-and-detect-attacks (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to specify how the IPv6 traffic is handled on all ports of a sensor. + dont-parse-block-inline - Traffic will not be subjected to IPS/IDS. On Inline ports, traffic will be blocked. + dont-parse-allow-inline - Traffic will not be subjected to IPS/IDS. On Inline ports , traffic wll be allowed to go through the sensor. + parse-and-detect-attacks - Parse and detect attacks in IPv6 traffic and pass the traffic on inline ports + Default: dont-parse-allow-inline(2)" + ::= { ipV6ConfigGrp 2} + +-- Host Quarantine Config Group +-- +hostQGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 22 } + +-- +-- Host Quarantine Config Table +-- +-- This group conatins all MIB objects that specify the configuration for +-- reconfiguring the hostQ. +-- +hostQConfigGrp OBJECT IDENTIFIER ::= { hostQGrp 1 } + +hostQFilterTimeOut OBJECT-TYPE + SYNTAX INTEGER (5..60) + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "The number of minutes for which this entry should be in + affect. + + Default: 5 minutes" + ::= { hostQConfigGrp 1 } + +hostQDeleteAllFilters OBJECT-TYPE + SYNTAX INTEGER { + not-applicable(0), + true(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If set to not-applicable(0), applied filters are not + deleted. If set to true (1) all filters are deleted. + + Default: not-applicable (0)" + ::= { hostQConfigGrp 2 } + +-- +-- Host Quarantine Bulk IPV4 Filter table +-- +-- This group defines filter entries that have been applied on the sensor in +-- Inline mode. This table only supports GET-NEXT operations. All entries are +-- read-only. The table will have a maximum of 1000 entries. +-- +hostQBulkFilterV4Table OBJECT-TYPE + SYNTAX SEQUENCE OF HostQBulkFilterV4Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for filters that are applied on the \ + sensor in Inline mode. This table supports only GET-NEXT operations" + ::= { hostQGrp 2 } + +hostQBulkFilterV4Entry OBJECT-TYPE + SYNTAX HostQBulkFilterV4Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by sequence number." + INDEX { hostQBulkFilterIndexV4 } + ::= { hostQBulkFilterV4Table 1 } + +HostQBulkFilterV4Entry ::= SEQUENCE { + hostQBulkFilterIndexV4 + INTEGER, + hostQBulkFilterSrcIPAddrV4 + IpAddress, + hostQBulkFilterVidsIdV4 + INTEGER, + hostQBulkFilterAttackIdV4 + INTEGER, + hostQBulkFilterEndTimeV4 + Unsigned32, + hostQBulkFilterQRStatusV4 + INTEGER, + hostQBulkFilterMPEReplyMsgV4 + INTEGER, + hostQBulkFilterMonPortIdV4 + TrellixPortLinearIndex, + hostQBulkFilterEZIdV4 + INTEGER +} + +hostQBulkFilterIndexV4 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Index which uniquely identifies the V4 filter rule" + ::= { hostQBulkFilterV4Entry 1 } + +hostQBulkFilterSrcIPAddrV4 OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Source IPV4 Address." + ::= { hostQBulkFilterV4Entry 2 } + +hostQBulkFilterVidsIdV4 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the vids id for which this filter + was applied." + ::= { hostQBulkFilterV4Entry 3 } + +hostQBulkFilterAttackIdV4 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the attack id for which this filter + was applied." + ::= { hostQBulkFilterV4Entry 4 } + +hostQBulkFilterEndTimeV4 OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the filter expiry time in UTC format " + ::= { hostQBulkFilterV4Entry 5 } + + +hostQBulkFilterQRStatusV4 OBJECT-TYPE + SYNTAX INTEGER { + hostQuarantined-local(1), + hostUnderRemediation-local(2), + hostQuarantined-mpe(4), + hostQuarantined-both(5), + hostUnderRemediation-local-hostQuarantined-mpe(6), + hostUnderRemediation-mpe(8), + hostQuarantined-local-hostUnderRemediation-mpe(9), + hostUnderRemediation-both(10) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the host quarantine and remediation action status." + ::= { hostQBulkFilterV4Entry 6 } + +hostQBulkFilterMPEReplyMsgV4 OBJECT-TYPE + SYNTAX INTEGER + { + notApplicable(0), + managedHost(1), + unmanagedHost(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the message returned by the MPE server." + ::= { hostQBulkFilterV4Entry 7 } + +hostQBulkFilterMonPortIdV4 OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the monitoring linear port index on which the attack was detected for + the quarantined host." + ::= { hostQBulkFilterV4Entry 8 } + + +hostQBulkFilterEZIdV4 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the applied NAZ Id for the quarantined host." + ::= { hostQBulkFilterV4Entry 9 } + +-- +-- Host Quarantine Bulk IPV6 Filter table +-- +-- This group defines filter entries that have been applied on the sensor in +-- Inline mode. This table only supports GET-NEXT operations. All entries are +-- read-only. The table will have a maximum of 1000 entries. +-- + +hostQBulkFilterV6Table OBJECT-TYPE + SYNTAX SEQUENCE OF HostQBulkFilterV6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for IPv6 filters that are applied on the + sensor in Inline mode." + ::= { hostQGrp 3 } + +hostQBulkFilterV6Entry OBJECT-TYPE + SYNTAX HostQBulkFilterV6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by sequence number." + INDEX { hostQBulkFilterIndexV6 } + ::= { hostQBulkFilterV6Table 1 } + +HostQBulkFilterV6Entry ::= SEQUENCE { + hostQBulkFilterIndexV6 + INTEGER, + hostQBulkFilterSrcIPAddrV6 + Ipv6Address, + hostQBulkFilterVidsIdV6 + INTEGER, + hostQBulkFilterAttackIdV6 + INTEGER, + hostQBulkFilterEndTimeV6 + Unsigned32, + hostQBulkFilterQRStatusV6 + INTEGER, + hostQBulkFilterMPEReplyMsgV6 + INTEGER, + hostQBulkFilterMonPortIdV6 + TrellixPortLinearIndex +} + +hostQBulkFilterIndexV6 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Index which uniquely identifies the IPv6 filter rule." + ::= { hostQBulkFilterV6Entry 1 } + +hostQBulkFilterSrcIPAddrV6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Source IPV6 Address." + ::= { hostQBulkFilterV6Entry 2 } + +hostQBulkFilterVidsIdV6 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the vids id for which this filter + was applied." + ::= { hostQBulkFilterV6Entry 3 } + +hostQBulkFilterAttackIdV6 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the attack id for which this filter + was applied." + ::= { hostQBulkFilterV6Entry 4 } + +hostQBulkFilterEndTimeV6 OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the filter expiry time in UTC format." + ::= { hostQBulkFilterV6Entry 5 } + +hostQBulkFilterQRStatusV6 OBJECT-TYPE + SYNTAX INTEGER { + hostQuarantined-local(1), + hostUnderRemediation-local(2), + hostQuarantined-mpe(4), + hostQuarantined-both(5), + hostUnderRemediation-local-hostQuarantined-mpe(6), + hostUnderRemediation-mpe(8), + hostQuarantined-local-hostUnderRemediation-mpe(9), + hostUnderRemediation-both(10) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the host quarantine and remediation action status." + ::= { hostQBulkFilterV6Entry 6 } + +hostQBulkFilterMPEReplyMsgV6 OBJECT-TYPE + SYNTAX INTEGER + { + notApplicable(0), + managedHost(1), + unmanagedHost(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the message returned by the MPE server." + ::= { hostQBulkFilterV6Entry 7 } + +hostQBulkFilterMonPortIdV6 OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the monitoring linear port index on which the attack was detected for + the quarantined Ipv6 host." + ::= { hostQBulkFilterV6Entry 8 } + +-- +-- Host Quarantine Never Deny V4 Table +-- +hostQNeverDenyV4Table OBJECT-TYPE + SYNTAX SEQUENCE OF HostQNeverDenyV4Entry + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "Table defines ipaddresses from which traffic is never + blocked. Typically user will add all the critical network + elements like routers, servers, etc." + ::= { hostQGrp 4 } + +hostQNeverDenyV4Entry OBJECT-TYPE + SYNTAX HostQNeverDenyV4Entry + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "Indexed by hostQNeverDenyIpAddress. Supports up to 100 entries." + INDEX {hostQNeverDenyIpAddressV4 } + ::= { hostQNeverDenyV4Table 1 } + +HostQNeverDenyV4Entry ::= SEQUENCE { + hostQNeverDenyIpAddressV4 + IpAddress, + hostQNeverDenyActionV4 + RowStatus +} + +hostQNeverDenyIpAddressV4 OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "The ipV4 address from which traffic will never be blocked." + ::= { hostQNeverDenyV4Entry 1 } + +hostQNeverDenyActionV4 OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS obsolete + DESCRIPTION + "This object is to user to add and delete rows in to the + table." + ::= { hostQNeverDenyV4Entry 2 } + +-- +-- Host Quarantine Never Deny V6 Table +-- +hostQNeverDenyV6Table OBJECT-TYPE + SYNTAX SEQUENCE OF HostQNeverDenyV6Entry + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "Table defines ipaddresses from which traffic is never + blocked. Typically user will add all the critical network + elements like routers, servers, etc." + ::= { hostQGrp 5 } + +hostQNeverDenyV6Entry OBJECT-TYPE + SYNTAX HostQNeverDenyV6Entry + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "Indexed by hostQNeverDenyIpAddress. Supports up to 100 entries." + INDEX {hostQNeverDenyIpAddressV6 } + ::= { hostQNeverDenyV6Table 1 } + +HostQNeverDenyV6Entry ::= SEQUENCE { + hostQNeverDenyIpAddressV6 + Ipv6Address, + hostQNeverDenyActionV6 + RowStatus +} + +hostQNeverDenyIpAddressV6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "The ipV6 address from which traffic will never be blocked." + ::= { hostQNeverDenyV6Entry 1 } + +hostQNeverDenyActionV6 OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS obsolete + DESCRIPTION + "This object is to user to add and delete rows in to the + table." + ::= { hostQNeverDenyV6Entry 2 } + + +-- +-- Host Quarantine User Define V4 Filter Table (does not support GET-NEXT operations) +-- + +hostQUserDefFilterV4Table OBJECT-TYPE + SYNTAX SEQUENCE OF HostQUserDefFilterV4Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table is used to add/delete/extend IPv4 filters on the sensor" + ::= { hostQGrp 6 } + +hostQUserDefFilterV4Entry OBJECT-TYPE + SYNTAX HostQUserDefFilterV4Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + INDEX { hostQUserDefFilterSrcIpV4, hostQUserDefFilterVidsIdV4, hostQUserDefFilterAttackIdV4 } + ::= { hostQUserDefFilterV4Table 1 } + +HostQUserDefFilterV4Entry ::= SEQUENCE { + hostQUserDefFilterSrcIpV4 + IpAddress, + hostQUserDefFilterVidsIdV4 + INTEGER, + hostQUserDefFilterAttackIdV4 + INTEGER, + hostQUserDefFilterDurationV4 + Unsigned32, + hostQUserDefFilterActionV4 + INTEGER, + hostQUserDefFilterRemediationV4 + TruthValue +} + +hostQUserDefFilterSrcIpV4 OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Source IPV4 address." + ::= { hostQUserDefFilterV4Entry 1 } + +hostQUserDefFilterVidsIdV4 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Vids ID." + ::= { hostQUserDefFilterV4Entry 2 } + +hostQUserDefFilterAttackIdV4 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Attack ID." + ::= { hostQUserDefFilterV4Entry 3 } + +hostQUserDefFilterDurationV4 OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Filter duration" + ::= { hostQUserDefFilterV4Entry 4 } + +hostQUserDefFilterActionV4 OBJECT-TYPE + SYNTAX INTEGER { + not-applicable (0), + add (1), + delete (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Setting this object to add(1) will add the entry." + ::= { hostQUserDefFilterV4Entry 5 } + +hostQUserDefFilterRemediationV4 OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Setting this object to TRUE, will enable host rememdiation for the user defined quarantine rule. + Default : FALSE" + ::= { hostQUserDefFilterV4Entry 6 } + +-- +-- Host Quarantine User Define V6 Filter Table +-- + +hostQUserDefFilterV6Table OBJECT-TYPE + SYNTAX SEQUENCE OF HostQUserDefFilterV6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table is used to add/delete/extend IPv6 filters on the sensor" + ::= { hostQGrp 7 } + +hostQUserDefFilterV6Entry OBJECT-TYPE + SYNTAX HostQUserDefFilterV6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + INDEX {hostQUserDefFilterSrcIpV6, hostQUserDefFilterVidsIdV6, hostQUserDefFilterAttackIdV6 } + ::= { hostQUserDefFilterV6Table 1 } + +HostQUserDefFilterV6Entry ::= SEQUENCE { + hostQUserDefFilterSrcIpV6 + Ipv6Address, + hostQUserDefFilterVidsIdV6 + INTEGER, + hostQUserDefFilterAttackIdV6 + INTEGER, + hostQUserDefFilterDurationV6 + Unsigned32, + hostQUserDefFilterActionV6 + INTEGER +} + +hostQUserDefFilterSrcIpV6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Source IPV6 address." + ::= { hostQUserDefFilterV6Entry 1 } + +hostQUserDefFilterVidsIdV6 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Vids ID." + ::= { hostQUserDefFilterV6Entry 2 } + +hostQUserDefFilterAttackIdV6 OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Attack ID." + ::= { hostQUserDefFilterV6Entry 3 } + +hostQUserDefFilterDurationV6 OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Filter duration" + ::= { hostQUserDefFilterV6Entry 4 } + +hostQUserDefFilterActionV6 OBJECT-TYPE + SYNTAX INTEGER { + not-applicable (0), + add (1), + delete(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Setting this object to add(1) will add the entry." + ::= { hostQUserDefFilterV6Entry 5 } + +-- +-- nmsGrp +-- + +nmsGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 23 } + +nmsUserGrp OBJECT IDENTIFIER ::= { nmsGrp 1 } + +nmsUserTable OBJECT-TYPE + SYNTAX SEQUENCE OF NMSUserEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { nmsUserGrp 1 } + +nmsUserEntry OBJECT-TYPE + SYNTAX NMSUserEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + Additonaly it contains the + " + INDEX { nmsUserName } + ::= { nmsUserTable 1 } + +NMSUserEntry ::= SEQUENCE { + nmsUserName + DisplayString, + nmsAuthKey + DisplayString, + nmsEncrKey + DisplayString, + nmsUserChangeAction + RowStatus +} + +nmsUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(8..31)) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "UserName nms (in this entry)." + ::= { nmsUserEntry 1 } + +nmsAuthKey OBJECT-TYPE + SYNTAX DisplayString (SIZE(8..15)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "NMS Auth Key" + ::= { nmsUserEntry 2 } + +nmsEncrKey OBJECT-TYPE + SYNTAX DisplayString (SIZE(8..15)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "NMS Encryption Key." + ::= { nmsUserEntry 3 } + +nmsUserChangeAction OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object used for user to add and delete rows in to the table" + ::= { nmsUserEntry 4 } + +nmsDeleteAllUsers OBJECT-TYPE + SYNTAX INTEGER { + true(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This action object deletes all user entries in the nmsUserTable." + ::= { nmsUserGrp 2 } + +nmsCommitUserEntryChanges OBJECT-TYPE + SYNTAX INTEGER { + true(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This action object commits all the changes made to the user entries in the nmsUserTable." + ::= { nmsUserGrp 3 } + + +nmsIpGrp OBJECT IDENTIFIER ::= { nmsGrp 2 } + +nmsIpTable OBJECT-TYPE + SYNTAX SEQUENCE OF NMSIpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { nmsIpGrp 1 } + +nmsIpEntry OBJECT-TYPE + SYNTAX NMSIpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + Additonaly it contains the + " + INDEX { nmsIpAddress } + ::= { nmsIpTable 1 } + +NMSIpEntry ::= SEQUENCE { + nmsIpAddress + IpAddress, + nmsIpChangeAction + RowStatus +} + +nmsIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "UserName nms (in this entry)." + ::= { nmsIpEntry 1 } + +nmsIpChangeAction OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object used for user to add and delete rows in to the table." + ::= { nmsIpEntry 2 } + +nmsIpv6Table OBJECT-TYPE + SYNTAX SEQUENCE OF NMSIpv6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { nmsIpGrp 2 } + +nmsIpv6Entry OBJECT-TYPE + SYNTAX NMSIpv6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + " + INDEX { nmsIpv6Address } + ::= { nmsIpv6Table 1 } + +NMSIpv6Entry ::= SEQUENCE { + nmsIpv6Address + Ipv6Address, + nmsIpv6ChangeAction + RowStatus +} + +nmsIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "IPv6 address of the system having SNMP access to the sensor" + ::= { nmsIpv6Entry 1 } + +nmsIpv6ChangeAction OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object used for user to add and delete rows in to the table." + ::= { nmsIpv6Entry 2 } + +-- +-- mpeGrp +-- + +mpeGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 24 } + +mpeConfigGrp OBJECT IDENTIFIER ::= { mpeGrp 1 } + +mpeQRScope OBJECT-TYPE + SYNTAX INTEGER { + unmanaged-hosts(1), + all-hosts(2) + } + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "This object describes about the MPE Quarantine and Remediation scope. + The value 'unmanaged-hosts', indicates that the MPE interface port based + quarantine and remediation action is applicable only to the MPE server's + unmanaged host and the value 'all-hosts' indicate that the MPE interface + port based qarantine and remediation action is applicable to all the hosts, + independent of MPE server. + Default: unmanaged-hosts(1) + " + ::= { mpeConfigGrp 1 } + +mpeThrottleTimeout OBJECT-TYPE + SYNTAX INTEGER (5..300) + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + " This depicts the MPE throttling timeout in seconds. + Default: 120" + ::= { mpeConfigGrp 2 } + +mpeInstallConfigGrp OBJECT IDENTIFIER ::= { mpeConfigGrp 3 } + +mpeIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The ipaddress of the MPE server" + ::= { mpeInstallConfigGrp 1 } + +mpeAnonymousPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The Anonymous SSL port on MPE server + Default: 8443" + ::= { mpeInstallConfigGrp 2 } + +mpeTrustedSSLPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The Trusted SSL port on MPE server + Default: 8444" + ::= { mpeInstallConfigGrp 3 } + +mpeePOCred OBJECT-TYPE + SYNTAX DisplayString (SIZE(3..100)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "ePO credentials in the form of username:password" + ::= { mpeInstallConfigGrp 4 } + +mpeAnonymousURI OBJECT-TYPE + SYNTAX DisplayString (SIZE(10..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "URI of the MPE server which listens on Anonymous SSL port" + ::= { mpeInstallConfigGrp 5 } + +mpeTrustedURI OBJECT-TYPE + SYNTAX DisplayString (SIZE(10..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "URI of the MPE server which listens on Trusted SSL port" + ::= { mpeInstallConfigGrp 6 } + +mpeInstallConfigAction OBJECT-TYPE + SYNTAX INTEGER { + install(1), + deinstall(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object describes about the possible MPE Install configuration actions." + ::= { mpeInstallConfigGrp 7 } + +mpeInstallConfigStatus OBJECT-TYPE + SYNTAX INTEGER { + installInProgress (1), + installed (2), + deinstallInProgress (3), + deinstalled (4), + certReqFailure(5), + sSLError(6), + httpRespError(7), + mpeURIError(8), + ePOCredError(9), + mpeServerError(10), + mpeTimeoutError(11) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This describes the possible MPE install configuration states. + Default : deinstalled (4)" + ::= { mpeInstallConfigGrp 8 } + +mpeRootCertStatus OBJECT-TYPE + SYNTAX INTEGER { + not-found(0), + found(1) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + " This object informs whether the MPE Root Certificate file is present on the sensor." + ::= { mpeConfigGrp 4 } + +mpeDeleteRootCert OBJECT-TYPE + SYNTAX INTEGER { + delete(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to remove the MPE Root Certificate from the sensor. Deletion of the + MPE root certificate succeeds only when the MPE is not yet installed." + ::= { mpeConfigGrp 5 } + +mnacHealthLevelListenPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure/retrieve the trusted health level message listen port + on the sensor, on which MNAC communication happens asynchronously. + Default: 8445" + ::= { mpeConfigGrp 6 } + +mnacConnectivityFailureTimeout OBJECT-TYPE + SYNTAX INTEGER (30..120) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure/retrieve the MNAC connectivity failure in seconds. + Default: 32" + ::= { mpeConfigGrp 7 } + +mnacAgentGUIDPort OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure/retrieve the agent GUID request listen port on the + MNAC Agent, to which the intrushield sensor would send the agent GUID request. + Default: 8444" + ::= { mpeConfigGrp 8 } + +mpeExcludedMacTable OBJECT-TYPE + SYNTAX SEQUENCE OF MPEExcludedMacEntry + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + " + + " + ::= { mpeGrp 2 } + +mpeExcludedMacEntry OBJECT-TYPE + SYNTAX MPEExcludedMacEntry + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "Each entry specified is indexed by MAC Adress. + " + INDEX { mpeMacAddress } + ::= { mpeExcludedMacTable 1 } + +MPEExcludedMacEntry ::= SEQUENCE { + mpeMacAddress + MacAddress, + mpeMacChangeAction + RowStatus +} + +mpeMacAddress OBJECT-TYPE + SYNTAX MacAddress + MAX-ACCESS not-accessible + STATUS obsolete + DESCRIPTION + "Mac address to be excluded from Mpe processing (Floater Mac)" + ::= { mpeExcludedMacEntry 1 } + + +mpeMacChangeAction OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS obsolete + DESCRIPTION + "This object used for user to add and delete rows in to the table." + ::= { mpeExcludedMacEntry 2 } + +-- +-- remediationGrp +-- + +remediationGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 25 } + +remediationConfigGrp OBJECT IDENTIFIER ::= { remediationGrp 1 } + +remediationTimeout OBJECT-TYPE + SYNTAX INTEGER (15..60) + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "Time in minutes for which the hosts needs to be quarantined so that it can be remediated. + Default: 30" + ::= { remediationConfigGrp 2 } + +-- ez (enforcement zone) Logging support on the Sensor + +ezLogAlertGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 26 } + +ezAlertLogging OBJECT-TYPE + SYNTAX INTEGER { + g-enable-dropped (1), + g-enable-allowed (2), + g-enable-all (3), + enable-per-acl (4), + disable (5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies various ways to enable EZ(enforcement zone) alert logging or disable it altogether. + This is applicable on a sensor wide basis for all ports in inline mode. + Default: disable (5)" + ::= { ezLogAlertGrp 1 } + +ezAlertThrottleMaxIpPair OBJECT-TYPE + SYNTAX INTEGER (1..32) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Once this threshold is exceeded, sensor will only send one + summary ez alert for all addresses (srcip's and destip's) that + match the aclid/vidsid. + Default: 10" + ::= { ezLogAlertGrp 2 } + +ezAlertThrottleInterval OBJECT-TYPE + SYNTAX INTEGER (1..3600) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the enforcement zone alert throttle interval. + Default: 120 seconds" + ::= { ezLogAlertGrp 3 } + + +ezAlertThrottleAction OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable and disable ez alert throttling. + Default: enable(1)" + ::= { ezLogAlertGrp 4 } + +ezAlertThrottleThreshold OBJECT-TYPE + SYNTAX INTEGER (1..25) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the number of alerts that + need to be sent before sensor starts to throttle the ez alerts. + For example if this value is 10, it will send the first 10 + ez alerts with the following key: aclid/vidsid/srcip/destip. + This parameters will use the ezAlertThrottleInterval as the + interval. + Default: 5" + ::= { ezLogAlertGrp 5 } + +ezAlertDirectToSyslog OBJECT-TYPE + SYNTAX INTEGER { + sendViaNSM (1), + sendDirect (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object can be used to enable sending EZ logs directly to syslog viewer instead of sending it via NSM. + Default: sendViaNSM (1)" + ::= { ezLogAlertGrp 6 } + +nbadGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 27 } + +nbadConfigGrp OBJECT IDENTIFIER ::= { nbadGrp 1 } + +nbadSensorIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The ipaddress of the NBAD server to which all the collected flowrecords would be sent." + ::= { nbadConfigGrp 1 } + +nbadSensorPort OBJECT-TYPE + SYNTAX INTEGER (1024..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The port on which the NBAD server is listening for flow records." + ::= { nbadConfigGrp 2 } + +nbadIPSPriMonPortId OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object contains the primary IPS monitoring linear port index to be used + to send flow records to the NBAD sensor." + ::= { nbadConfigGrp 3 } + +nbadIPSSecMonPortId OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object contains the secondary IPS monitoring linear port index to be used + to send flow records to the NBAD sensor. This monitoring port would be used + only when the configured primary monitoring port cannot be utilised to send + the flow records to the NBAD sensor." + ::= { nbadConfigGrp 4 } + +nbadAppFingerPrintingEnabled OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that application finger printing is enabled. + Default: False" + ::= { nbadConfigGrp 5 } + +nbadOSFingerPrintingEnabled OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that OS finger printing is enabled. + Default: False" + ::= { nbadConfigGrp 6 } + +nbadSslFlowDataCaptureEnabled OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that ssl flow data capture is enabled. + Default: False" + ::= { nbadConfigGrp 7 } + +nbadFlowProtocolId OBJECT-TYPE + SYNTAX INTEGER { + netflow (1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value set indicates the protocol type of the exported flow records. + Default: netflow (1)" + ::= { nbadConfigGrp 8 } + +nbadFlowProtocolVersion OBJECT-TYPE + SYNTAX INTEGER { + netFlowVersion9 (1) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value set indicates the protocol version of the exported flow records. + Default: netFlowVersion9 (1)" + ::= { nbadConfigGrp 9 } + +nbadCaptureTCP OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value set indicates whether netflow capture for TCP flows is enabled or not. + Default: enable (1)" + ::= { nbadConfigGrp 10 } + +nbadCaptureUDP OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value set indicates whether netflow capture for UDP flows is enabled or not. + Default: enable (1)" + ::= { nbadConfigGrp 11 } + +nbadCaptureICMP OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value set indicates whether netflow capture for ICMP flows is enabled or not. + Default: disable (2)" + ::= { nbadConfigGrp 12 } + +hostDataGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 28 } + +hostDataTable OBJECT-TYPE + SYNTAX SEQUENCE OF HostDataEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each discovered host. (indexed via hostDataIndex) + This table contains Trellix specific MIB objects. + " + ::= { hostDataGrp 1 } + +hostDataEntry OBJECT-TYPE + SYNTAX HostDataEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each discovered host. + Indexed by hostDataIndex" + INDEX { hostDataIndex } + ::= { hostDataTable 1 } + +HostDataEntry ::= SEQUENCE { + hostDataIndex + INTEGER, + hostIPAddress + IpAddress, + hostMacAddress + MacAddress, + hostDetectedDHCPMonPortId + TrellixPortLinearIndex, + hostName + DisplayString, + hostUpdatedTimeStamp + INTEGER, + hostAgentGuid + DisplayString, + hostNACStatus + INTEGER, + hostState + INTEGER, + hostDeploymentMode + INTEGER, + hostHealthLevel + INTEGER, + hostEZId + INTEGER, + hostUserName + DisplayString, + hostPolicyId + INTEGER, + hostDetectedTimeStamp + INTEGER, + hostOSInfo + DisplayString, + hostMNACAgentOSInfo + DisplayString, + hostActive + TruthValue, + hostDetectedStdMonPortId + TrellixPortLinearIndex, + hostDetectionType + INTEGER, + hostUserAuthProtocol + INTEGER, + hostSwitchId + INTEGER, + hostSwitchPortId + INTEGER, + hostSwitchPortGroupId + INTEGER, + hostQuarantineVlanId + INTEGER, + hostProductionVlanId + INTEGER, + nasIpAddress + IpAddress, + nasGroupObjectId + INTEGER, + userGroupObjectId + INTEGER, + deviceProfileString + DisplayString, + hostOperationalMode + INTEGER, + hostEnforcementAction + INTEGER, + flexiblePolicyRuleId + INTEGER +} + +hostDataIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The index of the Host Data Entry" + ::= { hostDataEntry 1 } + +hostIPAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The ipaddress of the detected host." + ::= { hostDataEntry 2 } + +hostMacAddress OBJECT-TYPE + SYNTAX MacAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The MAC address of the detected host." + ::= { hostDataEntry 3 } + +hostDetectedDHCPMonPortId OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The monitoring interface linear port index over which the host was detected in DHCP mode." + ::= { hostDataEntry 4 } + +hostName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..16)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The name of the detected host." + ::= { hostDataEntry 5 } + +hostUpdatedTimeStamp OBJECT-TYPE + SYNTAX INTEGER (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time of the host getting updated last. This would be zero intilially + at the time of host getting detected." + ::= { hostDataEntry 6 } + +hostAgentGuid OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..16)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The agent GUID of the detected host." + ::= { hostDataEntry 7 } + +hostNACStatus OBJECT-TYPE + SYNTAX INTEGER { + managed (1), + unmanaged (2), + unmanageable (3), + unknown (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The detected host NAC status." + ::= { hostDataEntry 8 } + +hostState OBJECT-TYPE + SYNTAX INTEGER { + preadmit-new (1), + preadmit-sgap (2), + preadmit-user-detect (3), + preadmit-host-detect (4), + preadmit-remediate (5), + postadmit (6), + postadmit-remediate (7), + post-boot (8), + ib-host-detect (9), + ib-auth-wait (10), + ib-host-sgap (11), + ib-user-detect (12), + ib-host-remediate (13), + ib-host-admit (14), + oob-host-admit (15), + ib-host-offline (16) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The state of the detected host entry." + ::= { hostDataEntry 9 } + +hostDeploymentMode OBJECT-TYPE + SYNTAX INTEGER { + dhcp (1), + standard (2), + hybrid (3), + oob (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The deployment mode of the detected host." + ::= { hostDataEntry 10 } + +hostHealthLevel OBJECT-TYPE + SYNTAX INTEGER (1..6) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The health level of the detected host." + ::= { hostDataEntry 11 } + +hostEZId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The applied enforcement zone id for the detected host." + ::= { hostDataEntry 12 } + +hostUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IBAC username of the detected host." + ::= { hostDataEntry 13 } + +hostPolicyId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IBAC policy id of the detected host." + ::= { hostDataEntry 14 } + +hostDetectedTimeStamp OBJECT-TYPE + SYNTAX INTEGER (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time of the host getting detected." + ::= { hostDataEntry 15 } + +hostOSInfo OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The Operation system information of the detected host." + ::= { hostDataEntry 16 } + +hostMNACAgentOSInfo OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..8)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The OS information of the detected host provided by the MNAC agent." + ::= { hostDataEntry 17 } + +hostActive OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Indicates whether the host is Active or not. If set to true, it indicates the host is active" + ::= { hostDataEntry 18 } + +hostDetectedStdMonPortId OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The monitoring interface linear port index over which the host was detected in Standard mode." + ::= { hostDataEntry 19 } + +hostDetectionType OBJECT-TYPE + SYNTAX INTEGER { + other (0), + l2 (1), + l3 (2), + vpn (3), + snmp (4), + radiusMac (5), + radius8021x (6), + l3-snmp(7), + l3-radiusMac(8), + l3-radius8021x(9) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The detection type of the detected host. For OOB cases, this includes the discovery mechanism as well." + ::= { hostDataEntry 20 } + +hostUserAuthProtocol OBJECT-TYPE + SYNTAX INTEGER { + authGuest (0), + authRadius (1), + authAD (2), + authSelfReg (3), + authADSGAP (4), + auth8021xRadius (5) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Authentication type of the logged in IBAC user." + ::= { hostDataEntry 21 } + +hostSwitchId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Switch instance ID on which host was detected in OOB mode." + ::= { hostDataEntry 22 } + +hostSwitchPortId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Switch port ID on which host was detected in OOB mode" + ::= { hostDataEntry 23 } + +hostSwitchPortGroupId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Switch port group ID on which host was detected in OOB mode" + ::= { hostDataEntry 24 } + +hostQuarantineVlanId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Quarantine VLAN Id corresponding to the host which was detected in OOB mode." + ::= { hostDataEntry 25 } + +hostProductionVlanId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Production VLAN Id corresponding to the host which was detected in OOB mode." + ::= { hostDataEntry 26 } + +nasIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The Network Server Access Ipaddress of the switch where the host is connecting to." + ::= { hostDataEntry 27 } + +nasGroupObjectId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Flexible policy Network Server Access Group Object Id for the host." + ::= { hostDataEntry 28 } + +userGroupObjectId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Flexible policy User Group Object Id for the host." + ::= { hostDataEntry 29 } + + +deviceProfileString OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..128)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The device profile string provided by the third party device profiling ldap server for the host." + ::= { hostDataEntry 30 } + +hostOperationalMode OBJECT-TYPE + SYNTAX INTEGER { + enforcement (1), + audit (2), + simulation (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object indicates the operational mode for the host." + ::= { hostDataEntry 31 } + +hostEnforcementAction OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allow (2), + custom-enforce (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object indicates the kind of enforcement done for the host." + ::= { hostDataEntry 32 } + +flexiblePolicyRuleId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This indicates the flexible policy rule for the host." + ::= { hostDataEntry 33 } + +hostConfigGrp OBJECT IDENTIFIER ::= { hostDataGrp 2 } + +hostEntryAttribute OBJECT-TYPE + SYNTAX INTEGER { + ip (1), + mac (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Host entry attribute to be considered for config action." + ::= { hostConfigGrp 1 } + +hostEntryIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Host entry Ip address to be considered for config action." + ::= { hostConfigGrp 2 } + +hostEntryMac OBJECT-TYPE + SYNTAX MacAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Host entry Mac address to be considered for config action." + ::= { hostConfigGrp 3 } + +hostEntryConfig OBJECT-TYPE + SYNTAX INTEGER { + delete-host (1), + modify-naz (2), + revert-naz (3), + host-oob-to-inline (4), + host-inline-to-oob (5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Host entry config action." + ::= { hostConfigGrp 4 } + +hostEntryEZId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "EZ-ID to be considered for modifying the NAZ of the given host entry." + ::= { hostConfigGrp 5 } + +hostDataAvailabilityStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object indicates the availability of the hostData through SNMP. This information + is useful immediately after the sensor reboot, as the Host Data even if + present on the sensor would be available through SNMP only after the + system health becomes GOOD, as the host data would be initialised only + during the initial sigfile processing. + True: Host Data available after the sensor initialisation or no persisted hostdata. + False: In other scenarios. " + ::= { hostDataGrp 3 } + +--This group contains MIB objects related to SGAP Configuration + +sgapGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 29 } + +sgapConfigGrp OBJECT IDENTIFIER ::= { sgapGrp 1 } + +sgapAuthTimeout OBJECT-TYPE + SYNTAX INTEGER (10..600) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Authentication channel timeout in seconds. + Default: 30" + ::= { sgapConfigGrp 1 } + +sgapCSRConfigGrp OBJECT IDENTIFIER ::= { sgapConfigGrp 2 } + +sgapCSRCountryName OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Country name for generating the CSR. Use the two-letter code + without punctuation for country like US or CA." + ::= { sgapCSRConfigGrp 1 } + +sgapCSRStateProvince OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "State or Province name for generating the CSR. Spell out the + state completely." + ::= { sgapCSRConfigGrp 2 } + +sgapCSRLocality OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "City or town name for generating the CSR." + ::= { sgapCSRConfigGrp 3 } + +sgapCSRCompany OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Company name for generating the CSR. If the company name has + symbols, spell out the symbol or omit it to enroll." + ::= { sgapCSRConfigGrp 4 } + +sgapCSROrganizationalUnit OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The organizational unit is the name of the department or organization unit + making the request. This is an optional field" + ::= { sgapCSRConfigGrp 5 } + +sgapCSRCommonName OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The common name is the host plus domain name. It looks like + www.company.com or company.com." + ::= { sgapCSRConfigGrp 6 } + +sgapCSRGenerateAction OBJECT-TYPE + SYNTAX INTEGER { + other(0), + generateCSR(1), + generateSelfSigned(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This action is used to generate the CSR/self signed certificate. + Default : other (0)" + ::= { sgapCSRConfigGrp 7 } + +sgapCSRGenerateStatus OBJECT-TYPE + SYNTAX INTEGER { + other (0), + generationInProgress (1), + generationComplete (2), + generationFailed (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object describes the possible CSR generation states. + Default : other (0)" + ::= { sgapCSRConfigGrp 8 } + +sgapCertStatus OBJECT-TYPE + SYNTAX INTEGER { + other (0), + certAbsent (1), + defaultCert (2), + selfsignedCert (3), + casignedCert (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object indicates the sgap cert status on the sensor. + Default: 0" + ::= { sgapConfigGrp 3 } + +-- +-- This group contains MIB objects related to threshold alarm and historical trends related configuration +-- + +alarmAndTrendsGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 30 } + +sensorPerfAlertGrp OBJECT IDENTIFIER ::= { alarmAndTrendsGrp 1 } + +sensorPerfAlertEnable OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to enable/disable generation of sensor performance alerts, + for the purpose of historical trends. + Default: false(2)" + ::= { sensorPerfAlertGrp 1 } + +sensorPerfAlertDuration OBJECT-TYPE + SYNTAX INTEGER (1..60) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the duration of sensor performance alerts in minutes, + for the purpose of historical trends. + Default: 5" + ::= { sensorPerfAlertGrp 2 } + +sensorPerfAlertParameters OBJECT-TYPE + SYNTAX OCTET STRING + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the parameters of sensor performance alerts, + for the purpose of historical trends. The parameter bit positions are as given below. + msb-bit(1) : cpu-utilization, + msb-bit(2) : tcpudp-flows, + msb-bit(3) : sensor-throughput, + msb-bit(4) : mon-port-data-rate, + msb-bit(5) : reserved + msb-bit(6) : reserved + msb-bit(7) : system-memory, + msb-bit(8) : packet-buffers, + msb-bit(9) : decrypted-ssl-flows" + ::= { sensorPerfAlertGrp 3 } + +alarmConfigGrp OBJECT IDENTIFIER ::= { alarmAndTrendsGrp 2 } + +alarmStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to enable/disable generation of threshold based alarms. + Default: false(2)" + ::= { alarmConfigGrp 1 } + +alarmDeleteAllEntries OBJECT-TYPE + SYNTAX INTEGER { + true(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to delete all alarm entries in a single operation." + ::= { alarmConfigGrp 2 } + +alarmDuration OBJECT-TYPE + SYNTAX INTEGER (1..60) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object indicates the duration in minutes, at which the sensor needs to perform + threshold checks and if required generate the specific alarm. + Default : 1" + ::= { alarmConfigGrp 3 } + +alarmTable OBJECT-TYPE + SYNTAX SEQUENCE OF AlarmEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for configured threshold based alarms. (indexed via alarmIndex) + This table contains Trellix specific MIB objects. + " + ::= { alarmConfigGrp 4 } + +alarmEntry OBJECT-TYPE + SYNTAX AlarmEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each threshold based alarm. + Indexed by alarmIndex" + INDEX { alarmIndex } + ::= { alarmTable 1 } + +AlarmEntry ::= SEQUENCE { + alarmIndex + INTEGER, + alarmSampleType + INTEGER, + alarmSampleTypeIndexBitmap + OCTET STRING, + alarmSampleTypeDesc + DisplayString, + alarmRaisingThreshold + Unsigned32, + alarmFallingThreshold + Unsigned32, + alarmStartupType + INTEGER, + alarmEntryStatus + RowStatus +} + +alarmIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The index of the threshold based alarm entry" + ::= { alarmEntry 1 } + +alarmSampleType OBJECT-TYPE + SYNTAX INTEGER + { + cpu-utilization-abs (0), + tcpudp-flows (1), + sensor-throughput-delta (2), + mon-port-throughput-delta (3), + sensor-l2-error-drop-delta (4), + sensor-l3-l4-error-drop-delta (5), + system-memory (6), + packet-buffers (7), + decrypted-ssl-flows (8) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object indicates the alarm sample type for which the sensor needs to generate alarms + based on alarm threshold settings. The threshold value range vary based on the sample types : + cpu-utilization-abs : 0 - 100, + tcpudp-flows : 0 - 100, + sensor-throughput-delta : 0 - 100, + mon-port-throughput-delta : 0 - 100, + l2-error-drop-delta : 0 - 4294967295, + l3-l4-error-drop-delta : 0 - 4294967295, + system-memory : 0 - 100, + packet-buffers : 0 - 100, + decrypted-ssl-flows : 0 - 100 + " + ::= { alarmEntry 2 } + +alarmSampleTypeIndexBitmap OBJECT-TYPE + SYNTAX OCTET STRING (SIZE (1..16)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object provides the index bit map for the alarm sample type id. The bit + setting would be similar to the BITS type and in network order. The bitmap would be as + given below : + cpu-utilization-abs - 0, + sensor-throughput-delta - 0, + mon-port-throughput-delta - Bit position indicates the + sensor-l2-error-drop-delta - 0, + sensor-l3-l4-error-drop-delta - 0 + " + ::= { alarmEntry 3 } + +alarmSampleTypeDesc OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..32)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object provides the alarm sample type description such as 'lower-band', 'higher-band', etc." + ::= { alarmEntry 4 } + +alarmRaisingThreshold OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object indicates the raising threshold value. The sensor would generate raising + threshold alarm when the sample type counter exceeds this value." + ::= { alarmEntry 5 } + +alarmFallingThreshold OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object indicates the falling threshold value. The sensor would generate falling + threshold alarm when the sample type counter reduces below this value." + ::= { alarmEntry 6 } + +alarmStartupType OBJECT-TYPE + SYNTAX INTEGER { + raising (1), + falling (2), + both (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object indicates the first alarm type that the sensor must generate before + generating the other threshold based alarm. For eg; if the value is set to 'raising (1)', + then the sensor has to first raise an alarm based on raising threshold value and only + then based on falling threshold value. + Default : raising (1)" + ::= { alarmEntry 7 } + +alarmEntryStatus OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to create a new threshold based alarm." + ::= { alarmEntry 8 } + + +bwSavingStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to enable/disable bandwidth saving. + Default: false(2)" + ::= { alarmConfigGrp 5 } + + +-- +-- This group contains MIB objects applicable to NAC-only Appliances. +-- + +oobnacGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 31 } +-- Support for oobnacGrp is deprecated in V-series sensors(VmIPS). +-- This group consists of scalars for pre-discovery phase and swInstanceTable(based on switch ID). +oobnacSwDiscoveryGrp OBJECT IDENTIFIER ::= { oobnacGrp 1 } + +-- This table creates an entry for the switch (indexed based on switch id ). + +swInstanceTable OBJECT-TYPE + SYNTAX SEQUENCE OF SwInstanceEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each switch instance(indexed via switch id)." + ::= { oobnacSwDiscoveryGrp 1 } + +swInstanceEntry OBJECT-TYPE + SYNTAX SwInstanceEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the attributes that are specific to the switch instance. Indexed by swIdIndex" + INDEX { swIdIndex } + ::= { swInstanceTable 1 } + +SwInstanceEntry ::= SEQUENCE { + swIdIndex + INTEGER, + swDetDesc + DisplayString, + swProfileId + INTEGER, + swIPAddress + IpAddress, + swIPV6Address + Ipv6Address, + swName + DisplayString, + swDesc + DisplayString, + swEnable + TruthValue, + swSNMPsupport + TruthValue, + swSnmpVerSupport + INTEGER, + swREADCommunityStr + DisplayString, + swWRITECommunityStr + DisplayString, + swTRAPCommunityStr + DisplayString, + swSNMPPort + INTEGER, + swV3UserName + DisplayString, + swV3SecurityLevel + INTEGER, + swV3AuthProtocol + INTEGER, + swV3AuthKey + DisplayString, + swV3EncrProtocol + INTEGER, + swV3EncrKey + DisplayString, + swCLIsupport + TruthValue, + swCLINwProtocol + INTEGER, + swCLIUserName + DisplayString, + swCLIPwd + DisplayString, + swCLIEnablePwd + DisplayString, + swCLIAutoSaveConfig + TruthValue, + swRadiusSupport + TruthValue, + swRadiusSharedSecret + DisplayString, + swPlaceHolderVlan + DisplayString, + swUseDefaultQVlanPool + TruthValue, + swQVlanPoolRange + DisplayString, + swDiscoverAction + RowStatus, + swCLILoginType + INTEGER, + swAuthMacAddRadSrvOption + TruthValue, + swActionStatus + INTEGER, + swPortDefaultVlan + INTEGER, + swActionStatusTime + INTEGER + + +} + +swIdIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The index" + ::= { swInstanceEntry 1 } + +swDetDesc OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..256)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Description returned by the switch. " + ::= { swInstanceEntry 2 } + +swProfileId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "switch profile id returned by the switch." + ::= { swInstanceEntry 3 } + +swIPAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP address of the switch instance sent down from ISM when a new switch is being added." + ::= { swInstanceEntry 4 } + +swIPV6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPV6 address of the switch instance sent down from ISM when a new switch is being added." + ::= { swInstanceEntry 5 } + +swName OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..256)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Switch name returned by the switch." + ::= { swInstanceEntry 6 } + + + +swDesc OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..256)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Switch name returned by the switch. This can be modified by ISM." + ::= { swInstanceEntry 7 } + +swEnable OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to enable/disable the specific switch upon discovery. The default value is enable(1)." + ::= { swInstanceEntry 8 } + +swSNMPsupport OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Support for snmp communication between sensor and the switch.Currently the value always remains true." + ::= { swInstanceEntry 9 } + +swSnmpVerSupport OBJECT-TYPE + SYNTAX INTEGER { + snmpv1(1), + snmpv2(2), + snmpv3(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "snmp version supported by the switch. The default will be version 2." + ::= { swInstanceEntry 10 } + +swREADCommunityStr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "String used for all read-only snmp data communication between sensor and the switch. The default string is public." + ::= { swInstanceEntry 11 } + +swWRITECommunityStr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "String used for all read-write snmp data communication between sensor and the switch." + ::= { swInstanceEntry 12 } + +swTRAPCommunityStr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "community string used for the all the traps received from the switch." + ::= { swInstanceEntry 13 } + + +swSNMPPort OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "snmp port for snmp communication with the switch(161)." + ::= { swInstanceEntry 14 } + + +swV3UserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..31)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "User name for snmp v3 communication." + ::= { swInstanceEntry 15 } + +swV3SecurityLevel OBJECT-TYPE + SYNTAX INTEGER { + noAuthNoPriv(1), + authNoPriv(2), + authPriv(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Level of security supported by the switch. The default value is authPriv(3)." + ::= { swInstanceEntry 16 } + +swV3AuthProtocol OBJECT-TYPE + SYNTAX INTEGER { + mD5(1), + sHA(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "protocol for authentication of the user. The default value is Md5(1)." + ::= { swInstanceEntry 17 } + +swV3AuthKey OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..15)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Key for authentication of the user." + ::= { swInstanceEntry 18 } + +swV3EncrProtocol OBJECT-TYPE + SYNTAX INTEGER { + dES(1), + aES(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "protocol for encryption of snmp communication messages. The default value is DES(1)." + ::= { swInstanceEntry 19 } +swV3EncrKey OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..15)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "key for encryting messages." + ::= { swInstanceEntry 20 } + +swCLIsupport OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Support for CLI communication between sensor and the switch." + ::= { swInstanceEntry 21 } + +swCLINwProtocol OBJECT-TYPE + SYNTAX INTEGER { + telnet(1), + ssh(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "support for a command line interfaces network protocol such as TELNET or ssh. Default value is telnet(1)." + ::= { swInstanceEntry 22 } + +swCLIUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "user name for CLI communication." + ::= { swInstanceEntry 23 } + +swCLIPwd OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "password to authenticate CLI user." + ::= { swInstanceEntry 24 } + +swCLIEnablePwd OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Enable password to authenticate CLI user." + ::= { swInstanceEntry 25 } + +swCLIAutoSaveConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "If this option is enabled then auto save CLI configuration changes to flash." + ::= { swInstanceEntry 26 } + +swRadiusSupport OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Support for radius communication between sensor and the switch. The default value is enable(1)." + ::= { swInstanceEntry 27 } + +swRadiusSharedSecret OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "A case-sensitive text string used to validate communications between two radius devices." + ::= { swInstanceEntry 28 } + +swPlaceHolderVlan OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "special vlan value used for assigning qvlan value to an empty port." + ::= { swInstanceEntry 29 } + +swUseDefaultQVlanPool OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to use globally set qvlan pool range." + ::= { swInstanceEntry 30 } + +swQVlanPoolRange OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..30)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Qvlan pool range assigned for the switch instance." + ::= { swInstanceEntry 31 } + +swDiscoverAction OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This action data will add a switch entry in the table. Default action is createAndGo(4)." + ::= { swInstanceEntry 32 } + + +swCLILoginType OBJECT-TYPE + SYNTAX INTEGER { + userPwd(1), + pwdEnable(2), + userPwdEnable(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Different login types supported for CLI. " + ::= { swInstanceEntry 33 } + +swAuthMacAddRadSrvOption OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Support for option to authenticate MAC addresses against radius server.Default option is to disabled(0)." + ::= { swInstanceEntry 34 } + + +swActionStatus OBJECT-TYPE + SYNTAX INTEGER { + active(1), + inactive(2), + in-deletion-mode(3), + in-addition-mode(4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Variable to poll the status of the switch(in case sw goes down). " + ::= { swInstanceEntry 35 } + + +swPortDefaultVlan OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Variable used for updating port default vlan for universal control point (UCP)switches. For non-ucp switches the value will default to zero." + ::= { swInstanceEntry 36 } + + +swActionStatusTime OBJECT-TYPE + SYNTAX INTEGER (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time when swActionStatus variable was updated." + ::= { swInstanceEntry 37 } + + + + + + + + +--Scalar for the pre-discovery phase. No entry is created for the switch during this time. +-- Also scalars for switch snmp/cli test. + +swIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP address of the switch instance sent down from ISM when a new switch is being added." + ::= { oobnacSwDiscoveryGrp 2 } + +swIpV6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPV6 address of the switch instance sent down from ISM when a new switch is being added." + ::= { oobnacSwDiscoveryGrp 3 } + +readCommunityString OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This string is used for all read-only snmp data communication between sensor and the switch. The default string is public." + ::= { oobnacSwDiscoveryGrp 4 } + +snmpPort OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The default port on which snmp runs(161)." + ::= { oobnacSwDiscoveryGrp 5 } + +snmpVerSupport OBJECT-TYPE + SYNTAX INTEGER { + snmpv1(1), + snmpv2(2), + snmpv3(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "snmp version supported by the switch. The default will be version 2." + ::= { oobnacSwDiscoveryGrp 6 } + +writeCommunityStr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "String used for all read-write snmp data communication between sensor and the switch." + ::= { oobnacSwDiscoveryGrp 7 } + +trapCommunityStr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "community string used for the all the traps received from the switch." + ::= { oobnacSwDiscoveryGrp 8} + + +v3UserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..31)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "User name for snmp v3 communication." + ::= { oobnacSwDiscoveryGrp 9 } + +v3SecurityLevel OBJECT-TYPE + SYNTAX INTEGER { + noAuthNoPriv(1), + authNoPriv(2), + authPriv(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Level of security supported by the switch. The default value is authPriv(3)." + ::= { oobnacSwDiscoveryGrp 10 } + +v3AuthProtocol OBJECT-TYPE + SYNTAX INTEGER { + mD5(1), + sHA(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "protocol for authentication of the user. The default value is Md5(1)." + ::= { oobnacSwDiscoveryGrp 11 } + +v3AuthKey OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..15)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Key for authentication of the user." + ::= { oobnacSwDiscoveryGrp 12 } + +v3EncrProtocol OBJECT-TYPE + SYNTAX INTEGER { + dES(1), + aES(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "protocol for encryption of snmp communication messages. The default value is DES(1)." + ::= { oobnacSwDiscoveryGrp 13 } + +v3EncrKey OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..15)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "key for encryting messages." + ::= { oobnacSwDiscoveryGrp 14 } + +cliNwProtocol OBJECT-TYPE + SYNTAX INTEGER { + telnet(1), + ssh(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "support for a command line interfaces network protocol such as TELNET or ssh. Default value is telnet(1)." + ::= { oobnacSwDiscoveryGrp 15 } + +cliUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "user name for CLI communication." + ::= { oobnacSwDiscoveryGrp 16} + + +cliPwd OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "password to authenticate CLI user." + ::= { oobnacSwDiscoveryGrp 17 } + +cliEnablePwd OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Enable password to authenticate CLI user." + ::= { oobnacSwDiscoveryGrp 18 } + +swQueryAction OBJECT-TYPE + SYNTAX INTEGER { + initialQuery(1), + testSnmp(2), + testCli(3), + deleteAllSwEntries(4), + reLearnSwitch(5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "action to get preliminary data (like sys uptime, sys description etc) from the switch. also to test cli and snmp." + ::= { oobnacSwDiscoveryGrp 19} + + +cliLoginType OBJECT-TYPE + SYNTAX INTEGER { + userPwd(1), + pwdEnable(2), + userPwdEnable(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Different login types supported for CLI. " + ::= { oobnacSwDiscoveryGrp 20 } + +profileId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "switch profile id returned by the switch." + ::= { oobnacSwDiscoveryGrp 21 } + +switchId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The sw global id used to re-learn the switch." + ::= { oobnacSwDiscoveryGrp 22 } + + + + + + + + + +-- This group consists of scalars applicable to all switches. +oobnacAllSwitchesGrp OBJECT IDENTIFIER ::= { oobnacGrp 2 } + + +oobnDefaultQvlanPool OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..30)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "default qvlan pool range assigned for the all switches using default qvlan pool." + + ::= { oobnacAllSwitchesGrp 1 } + + +oobnacRadNumRetries OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The default number of retries(3) allowed for radius users." + ::= { oobnacAllSwitchesGrp 2 } + + +oobnacRadRespTimeOut OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The default timeout value(3 seconds) for radius response timeout." + ::= { oobnacAllSwitchesGrp 3 } + + + +-- +-- OOB NAC Failover Group +-- +--This group contains objects that identify the OOB NAC failover configuration information +-- + +oobnacFailoverGrp OBJECT IDENTIFIER ::= { oobnacGrp 3 } + +oobnacFloatingIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Floating Management Port IP Address." + ::= { oobnacFailoverGrp 1 } + +oobnacFloatingIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Floating Management Port IPv6 Address." + ::= { oobnacFailoverGrp 2 } + +oobnacFloatingNetMask OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Floating Management Port Network mask as a IPAddress prefix." + ::= { oobnacFailoverGrp 3 } + +oobnacFloatingv6NetMask OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Floating Management Port IPv6 Network mask as a IPAddress prefix." + ::= { oobnacFailoverGrp 4 } + +oobnacFloatingGatewayIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Floating Management Port Gateway IP Address." + ::= { oobnacFailoverGrp 5 } + +oobnacFloatingGatewayIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Floating Management Port Gateway IP Address." + ::= { oobnacFailoverGrp 6 } + +oobnacPeerIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Failover Peer Management Port IP Address." + ::= { oobnacFailoverGrp 7 } + +oobnacPeerIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Failover Peer Management Port IPv6 Address." + ::= { oobnacFailoverGrp 8 } + +oobnacFailoverSensorStatus OBJECT-TYPE + SYNTAX INTEGER { + standalone (0), + standby (1), + active (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Status of the sensor in OOBNac failover." + ::= { oobnacFailoverGrp 9 } + +-- +-- This group contains Malware related MIB objects. These are applicable to +-- all M-series except NAC-only appliances. +-- + + +malwareGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 32 } + +-- Support for malwarePriDNSServerIp is now deprecated in sensors using new MIB. +malwarePriDNSServerIp OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "IP address of the primary DNS server." + ::= { malwareGrp 1 } + +-- Support for malwareSecDNSServerIp is now deprecated in sensors using new MIB. +malwareSecDNSServerIp OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "IP address of the secondary DNS server." + ::= { malwareGrp 2 } + +-- Support for malwarePriDNSServerIpV6 is now deprecated in sensors using new MIB. +malwarePriDNSServerIpV6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "IPV6 address of the primary DNS server." + ::= { malwareGrp 3 } + +-- Support for malwareSecDNSServerIpV6 is now deprecated in sensors using new MIB. +malwareSecDNSServerIpV6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS obsolete + DESCRIPTION + "IPV6 address of the secondary DNS server." + ::= { malwareGrp 4 } + +malwareRiskLevel OBJECT-TYPE + SYNTAX INTEGER { + veryLow(1), + low(2), + medium(3), + high(4), + veryHigh(5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " Malware risk level threshold value set by the user. The default level is Very Low." + ::= { malwareGrp 5 } + +-- Support for malwareArtemisDetectionMode is deprecated in sensors using new MIB. +malwareArtemisDetectionMode OBJECT-TYPE + SYNTAX INTEGER { + alertOnly(1), + alertAndBlock(2), + alertBlockAndTCP-Reset(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "artemis configuration to do either of the settings + Alert only, + Alert and Block or + Alert, Block and TCP-Reset." + ::= { malwareGrp 6 } + + +-- Support for malwareUDFDetectionMode is deprecated in sensors using new MIB. +malwareUDFDetectionMode OBJECT-TYPE + SYNTAX INTEGER { + alertOnly(1), + alertAndBlock(2), + alertBlockAndTCP-Reset(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "user-defined configuration to do either of the settings + Alert only, + Alert and Block or + Alert, Block and TCP-Reset." + ::= { malwareGrp 7 } + + +gamEngSensorCfgGrp OBJECT IDENTIFIER ::= { malwareGrp 8 } + +gamEngSensorAutoUpdateConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Enable / disable the Sensor auto update config. + Default : True (Enable)" + ::= { gamEngSensorCfgGrp 1} + +gamEngSensorAutoUpdateInterval OBJECT-TYPE + SYNTAX INTEGER (90..1440) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Sets the Sensor auto update Interval in minutes. + Default : 90" + ::= { gamEngSensorCfgGrp 2} + +gamEngVer OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..63)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Provides the current gam engine version available on sensor." + ::= { gamEngSensorCfgGrp 3} + +gamDatVer OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..63)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Provides the current gam dat version available on sensor." + ::= { gamEngSensorCfgGrp 4} + +avEngVer OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..63)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Provides the current AV engine version available on sensor." + ::= { gamEngSensorCfgGrp 5 } + +avDatVer OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..63)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Provides the current AV dat version available on sensor." + ::= { gamEngSensorCfgGrp 6} + +gamEngUpdatedTime OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Provides the time in UTC format when sensor had updated GAM engine successfully." + ::= { gamEngSensorCfgGrp 7} + +gamManualFullUpdateFileUploadStatus OBJECT-TYPE + SYNTAX INTEGER { + readyForGAMUpdate (1), + gAMUpdateTransferInProgress (2), + gAMUpdateTransferError (3), + gAMUpdateQueued (4), + applyingGAMUpdate (5), + gAMUpdateCompleted (6), + gAMUpdateError (7) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Provides the current file upload status." + ::= { gamEngSensorCfgGrp 8} + +--This group contains MIB objects related to Miscellaneous Configuration Group +miscCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 33 } + +jumboframeParsingConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable jumboframe parsing. + The new setting would be effective only after a sensor reboot. + Default: disable" + ::= {miscCfgGrp 1 } + +currentJumboframeParsingStatus OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The current running jumboframe parsing status." + ::= {miscCfgGrp 2 } + +appIdStatsConfigStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that the appId stats collection is enabled for the sensor. + Default: False" + ::= { miscCfgGrp 3 } + +hitlessRebootStatus OBJECT-TYPE + SYNTAX INTEGER { + available (1), + notavailable (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Status option to read whether hitless reboot is possible or not at this time." + ::= {miscCfgGrp 4 } + +existingGeoDBFilename OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(0..256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This specifies the name of geo database file present in sensor. NULL would be returned + when there is no geo DB file on the sensor." + ::= {miscCfgGrp 5 } + +nsmTrackUserLoggingStatus OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable NSM audit logging. + Default: disable" + ::= {miscCfgGrp 6 } + +accelerateFTPInboundConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable accelerate ftp in inbound direction + Default: false (2)" + ::= {miscCfgGrp 7 } + + +accelerateFTPOutboundConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable accelerate ftp in outbound direction. + Default: false (2)" + ::= {miscCfgGrp 8 } + +parseTunnellingConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable parsing of tunnelled packet. + Default: false (2)" + ::= {miscCfgGrp 9 } + +prev256ByteLoggingConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable prev 256 byte logging. + Default: false (2)" + ::= {miscCfgGrp 10 } + +cliAuditLoggingConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable cli audit logging through SNMP. + Default: false (2)" + ::= {miscCfgGrp 11 } + +snortRuleEngineConfig OBJECT-TYPE + SYNTAX INTEGER { + traditional (1), + nextGeneration (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to switch snort rule engine between traditional and next generation. + The new setting would be effective only after a sensor reboot. + Default: traditional" + ::= {miscCfgGrp 12 } + +currentSnortRuleEngineStatus OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The current running snort rule engine on sensor." + ::= {miscCfgGrp 13 } + +insightsTelemetryConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable usage of configured telemetry data for Insights" + ::= {miscCfgGrp 14} + +-- +-- This group contains MIB objects applicable to Layer2 forwarding. +-- + +layer2FwdGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 34 } + +-- This group consists of scalars for configuring layer2 fwd feature. + +layer2FwdCfgGrp OBJECT IDENTIFIER ::= { layer2FwdGrp 1 } + + +layer2FwdType OBJECT-TYPE + SYNTAX INTEGER { + tcp (1), + udp (2), + vlan(3), + all (4), + ip (5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " Different modes for using layer2 forward feature." + ::= { layer2FwdCfgGrp 1 } + + +layer2IntfPort OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The intf linear port index of the sensor for the mode chosen." + ::= { layer2FwdCfgGrp 2 } + + +layer2FwdAction OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2), + clearAll(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " Action to take for the specified port(s)." + ::= { layer2FwdCfgGrp 3 } + +layer2FwdBeginId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " Start port id(range 1-65535) for the mode selected(tcp/udp/vlan)." + ::= { layer2FwdCfgGrp 4 } + + +layer2FwdEndId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " End port id(range 1-65535) for the mode selected(tcp/udp/vlan)." + ::= { layer2FwdCfgGrp 5 } + +layer2FwdConfig OBJECT-TYPE + SYNTAX INTEGER (0..7) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " Layer2 forward configuration to enable or disable this feature. Each bit represents the + layer2 forward type. From the LSB the 1st bit for TCP, 2nd bit for UDP, 3rd bit for VLAN. + Default will be 7, indicating this feature is enable" + ::= { layer2FwdCfgGrp 6 } + +-- +-- This table has entries for layer2Fwd TCP Table. +-- + +layer2FwdTCPTable OBJECT-TYPE + SYNTAX SEQUENCE OF Layer2FwdTCPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing TCP port ranges configured for L2 forwarding.(indexed via intf port number and entry number)." + ::= { layer2FwdGrp 2 } + + +layer2FwdTCPEntry OBJECT-TYPE + SYNTAX Layer2FwdTCPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the attributes that are specific to the L2 fwd entry for TCP table. Indexed by intfPortLinearIndex and entry number." + INDEX { tcpIntfPortIndex, + tcpEntryIndex } + ::= { layer2FwdTCPTable 1 } + +Layer2FwdTCPEntry ::= SEQUENCE { + tcpIntfPortIndex + TrellixPortLinearIndex, + tcpEntryIndex + INTEGER, + tcpPortRange + DisplayString + } + +tcpIntfPortIndex OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The intfPort linear index" + ::= { layer2FwdTCPEntry 1 } + +tcpEntryIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The index" + ::= { layer2FwdTCPEntry 2 } + +tcpPortRange OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..20)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "range for which L2 forwarding feature is enabled. " + ::= { layer2FwdTCPEntry 3 } + + + +-- +-- This table has entries for layer2Fwd UDP Table. +-- + +layer2FwdUDPTable OBJECT-TYPE + SYNTAX SEQUENCE OF Layer2FwdUDPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing UDP port ranges configured for L2 forwarding.(indexed via intfPortIndex and entry number)." + ::= { layer2FwdGrp 3 } + + +layer2FwdUDPEntry OBJECT-TYPE + SYNTAX Layer2FwdUDPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the attributes that are specific to the L2 fwd entry for UDP table. Indexed by intfPortLinearIndex and entry number." + INDEX { udpIntfPortIndex, + udpEntryIndex } + ::= { layer2FwdUDPTable 1 } + + +Layer2FwdUDPEntry ::= SEQUENCE { + udpIntfPortIndex + TrellixPortLinearIndex, + udpEntryIndex + INTEGER, + udpPortRange + DisplayString + } +udpIntfPortIndex OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The intfPort linear index" + ::= { layer2FwdUDPEntry 1 } + +udpEntryIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The index" + ::= { layer2FwdUDPEntry 2 } + +udpPortRange OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..20)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "range for which L2 forwarding feature is enabled. " + ::= { layer2FwdUDPEntry 3 } + + +-- +-- This table has entries for layer2Fwd VLAN Table. +-- + +layer2FwdVLANTable OBJECT-TYPE + SYNTAX SEQUENCE OF Layer2FwdVLANEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing VLAN port ranges configured for L2 forwarding.(indexed via interface number and entry number)." + ::= { layer2FwdGrp 4 } + + +layer2FwdVLANEntry OBJECT-TYPE + SYNTAX Layer2FwdVLANEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the attributes that are specific to the + L2 fwd entry for VLAN table(indexed via intfPortLinearIndex and entry number)." + INDEX { vlanIntfPortIndex, + vlanEntryIndex } + ::= { layer2FwdVLANTable 1 } + + +Layer2FwdVLANEntry ::= SEQUENCE { + vlanIntfPortIndex + TrellixPortLinearIndex, + vlanEntryIndex + INTEGER, + vlanPortRange + DisplayString + } + +vlanIntfPortIndex OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The intfPort linear index" + ::= { layer2FwdVLANEntry 1 } + +vlanEntryIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The entry index " + ::= { layer2FwdVLANEntry 2 } + +vlanPortRange OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..20)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "range for which L2 forwarding feature is enabled. Maximum vlan range supported on each interface is 4k. " + ::= { layer2FwdVLANEntry 3 } + +layer2FwdIPTable OBJECT-TYPE + SYNTAX SEQUENCE OF Layer2FwdIPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing IP protocol ranges configured for L2 forwarding.(indexed via intfPortIndex and entry number)." + ::= { layer2FwdGrp 5 } + + +layer2FwdIPEntry OBJECT-TYPE + SYNTAX Layer2FwdIPEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the attributes that are specific to the L2 fwd. entry for IP table. Indexed by intfPortLinearIndex and entry number." + INDEX { ipIntfPortIndex, + ipEntryIndex } + ::= { layer2FwdIPTable 1 } + + +Layer2FwdIPEntry ::= SEQUENCE { + ipIntfPortIndex + TrellixPortLinearIndex, + ipEntryIndex + INTEGER, + ipPortRange + DisplayString + } +ipIntfPortIndex OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The intfPort linear index" + ::= { layer2FwdIPEntry 1 } + +ipEntryIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The index" + ::= { layer2FwdIPEntry 2 } + +ipPortRange OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..20)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "range for which L2 forwarding feature is enabled. " + ::= { layer2FwdIPEntry 3 } + +--This group contains MIB objects related to ARP Configuration +arpCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 103 } + +arpSDEnable OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to enable/disable ARP Spoof Detection. + Default: enable" + ::= {arpCfgGrp 1 } + +--This group contains MIB objects related to ARP Configuration + +--This group contains MIB objects related to Packet Capture Configuration + +pktCapCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 35 } + +pktCapMode OBJECT-TYPE + SYNTAX INTEGER { + disable (1), + portModeEnable (2), + fileModeEnable (3) + + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to select packet capture Mode. + File mode is not supported in 6.x release. + Default: disable" + ::= {pktCapCfgGrp 1 } + +pktCapDuration OBJECT-TYPE + SYNTAX INTEGER (0..315360000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The duration for which capture will be enabled.. + Units are in seconds. Default: 120 seconds + duration value 0 indicate indefinite capture till the capture + is stopped. + Default: 120" + ::= { pktCapCfgGrp 2 } + +pktCapPmSpanPortForCapture OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Span linear port index for the capture: + ISM also needs to verify that port should be configured + as Span port. + Applicable only for port mode capture. Zero indicates no port assigned. + Default: 0" + ::= { pktCapCfgGrp 3 } + + +pktCapFmLocation OBJECT-TYPE + SYNTAX INTEGER { + manager (1), + tftpServer (2), + scpServer (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This will determine whether capture file is to be uploaded to manager, tftpServer or ScpServer. + Note :Applicable only for file mode capture + Default: manager" + ::= {pktCapCfgGrp 4 } + +pktCapFmMaxSize OBJECT-TYPE + SYNTAX INTEGER (1..100) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The size of the maximum capture file. + It will be configurable but to the maximum value + of sensor define limit. + Default: 100 MB for M8000, M6050, M4050, M3050 + 58 MB for N450, Wilson + 40 MB for Eagle, Diablo + Note :Applicable only for file mode capture" + ::= { pktCapCfgGrp 5 } + +pktCapFmFUServerAddress OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(50)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "File Upload server IPv4 / IPv6 address. + Note :Applicable only for file mode capture" + ::= { pktCapCfgGrp 6 } + + +pktCapFmFUFileName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This specifies the name of the file with the source path on the file upload server. + This is optional. If not set, the filename used will be of the format + '%DEVICE_NAME%-PacketCapture-%TimeStamp%. + Note :Applicable only for file mode capture" + ::= { pktCapCfgGrp 7 } + +pktCapFmFUSetting OBJECT-TYPE + SYNTAX INTEGER { + manual (1), + automatic (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This option will determine whether user needs to + initiate the file upload or it will be done automatically. + Default: automatic + Note :Applicable only for file mode capture" + ::= {pktCapCfgGrp 8 } + +pktCapFilterFileName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet Capture Filter File Name send by NSM using secure TFTP channel" + ::= {pktCapCfgGrp 9 } + + +pktCapFilterFileTimeStamp OBJECT-TYPE + SYNTAX INTEGER (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet Capture FilterFile creationTimeStamp" + ::= {pktCapCfgGrp 10 } + +pktCapFmSCPUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "SCP Server Username. + Note :Applicable only for file mode capture and upload method is SCP" + ::= {pktCapCfgGrp 12 } + +pktCapFmSCPPassword OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "SCP Server Password. + Note :Applicable only for file mode capture and upload method is SCP" + ::= {pktCapCfgGrp 13 } + + +pktCapCommandGrp OBJECT IDENTIFIER ::= { pktCapCfgGrp 11 } + +pktCapCmd OBJECT-TYPE + SYNTAX INTEGER { + start (1), + stop (2), + delete-filter-file(3), + cancel(4), + delete-pcap-file(5) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to start/stop packet capture feature and also + to delete filter file. + Default: stop" + ::= {pktCapCommandGrp 1 } + +pktCapStatus OBJECT-TYPE + SYNTAX INTEGER { + running (1), + not-running (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Option to access packet capture Status. + Default: idle" + ::= {pktCapCommandGrp 2 } + +packetCaptureFmFUControl OBJECT-TYPE + SYNTAX INTEGER { + start (1), + stop (2), + upload-to-NSM (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to control manual upload of the file. + Note :Applicable only for file mode capture + Default: stop" + ::= {pktCapCommandGrp 3 } + +packetCaptureFmFileStatus OBJECT-TYPE + SYNTAX INTEGER { + fileUploadInProgress (1), + fileExistNotUploaded (2), + fileNotExist (3), + fileUploadFailed (4), + fileUploadDone (5), + fileUploadNotStarted (6) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet Capture File status. + Note :Applicable only for file mode capture + Default : fileUploadNotStarted" + ::= {pktCapCommandGrp 4 } + +packetCaptureFmTest OBJECT-TYPE + SYNTAX INTEGER { + start (1), + stop (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to test packet capture file upload function. + Note :Applicable only for file mode capture + Default: stop" + ::= {pktCapCommandGrp 5 } + +packetCaptureFmTestStatus OBJECT-TYPE + SYNTAX INTEGER { + success (1), + failure (2), + resultNotValid (3), + fileUploadServerConnectFailure (4), + fileUploadServerConnectTimeout (5), + fileUploadServerAuthenticationFailure (6), + fileUploadInProgress (7) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet Capture File upload test status. + Note :Applicable only for file mode capture + Default : resultNotValid" + ::= {pktCapCommandGrp 6 } + +dnsCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 36 } + +priDNSServerIp OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP address of the primary DNS server." + ::= { dnsCfgGrp 1 } + +secDNSServerIp OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP address of the secondary DNS server." + ::= { dnsCfgGrp 2 } + +priDNSServerIpV6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPV6 address of the primary DNS server." + ::= { dnsCfgGrp 3 } + +secDNSServerIpV6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPV6 address of the secondary DNS server." + ::= { dnsCfgGrp 4 } + +dnsSearchList OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(0..1024)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This specifies the space separated list of search suffix for DNS lookup" + ::= { dnsCfgGrp 5 } + + + + + +-- +-- This table has entries for layer7DCap Table. +-- + +layer7DCapConfigGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 37 } + +layer7DCapPercentageOfFlows OBJECT-TYPE + SYNTAX INTEGER (1..100) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies percentage of flows allocated for L7 Dcap when + layer7 DCap feature is enabled." + ::= { layer7DCapConfigGrp 1 } + +layer7DCapBuffSize OBJECT-TYPE + SYNTAX INTEGER (128..1500) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the size of the buffer to be captured when L7 Dap feature is enabled . +. Default: 1500" + ::= { layer7DCapConfigGrp 2 } + + +layer7DCapMaxSupportedFlows OBJECT-TYPE + SYNTAX INTEGER (1..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies maximum number of flows supported for L7 Dcap when L7 Dap feature is enabled ." + ::= { layer7DCapConfigGrp 3 } + + + interfacePhysicalPortGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 38 } + + intfPhysicalPortTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfPhysicalPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each interface physical port (indexed via intfPhysicalPortIndex) + on each sensor card (indexed via appropriate slotIndex). + + This table contains Trellix specific configuration objects. + Tables that contain MIB objects borrowed from MIB-II are in the + TRELLIX-SENSOR-PERF-MIB." + ::= { interfacePhysicalPortGrp 1 } + + intfPhysicalPortEntry OBJECT-TYPE + SYNTAX IntfPhysicalPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each interface physical port on each IntruShield sensor card. + Indexed by slotIndex/intfPhysicalPortIndex" + INDEX { slotIndex, + intfPhysicalPortIndex } + ::= { intfPhysicalPortTable 1 } + + IntfPhysicalPortEntry ::= SEQUENCE { + intfPhysicalPortIfDescr + DisplayString, + intfPhysicalPortIfType + TrellixIDSPortType, + intfPhysicalPortIfAdminStatus + INTEGER, + intfPhysicalPortIfOperStatus + INTEGER, + intfPhysicalPortEnableFullDuplex + TruthValue, + intfPhysicalPortSpeed + INTEGER, + intfPhysicalPortSpeedConfig + TrellixPortSpeed, -- was TrellixFEType, now deprecated + intfPhysicalPortIsMcafeeConnector + TruthValue, + intfPhysicalPortAllowAnyConnector + TruthValue, + intfPhysicalPortCageType + INTEGER, + intfPhysicalPortGetMediaType + INTEGER, + intfPhysicalPortSetMediaType + INTEGER, + intfPhysicalPortMonPortIpAddress + IpAddress, + intfPhysicalPortMonPortNetMask + IpAddress, + intfPhysicalPortGatewayIpAddress + IpAddress, + intfPhysicalPortNbadConfigStatus + TruthValue, + intfPhysicalPortVlanId + Integer32, + intfPhysicalPortLBSerialNumber + DisplayString, + intfPhysicalPortLBPortNumber + Integer32, + intfPhysicalPortConnectorType + INTEGER, + intfPhysicalPortLinearIndex + TrellixPortLinearIndex + } +intfPhysicalPortIfDescr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing information about the interface. + Returns the string that is printed on the box." + ::= { intfPhysicalPortEntry 1 } + +intfPhysicalPortIfType OBJECT-TYPE + SYNTAX TrellixIDSPortType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of interface, distinguished according to the + physical/link protocol(s) immediately 'below' the network + layer in the protocol stack. + + For brevity, Trellix options are as specified by the TC, + TrellixIDSPortType. + + However, the SNMP MIB-II - Interfaces MIB specifies many more + valid options. See comments section for details. + " + ::= { intfPhysicalPortEntry 2 } + +intfPhysicalPortIfAdminStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The desired state of the interface. + The testing(3) state indicates that no operational packets + can be passed. + + Default: down" + ::= { intfPhysicalPortEntry 3 } +intfPhysicalPortIfOperStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The current operational state of the interface. + The testing(3) state indicates that no operational packets + can be passed. + + Default: down" + ::= { intfPhysicalPortEntry 4 } + +intfPhysicalPortEnableFullDuplex OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Sets interface port to work as a full-duplex one. + Otherwise as half-duplex. + + Default: True" + ::= { intfPhysicalPortEntry 5 } + +intfPhysicalPortSpeed OBJECT-TYPE + SYNTAX INTEGER { + other (0), + ten-Mbps (1), + hundred-Mbps (2), + one-Gbps(3), -- renamed from gig-Mbps + ten-Gbps(4) -- support in M-series only + } + + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Get current speed/negotiation on the interface." + ::= { intfPhysicalPortEntry 6 } +intfPhysicalPortSpeedConfig OBJECT-TYPE + SYNTAX TrellixPortSpeed -- was TrellixFEType, now deprecated + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Set desired speed/negotiation on the interface. + Default values are as follows: + I-Series - + fixed-hundred-Mbps (infinity/hichborn/2x00(1a-3b) + auto-gig-Mbps on 3000/4010/4000/2x00(4a,4b) + M-Series - + auto-ten-gig-Mbps on palomar/pyramid(1a-4b),auto-gig-Mbps(5a-8b) + Default: see above" + ::= { intfPhysicalPortEntry 7 } + +-- intfPhysicalPortIsMcafeeConnector support in M-series sensor only +intfPhysicalPortIsMcafeeConnector OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "True: connector is not inserted. + True: connector is inserted in port and McAfee certified. + False: connector is inserted and not McAfee certified. " + ::= { intfPhysicalPortEntry 8 } + +-- intfPhysicalPortAllowAnyConnector support in M-series sensor only +intfPhysicalPortAllowAnyConnector OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Permit usage of any connector for port. + False: Restrict usage to McAfee certified connector only. + Default: False" + ::= { intfPhysicalPortEntry 9 } +-- intfPhysicalPortCageType support in M-series sensor only +intfPhysicalPortCageType OBJECT-TYPE + SYNTAX INTEGER { + other (0), + rJ-45 (1), + rJ-11 (2), + gBIC (3), + sFP (4), + xFP (5) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Physical connector cage type on sensor chassis panel." + ::= { intfPhysicalPortEntry 10 } + +-- intfPhysicalPortGetMediaType support in M-series sensor only +intfPhysicalPortGetMediaType OBJECT-TYPE + SYNTAX INTEGER { + none (0), + optical (1), + electrical (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Gets the media of the connector present in the port cage. None (0) if cage is empty." + ::= { intfPhysicalPortEntry 11 } + +-- intfPhysicalPortSetMediaType support in M-series sensor only +intfPhysicalPortSetMediaType OBJECT-TYPE + SYNTAX INTEGER { + optical(1), + electrical (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Sets the media of the connector the user desired for the port. + Default: optical" + ::= { intfPhysicalPortEntry 12 } +intfPhysicalPortMonPortIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve the IPv4 address of the monitoring port. + Default: 0.0.0.0" + ::= { intfPhysicalPortEntry 13 } + +intfPhysicalPortMonPortNetMask OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve netmask for the IPv4 address of the monitoring port. + Default: 0.0.0.0" + ::= { intfPhysicalPortEntry 14 } + +intfPhysicalPortGatewayIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve the IPv4 address of the gateway. + Default: 0.0.0.0" + ::= { intfPhysicalPortEntry 15 } + +intfPhysicalPortNbadConfigStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that flow record generation + to be sent to the NBAD server, is enabled over this monitoring port. + Default: False" + ::= { intfPhysicalPortEntry 16 } +intfPhysicalPortVlanId OBJECT-TYPE + SYNTAX Integer32 (0..2164326399) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object indicates the Vlan ID of the VLAN to which the monitoring + port is connected." + ::= { intfPhysicalPortEntry 17 } + +intfPhysicalPortLBSerialNumber OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object indicates the manufacturer provided serial number of + the Load Balancer switch to which the sensor port is connected." + ::= { intfPhysicalPortEntry 18 } + + +intfPhysicalPortLBPortNumber OBJECT-TYPE + SYNTAX Integer32 (1..16) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object returns the port number on the Load Balancer switch to + which the sensor port is connected." + ::= { intfPhysicalPortEntry 19 } + +-- intfPhysicalPortConnectorType support in R-series sensor only +intfPhysicalPortConnectorType OBJECT-TYPE + SYNTAX INTEGER { + other (0), + qSFP (1), + sFP-plus (2), + sFP-fiber (3), + sFP-copper (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Physical connector type plugged into the port cage." + ::= { intfPhysicalPortEntry 20 } + +intfPhysicalPortLinearIndex OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object indicates the Linear Index of the monitoring port. This index is + generated by the sensor appliance using the pair of slot index and the port index values. + The other MIB tables would directly use this linear index, whereever applicable." + ::= { intfPhysicalPortEntry 21 } + +-- +-- This group has entries for GTI configuration. +-- + +gtiConfigGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 39 } + +gtiProxyServerName OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The proxy server name is the domain name of the HTTP proxy + server in front of the sensor. It looks like www.company.com. + It can also be the IP address of the HTTP proxy server. + 0.0.0.0 is the default value" + ::= { gtiConfigGrp 1 } + +gtiProxyPort OBJECT-TYPE + SYNTAX Integer32 (0..10000) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "TCP Port on which the HTTP proxy server is listening. + 0 is the default value" + ::= { gtiConfigGrp 2 } + +gtiProxyUsername OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The username to be used to connect to the HTTP proxy server." + ::= { gtiConfigGrp 3 } + +gtiProxyPassword OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The password to be used to connect to the HTTP proxy server." + ::= { gtiConfigGrp 4 } + +gtiConfigPrivateCloudGrp OBJECT IDENTIFIER ::= { gtiConfigGrp 5 } + +gtiPrivateCloudServerIPAddressType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Identifies the type of GTI Private Cloud Server IP Address. If set to ip-v4, then the + gtiPrivateCloudServerIPv4Address object would be set else if this object is set to ip-v6, then + the gtiPrivateCloudServerIPv6Address object would be set. " + ::= { gtiConfigPrivateCloudGrp 1 } + +gtiPrivateCloudServerIPv4Address OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv4 address of the GTI Private Cloud server. + The gtiPrivateCloudServerIPv6Address would be zero if the current object is initialized." + ::= { gtiConfigPrivateCloudGrp 2 } + +gtiPrivateCloudServerIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv6 address of the GTI Private Cloud server. + The gtiPrivateCloudServerIPv4Address would be zero if the current object is initialized." + ::= { gtiConfigPrivateCloudGrp 3 } + +gtiPrivateCloudServerConnectionConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2), + reconnect (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to enable or disable or reconnect the Connection with + the GTI Private Cloud Server. + Default: 2, disable" + ::= { gtiConfigPrivateCloudGrp 4 } + +gtiPrivateCloudServerDeleteCertificate OBJECT-TYPE + SYNTAX INTEGER { + delete (1), + dont-delete (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to delete the GTI Private Cloud Server Certificate at the sensor. + For deleting this certificate, the gtiPrivateCloudServerConnectionConfig should be + disabled. DEFAULT: 2, dont-delete" + ::= { gtiConfigPrivateCloudGrp 5 } + +gtiPrivateCloudServerCertificateStatus OBJECT-TYPE + SYNTAX INTEGER { + present (1), + not-Present (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to indicate the GTI Private Cloud server + certificate status at the sensor" + ::= { gtiConfigPrivateCloudGrp 6 } + +gtiPrivateCloudChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + gtiPrivateCloud-TrustedSource-Channel-Down (0), + gtiPrivateCloud-TrustedSource-Channel-InProgress (1), + gtiPrivateCloud-TrustedSource-Channel-Established (2), + gtiPrivateCloud-TrustedSource-Channel-Status-Unknown (3), + gtiPrivateCloud-TrustedSource-Channel-Down-Error-In-Cert-ret(4), + gtiPrivateCloud-Network-Issue (5) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to indicate the gtiPrivateCloud channel status at + the sensor" + ::= { gtiConfigPrivateCloudGrp 7 } + +gtiUnifiedConfigGrp OBJECT IDENTIFIER ::= { gtiConfigGrp 6 } + +gtiFileRESTGTIType OBJECT-TYPE + SYNTAX INTEGER { + private-gti-server (1), + public-gti-server (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send type of GTI server to use for file reputation feature. + DEFAULT: 2, public-gti-server" + ::= { gtiUnifiedConfigGrp 1 } + +gtiFileRESTPublicGTIFQDN OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send Name Server or FQDN of File Rep GTI server. + Default value is NULL" + ::= { gtiUnifiedConfigGrp 2 } + +gtiFileRESTUsername OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send username for configured GTI server. + It should be sent in both cases, public server and private server. + Default value is NULL" + ::= { gtiUnifiedConfigGrp 3 } + +gtiFileRESTPassword OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send password for configured GTI server. + It should be sent in both cases, public server and private server. + Default value is NULL" + ::= { gtiUnifiedConfigGrp 4 } + +gtiFileRESTConnectionConfig OBJECT-TYPE + SYNTAX INTEGER { + connect-private-gti-server (1), + connect-public-gti-server (2), + reconnect-private-gti-server (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send action to take with the recieved config. + Value 1 will be sent when config is changed to private GTI server first time. + Value 2 will be sent when config is changed to public GTI server. + Value 3 will be sent when private GTI server config is changed, given that + private GTI server is enabled already. Default value: 2" + ::= { gtiUnifiedConfigGrp 5 } + +gtiFileRESTPvtGTIIPType OBJECT-TYPE + SYNTAX INTEGER { + fqdn (1), + ipv4 (4), + ipv6 (6) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send address type of configured GTI server. + Default value: 4, IPv4" + ::= { gtiUnifiedConfigGrp 6 } + +gtiFileRESTPvtGTIIPv4Address OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv4 address of the GTI File-Rep REST Cloud server. + The gtiFileRESTPvtGTIIPV6Address would be zero if the current object is initialized. + Default Value: NULL" + ::= { gtiUnifiedConfigGrp 7 } + +gtiFileRESTPvtGTIIPV6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv6 address of the GTI File-Rep REST Cloud server. + The gtiFileRESTPvtGTIIPv4Address would be zero if the current object is initialized. + Default Value: NULL" + ::= { gtiUnifiedConfigGrp 8 } + + ntpConfigGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 40 } + ntpConfigTable OBJECT-TYPE + SYNTAX SEQUENCE OF NtpConfigEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each NTP(Network Time Protocol) server that is specified (indexed via ntpServerIndex). + A maximum of two entries will be supported. Valid ntpServerIndex values are 1 and 2." + ::= { ntpConfigGrp 1 } + + ntpConfigEntry OBJECT-TYPE + SYNTAX NtpConfigEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry comprises the ntp client side configuration for each of the ntp servers specified." + INDEX { ntpServerIndex } + ::= { ntpConfigTable 1 } + + NtpConfigEntry ::= SEQUENCE { + ntpConfigServerIPv4 + IpAddress, + ntpConfigServerIPv6 + Ipv6Address, + ntpConfigPollInterval + INTEGER, + ntpConfigAuthenticationEnable + TruthValue, + ntpConfigKeyId + Integer32, + ntpConfigKeyType + INTEGER, + ntpConfigKeyValue + OCTET STRING + } +ntpConfigServerIPv4 OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to specify the IPv4 address of the remote NTP server. + Default: 0.0.0.0" + ::= { ntpConfigEntry 1 } + +ntpConfigServerIPv6 OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to specify the IPv6 address of the remote NTP server." + ::= { ntpConfigEntry 2 } + +ntpConfigPollInterval OBJECT-TYPE + SYNTAX INTEGER (3..17) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the minimum poll interval. + The value which is received represents the exponent of 2. If the received value is + x then NTPD daemon process will calculate the min poll as 2^x seconds. + Default: 6" + + ::= { ntpConfigEntry 3 } + +ntpConfigAuthenticationEnable OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies if ntp server authentication is enabled or not for the specified + ntp server. + False : Authentication Disable + True : Authentication Enable + Default: False" + + ::= { ntpConfigEntry 4 } + +ntpConfigKeyId OBJECT-TYPE + SYNTAX Integer32 (1..65534) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object specifies the key id for the corresponding association between an + ntp server and ntp client. This object is used only if ntp server authentication is enabled. + Default: 1" + ::= { ntpConfigEntry 5 } + +ntpConfigKeyType OBJECT-TYPE + SYNTAX INTEGER { + md5 (1), + sha (2), + sha1 (3), + not-supported (4) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the key type for the corresponding key id. This object is used + only if ntp server authentication is enabled. + Default: MD5(1)" + ::= { ntpConfigEntry 6 } + +ntpConfigKeyValue OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(0..128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the symmetric key value for the corresponding key id. This object + is used only if ntp server authentication is enabled." + ::= { ntpConfigEntry 7 } + +ntpConfigFileCreate OBJECT-TYPE + SYNTAX INTEGER { + stop-ntpd (0), + start-ntpd (1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to (create ntp.conf file and start)/(stop) ntpd process. + Default: stop-ntpd (0)" + ::= { ntpConfigGrp 2 } + +-- This group conatins all MIB objects that specify the configuration of +-- the IntruShield pluggable modules. +-- +-- The object pluggableModuleTable within this group suggests that the MIB is +-- designed to support pluggable modules that can contain more than one interface +-- port. +-- +-- Support for pluggableModuleGrp is deprecated in V-series sensors(VmIPS). +pluggableModuleGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 41 } + +pluggableModuleTable OBJECT-TYPE + SYNTAX SEQUENCE OF PluggableModuleEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each pluggable Module (indexed via slotIndex)." + ::= { pluggableModuleGrp 1 } + +pluggableModuleEntry OBJECT-TYPE + SYNTAX PluggableModuleEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each pluggable module on each IntruShield sensor + card. Indexed by slotIndex" + INDEX { slotIndex } + ::= { pluggableModuleTable 1 } + +PluggableModuleEntry ::= SEQUENCE { + moduleSerialNumber + DisplayString, + moduleSysType + TrellixPluggableModuleType, + modulePresent + TruthValue, + moduleNumPorts + INTEGER, + moduleRebootRequired + TruthValue +} + +moduleSerialNumber OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object describes the Manufacturer-provided serial number + of the pluggable module." + ::= { pluggableModuleEntry 1 } + +moduleSysType OBJECT-TYPE + SYNTAX TrellixPluggableModuleType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object describes the type of the module plugged in." + ::= { pluggableModuleEntry 2 } + +modulePresent OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "True: Indicates the module is present. + Otherwise not present. + Default: False" + ::= { pluggableModuleEntry 3} + +moduleNumPorts OBJECT-TYPE + SYNTAX INTEGER (0..12) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object returns the number of ports in this module." + ::= { pluggableModuleEntry 4 } + +moduleRebootRequired OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object returns whether a reboot is needed to apply the module. + Default: False" + ::= { pluggableModuleEntry 5 } + + +-- +-- insightixNetworkGrp +-- + +insightixNetworkGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 42 } + +insightixCfgGrp OBJECT IDENTIFIER ::= { insightixNetworkGrp 1 } + +ldapServerIPAddressType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Identifies the type of Insightix LDAP server IPAddress. If set to ip-v4, then the + ldapServerIpv4Address object would be set else if this object is set to ip-v6, then + the ldapServerIpv6Address object would be set. " + ::= { insightixCfgGrp 1 } + +ldapServerIPv4Address OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The IPv4 address of the Insightix LDAP server" + ::= { insightixCfgGrp 2 } + +ldapServerIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPv6 Address of the Insightix LDAP server." + ::= { insightixCfgGrp 3 } + +ldapServerPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The ldap server listener port on the insightix server. If SSL is enabled, the standard portnum is 636, + else if ssl is disabled, the standard portnum is 389. + Default: 636" + ::= { insightixCfgGrp 4 } + +ldapServerSSLConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies if SSL is enabled for insightix ldap server. + Default: 1, enable" + ::= { insightixCfgGrp 5 } + +ldapServerBaseDN OBJECT-TYPE + SYNTAX DisplayString (SIZE(3..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Base Distinguished Name to be used for retrieving device profile information from the Insightix ldap server. + Default : dc=insightix" + ::= { insightixCfgGrp 6 } + +ldapServerUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(3..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "UserName to be used for authenticating to the Insightix ldap server." + ::= { insightixCfgGrp 7 } + +ldapServerPassword OBJECT-TYPE + SYNTAX DisplayString (SIZE(3..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Password to be used for authenticating to the Insightix ldap server." + ::= { insightixCfgGrp 8 } + +ldapServerConfigAction OBJECT-TYPE + SYNTAX INTEGER { + enable(1), + disable(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object describes about the sensor's possible configuration actions with the insightix ldap server. + Default: 2, disable" + ::= { insightixCfgGrp 9 } + +ldapServerConfigStatus OBJECT-TYPE + SYNTAX INTEGER { + disConnected (1), + inProgress (2), + connected (3), + sslError(4), + baseDNError(5), + credError(6), + ldapServerError(7), + ldapServerTimeoutError(8), + ldapServerConnectionError(9) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This describes the sensor's possible insightix ldap server configuration states. + Default : deinstalled (4)" + ::= { insightixCfgGrp 10 } + +-------------------------------------------------- + +-- +-- ntbaChannelCfgGrp +-- + +ntbaChannelCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 43 } + +ntbaServerIPAddressType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IP address type of the + mgmt port at the NTBA end" + ::= { ntbaChannelCfgGrp 1 } + +ntbaServerIPv4Address OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv4 address of the NTBA server. + The ntbaServerIPv6Address would be zero if the current object is initialized" + ::= { ntbaChannelCfgGrp 2 } + +ntbaServerIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv6 address of the NTBA server. + The ntbaServerIPv4Address would be zero if the current object is initialized" + ::= { ntbaChannelCfgGrp 3 } + +ntbaServerPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the NTBA Server Listening TCP port + Default: 8505" + ::= { ntbaChannelCfgGrp 4 } + +ntbaServerConnectionConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to enable or disable the TCP Connection with + the NTBA server + Default: 2, disable" + ::= { ntbaChannelCfgGrp 5 } + +ntbaServerDeleteCertificate OBJECT-TYPE + SYNTAX INTEGER { + delete (1), + dont-delete (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to delete the ntba Server Certificate at the sensor. + For deleting this certificate, the ntbaServerConnectionConfig should be + disabled. DEFAULT: 2, dont-delete" + ::= { ntbaChannelCfgGrp 6 } + +ntbaServerCertificateStatus OBJECT-TYPE + SYNTAX INTEGER { + present (1), + not-present (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to indicate the NTBA server certificate status at + the sensor" + ::= { ntbaChannelCfgGrp 7 } + +ntbaShdKeySHAValue OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object contains the SHA1 hashed value of sensor name and sensormodel from NSM" + ::= { ntbaChannelCfgGrp 8 } + +ntbaChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + ntba-Channel-Down (0), + ntba-Channel-InProgress (1), + ntba-Channel-Established (2), + ntba-Channel-Status-Unknown (3), + ntba-Cert-Mismatch (4), + ntba-Hash-Mismatch (5), + ntba-Network-Issue (6) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to indicate the NTBA SSL channel status at + the sensor" + ::= { ntbaChannelCfgGrp 9 } + +-------------------------------------------------- + +-- +-- validEdgeChannelCfgGrp +-- + +validEdgeChannelCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 44 } + +validEdgeServerIPAddressType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IP address type of the + mgmt port at the validEdge end" + ::= { validEdgeChannelCfgGrp 1 } + +validEdgeServerIPv4Address OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv4 address of the validEdge server. + The validEdgeServerIPv6Address would be zero if the current object is initialized" + ::= { validEdgeChannelCfgGrp 2 } + +validEdgeServerIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv6 address of the validEdge server. + The validEdgeServerIPv4Address would be zero if the current object is initialized" + ::= { validEdgeChannelCfgGrp 3 } + +validEdgeServerPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the validEdge Server Listening TCP port + Default: 8505" + ::= { validEdgeChannelCfgGrp 4 } + +validEdgeServerConnectionConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to enable or disable the TCP Connection with + the validEdge server + Default: 2, disable" + ::= { validEdgeChannelCfgGrp 5 } + +validEdgeServerDeleteCertificate OBJECT-TYPE + SYNTAX INTEGER { + delete (1), + dont-delete (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to delete the validEdge Server Certificate at the sensor. + For deleting this certificate, the validEdgeServerConnectionConfig should be + disabled. DEFAULT: 2, dont-delete" + ::= { validEdgeChannelCfgGrp 6 } + +validEdgeServerCertificateStatus OBJECT-TYPE + SYNTAX INTEGER { + present (1), + not-present (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to indicate the validEdge server certificate status at + the sensor" + ::= { validEdgeChannelCfgGrp 7 } + +validEdgeShdKeySHAValue OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(128)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object contains the SHA1 hashed value of sensor name and sensormodel from NSM" + ::= { validEdgeChannelCfgGrp 8 } + +validEdgeChannelStatus OBJECT-TYPE + SYNTAX INTEGER { + validEdge-Channel-Down (0), + validEdge-Channel-InProgress (1), + validEdge-Channel-Established (2), + validEdge-Channel-Status-Unknown (3), + validEdge-Cert-Mismatch (4), + validEdge-Hash-Mismatch (5), + validEdge-Network-Issue (6), + validEdge-Channel-Down-Error-In-Cert-ret(7), + validEdge-Channel-Down-No-Config(8), + validEdge-Channel-Down-Wrong-Config(9), + validEdge-Channel-Down-Cert-Absent(10), + validEdge-Channel-SSL-HandShake-Fail(11), + validEdge-Channel-Down-Reason-Unknown(12), + validEdge-Channel-Down-Config-Disable(13), + validEdge-Channel-Down-Closed-By-NTBA(14), + validEdge-Channel-Down-Large-Pkt-From-NTBA(15), + validEdge-Channel-Down-Missed-KeepAlives(16), + validEdge-Channel-Up-No-Reason(17) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to indicate the validEdge SSL channel status at + the sensor" + ::= { validEdgeChannelCfgGrp 9 } + +validEdgeChannelGlobalUserId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure global matd user id/profile id assigned to a sensor." + ::= { validEdgeChannelCfgGrp 10 } + + +validEdgeChannelGlobalUserName OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(32)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + " This object is used to configure global matd user name/profile name assigned to a sensor." + ::= { validEdgeChannelCfgGrp 11 } + + +-------------------------------------------------- + +-- +-- dxlCfgGrp +-- + +dxlCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 45 } + +dxlConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to enable(1) or dissable(2) the DXL on Sensor." + ::= {dxlCfgGrp 1 } + +epoCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 46 } + +epoIPAddressType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Identifies the type of EPO IPAddress. If set to ip-v4, then the epoIPAddress object + would be set else if this object is set to ip-v6, then the epoIPv6Address object + would be set." + ::= { epoCfgGrp 1 } + +epoIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The IPv4 Address of the EPO Server" + ::= { epoCfgGrp 2 } + +epoIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "IPv6 Address of a EPO Server" + ::= { epoCfgGrp 3 } + +epoPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The EPO port through which MA connects to EPO Server Default: 8443" + ::= { epoCfgGrp 4 } + +epoCredUsername OBJECT-TYPE + SYNTAX DisplayString (SIZE(3..100)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "EPO server :username" + ::= { epoCfgGrp 5 } + +epoCredPasswd OBJECT-TYPE + SYNTAX DisplayString (SIZE(3..100)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "EPO server :Password" + ::= { epoCfgGrp 6 } + +epoAction OBJECT-TYPE + SYNTAX INTEGER { + connect (1), + disconnect (2), + reconnect (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This config object indicates the epo action (1-Connect, 2-Disconnect, 3-Reconnect) to be taken + by all the dependent modules in the sensor." + ::= { epoCfgGrp 7 } + +--User authentication using RADIUS + +radiusAuthGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 47 } + +radiusAuthConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This action object can be used to enable/re-init or disable user authentication using RADIUS. + The value of 'True/Enable' would be interpreted as 're-init', when the configuration is already set to True/Enable. + Default: False (2)" + ::= { radiusAuthGrp 1} + +radiusPrimaryServerIPAddrType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Identifies the type of IPAddress of the Primary Radius Server. If set to ip-v4, then the radiusPrimaryServerIPAddr object + would be set else if this object is set to ip-v6, then the radiusPrimaryServerIPv6Addr object + would be set." + ::= { radiusAuthGrp 2 } + +radiusPrimaryServerIPAddr OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the IPv4 Address of the Primary RADIUS server" + ::= { radiusAuthGrp 3 } + +radiusPrimaryServerIPv6Addr OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the IPv6 Address of the Primary RADIUS Server" + ::= { radiusAuthGrp 4 } + + +radiusPrimaryServerEncrSecret OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..64)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the secret to be used in generating the encrypted RADIUS traffic between the client and Primary Radius Server" + ::= { radiusAuthGrp 5} + +radiusPriServerAuthPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the port on which Primary RADIUS Server is listening for authentication requests. + Default: 1812" + ::= { radiusAuthGrp 6} + +radiusPriServerAccConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies whether accounting has to be enabled on the Primary Radius Server or not. + Default: True (1)" + ::= { radiusAuthGrp 7} + +radiusPriServerAccPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the port on which Primary RADIUS Server is listening for accounting requests. + Default: 1813" + ::= { radiusAuthGrp 8} + +radiusPriServerConnTimeOut OBJECT-TYPE + SYNTAX INTEGER (1..60) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the time in seconds the client has to wait before it can contact the Backup RADIUS Server in case the Primary RADIUS Server fails. + Default: 6" + ::= { radiusAuthGrp 9} + +radiusBackupServerIPAddrType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the IP Address Type of the Backup RADIUS server" + ::= { radiusAuthGrp 10 } + + +radiusBackupServerIPAddr OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the IPv4 Address of the Backup RADIUS server" + ::= { radiusAuthGrp 11 } + +radiusBackupServerIPv6Addr OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the IPv6 Address of the Backup RADIUS Server" + ::= { radiusAuthGrp 12 } + +radiusBackupServerEncrSecret OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..256)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the secret to be used in generating the encrypted RADIUS traffic between the client and Backup Radius Server" + ::= { radiusAuthGrp 13 } + +radiusBackupServerAuthPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the port on which Backup RADIUS Server is listening for authentication requests. + Default: 1812" + ::= { radiusAuthGrp 14} + +radiusBackupServerAccConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies whether accounting has to be enabled on the Backup Radius Server or not. + Default: True (1)" + ::= { radiusAuthGrp 15} + +radiusBackupServerAccPort OBJECT-TYPE + SYNTAX INTEGER (1..65535) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the port on which Backup RADIUS Server is listening for accounting requests. + Default: 1813" + ::= { radiusAuthGrp 16} + +radiusBackupServerConnTimeOut OBJECT-TYPE + SYNTAX INTEGER (1..60) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object specifies the time in seconds before which the the sensor decides that the Backup server is not responding. + Default: 6" + ::= { radiusAuthGrp 17} + + +sshAccessGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 48 } + +sshAccessCfgGrp OBJECT IDENTIFIER ::= { sshAccessGrp 1 } + +sshAccessControlStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable ssh access control list for ipv4. + Default: false (2)" + ::= {sshAccessCfgGrp 1 } + +sshAccessControlResetIpv4 OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to to delete/reset the ssh access ipv4 contol list. + Default: false (2)" + ::= {sshAccessCfgGrp 2 } + +sshAccessLogSupport OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to enable/disable ssh access messages logging support. + Default: false (2)" + ::= {sshAccessCfgGrp 3 } + +sshAccessControlResetIpv6 OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to delete/reset ssh access control list for ipv6. + Default: false (2)" + ::= {sshAccessCfgGrp 4 } + +sshAccessNumIpv4Entries OBJECT-TYPE + SYNTAX INTEGER (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object ranges from 1 to 100, as only a maximum of 100 entries are supported." + ::= { sshAccessGrp 2 } + + +sshAccessIpTable OBJECT-TYPE + SYNTAX SEQUENCE OF SSHAccessIpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { sshAccessGrp 3 } + +sshAccessIpEntry OBJECT-TYPE + SYNTAX SSHAccessIpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . " + INDEX { sshIpv4Index } + ::= { sshAccessIpTable 1 } + +SSHAccessIpEntry ::= SEQUENCE { + sshIpv4Index + INTEGER, + sshIpAddress + IpAddress, + sshMaskIpv4 + INTEGER, + sshAccessIpConfig + RowStatus +} + +sshIpv4Index OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This object sshIpv4Index ranges from 1 to 100, It support only 100 entries." + ::= { sshAccessIpEntry 1 } + +sshIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP Address of a SSH Access Control(ipv4)." + ::= { sshAccessIpEntry 2 } + +sshMaskIpv4 OBJECT-TYPE + SYNTAX INTEGER (1..32) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Mask of a SSH Access Control(ipv4)." + ::= { sshAccessIpEntry 3 } + +sshAccessIpConfig OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object used for user to add and delete rows in to the table." + ::= { sshAccessIpEntry 4 } + +sshAccessNumIpv6Entries OBJECT-TYPE + SYNTAX INTEGER (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object ranges from 1 to 100, as only a maximum of 100 entries are supported." + ::= { sshAccessGrp 4 } + +sshAccessIpv6Table OBJECT-TYPE + SYNTAX SEQUENCE OF SSHAccessIpv6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { sshAccessGrp 5 } + +sshAccessIpv6Entry OBJECT-TYPE + SYNTAX SSHAccessIpv6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + " + INDEX { sshIpv6Index } + ::= { sshAccessIpv6Table 1} + +SSHAccessIpv6Entry ::= SEQUENCE { + sshIpv6Index + INTEGER, + sshAccessIpv6Address + Ipv6Address, + sshAccessIpv6Mask + INTEGER, + sshAccessIpv6Config + RowStatus +} + +sshIpv6Index OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This object sshIpv6Index range from 1 to 100, It support max +100 entries" + ::= { sshAccessIpv6Entry 1 } + + +sshAccessIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPv6 address for the ssh access control list" + ::= { sshAccessIpv6Entry 2 } + +sshAccessIpv6Mask OBJECT-TYPE + SYNTAX INTEGER (1..128) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPv6 Mask for the ssh access control list" + ::= { sshAccessIpv6Entry 3 } + +sshAccessIpv6Config OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object used for user to add and delete rows in to the table." + ::= { sshAccessIpv6Entry 4 } + +-------------------------------------------------- +-- This group contains all MIB objects that specify the configuration of +-- pluggable modules for the VSS Switch Load Balancer to be used in conjunction with +-- existing MIB interfacePortGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 11 } which will be used as virtual interface port group of VSS switch. + +virtualPluggableModuleGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 49 } + +moduleOneNumPorts OBJECT-TYPE + SYNTAX INTEGER (0..16) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object returns the number of ports in the first module of VSS Box. + To be used in conjunction with interfacePortGrp of { ivSensorConfigurationMIB 11 } to represent attributes of VSS switch virtual ports. + Default: 0 (If the module is not inserted)" + ::= { virtualPluggableModuleGrp 1 } + +moduleTwoNumPorts OBJECT-TYPE + SYNTAX INTEGER (0..16) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object returns the number of ports in the first module of VSS Box. + To be used in conjunction with interfacePortGrp of { ivSensorConfigurationMIB 11 } to represent attributes of VSS switch virtual ports. + Default: 0 (If the module is not inserted)" + ::= { virtualPluggableModuleGrp 2 } + +-------------------------------------------------- +-- +-- sslProbeAccessGrp +-- + +sslProbeAccessGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 51 } + +sslProbeAccessCfgGrp OBJECT IDENTIFIER ::= { sslProbeAccessGrp 1 } + +sslProbeAccessMaxAgentConn OBJECT-TYPE + SYNTAX INTEGER (1..1024) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to restrict the total number of connections + that the sensor can handle from the SSL Probes. + Default: 1024" + ::= {sslProbeAccessCfgGrp 1 } + +sslProbeAccessNumIpv4Entries OBJECT-TYPE + SYNTAX INTEGER (0..64) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object ranges from 1 to 64, as only a maximum of 64 entries are supported." + ::= { sslProbeAccessGrp 2 } + + +sslProbeAccessIpTable OBJECT-TYPE + SYNTAX SEQUENCE OF SSLProbeAccessIpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { sslProbeAccessGrp 3 } + +sslProbeAccessIpEntry OBJECT-TYPE + SYNTAX SSLProbeAccessIpEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . " + INDEX { sslProbeIpv4Index } + ::= { sslProbeAccessIpTable 1 } + +SSLProbeAccessIpEntry ::= SEQUENCE { + sslProbeIpAddress + IpAddress, + sslProbeMaskIpv4 + INTEGER, + sslProbeAccessIpConfig + RowStatus +} + +sslProbeIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IP Address of a SSL Probe Access Control(ipv4)." + ::= { sslProbeAccessIpEntry 1 } + +sslProbeMaskIpv4 OBJECT-TYPE + SYNTAX INTEGER (1..32) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Mask of a SSL Probe Access Control(ipv4)." + ::= { sslProbeAccessIpEntry 2 } + +sslProbeAccessIpConfig OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object used for user to add and delete rows in to the table." + ::= { sslProbeAccessIpEntry 3 } + +sslProbeAccessNumIpv6Entries OBJECT-TYPE + SYNTAX INTEGER (0..64) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object ranges from 1 to 64, as only a maximum of 64 entries are supported." + ::= { sslProbeAccessGrp 4 } + +sslProbeAccessIpv6Table OBJECT-TYPE + SYNTAX SEQUENCE OF SSLProbeAccessIpv6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { sslProbeAccessGrp 5 } + +sslProbeAccessIpv6Entry OBJECT-TYPE + SYNTAX SSLProbeAccessIpv6Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + " + INDEX { sslProbeIpv6Index } + ::= { sslProbeAccessIpv6Table 1} + +SSLProbeAccessIpv6Entry ::= SEQUENCE { + sslProbeAccessIpv6Address + Ipv6Address, + sslProbeAccessIpv6Mask + INTEGER, + sslProbeAccessIpv6Config + RowStatus +} + +sslProbeAccessIpv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPv6 address for the sslProbe access control list" + ::= { sslProbeAccessIpv6Entry 1 } + +sslProbeAccessIpv6Mask OBJECT-TYPE + SYNTAX INTEGER (1..128) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "IPv6 Mask for the sslProbe access control list" + ::= { sslProbeAccessIpv6Entry 2 } + +sslProbeAccessIpv6Config OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object used for user to add and delete rows in to the table." + ::= { sslProbeAccessIpv6Entry 3 } + +-------------------------------------------------- + +--This group contains MIB objects related to Sensor Certificate Configuration + +sensorCertificateGroup OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 52 } + +sensorCertificateConfigGrp OBJECT IDENTIFIER ::= { sensorCertificateGroup 1 } + +sensorCertificateCSRConfigGrp OBJECT IDENTIFIER ::= { sensorCertificateConfigGrp 1 } + +sensorCertificateCSRCountryName OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Country name for generating the CSR. Use the two-letter code + without punctuation for country like US or CA." + ::= { sensorCertificateCSRConfigGrp 1 } + +sensorCertificateCSRStateProvince OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "State or Province name for generating the CSR. Spell out the + state completely." + ::= { sensorCertificateCSRConfigGrp 2 } + +sensorCertificateCSRLocality OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "City or town name for generating the CSR." + ::= { sensorCertificateCSRConfigGrp 3 } + +sensorCertificateCSRCompany OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Company name for generating the CSR. If the company name has + symbols, spell out the symbol or omit it to enroll." + ::= { sensorCertificateCSRConfigGrp 4 } + +sensorCertificateCSROrganizationalUnit OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The organizational unit is the name of the department or organization unit + making the request. This is an optional field" + ::= { sensorCertificateCSRConfigGrp 5 } + +sensorCertificateCSRCommonName OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The common name is the host plus domain name. It looks like + www.company.com or company.com." + ::= { sensorCertificateCSRConfigGrp 6 } + +sensorCertificateCSRGenerateAction OBJECT-TYPE + SYNTAX INTEGER { + other(0), + generateCSR(1), + generateSelfSigned(2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This action is used to generate the CSR/self signed certificate. + Default : other (0)" + ::= { sensorCertificateCSRConfigGrp 7 } + +sensorCertificateCSRGenerateStatus OBJECT-TYPE + SYNTAX INTEGER { + other (0), + generationInProgress (1), + generationComplete (2), + generationFailed (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object describes the possible CSR generation states. + Default : other (0)" + ::= { sensorCertificateCSRConfigGrp 8 } + +sensorCertSubAltName OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "To push sensorCert subject alternative name" + ::= { sensorCertificateCSRConfigGrp 9 } + +sensorCertificateStatus OBJECT-TYPE + SYNTAX INTEGER { + other (0), + certAbsent (1), + defaultCert (2), + selfsignedCert (3), + casignedCert (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object indicates the cert status on the sensor. + Default: 0" + ::= { sensorCertificateConfigGrp 2 } + +sensorCertMigrateAction OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "To push request for sensor cert migration" + ::= { sensorCertificateConfigGrp 3 } + +-------------------------------------------------- + +sensorStackGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 53 } + +stackName OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Stack Name" + ::= { sensorStackGrp 1 } + +stackNodeId OBJECT-TYPE + SYNTAX INTEGER (1..16) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "ID of stackNode." + ::= { sensorStackGrp 2 } + +stackNodeLeftNeighbour OBJECT-TYPE + SYNTAX INTEGER (1..16) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Node id of Left Neighbour, configured in stack" + ::= { sensorStackGrp 3 } + +stackNodeRightNeighbour OBJECT-TYPE + SYNTAX INTEGER (1..16) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Node id of Right Neighbour, configured in stack" + ::= { sensorStackGrp 4 } + + +interfaceVirtualPortGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 54 } + +intfVirtualPortTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfVirtualPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each interface port (indexed via intfPortIndex) + on each sensor card (indexed via appropriate slotIndex). + + This table contains Trellix specific configuration objects. + Tables that contain MIB objects borrowed from MIB-II are in the + TRELLIX-SENSOR-PERF-MIB." + ::= { interfaceVirtualPortGrp 1 } + +intfVirtualPortEntry OBJECT-TYPE + SYNTAX IntfVirtualPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each interface port on each IntruShield sensor card. + Indexed by slotIndex/intfPortIndex" + INDEX { intfVirtualSlotIndex, + intfVirtualPortIndex } + ::= { intfVirtualPortTable 1 } + +IntfVirtualPortEntry ::= SEQUENCE { + intfVirtualPortIfDescr + DisplayString, + intfVirtualPortIfType + TrellixIDSPortType, + intfVirtualPortIfAdminStatus + INTEGER, + intfVirtualPortOperatingMode + TrellixIDSOperatingMode, + intfVirtualPortEnableFullDuplex + TruthValue, + intfVirtualPortSpeedConfig + TrellixPortSpeed, + intfVirtualPortEnableInternalTap + TruthValue, + intfVirtualPortInOutType + INTEGER, + intfVirtualFailOpenSwitchStatus + INTEGER, + intfVirtualFailOpenPortStatus + INTEGER, + intfVirtualPortEnableAntiSpoofing + INTEGER, + intfVirtualPortAllowAnyConnector + TruthValue, + intfVirtualPortCageType + INTEGER, + intfVirtualPortSetMediaType + INTEGER, + intfVirtualPortMonPortIpAddress + IpAddress, + intfVirtualPortMonPortNetMask + IpAddress, + intfVirtualPortGatewayIpAddress + IpAddress, + intfVirtualPortNbadConfigStatus + TruthValue, + intfVirtualPortVlanId + Integer32, + intfVirtualPortAppIdStatsConfigStatus + TruthValue, + intfVirtualPortLinearIndex + TrellixPortLinearIndex, + intfVirtualPortFECConfig + TruthValue +} + +intfVirtualPortIfDescr OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing information about the interface. + Returns the string that is printed on the box." + ::= { intfVirtualPortEntry 1 } + +intfVirtualPortIfType OBJECT-TYPE + SYNTAX TrellixIDSPortType + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The type of interface, distinguished according to the + physical/link protocol(s) immediately 'below' the network + layer in the protocol stack. + + For brevity, Trellix options are as specified by the TC, + TrellixIDSPortType. + + However, the SNMP MIB-II - Interfaces MIB specifies many more + valid options. See comments section for details. + " + ::= { intfVirtualPortEntry 2 } + +intfVirtualPortIfAdminStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The desired state of the interface. + The testing(3) state indicates that no operational packets + can be passed. + + Default: down" + ::= { intfVirtualPortEntry 3 } + +intfVirtualPortOperatingMode OBJECT-TYPE + SYNTAX TrellixIDSOperatingMode + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "ReadWrite parameter specifies the operating mode for the + Trellix IDS sensor to be used. Different modes supported are + inline-fo-passive(1), non-inline or tap(2), span(3) and + inlne-fc(4), inline-fo-active kit(5 - available on M-series only). + + Default: non-inline" + ::= { intfVirtualPortEntry 4 } + +intfVirtualPortEnableFullDuplex OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Sets interface port to work as a full-duplex one. + Otherwise as half-duplex. + + Default: True" + ::= { intfVirtualPortEntry 5 } + +intfVirtualPortSpeedConfig OBJECT-TYPE + SYNTAX TrellixPortSpeed -- was TrellixFEType, now deprecated + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Set desired speed/negotiation on the interface." + ::= { intfVirtualPortEntry 6 } + +intfVirtualPortEnableInternalTap OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Set to TRUE to enable feature. Applies to Fast Ethernet (FE) + ports only (see TrellixIDSPortType). + For non FE ports, set to 'FALSE' . + Setting this to 'TRUE' requires that + is already set to + 'monitor-dual-intf' + Default: True" + + ::= { intfVirtualPortEntry 7 } + +intfVirtualPortInOutType OBJECT-TYPE + SYNTAX INTEGER { + inside (1), + outside (2), + not-specified (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object reflects the Input or Output labeling + of this interface port. Used only when operating mode + is inline(1) or monitor-dual-intf(2). + + Default: not-specified(3)" + ::= { intfVirtualPortEntry 8 } + +intfVirtualFailOpenSwitchStatus OBJECT-TYPE + SYNTAX INTEGER { + not-applicable(1), + present(2), + not-present(3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Returns the status of the external optical bypass switch + status. For FE ports, this object will return + not-applicable(1). For GE ports, if external optical bypass + switch is connected to sensor ports, this will return + present(2). Otherwise, it will return not-present(3)." + ::= { intfVirtualPortEntry 9 } + +intfVirtualFailOpenPortStatus OBJECT-TYPE + SYNTAX INTEGER { + not-applicable(1), + inline-fail-open(2), + bypass(3), + tap (4), + absent (5), + unknown (6), + layer2-bypass (7) + + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Returns the packet forwarding status of the sensor ports connected to the optical bypass switch. + If status is inline-fail-open(2), sensor is doing the + forwarding. If status is bypass(3), the bypass switch is + doing the forwarding and sensor will not process any + traffic in this mode. Tap(4), absent(5) , unknown (6) and layer2-bypass(7) + are available only in M-series for non RJ45(captive) ports + when connected to active FO kit and sensor operating mode + is inline-fail-open-active-kit. + tap - operational status(up), kit(present), heart-beat(tap) + absent - operational status(up), kit(absent), hear-beat(none) + unknown - operational status(down), kit(absent), heart-beat(not available)." + ::= { intfVirtualPortEntry 10 } + +intfVirtualPortEnableAntiSpoofing OBJECT-TYPE + SYNTAX INTEGER { + disable-bothsides-spoof-detect (1), + enable-inside-spoof-detect (2), + enable-outside-spoof-detect (3), + enable-bothsides-spoof-detect (4) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "spoofed packet detect rcvd on the both sides . + + Default: 'disable-bothsides-spoof-detect' (0) " + ::= { intfVirtualPortEntry 11 } + +intfVirtualPortAllowAnyConnector OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Permit usage of any connector for port. + False: Restrict usage to McAfee certified connector only. + Default: False" + ::= { intfVirtualPortEntry 12 } + +intfVirtualPortCageType OBJECT-TYPE + SYNTAX INTEGER { + other (0), + rJ-45 (1), + rJ-11 (2), + gBIC (3), + sFP (4), + xFP (5), + sFP-plus (6), -- support in R-series only + qSFP (7), -- support in R-series only + rJ-45-plus (8), -- support in R-series only + sFP-plus-BPFO (9) -- support in R-series only + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Physical connector cage type on sensor chassis panel." + ::= { intfVirtualPortEntry 13 } + +intfVirtualPortSetMediaType OBJECT-TYPE + SYNTAX INTEGER { + optical(1), + electrical (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Sets the media of the connector the user desired for the port. + Default: optical" + ::= { intfVirtualPortEntry 14 } + +intfVirtualPortMonPortIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve the IPv4 address of the monitoring port. + Default: 0.0.0.0" + ::= { intfVirtualPortEntry 15 } + +intfVirtualPortMonPortNetMask OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve netmask for the IPv4 address of the monitoring port. + Default: 0.0.0.0" + ::= { intfVirtualPortEntry 16 } + +intfVirtualPortGatewayIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure / retrieve the IPv4 address of the gateway. + Default: 0.0.0.0" + ::= { intfVirtualPortEntry 17 } + +intfVirtualPortNbadConfigStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that flow record generation + to be sent to the NBAD server, is enabled over this monitoring port. + Default: False" + ::= { intfVirtualPortEntry 18 } + +intfVirtualPortVlanId OBJECT-TYPE + SYNTAX Integer32 (0..2164326399) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This MIB object indicates the Vlan ID of the VLAN to which the monitoring + port is connected." + ::= { intfVirtualPortEntry 19 } + +intfVirtualPortAppIdStatsConfigStatus OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that the appId stats collection is enabled + over this monitoring port. + Default: True" + ::= { intfVirtualPortEntry 20 } + + +intfVirtualPortLinearIndex OBJECT-TYPE + SYNTAX TrellixPortLinearIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This MIB object indicates the Linear Index of the monitoring port. This index is + generated by the sensor appliance using the pair of slot index and the port index values. + The other MIB tables would directly use this linear index, whereever applicable." + ::= { intfVirtualPortEntry 21 } + +intfVirtualPortFECConfig OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object value if set to TRUE indicates that FEC is enabled, FALSE for FEC disbaled + Default: False" + ::= { intfVirtualPortEntry 22 } + +-- responseVirtualPortGrp 'ivSensorConfigurationMIB 55' is not supported currently, reserved for future use +responseVirtualPortGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 55 } + +respVirtualPortTable OBJECT-TYPE + SYNTAX SEQUENCE OF RespVirtualPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each response port (indexed via respPortIndex) + on each sensor card (indexed via valid slotIndex). + + This table contains Trellix specific MIB objects. + " + ::= { responseVirtualPortGrp 1 } + +respVirtualPortEntry OBJECT-TYPE + SYNTAX RespVirtualPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the columnar objects, + that describe the contents of each response port within the Trellix IDS sensor card. + Indexed by slotIndex/respPortIndex" + INDEX { slotIndex, + respPortIndex } + ::= { respVirtualPortTable 1 } + +RespVirtualPortEntry ::= SEQUENCE { + respVirtualPortDescr + DisplayString, + respVirtualPortType + TrellixIDSPortType, + respVirtualPortAdminStatus + INTEGER, + respVirtualPortOperStatus + INTEGER, + respVirtualPortEnableFullDuplex + TruthValue, + respVirtualPortSpeed + TrellixPortSpeed, -- was TrellixFEType, + respVirtualPortPktDestination + INTEGER, + respVirtualPortMacAddress + MacAddress, + respVirtualCUGEPortSpeed + TrellixCUGEType, + respVirtualAdditionalInfo + DisplayString + +} + +respVirtualPortDescr OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing information about the interface. + Returns the string that is printed on the box." + ::= { respVirtualPortEntry 1 } + +respVirtualPortType OBJECT-TYPE + SYNTAX TrellixIDSPortType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of interface, distinguished according to the + physical/link protocol(s) immediately 'below' the network + layer in the protocol stack. + See TrellixIDSPortType. + " + ::= { respVirtualPortEntry 2 } + +respVirtualPortAdminStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The desired state of the interface. + Default: Up" + ::= { respVirtualPortEntry 3 } + +respVirtualPortOperStatus OBJECT-TYPE + SYNTAX INTEGER { + up (1), + down (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The current operational state of the interface. + The testing(3) state indicates that no operational packets + can be passed." + ::= { respVirtualPortEntry 4 } + +respVirtualPortEnableFullDuplex OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "True: Sets response port to work as a full-duplex one. + otherwise as half-duplex. + If True, respPortFullDuplexPeer must be specified. + + Default: False + " + ::= { respVirtualPortEntry 5 } + +-- Support for respPortSpeed is deprecated in V-series sensors(VmIPS). +respVirtualPortSpeed OBJECT-TYPE + SYNTAX TrellixPortSpeed + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "See TrellixPortSpeed + + Default: fixed-hundred-Mbps (2)" + ::= { respVirtualPortEntry 6 } + +respVirtualPortPktDestination OBJECT-TYPE + SYNTAX INTEGER { + switch (1), + router (2) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used when response ports are chosen for + sending response packets. When router mode is chosen, + packets will be sent to router with destination MAC as + defined in intfRespMacAddress. + + Default value is switch (1)." + ::= { respVirtualPortEntry 7 } + +respVirtualPortMacAddress OBJECT-TYPE + SYNTAX MacAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the macaddress of the router to which the response + packets have to be sent to." + ::= { respVirtualPortEntry 8 } + +-- Support for respCUGEPortSpeed is deprecated in V-series sensors(VmIPS). +respVirtualCUGEPortSpeed OBJECT-TYPE + SYNTAX TrellixCUGEType + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Only applicable to copper-gigabit-ethernet ports, to specify whether + 10mbps or 100mbps or 1-gbps or auto-neg. See TrellixCUGEType + + Default: auto-negotiate" + ::= { respVirtualPortEntry 9 } + +respVirtualAdditionalInfo OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A textual string containing additional information about the response interface. + This mib object will be available only on V-series sensors." + ::= { respVirtualPortEntry 11 } + + +-- +-- Interface Virtual Response Table +-- +intfVirtualRespTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfVirtualRespEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing entries for each interface port. The + table describes how responses have to be sent in monitoring + mode." + ::= { responseVirtualPortGrp 2 } + +intfVirtualRespEntry OBJECT-TYPE + SYNTAX IntfVirtualRespEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Indexed by slotIndex/intfPortIndex" + INDEX { slotIndex, intfPortIndex } + ::= { intfVirtualRespTable 1 } + +IntfVirtualRespEntry ::= SEQUENCE { + intfVirtualRespType + INTEGER, + intfVirtualRespPortNo + INTEGER +} + +intfVirtualRespType OBJECT-TYPE + SYNTAX INTEGER { + responsePort (1), + inline (2) + } + + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Setting this object to responsePort (2) causes responses + to be sent via the response port. The response port no that + needs to be used is specified with intfRespPortNo object. + + Setting this object to inline (3) causes responses to be + sent inline. Note that in monitoring mode, responses can + only be sent inline when the monitoring port is in + half-duplex mode. + + Default action will be responsePort (1)." + ::= { intfVirtualRespEntry 1 } + +intfVirtualRespPortNo OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Specifies the response port number that needs to be used + for this monitoring port. The response ports are configured + by respPortTable." + ::= { intfVirtualRespEntry 2 } + + + +-------------------------------------------------- + +-- +-- mvxCfgGrp +-- + +mvxCfgGrp OBJECT IDENTIFIER ::= { ivSensorConfigurationMIB 56 } + +mvxConnectionConfig OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to enable or disable the MVX integration + Default: 2, disable" + ::= { mvxCfgGrp 1 } + + +mvxIPAddressType OBJECT-TYPE + SYNTAX INTEGER { + ip-v4 (4), + ip-v6 (6) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IP address type of the + mgmt port at the MVX engine end" + ::= { mvxCfgGrp 2 } + +mvxBrokerIPv4Address OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv4 address of the MVX engine. + The mvxBrokerIPv4Address would be zero if the current object is initialized" + ::= { mvxCfgGrp 3 } + +mvxBrokerIPv6Address OBJECT-TYPE + SYNTAX Ipv6Address + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to configure the IPv6 address of the MVX engine. + The mvxBrokerIPv6Address would be zero if the current object is initialized" + ::= { mvxCfgGrp 4 } + +mvxUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send username for configured MVX engine. + Default value is NULL" + ::= { mvxCfgGrp 5 } + +mvxPassword OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..80)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to send password for configured MVX engine. + Default value is NULL" + ::= { mvxCfgGrp 6 } + +mvxCertificateValidation OBJECT-TYPE + SYNTAX INTEGER { + enable (1), + disable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to indicate the MVX server certificate flag at + the sensor" + ::= { mvxCfgGrp 7 } + +mvxAuthStatus OBJECT-TYPE + SYNTAX INTEGER { + down(2), + up (1) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to indicate the authentication status between + sensor and MVX engine " + ::= { mvxCfgGrp 8 } + +mvxUseProxy OBJECT-TYPE + SYNTAX INTEGER { + disable(2), + enable(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to indicate the configured proxy is used by the MVX engine or not " + ::= { mvxCfgGrp 9 } + + +-------------------------------------------------- + +END diff --git a/mibs/trellix/TRELLIX-SENSOR-PERF-MIB b/mibs/trellix/TRELLIX-SENSOR-PERF-MIB new file mode 100644 index 0000000000..4c8adbbb3f --- /dev/null +++ b/mibs/trellix/TRELLIX-SENSOR-PERF-MIB @@ -0,0 +1,3024 @@ +-- ************************************************************** +-- TRELLIX CONFIDENTIAL +-- TRELLIX-SENSOR-PERF-MIB: +-- Trellix Sensor Performance MIB +-- +-- Copyright (c) 2022 MUSARUBRA US, LLC +-- All rights reserved. +-- +-- ***************************************************************** + +TRELLIX-SENSOR-PERF-MIB DEFINITIONS ::= BEGIN + +IMPORTS + OBJECT-TYPE, MODULE-IDENTITY, Gauge32, + TimeTicks, IpAddress, Counter32, Counter64, Integer32 + FROM SNMPv2-SMI + DisplayString, TruthValue + FROM SNMPv2-TC + ivSensorPerformance, intfPortIndex, npIndex, + processorIndex, slotIndex, rateLimitQueueIndex + FROM TRELLIX-SENSOR-SMI; + +ivSensorPerformanceMIB MODULE-IDENTITY +LAST-UPDATED "200707090000Z" +ORGANIZATION +"MUSARUBRA US LLC" +CONTACT-INFO +"Trellix Customer Service Department + +Postal: 6220 American Center Drive + San Jose CA 95002-2563 + + +Tel: +1-800-338-8754 + +E-mail: support@mcafee.com" +DESCRIPTION +"The Performance MIB for the Trellix Sensor product." + +REVISION "200707090000Z" +DESCRIPTION +"Initial version of this MIB module." +::= { ivSensorPerformance 1 } + +sensorCardPerfGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 1 } + +-- +-- TCP Perf Table +tcpPerfTable OBJECT-TYPE + SYNTAX SEQUENCE OF TcpPerfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 1 } + +tcpPerfEntry OBJECT-TYPE + SYNTAX TcpPerfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { tcpPerfTable 1 } + +TcpPerfEntry ::= SEQUENCE { + tcpMaxFlowsSupported + Integer32, + tcpActiveTCPFlowsCount + Counter32, + tcpActiveUDPFlowsCount + Counter32, + tcpFlowsCreatedCount + Counter32, + tcpFlowsTimedOutCount + Counter32, + tcpFlowsInTimewaitCount + Counter32, + tcpFlowsInSYNStateCount + Counter32, + tcpInactiveTCPFlowsCount + Counter32, + tcpFreeTCBCount + Counter32, + tcpSynCookieInbStatus + INTEGER, + tcpSynCookieOutbStatus + INTEGER, + tcpSynCookieProxiedConnCount + Counter32 +} + +tcpMaxFlowsSupported OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of flows supported in the sensor." + ::= { tcpPerfEntry 1 } + +tcpActiveTCPFlowsCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of TCP flows currently active ( similar to tcpCurrEstablished)" + ::= { tcpPerfEntry 2 } + +tcpActiveUDPFlowsCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of UDP flows currently active" + ::= { tcpPerfEntry 3 } + +tcpFlowsCreatedCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of connections established through successful 3-way handshakes" + ::= { tcpPerfEntry 4 } + +tcpFlowsTimedOutCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of unsuccessful connection completions" + ::= { tcpPerfEntry 5 } + +tcpFlowsInTimewaitCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of TCP flows currently in timewait state " + ::= { tcpPerfEntry 6 } + +tcpFlowsInSYNStateCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of TCP flows currently in SYN state " + ::= { tcpPerfEntry 7 } + +tcpInactiveTCPFlowsCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of TCP flows currently inactive " + ::= { tcpPerfEntry 8 } + +tcpFreeTCBCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of free TCBs" + ::= { tcpPerfEntry 9 } + +tcpSynCookieInbStatus OBJECT-TYPE + SYNTAX INTEGER { + enable(1), + disable(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Status of syn cookie for inbound TCP connections" + ::= { tcpPerfEntry 10 } + +tcpSynCookieOutbStatus OBJECT-TYPE + SYNTAX INTEGER { + enable(1), + disable(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Status of syn cookie for outbound TCP connections" + ::= { tcpPerfEntry 11 } + +tcpSynCookieProxiedConnCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of syn cookie proxied TCP connections" + ::= { tcpPerfEntry 12 } + +--The ifTable contains information on the entity's +--interfaces. +-- + +intfPortIfTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfPortIfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 3 } + +intfPortIfEntry OBJECT-TYPE + SYNTAX IntfPortIfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An interface entry containing objects at the + subnetwork layer and below for a particular interface." + INDEX { slotIndex, + intfPortIndex } + ::= { intfPortIfTable 1 } + +IntfPortIfEntry ::= SEQUENCE { + intfPortTotalPktsRecv + Counter32, + intfPortTotalUnicastPktsRecv + Counter32, + intfPortTotalMulticastPktsRecv + Counter32, + intfPortTotalBroadcastPktsRecv + Counter32, + intfPortTotalBytesRecv + Counter32, + intfPortTotalCRCErrorsRecv + Counter32, + intfPortTotalPktsSent + Counter32, + intfPortTotalUnicastPktsSent + Counter32, + intfPortTotalMulticastPktsSent + Counter32, + intfPortTotalBroadcastPktsSent + Counter32, + intfPortTotalBytesSent + Counter32, + intfPortTotalCRCErrorsSent + Counter32, + intfPortResetCounters + INTEGER, + intfPortNbadFlowRecordCount + Counter32 +} + +intfPortTotalPktsRecv OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets that this interface port has + recieved." + ::= { intfPortIfEntry 1 } + +intfPortTotalUnicastPktsRecv OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of unicast packets that this interface port has + recieved." + ::= { intfPortIfEntry 2 } + +intfPortTotalMulticastPktsRecv OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of multicast packets that this interface port + has recieved." + ::= { intfPortIfEntry 3 } + +intfPortTotalBroadcastPktsRecv OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of unicast packets that this interface port has + recieved." + ::= { intfPortIfEntry 4 } + +intfPortTotalBytesRecv OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of bytes that this interface port has recieved." + ::= { intfPortIfEntry 5 } + +intfPortTotalCRCErrorsRecv OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets received with bad CRC and bad + alignment." + ::= { intfPortIfEntry 6 } + +intfPortTotalPktsSent OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets that have been sent on this + interface." + ::= { intfPortIfEntry 7 } + +intfPortTotalUnicastPktsSent OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of unicast packets that have been sent on + this interface." + ::= { intfPortIfEntry 8 } + +intfPortTotalMulticastPktsSent OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of multicast packets that have been sent on + this interface." + ::= { intfPortIfEntry 9 } + +intfPortTotalBroadcastPktsSent OBJECT-TYPE + SYNTAX Counter32 (0..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of broadcast packets that have been sent on + this interface." + ::= { intfPortIfEntry 10 } + +intfPortTotalBytesSent OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of bytes that have been sent on this interface." + ::= { intfPortIfEntry 11 } + +intfPortTotalCRCErrorsSent OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets that have been sent with bad CRC." + ::= { intfPortIfEntry 12 } + +intfPortResetCounters OBJECT-TYPE + SYNTAX INTEGER { + reset (0) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Reset all the above (only intfPortIfEntry 1 - 13) counters" + ::= { intfPortIfEntry 13 } + +intfPortNbadFlowRecordCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of flow records generated from this monitoring port." + ::= { intfPortIfEntry 14 } + +--The ipSpoofTable contains information on the entity's +--ip spoof stats on the interfaces. +-- + +intfPortIpSpoofTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfPortIpSpoofEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 4 } + +intfPortIpSpoofEntry OBJECT-TYPE + SYNTAX IntfPortIpSpoofEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An interface entry containing objects that + indicate specific IP Spoof Pkt statistics. + " + INDEX { slotIndex, + intfPortIndex } + ::= { intfPortIpSpoofTable 1 } + +IntfPortIpSpoofEntry ::= SEQUENCE { + intfPortClrSpoofCounts + INTEGER, + intfPortGetInSpoofCount + Counter32, + intfPortGetOutSpoofCount + Counter32 +} + +intfPortClrSpoofCounts OBJECT-TYPE + SYNTAX INTEGER { + reset (0) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Reset clears all the spoof counters in this table." + ::= { intfPortIpSpoofEntry 1 } + +intfPortGetInSpoofCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Get the (inside) spoof pkt count." + ::= { intfPortIpSpoofEntry 2 } + +intfPortGetOutSpoofCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Get the (outside) spoof pkt count." + ::= { intfPortIpSpoofEntry 3 } + +-- +-- Sensor Perfomance Table +-- +sensorPerfTable OBJECT-TYPE + SYNTAX SEQUENCE OF SensorPerfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 5 } + +sensorPerfEntry OBJECT-TYPE + SYNTAX SensorPerfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table give the sensor performance related information. + This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { sensorPerfTable 1 } + +SensorPerfEntry ::= SEQUENCE { + sensorAvgLoad + Integer32, + sensorHighestLoad + Integer32, + pendingIPFragReassemblyCount + Integer32, + totalPacketsLoggedCount + Integer32, + totalAlertsSentCount + Integer32, + sensorLoadIndicatorConfig + Integer32, + sensorMaxTrafficCapacity + Integer32, + sensorTotalBytesProcessed + Counter64, + sensorTotalL2FCount + Counter64 + +} + +sensorAvgLoad OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Average percentage utilisation of the sensor processors" + ::= { sensorPerfEntry 1 } + +sensorHighestLoad OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Percentage utilization of the most loaded sensor processor" + ::= { sensorPerfEntry 2 } + +pendingIPFragReassemblyCount OBJECT-TYPE + SYNTAX Integer32 (0..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of IP fragment lists currently being reassembled" + ::= { sensorPerfEntry 5 } + +totalPacketsLoggedCount OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets logged sent to ISM." + ::= { sensorPerfEntry 6 } + +totalAlertsSentCount OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of alerts sent to ISM" + ::= { sensorPerfEntry 7 } + +sensorLoadIndicatorConfig OBJECT-TYPE + SYNTAX Integer32 { + off (0), + on (1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Option to switch off/on the sensor load indicator. This value is not persisted across sensor reboots. + Default : off" + ::= { sensorPerfEntry 8 } + +sensorMaxTrafficCapacity OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object provides the maximum traffic processing capacity (in Mbps) of the sensor over the given slot." + ::= { sensorPerfEntry 9 } + +sensorTotalBytesProcessed OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object provides the sum of total bytes of data received over all the monitoring ports." + ::= { sensorPerfEntry 10 } + +sensorTotalL2FCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This counter gives total number of packets on all ports that + were sent out without going through the sensor due to layer2 forward." + ::= { sensorPerfEntry 11 } + +-- +-- Statistics that gives information about the sensor memory utilization +-- + +sensorMemUsageTable OBJECT-TYPE + SYNTAX SEQUENCE OF SensorMemUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 6 } + +sensorMemUsageEntry OBJECT-TYPE + SYNTAX SensorMemUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This entry gives information about the sensor memory utilized. + This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { sensorMemUsageTable 1 } + +SensorMemUsageEntry ::= SEQUENCE { + sensorAvgTcpUdpFlows + Integer32, + sensorMaxTcpUdpFlows + Integer32, + sensorAvgIpFragFlows + Integer32, + sensorMaxIpFragFlows + Integer32, + sensorAvgIcmpFlows + Integer32, + sensorMaxIcmpFlows + Integer32, + sensorAvgSslFlows + Integer32, + sensorMaxSslFlows + Integer32, + sensorAvgFragReassemblyBuffers + Integer32, + sensorMaxFragReassemblyBuffers + Integer32, + sensorAvgPacketBuffers + Integer32, + sensorMaxPacketBuffers + Integer32, + sensorAvgAttackMarkerNodes + Integer32, + sensorMaxAttackMarkerNodes + Integer32, + sensorAvgShellMarkerNodes + Integer32, + sensorMaxShellMarkerNodes + Integer32, + sensorAvgL7DcapAlertBuffers + Integer32, + sensorMaxL7DcapAlertBuffers + Integer32, + sensorAvgL7DcapFlows + Integer32, + sensorMaxL7DcapFlows + Integer32 +} + +sensorAvgTcpUdpFlows OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used TCP and UDP flows across all PEs’." + ::= { sensorMemUsageEntry 1 } + +sensorMaxTcpUdpFlows OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used TCP and UDP flows on a single PE." + ::= { sensorMemUsageEntry 2 } + +sensorAvgIpFragFlows OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used IP Fragment flows across all PEs’." + ::= { sensorMemUsageEntry 3 } + +sensorMaxIpFragFlows OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used IP Fragment flows on a single PE." + ::= { sensorMemUsageEntry 4 } + +sensorAvgIcmpFlows OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used ICMP flows across all PEs’." + ::= { sensorMemUsageEntry 5 } + +sensorMaxIcmpFlows OBJECT-TYPE + SYNTAX Integer32 (0..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used ICMP flows on a single PE." + ::= { sensorMemUsageEntry 6 } + +sensorAvgSslFlows OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used SSL flows across all PEs’." + ::= { sensorMemUsageEntry 7 } + +sensorMaxSslFlows OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used SSL flows on a single PE." + ::= { sensorMemUsageEntry 8 } + +sensorAvgFragReassemblyBuffers OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used fragment reassembly buffers across all PEs’." + ::= { sensorMemUsageEntry 9 } + +sensorMaxFragReassemblyBuffers OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used fragment reassembly buffers on a single PE." + ::= { sensorMemUsageEntry 10 } + +sensorAvgPacketBuffers OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used packet buffers across all PEs’." + ::= { sensorMemUsageEntry 11 } + +sensorMaxPacketBuffers OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used packet buffers on a single PE." + ::= { sensorMemUsageEntry 12 } + +sensorAvgAttackMarkerNodes OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used attack marker nodes across all PEs’." + ::= { sensorMemUsageEntry 13 } + +sensorMaxAttackMarkerNodes OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used attack marker nodes on a single PE." + ::= { sensorMemUsageEntry 14 } + +sensorAvgShellMarkerNodes OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the used shell marker nodes across all PEs’." + ::= { sensorMemUsageEntry 15 } + +sensorMaxShellMarkerNodes OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the used shell marker nodes on a single PE." + ::= { sensorMemUsageEntry 16 } + +sensorAvgL7DcapAlertBuffers OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the layer7Dcap buffers across all PEs." + ::= { sensorMemUsageEntry 17 } + +sensorMaxL7DcapAlertBuffers OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of the layer7Dcap buffers on a single PE." + ::= { sensorMemUsageEntry 18 } + +sensorAvgL7DcapFlows OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the average percentage of the layer7Dcap flows across all PEs." + ::= { sensorMemUsageEntry 19 } + +sensorMaxL7DcapFlows OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This gives the maximum percentage of layer7Dcap flows on a single PE." + ::= { sensorMemUsageEntry 20 } + +--The intfPortIf64Table contains 64bit counter information on the entity's +--interfaces. It's the 64 bit equivalent of 32bit based intfPortIfTable +-- + +intfPortIf64Table OBJECT-TYPE + SYNTAX SEQUENCE OF IntfPortIf64Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 7 } + +intfPortIf64Entry OBJECT-TYPE + SYNTAX IntfPortIf64Entry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An interface entry containing 64bit counter objects at the + subnetwork layer and below for a particular + interface." + INDEX { slotIndex, + intfPortIndex } + ::= { intfPortIf64Table 1 } + +IntfPortIf64Entry ::= SEQUENCE { + intfPortTotalPktsRecv64 + Counter64, + intfPortTotalUnicastPktsRecv64 + Counter64, + intfPortTotalMulticastPktsRecv64 + Counter64, + intfPortTotalBroadcastPktsRecv64 + Counter64, + intfPortTotalBytesRecv64 + Counter64, + intfPortTotalCRCErrorsRecv64 + Counter64, + intfPortTotalPktsSent64 + Counter64, + intfPortTotalUnicastPktsSent64 + Counter64, + intfPortTotalMulticastPktsSent64 + Counter64, + intfPortTotalBroadcastPktsSent64 + Counter64, + intfPortTotalBytesSent64 + Counter64, + intfPortTotalCRCErrorsSent64 + Counter64, + intfPortResetCounters64 + INTEGER +} + +intfPortTotalPktsRecv64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of packets that this interface port has + recieved." + ::= { intfPortIf64Entry 1 } + +intfPortTotalUnicastPktsRecv64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of unicast packets that this interface port has + recieved." + ::= { intfPortIf64Entry 2 } + +intfPortTotalMulticastPktsRecv64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of multicast packets that this interface port + has recieved." + ::= { intfPortIf64Entry 3 } + +intfPortTotalBroadcastPktsRecv64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of unicast packets that this interface port has + recieved." + ::= { intfPortIf64Entry 4 } + +intfPortTotalBytesRecv64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of bytes that this interface port has recieved." + ::= { intfPortIf64Entry 5 } + +intfPortTotalCRCErrorsRecv64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of packets received with bad CRC and bad + alignment." + ::= { intfPortIf64Entry 6 } + +intfPortTotalPktsSent64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of packets that have been sent on this + interface." + ::= { intfPortIf64Entry 7 } + +intfPortTotalUnicastPktsSent64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of unicast packets that have been sent on + this interface." + ::= { intfPortIf64Entry 8 } + +intfPortTotalMulticastPktsSent64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of multicast packets that have been sent on + this interface." + ::= { intfPortIf64Entry 9 } + +intfPortTotalBroadcastPktsSent64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of broadcast packets that have been sent on + this interface." + ::= { intfPortIf64Entry 10 } + +intfPortTotalBytesSent64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of bytes that have been sent on this interface." + ::= { intfPortIf64Entry 11 } + +intfPortTotalCRCErrorsSent64 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total 64bit count of packets that have been sent with bad CRC." + ::= { intfPortIf64Entry 12 } + +intfPortResetCounters64 OBJECT-TYPE + SYNTAX INTEGER { + reset (0) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Reset all the above (only intfPortIf64Entry 1 - 12) counters" + ::= { intfPortIf64Entry 13 } + +-- +-- This group contains Malware related stats. These are applicable to +-- all M-series except NAC-only appliances. + + +malwareCounterTable OBJECT-TYPE + SYNTAX SEQUENCE OF MalwareCounterEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 8 } + +malwareCounterEntry OBJECT-TYPE + SYNTAX MalwareCounterEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entry containing malware specific statistics. + This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { malwareCounterTable 1 } + + +MalwareCounterEntry ::= SEQUENCE { + malwareTotalQueriesSent + Counter32, + malwareUnresolvedQueriesQ + Counter32, + malwareTotalQueryResBelowMalTh + Counter32, + malwareTotalQueryResAboveMalTh + Counter32, + malwareBlocked + Counter32, + malwareTotalUDQueries + Counter32, + malwareUDDetected + Counter32, + malwareUDBlocked + Counter32, + malwareTempError + Counter32, + malwareProtocolError + Counter32, + malwareNoDomainError + Counter32, + malwareNoDataError + Counter32, + malwareOutOfMemoryError + Counter32, + malwareBadQueryError + Counter32, + malwareUnknownError + Counter32, + malwareFFPLastIncrTimeStamp + Counter32 +} + + +malwareTotalQueriesSent OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of queries sent." + ::= { malwareCounterEntry 1 } + +malwareUnresolvedQueriesQ OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of unresolved queries(currently in queue)." + ::= { malwareCounterEntry 2 } + +malwareTotalQueryResBelowMalTh OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of query responses received below malware threshold(dirty)." + ::= { malwareCounterEntry 3 } + +malwareTotalQueryResAboveMalTh OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of query responses received above malware threshold(clean)." + ::= { malwareCounterEntry 4 } + +malwareBlocked OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of malwares blocked." + ::= { malwareCounterEntry 5 } + +malwareTotalUDQueries OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of user-defined malware queries." + ::= { malwareCounterEntry 6 } + +malwareUDDetected OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of user-defined malware detected." + ::= { malwareCounterEntry 7 } + +malwareUDBlocked OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of user-defined malware blocked." + ::= { malwareCounterEntry 8 } + +malwareTempError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "temporary error, the resolver nameserver was not able to process our query or timed out." + ::= { malwareCounterEntry 9 } + +malwareProtocolError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "protocol error, a nameserver returned malformed reply." + ::= { malwareCounterEntry 10 } + +malwareNoDomainError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "the domain name(implying md5 + mcafee.com) does not exist ." + ::= { malwareCounterEntry 11 } + +malwareNoDataError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "there is no data of requested type found. ." + ::= { malwareCounterEntry 12 } + +malwareOutOfMemoryError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "out of memory while processing request ." + ::= { malwareCounterEntry 13 } + +malwareBadQueryError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "some aspect of the query (most common is the domain name in question) is invalid, and the library can't even start a query." + ::= { malwareCounterEntry 14 } + +malwareUnknownError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "unknown error." + ::= { malwareCounterEntry 15 } + +malwareFFPLastIncrTimeStamp OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Malware FFP Last Successful Incremental Update Timestamp." + ::= { malwareCounterEntry 16 } + + +--The layer2FwdStatsTable contains l2f counter information on the entity's +--interfaces. +-- + +layer2FwdStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF Layer2FwdStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 9 } + +layer2FwdStatsEntry OBJECT-TYPE + SYNTAX Layer2FwdStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An interface entry containing layer2 forward statistics for each + object at their respective interface." + INDEX { slotIndex, + intfPortIndex } + ::= { layer2FwdStatsTable 1 } + +Layer2FwdStatsEntry ::= SEQUENCE { + layer2FwdCounter + Counter64 +} + +layer2FwdCounter OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This counter gives the number of packets that were sent out without + going through the sensor due to layer2 forward." + ::= { layer2FwdStatsEntry 1 } + +-- +-- Sensor Pkt Count Table +-- +sensorPktCountTable OBJECT-TYPE + SYNTAX SEQUENCE OF SensorPktCountEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { sensorCardPerfGrp 10 } + +sensorPktCountEntry OBJECT-TYPE + SYNTAX SensorPktCountEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table give the sensor packet count related information. + This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { sensorPktCountTable 1 } + +SensorPktCountEntry ::= SEQUENCE { + unknownProtoPktsFwdCount + Counter64, + unknownProtoPktsFwdPercent + OCTET STRING, + unknownProtoPktsFwdLastTimestamp + INTEGER, + latencyPktsFwdPercent + OCTET STRING +} + +unknownProtoPktsFwdCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of unknown protocol packets forwarded by the sensor without processing." + ::= { sensorPktCountEntry 1 } + +unknownProtoPktsFwdPercent OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Percentage of number of unknown protocol packets forwarded by the sensor without processing to total packets." + ::= { sensorPktCountEntry 2 } + +unknownProtoPktsFwdLastTimestamp OBJECT-TYPE + SYNTAX INTEGER (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "UTC Time at the sensor when the last unknown protocol packet was forwarded by the sensor without processing." + ::= { sensorPktCountEntry 3 } + +latencyPktsFwdPercent OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Percentage of number of latency packets forwarded by the sensor to total packets." + ::= { sensorPktCountEntry 4 } + +malwareStatsGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 11 } + +malwareEngineStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF MalwareEngineStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { malwareStatsGrp 1 } + +malwareEngineStatsEntry OBJECT-TYPE + SYNTAX MalwareEngineStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + Additonaly it contains the + " + INDEX { malwareEngineIndex } + ::= { malwareEngineStatsTable 1 } + +MalwareEngineStatsEntry ::= SEQUENCE { + malwareEngineIndex + INTEGER, + malwareStatsEngineName + DisplayString, + totalMalwareFilesProcessed + INTEGER, + numMalwareScoreClean + INTEGER, + numMalwareScoreVLow + INTEGER, + numMalwareScoreLow + INTEGER, + numMalwareScoreMedium + INTEGER, + numMalwareScoreHigh + INTEGER, + numMalwareScoreVHigh + INTEGER, + numMalwareAlertsSent + INTEGER, + numMalwareAttacksBlocked + INTEGER, + numMalwareTcpResetSent + INTEGER, + numMalwareScoreUnknown + INTEGER, + numMalwareFileSubmitted + INTEGER, + numMalwareFileIgnored + INTEGER, + numMalwareCacheReferences + INTEGER, + numMalwareStaticResponse + INTEGER, + numMalwareDynamicResponse + INTEGER, + numMalwareDropUnderLoad + INTEGER +} + +malwareEngineIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Malware engine index" + ::= { malwareEngineStatsEntry 1 } + +malwareStatsEngineName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the malware engine name string." + ::= { malwareEngineStatsEntry 2 } + +totalMalwareFilesProcessed OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the total number of malware files processed by the specific malware engine. " + ::= { malwareEngineStatsEntry 3 } + +numMalwareScoreClean OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of clean malware files processed by the specific malware engine." + ::= { malwareEngineStatsEntry 4 } + +numMalwareScoreVLow OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware alerts generated by the specific malware engine and having malware score as very low." + ::= { malwareEngineStatsEntry 5 } + +numMalwareScoreLow OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware alerts generated by the specific malware engine and having malware score as low." + ::= { malwareEngineStatsEntry 6 } + +numMalwareScoreMedium OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware alerts generated by the specific malware engine and having malware score as medium. " + ::= { malwareEngineStatsEntry 7 } + +numMalwareScoreHigh OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware alerts generated by the specific malware engine and having malware score as high." + ::= { malwareEngineStatsEntry 8 } + +numMalwareScoreVHigh OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware alerts generated by the specific malware engine and having malware score as very high." + ::= { malwareEngineStatsEntry 9 } + +numMalwareAlertsSent OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware alerts sent to NSM, by the sensor for the specific malware engine." + ::= { malwareEngineStatsEntry 10 } + +numMalwareAttacksBlocked OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware attacks blocked by the sensor for the specific malware engine. " + ::= { malwareEngineStatsEntry 11 } + +numMalwareTcpResetSent OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware TCP Resets sent by the sensor for the specific malware engine." + ::= { malwareEngineStatsEntry 12 } + +numMalwareScoreUnknown OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware alerts generated by the specific malware engine and having malware score as unknown." + ::= { malwareEngineStatsEntry 13 } + +numMalwareFileSubmitted OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware files submitted to any of the malware engine." + ::= { malwareEngineStatsEntry 14 } + +numMalwareFileIgnored OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware files submitted to the malware engine but not being processed by that malware engine." + ::= { malwareEngineStatsEntry 15 } + +numMalwareCacheReferences OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware results obtained from cache." + ::= { malwareEngineStatsEntry 16 } + +numMalwareStaticResponse OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware responses obtained from ATD using static analysis" + ::= { malwareEngineStatsEntry 17 } + +numMalwareDynamicResponse OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware responses obtained from ATD based on dynamic analysis within ATD" + ::= { malwareEngineStatsEntry 18 } + +numMalwareDropUnderLoad OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware files dropped i.e not being inspected because of load." + ::= { malwareEngineStatsEntry 19 } + +malwareFileStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF MalwareFileStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + + " + ::= { malwareStatsGrp 2 } + +malwareFileStatsEntry OBJECT-TYPE + SYNTAX MalwareFileStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry specified is indexed by . + " + INDEX { malwareFileTypeIndex } + ::= { malwareFileStatsTable 1 } + +MalwareFileStatsEntry ::= SEQUENCE { + malwareFileTypeIndex + INTEGER, + malwareFileTypeName + DisplayString, + numMalwareFilesProcessed + INTEGER +} + +malwareFileTypeIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "malware file type index." + ::= { malwareFileStatsEntry 1 } + +malwareFileTypeName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the file type name string." + ::= { malwareFileStatsEntry 2 } + +numMalwareFilesProcessed OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of malware file processed of the specific file type." + ::= { malwareFileStatsEntry 3 } + +malwareStatsClearCounters OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Configuration option to reset malware statistics counters through SNMP. Default: false (2)" + + ::= { malwareStatsGrp 3 } + +malwareRESTStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF MalwareRESTStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + Error Counters of GTI File Reputation REST feature + " + ::= { malwareStatsGrp 4 } + +malwareRESTStatsEntry OBJECT-TYPE + SYNTAX MalwareRESTStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + Error Counters of GTI File Reputation REST feature + " + INDEX { malwareEngineIndex } + ::= { malwareRESTStatsTable 1 } + +MalwareRESTStatsEntry ::= SEQUENCE { + malwareRESTEngineName + DisplayString, + numMalwareInternalServerError + INTEGER, + numMalwareInvalidJSON + INTEGER, + numMalwareUnsupportedOperation + INTEGER, + numMalwareMissingMandatoryParam + INTEGER, + numMalwareIncorrectProtocalFormat + INTEGER, + numMalwareMaxOperationExceeded + INTEGER, + numMalwareInvalidProtocalVersion + INTEGER, + numMalwareDuplicateParameter + INTEGER, + numMalwareMissingCIInfo + INTEGER, + numMalwareMandatoryParamEmpty + INTEGER, + numMalwareInvalidMandatoryParamFormat + INTEGER, + numMalwareFailedToConnect + INTEGER, + numMalwareEmptyInput + INTEGER, + numMalwareEmptyCIParam + INTEGER, + numMalwareInvalidCIParamFormat + INTEGER, + numMalwareDuplicateCIParam + INTEGER, + numMalwareGenericServerError + INTEGER, + numMalwareOtherError + INTEGER, + numMalwarePreSubmitError + INTEGER, + numMalwareCurlFailed + INTEGER, + numMalwareHttpBadRequest + INTEGER, + numMalwareHttpUnauthorized + INTEGER, + numMalwareHttpUnsupportedMedia + INTEGER, + numMalwareHttpUnknownError + INTEGER, + numMalwareJsonParseError + INTEGER, + numMalwareHashNotFound + INTEGER +} + +malwareRESTEngineName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..256)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the indexed malware engine name" + ::= { malwareRESTStatsEntry 1 } + +numMalwareInternalServerError OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Internal GTI Server error" + ::= { malwareRESTStatsEntry 2 } + +numMalwareInvalidJSON OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Invalid JSON format Error" + ::= { malwareRESTStatsEntry 3 } + +numMalwareUnsupportedOperation OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Unsupported Operation Error" + ::= { malwareRESTStatsEntry 4 } + +numMalwareMissingMandatoryParam OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Missing mandatory parameter Error" + ::= { malwareRESTStatsEntry 5 } + +numMalwareIncorrectProtocalFormat OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Incorrect GTI protocol format Error" + ::= { malwareRESTStatsEntry 6 } + +numMalwareMaxOperationExceeded OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Max number of operations exceeded" + ::= { malwareRESTStatsEntry 7 } + +numMalwareInvalidProtocalVersion OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Invalid protocol version Error" + ::= { malwareRESTStatsEntry 8 } + +numMalwareDuplicateParameter OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Duplicate parameter Error" + ::= { malwareRESTStatsEntry 9 } + +numMalwareMissingCIInfo OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Missing mandatory client information parameter Error" + ::= { malwareRESTStatsEntry 10 } + +numMalwareMandatoryParamEmpty OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Empty mandatory parameter Error" + ::= { malwareRESTStatsEntry 11 } + +numMalwareInvalidMandatoryParamFormat OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Invalid mandatory parameter format Error" + ::= { malwareRESTStatsEntry 12 } + +numMalwareFailedToConnect OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Failed to obtain a Connection Error" + ::= { malwareRESTStatsEntry 13 } + +numMalwareEmptyInput OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Empty Input Error" + ::= { malwareRESTStatsEntry 14 } + +numMalwareEmptyCIParam OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Empty client information parameter Error" + ::= { malwareRESTStatsEntry 15 } + +numMalwareInvalidCIParamFormat OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Invalid client information parameter format Error" + ::= { malwareRESTStatsEntry 16 } + +numMalwareDuplicateCIParam OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Duplicate client information parameter Error" + ::= { malwareRESTStatsEntry 17 } + +numMalwareGenericServerError OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Generic GTI Server error" + ::= { malwareRESTStatsEntry 18 } + +numMalwareOtherError OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of other GTI Server Error" + ::= { malwareRESTStatsEntry 19 } + +numMalwarePreSubmitError OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of error while creating REST query" + ::= { malwareRESTStatsEntry 20 } + +numMalwareCurlFailed OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of CURL perform failed" + ::= { malwareRESTStatsEntry 21 } + +numMalwareHttpBadRequest OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of HTTP 400 Errors" + ::= { malwareRESTStatsEntry 22 } + +numMalwareHttpUnauthorized OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of HTTP 401 Errors" + ::= { malwareRESTStatsEntry 23 } + +numMalwareHttpUnsupportedMedia OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of HTTP 415 Errors" + ::= { malwareRESTStatsEntry 24 } + +numMalwareHttpUnknownError OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of other HTTP Errors" + ::= { malwareRESTStatsEntry 25 } + +numMalwareJsonParseError OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Errors while parsing JSON response object" + ::= { malwareRESTStatsEntry 26 } + +numMalwareHashNotFound OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Total Number of Hash is not found in GTI server" + ::= { malwareRESTStatsEntry 27 } + +advancedBotnetStatsGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 12 } + +callBackDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This objects returns the number alerts pertaining to callback detector matches." + ::= { advancedBotnetStatsGrp 1 } + +dgaZombieDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of alerts with respect to DGA zombies detected." + ::= { advancedBotnetStatsGrp 2 } + +dgaCnCServerDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of alert pertaining to the CnC(command and control) server suspect detected." + ::= { advancedBotnetStatsGrp 3 } + +dgaConectionToCnCServerDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of alert pertaining to the CnC(command and control) and DGA zombie callback detected" + ::= { advancedBotnetStatsGrp 4 } + +fastFluxDnsDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of alerts pertaining to IP flux botnet activity detected." + ::= { advancedBotnetStatsGrp 5 } + +fastFluxAgentConnectionDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of alerts pertaining to IP flux agent call back detected" + ::= { advancedBotnetStatsGrp 6 } + + +zeroDayBotnetDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of alerts pertaining to Other zero day botnet detected" + ::= { advancedBotnetStatsGrp 7 } + +knownBotnetDetected OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object returns the number of alerts pertaining to known botnets detected." + ::= { advancedBotnetStatsGrp 8 } + + +sensorIntfStatGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 13 } + +sensorTotalPktsRecv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets that sensor has + recieved." + + ::= { sensorIntfStatGrp 1 } + + +sensorTotalUnicastPktsRecv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of unicast packets that sensor has + recieved." + ::= { sensorIntfStatGrp 2 } + + +sensorTotalMulticastPktsRecv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of multicast packets that sensor + has recieved." + + ::= { sensorIntfStatGrp 3 } + +sensorTotalBroadcastPktsRecv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of unicast packets that sensor has + recieved." + ::= { sensorIntfStatGrp 4 } + +sensorTotalBytesRecv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of bytes that sensor has recieved." + ::= { sensorIntfStatGrp 5 } + +sensorTotalCRCErrorsRecv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets received with bad CRC and bad + alignment in sensor." + ::= { sensorIntfStatGrp 6 } + +sensorTotalPktsSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets that have been sent on sensor." + ::= { sensorIntfStatGrp 7 } + +sensorTotalUnicastPktsSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of unicast packets that have been sent on + sensor." + ::= { sensorIntfStatGrp 8 } + +sensorTotalMulticastPktsSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of multicast packets that have been sent on + sensor." + ::= { sensorIntfStatGrp 9 } + +sensorTotalBroadcastPktsSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of broadcast packets that have been sent on + sensor." + ::= { sensorIntfStatGrp 10 } + +sensorTotalBytesSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of bytes that have been sent on sensor." + ::= { sensorIntfStatGrp 11 } + +sensorTotalCRCErrorsSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of packets that have been sent with bad CRC on sensor." + ::= { sensorIntfStatGrp 12 } + +sensorIntfResetCounters OBJECT-TYPE + SYNTAX INTEGER { + reset(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Resets the counters in sensor interface stats table" + ::= { sensorIntfStatGrp 13 } + +sensorNbadFlowRecordCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count of flow records generated by the sensor." + ::= { sensorIntfStatGrp 14 } + + +-- +-- This group contains MIB objects applicable for SSL statistics +-- +sslStatisticsGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 14} + +-- This group consists of scalar for ssl statistics +sslCounterGrp OBJECT IDENTIFIER ::= { sslStatisticsGrp 1} + +outboundsslConnectionAttemptsClientToSensor OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl connections attempt from client to sensor in outbound direction" + ::= { sslCounterGrp 1 } + +outboundsslConnectionAttemptsSensorToServer OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl connections attempt from sensor to external server in outbound direction" + ::= { sslCounterGrp 2 } + +outboundsslEndToEndSslHandshakeInProgress OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl handshake in progress for outbound direction" + ::= { sslCounterGrp 3 } + +outboundsslEndToEndSslFlowsEstablished OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl flows established for outbound direction" + ::= { sslCounterGrp 4 } + +outboundsslWhitelistedFlows OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl flows being whitelisted for outbound direction" + ::= { sslCounterGrp 5 } + +outboundsslAttacksDetected OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of attacks detected in ssl packets in outbound direction" + ::= { sslCounterGrp 6 } + +outboundsslTotalRSAFlows OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of flows seen with RSA key exchange in outbound direction" + ::= { sslCounterGrp 7 } + +outboundsslTotalDHFlows OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of flows seen with Diffie Hellman key exchange in outbound direction" + ::= { sslCounterGrp 8 } + +outboundsslTotalNonSslFlows OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of non ssl flows seen in outbound direction" + ::= { sslCounterGrp 9 } + +outboundsslUntrustedCertCounts OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of untrusted certificates seen in outbound direction" + ::= { sslCounterGrp 10 } + +outboundsslUntrustedCertFlowsBlockOrSkipped OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl flows blocked or skipped due to untrusted certificates seen in outbound direction" + ::= { sslCounterGrp 11 } + +outboundsslUnknownCertCounts OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of unknown certificates seen in outbound direction" + ::= { sslCounterGrp 12 } + +outboundsslUnknownCertFlowsBlockOrSkipped OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl flows blocked or skipped due to unknown validity of certificates seen in outbound direction" + ::= { sslCounterGrp 13 } + +outboundsslUnsupportedCipherSuiteFlowsBlockedOrSkipped OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl flows blocked or skipped due to unsupported cipher suite in outbound direction" + ::= { sslCounterGrp 14 } + +outboundsslGeneralDecryptionFailureFlowsBlockOrSkipped OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of ssl flows blocked or skipped due to general decryption failure in outbound direction" + ::= { sslCounterGrp 15 } + +sslEventConnectionRecycled OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of connections ran out of ssl connection structure but was able to prematurely retire one that has not been recently used. To prevent this increase SSL connection count in the NSM." + ::= { sslCounterGrp 16 } + +sslEventConnectionExhausted OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of connection for which the sensor could not allocate a new SSL connection structure because all SSL connection structures were in use. To resolve this increase SSL connection count in the NSM." + ::= { sslCounterGrp 17 } + +sslEventPacketsWithNoConnection OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of SSL packets received that did not have a corresponding SSL structure." + ::= { sslCounterGrp 18 } + +sslEventSessionAllocationError OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Sensor could not allocate new SSL session structure because all SSL session resource were in use. This indicates more simultaneous SSL sessions were in use than the sensor was configured to processs. To resolve this, increase the SSL connection count or decrease the SSL cache time on the NSM" + ::= { sslCounterGrp 19 } + +sslEventUnsupportedDiffieHellmanCipherSuite OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A cipher suite that uses Diffie-Hellman was negotiated. The sensor will not be able to detect attacks in this SSL connection. Configure the server to only allow cipher suites that use RSA" + ::= { sslCounterGrp 20 } + +sslEventUnsupportedExportCipher OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total connection that used SSLv3/TLS export cipher was negotiated, which the sensor cannot decrypt due to the use of ephemeral RSA" + ::= { sslCounterGrp 21 } + +sslEventUnsupportedOrUnknownCipher OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total connection where cipher was negotiated that the Sensor cannot decrypt." + ::= { sslCounterGrp 22 } + +sslMisMatchedCertCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object specifies the total number of certificates seen in the traffic which did not matched any of the server certificate" + ::= { sslCounterGrp 23 } + +sslStatsResetCounters OBJECT-TYPE + SYNTAX INTEGER { + reset (0) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Reset all the ssl statistics counters" + ::= { sslCounterGrp 24 } + +sslEventConnectionKeyMatched OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total connection where cipher was negotiated and the Master Secret lookup returned a match" + ::= { sslCounterGrp 28 } + + + +-- This table contains entries for certs matches +sslCertsCounterTable OBJECT-TYPE + SYNTAX SEQUENCE OF SslCertsCounterEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing cert match details" + ::= { sslStatisticsGrp 2} + +sslCertsCounterEntry OBJECT-TYPE + SYNTAX SslCertsCounterEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This MIB object contains all the attributes that are specific to the L2 fwd entry for TCP table. Indexed by intfPortLinearIndex and entry number." + INDEX { certEntryIndex } + ::= { sslCertsCounterTable 1 } + +SslCertsCounterEntry ::= SEQUENCE { + certEntryIndex + INTEGER, + sslCertId + INTEGER, + sslCertAlias + DisplayString, + sslCertMatchCount + Counter32 + } + +certEntryIndex OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This is certificate entry index" + ::= { sslCertsCounterEntry 1 } + +sslCertId OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This is certificate Id" + ::= { sslCertsCounterEntry 2 } + +sslCertAlias OBJECT-TYPE + SYNTAX DisplayString(SIZE(0..64)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This is certificate alias name" + ::= { sslCertsCounterEntry 3 } + +sslCertMatchCount OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This is total number of flows matching the certificate" + ::= { sslCertsCounterEntry 4 } + + +sensorPacketDropGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 2 } + +sensorPktDropTable OBJECT-TYPE + SYNTAX SEQUENCE OF SensorPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table containing packets dropped at sensor level under various categories" + ::= { sensorPacketDropGrp 1 } + +sensorPktDropEntry OBJECT-TYPE + SYNTAX SensorPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models." + INDEX { slotIndex } + ::= { sensorPktDropTable 1 } + +SensorPktDropEntry ::= SEQUENCE { + rateLimitPktDrop + Counter32, + ipPktSanityChkDrop + Counter32, + ipv6PktSanityChkDrop + Counter32, + sensorPktDropResetCounters + INTEGER +} + +rateLimitPktDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to sensor rate limiting" + ::= { sensorPktDropEntry 1 } + +ipPktSanityChkDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to IPV4 sanity check failure" + ::= { sensorPktDropEntry 2 } + +ipv6PktSanityChkDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to IPV6 sanity check failure" + ::= { sensorPktDropEntry 3 } + +sensorPktDropResetCounters OBJECT-TYPE + SYNTAX INTEGER { + reset(0) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Resets the counters in sensor packet drop table" + ::= { sensorPktDropEntry 4 } + +intfPortPktDropTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfPortPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table to maintain sensor interface level packet drop statistics" + ::= { sensorPacketDropGrp 2 } + + +intfPortPktDropEntry OBJECT-TYPE + SYNTAX IntfPortPktDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An interface entry that maintains the dropped packet statistics for various categories" + INDEX { slotIndex, + intfPortIndex } + ::= { intfPortPktDropTable 1 } + +IntfPortPktDropEntry ::= SEQUENCE { + + intfPortIpChksumErrorDrop + Counter32, + intfPortTcpChksumErrorDrop + Counter32, + intfPortUdpChksumErrorDrop + Counter32, + intfPortIcmpChksumErrorDrop + Counter32, + intfPortIcmpv6ChksumErrorDrop + Counter32, + intfPortAclDrop + Counter32, + intfPortBadPacketDrop + Counter32, + intfPortColdStartPacketDrop + Counter32, + intfPortAttackPacketDrop + Counter32, + intfPortIpReassemTimeoutDrop + Counter32, + intfPortIpv6ReassemTimeoutDrop + Counter32, + intfPortTcpOutOfOrderTimeoutDrop + Counter32, + intfPortTcpProtoErrorDrop + Counter32, + intfPortUdpProtoErrorDrop + Counter32, + intfPortIcmpProtoErrorDrop + Counter32, + intfPortIcmpv6ProtoErrorDrop + Counter32, + intfPortIpProtoErrorDrop + Counter32, + intfPortIpv6ProtoErrorDrop + Counter32, + intfPortCRCErrorDrop + Counter32, + intfPortOtherLayer2ErrorDrop + Counter32, + intfPortOffHdrLenErrorDrop + Counter32, + intfPortSysOutOfResourceDrop + Counter32, + intfPortPktDropResetCounters + INTEGER, + intfPortHostIsolationv4Drop + Counter32, + intfPortHostIsolationv6Drop + Counter32, + intfPortLayer2MiscDrop + Counter32 +} + +intfPortIpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect IP checksum" + ::= { intfPortPktDropEntry 1 } + +intfPortTcpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect TCP checksum" + ::= { intfPortPktDropEntry 2 } + +intfPortUdpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect UDP checksum" + ::= { intfPortPktDropEntry 3 } + +intfPortIcmpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect ICMP v4 checksum" + ::= { intfPortPktDropEntry 4 } + +intfPortIcmpv6ChksumErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect ICMP v6 checksum" + ::= { intfPortPktDropEntry 5 } + +intfPortAclDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to configured ACL Rules" + ::= { intfPortPktDropEntry 6 } + +intfPortBadPacketDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to non-existence of a valid flow" + ::= { intfPortPktDropEntry 7 } + +intfPortColdStartPacketDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to cold start packet drop action" + ::= { intfPortPktDropEntry 8 } + +intfPortAttackPacketDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number packets dropped due to recommended/configured attack response action" + ::= { intfPortPktDropEntry 9 } + +intfPortIpReassemTimeoutDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to IPV4 fragment reassembly timeout" + ::= { intfPortPktDropEntry 10 } + +intfPortIpv6ReassemTimeoutDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to IPV6 fragment reassembly timeout" + ::= { intfPortPktDropEntry 11 } + +intfPortTcpOutOfOrderTimeoutDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to TCP out of order reassembly timeout" + ::= { intfPortPktDropEntry 12 } + +intfPortTcpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in TCP Protocol" + ::= { intfPortPktDropEntry 13 } + +intfPortUdpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in UDP Protocol" + ::= { intfPortPktDropEntry 14 } + +intfPortIcmpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in ICMP v4 Protocol" + ::= { intfPortPktDropEntry 15 } + +intfPortIcmpv6ProtoErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in ICMP v6 Protocol" + ::= { intfPortPktDropEntry 16 } + + +intfPortIpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in IPv4 protocol" + ::= { intfPortPktDropEntry 17 } + +intfPortIpv6ProtoErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in IPv6 protocol" + ::= { intfPortPktDropEntry 18 } + +intfPortCRCErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number packets dropped to CRC check failures" + ::= { intfPortPktDropEntry 19 } + +intfPortOtherLayer2ErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to other Layer2 errors" + ::= { intfPortPktDropEntry 20 } + +intfPortOffHdrLenErrorDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to offset index length errors" + ::= { intfPortPktDropEntry 21 } + +intfPortSysOutOfResourceDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to sensor running out of resource" + ::= { intfPortPktDropEntry 22 } + +intfPortPktDropResetCounters OBJECT-TYPE + SYNTAX INTEGER { + reset(0), + reset-ratelimit-stats(1) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "For a value reset(0), resets the counters in this interface port level table. + For a value reset-ratelimit-stats(1), resets all the queue-level ratelimit + counters over this port." + ::= { intfPortPktDropEntry 23 } + +intfPortHostIsolationv4Drop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of IPv4 packets dropped due to host isolation configuration" + ::= { intfPortPktDropEntry 24 } + +intfPortHostIsolationv6Drop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of IPv6 packets dropped due to host isolation configuration" + ::= { intfPortPktDropEntry 25 } + +intfPortLayer2MiscDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of non-error packets received on monitoring ports dropped in the layer2 switch because of other reasons" + ::= { intfPortPktDropEntry 26 } + +intfPortQRateLimitDropTable OBJECT-TYPE + SYNTAX SEQUENCE OF IntfPortQRateLimitDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table to maintain sensor interface and queue level rate-limit drop statistics" + ::= { sensorPacketDropGrp 3 } + +intfPortQRateLimitDropEntry OBJECT-TYPE + SYNTAX IntfPortQRateLimitDropEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An interface queue entry that maintains the dropped packet statistics for various categories" + INDEX { slotIndex, + intfPortIndex, + rateLimitQueueIndex } + ::= { intfPortQRateLimitDropTable 1 } + +IntfPortQRateLimitDropEntry ::= SEQUENCE { + + intfPortQRateLimitBandwidth + Counter32, + intfPortQRateLimitBytesDrop + Counter32, + intfPortQRateLimitPktsDrop + Counter32, + intfPortQRateLimitDropResetCounters + INTEGER +} + +intfPortQRateLimitBandwidth OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This counter gives the configured ratelimit bandwidth in bytes, for the specified port and queue indicies." + ::= { intfPortQRateLimitDropEntry 1 } + +intfPortQRateLimitBytesDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This counter gives the actual ratelimit bytes dropped for the specified port and queue indicies." + ::= { intfPortQRateLimitDropEntry 2 } + +intfPortQRateLimitPktsDrop OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This counter gives the actual ratelimit packets dropped for the specified port and queue indicies." + ::= { intfPortQRateLimitDropEntry 3 } + +intfPortQRateLimitDropResetCounters OBJECT-TYPE + SYNTAX INTEGER { + reset(0) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This counter resets the rateLimit drop counter of the specified port and queue indicies." + ::= { intfPortQRateLimitDropEntry 4 } + + +sensorPacketDropStatGrp OBJECT IDENTIFIER ::= { sensorPacketDropGrp 4} + +sensorIpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect IP checksum by the sensor." + ::= { sensorPacketDropStatGrp 1 } + +sensorTcpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect TCP checksum by the sensor." + ::= { sensorPacketDropStatGrp 2 } + +sensorUdpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect UDP checksum by the sensor." + ::= { sensorPacketDropStatGrp 3 } + +sensorIcmpChksumErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect ICMP v4 checksum by the sensor." + ::= { sensorPacketDropStatGrp 4 } + +sensorIcmpv6ChksumErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to incorrect ICMP v6 checksum by the sensor." + ::= { sensorPacketDropStatGrp 5 } + +sensorAclDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to configured ACL Rules by the sensor." + ::= { sensorPacketDropStatGrp 6 } + +sensorBadPacketDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to non-existence of a valid flow by the sensor." + ::= { sensorPacketDropStatGrp 7 } + +sensorColdStartPacketDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to cold start packet drop action by the sensor." + ::= { sensorPacketDropStatGrp 8 } + +sensorAttackPacketDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number packets dropped due to recommended/configured attack response action by the sensor." + ::= { sensorPacketDropStatGrp 9 } + +sensorIpReassemTimeoutDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to IPV4 fragment reassembly timeout by the sensor." + ::= { sensorPacketDropStatGrp 10 } + +sensorIpv6ReassemTimeoutDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to IPV6 fragment reassembly timeout by the sensor." + ::= { sensorPacketDropStatGrp 11 } + +sensorTcpOutOfOrderTimeoutDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to TCP out of order reassembly timeout by the sensor." + ::= { sensorPacketDropStatGrp 12 } + +sensorTcpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in TCP Protocol by the sensor." + ::= { sensorPacketDropStatGrp 13 } + +sensorUdpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in UDP Protocol by the sensor." + ::= { sensorPacketDropStatGrp 14 } + +sensorIcmpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in ICMP v4 Protocol by the sensor." + ::= { sensorPacketDropStatGrp 15 } + +sensorIcmpv6ProtoErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in ICMP v6 Protocol by the sensor." + ::= { sensorPacketDropStatGrp 16 } + +sensorIpProtoErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in IPv4 protocol by the sensor." + ::= { sensorPacketDropStatGrp 17 } + +sensorIpv6ProtoErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to errors in IPv6 protocol by the sensor." + ::= { sensorPacketDropStatGrp 18 } + +sensorCRCErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number packets dropped to CRC check failures by the sensor." + ::= { sensorPacketDropStatGrp 19 } + +sensorOtherLayer2ErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to other Layer2 errors by the sensor." + ::= { sensorPacketDropStatGrp 20 } + +sensorOffHdrLenErrorDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to offset index length errors by the sensor." + ::= { sensorPacketDropStatGrp 21 } + +sensorSysOutOfResourceDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped due to sensor running out of resource by the sensor." + ::= { sensorPacketDropStatGrp 22 } + +sensorPktDropStatResetCounters OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Resets the counters in sensor packet drop table" + ::= { sensorPacketDropStatGrp 23 } + +sensorHostIsolationv4Drop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of IPv4 packets dropped due to host isolation configuration by the sensor." + ::= { sensorPacketDropStatGrp 24 } + +sensorHostIsolationv6Drop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of IPv6 packets dropped due to host isolation configuration by the sensor." + ::= { sensorPacketDropStatGrp 25 } + +sensorLayer2BackplaneDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packets dropped on the uplink ports of layer2 switch" + ::= { sensorPacketDropStatGrp 26 } + +sensorLayer2MiscDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of non-error packets received on all monitoring ports dropped in the layer2 switch because of other reasons" + ::= { sensorPacketDropStatGrp 27 } + +sensorNICDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packet dropped at NIC level" + ::= { sensorPacketDropStatGrp 28 } + +sensorFrontEndMiscDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of packet dropped at Frontend level" + ::= { sensorPacketDropStatGrp 29 } + +sensorBackEndMiscDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of Misc packet dropped at Backend level" + ::= { sensorPacketDropStatGrp 30 } + + +pktCapStatGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 3 } + +pktCapTotal OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of Packet Capture" + ::= {pktCapStatGrp 1 } + +pktCapDropTotal OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of Packet drops due to sensor load/port load." + ::= {pktCapStatGrp 2 } + + +controlPathPerfGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 4 } + +controlPathMemUsageTable OBJECT-TYPE + SYNTAX SEQUENCE OF ControlPathMemUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "" + ::= { controlPathPerfGrp 1 } + +controlPathMemUsageEntry OBJECT-TYPE + SYNTAX ControlPathMemUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This entry gives information about the Control path memory utilized. + This entry is indexed by a fixed value chassis slotIndex of 1 (one) for all models." + INDEX { slotIndex } + ::= { controlPathMemUsageTable 1 } + +ControlPathMemUsageEntry ::= SEQUENCE { + sysMemFree + Counter, + sysMemCached + Counter, + sysMemBuffers + Counter, + sysMemUtilisation + Counter +} + +sysMemFree OBJECT-TYPE + SYNTAX Counter + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total Control Path system free memory available in MB" + ::= {controlPathMemUsageEntry 1 } + +sysMemCached OBJECT-TYPE + SYNTAX Counter + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total Control Path system cached memory in MB" + ::= {controlPathMemUsageEntry 2 } + +sysMemBuffers OBJECT-TYPE + SYNTAX Counter + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total Control Path system buffer memory in MB" + ::= {controlPathMemUsageEntry 3 } + +sysMemUtilisation OBJECT-TYPE + SYNTAX Counter + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total Control Path system memory utilisation in percentage" + ::= {controlPathMemUsageEntry 4 } + + + + +END diff --git a/mibs/trellix/TRELLIX-SENSOR-SMI b/mibs/trellix/TRELLIX-SENSOR-SMI new file mode 100644 index 0000000000..6ccc502ecf --- /dev/null +++ b/mibs/trellix/TRELLIX-SENSOR-SMI @@ -0,0 +1,205 @@ +-- ***************************************************************** +-- TRELLIX CONFIDENTIAL +-- TRELLIX-SENSOR-SMI: +-- Trellix Sensor Structure of Management Information +-- +-- Copyright (c) 2022 MUSARUBRA US, LLC +-- All rights reserved. +-- +-- ***************************************************************** + +TRELLIX-SENSOR-SMI DEFINITIONS ::= BEGIN + +IMPORTS + OBJECT-TYPE, MODULE-IDENTITY, Integer32 + FROM SNMPv2-SMI + ivProducts + FROM TRELLIX-INTRUVERT-SMI; + +ivSensor MODULE-IDENTITY +LAST-UPDATED "200707090000Z" +ORGANIZATION +"MUSARUBRA US LLC" +CONTACT-INFO +"Trellix Customer Service Department + +Postal: 6220 American Center Drive + San Jose CA 95002-2563 + + +Tel: +1 800 338 8754 + +E-mail: support@mcafee.com" +DESCRIPTION +"The Structure of Management Information for the Trellix enterprise." + +REVISION "200707090000Z" +DESCRIPTION +"Initial version of this MIB module." +::= { ivProducts 1 } + + +--This group is defined to provide a common place fo the MIB objects that would be used as +--index keys into SNMP tables defined within the Sensor Configuration, Performance &Trap MIBs +-- + +ivIndex OBJECT IDENTIFIER ::= { ivSensor 1 } + +slotIndex OBJECT-TYPE + SYNTAX Integer32 (1..10) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Identifies the position (starting from 1) of a slot in the chassis." + ::= { ivIndex 1 } + +processorIndex OBJECT-TYPE + SYNTAX Integer32 (1..8) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Processor CPU core index (starting from 1) within a + sensor card." + ::= { ivIndex 2 } + +npIndex OBJECT-TYPE + SYNTAX Integer32 (1..2) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "NP CPU core index (starting from 1) within a sensor card." + ::= { ivIndex 3 } + +mgmtPortIndex OBJECT-TYPE + SYNTAX Integer32 (1) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Management port index (starting from 1) on a Sensor management card. + Must not exceed a maximum count as specified by the mgmtPortMaxCount object in + the vendor specified MIB specified for this mgmt card." + ::= { ivIndex 4 } + +intfPortIndex OBJECT-TYPE + SYNTAX Integer32 (1..32) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Interface port index (starting from 1) on a sensor analysis card. + These ports are also referred to as front-end ports." + ::= { ivIndex 5 } + +respPortIndex OBJECT-TYPE + SYNTAX Integer32 (1..33) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Response port index (starting from 1) on a sensor-analysis card." + ::= { ivIndex 6 } + +bundleIndex OBJECT-TYPE + SYNTAX Integer32 (0..10) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Trellix management system defined bundle number each sensor card belongs to. + Valid:1onwards + Note: Use cases may use the value '0' to interpret that the notion of 'bundle' is to be ignored." + ::= { ivIndex 7 } + +qedIndex OBJECT-TYPE + SYNTAX Integer32 (1) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "QED processor index (starting from 1) on a Sensor management card." + ::= { ivIndex 8 } + +sibyteIndex OBJECT-TYPE + SYNTAX Integer32 (1..4) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "SiByte processor index (starting from 1) on a Sensor management card." + ::= { ivIndex 9 } + +rateLimitQueueIndex OBJECT-TYPE + SYNTAX Integer32 (1..8) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Ratelimit Queue index (starting from 1). For FE ports the index value is between (1 to 6). + For GE ports the index value is between (1 to 8)" + ::= { ivIndex 10 } + +intfPhysicalPortIndex OBJECT-TYPE + SYNTAX Integer32 (1..32) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Interface physical port index (starting from 1) on a sensor analysis card. + These are applicable to the Load Balancer Solution only." + ::= { ivIndex 11 } + +ntpServerIndex OBJECT-TYPE + SYNTAX Integer32 (1..2) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Ntp Server index (starting from 1). Ntp Server Index value can be either 1 or 2." + ::= { ivIndex 12 } + +intfVirtualSlotIndex OBJECT-TYPE + SYNTAX Integer32 (1..100) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Identifies the position (starting from 1) of a slot in the virtual stack." + ::= { ivIndex 13 } + +intfVirtualPortIndex OBJECT-TYPE + SYNTAX Integer32 (1..1024) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Interface virtual port index (starting from 1) on a virtual stack analysis card. + These are applicable to the Stack Solution only." + ::= { ivIndex 14 } + +sslProbeIpv4Index OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + " " + ::= { ivIndex 15 } + +processorNumIndex OBJECT-TYPE + SYNTAX Integer32 (1..1024) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + " " + ::= { ivIndex 16 } + +sslProbeIpv6Index OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + " " + ::= { ivIndex 17 } + +ivSensorConfiguration OBJECT IDENTIFIER ::= { ivSensor 2 } + +ivSensorPerformance OBJECT IDENTIFIER ::= { ivSensor 3 } + +ivSensorTraps OBJECT IDENTIFIER ::= { ivSensor 4 } + +ivFirewallConfiguration OBJECT IDENTIFIER ::= { ivSensor 5 } + +ivFirewallPerformance OBJECT IDENTIFIER ::= { ivSensor 6 } + +END + + diff --git a/tests/data/mlos-nsp_ns9500.json b/tests/data/mlos-nsp_ns9500.json new file mode 100644 index 0000000000..aaa4f63e7b --- /dev/null +++ b/tests/data/mlos-nsp_ns9500.json @@ -0,0 +1,3251 @@ +{ + "os": { + "discovery": { + "devices": [ + { + "sysName": "", + "sysObjectID": ".1.3.6.1.4.1.8072.3.2.10", + "sysDescr": "Linux HOSTNAME 5.4.0-105-generic #1 SMP Fri Jul 8 15:13:18 UTC 2022 x86_64", + "sysContact": "", + "version": null, + "hardware": "IPS-NS9500", + "features": null, + "location": "", + "os": "mlos-nsp", + "type": "appliance", + "serial": "A1234567891", + "icon": "trellix.svg" + } + ] + }, + "poller": "matches discovery" + }, + "ports": { + "discovery": { + "ports": [ + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G0/1", + "ifName": "G0/1", + "portName": null, + "ifIndex": 0, + "ifSpeed": null, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G0/1", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G0/2", + "ifName": "G0/2", + "portName": null, + "ifIndex": 1, + "ifSpeed": null, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G0/2", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/1", + "ifName": "G1/1", + "portName": null, + "ifIndex": 2, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": null, + "ifAdminStatus": "up", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/1", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 5504783, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 5779, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 6952773376, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 860081, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/2", + "ifName": "G1/2", + "portName": null, + "ifIndex": 3, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": null, + "ifAdminStatus": "up", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/2", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 2450181, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 13218, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 364013018, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 16984393, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/3", + "ifName": "G1/3", + "portName": null, + "ifIndex": 4, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": null, + "ifAdminStatus": "up", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/3", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 5544222, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 5779, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 6991775269, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 867527, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/4", + "ifName": "G1/4", + "portName": null, + "ifIndex": 5, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": null, + "ifAdminStatus": "up", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/4", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 2454087, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 13091, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 375019111, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 16884121, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/5", + "ifName": "G1/5", + "portName": null, + "ifIndex": 6, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/5", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/6", + "ifName": "G1/6", + "portName": null, + "ifIndex": 7, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/6", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/7", + "ifName": "G1/7", + "portName": null, + "ifIndex": 8, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/7", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/8", + "ifName": "G1/8", + "portName": null, + "ifIndex": 9, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/8", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/1", + "ifName": "G3/1", + "portName": null, + "ifIndex": 10, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/1", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/2", + "ifName": "G3/2", + "portName": null, + "ifIndex": 11, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/2", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/3", + "ifName": "G3/3", + "portName": null, + "ifIndex": 12, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/3", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/4", + "ifName": "G3/4", + "portName": null, + "ifIndex": 13, + "ifSpeed": 10000000000, + "ifSpeed_prev": null, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": null, + "ifAdminStatus": "down", + "ifAdminStatus_prev": null, + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/4", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": null, + "ifInUcastPkts_delta": null, + "ifInUcastPkts_rate": null, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": null, + "ifOutUcastPkts_delta": null, + "ifOutUcastPkts_rate": null, + "ifInErrors": 0, + "ifInErrors_prev": null, + "ifInErrors_delta": null, + "ifInErrors_rate": null, + "ifOutErrors": 0, + "ifOutErrors_prev": null, + "ifOutErrors_delta": null, + "ifOutErrors_rate": null, + "ifInOctets": 0, + "ifInOctets_prev": null, + "ifInOctets_delta": null, + "ifInOctets_rate": null, + "ifOutOctets": 0, + "ifOutOctets_prev": null, + "ifOutOctets_delta": null, + "ifOutOctets_rate": null, + "poll_prev": null, + "ifInNUcastPkts": null, + "ifInNUcastPkts_prev": null, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": null, + "ifOutNUcastPkts_prev": null, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": null, + "ifInDiscards_prev": null, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": null, + "ifOutDiscards_prev": null, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": null, + "ifInUnknownProtos_prev": null, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": null, + "ifInBroadcastPkts_prev": null, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": null, + "ifOutBroadcastPkts_prev": null, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": null, + "ifInMulticastPkts_prev": null, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": null, + "ifOutMulticastPkts_prev": null, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + } + ] + }, + "poller": { + "ports": [ + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G0/1", + "ifName": "G0/1", + "portName": null, + "ifIndex": 0, + "ifSpeed": null, + "ifSpeed_prev": 0, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G0/1", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G0/2", + "ifName": "G0/2", + "portName": null, + "ifIndex": 1, + "ifSpeed": null, + "ifSpeed_prev": 0, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G0/2", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/1", + "ifName": "G1/1", + "portName": null, + "ifIndex": 2, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": "up", + "ifAdminStatus": "up", + "ifAdminStatus_prev": "up", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/1", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 5504783, + "ifInUcastPkts_prev": 5504783, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 5779, + "ifOutUcastPkts_prev": 5779, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 6952773376, + "ifInOctets_prev": 6952773376, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 860081, + "ifOutOctets_prev": 860081, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/2", + "ifName": "G1/2", + "portName": null, + "ifIndex": 3, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": "up", + "ifAdminStatus": "up", + "ifAdminStatus_prev": "up", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/2", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 2450181, + "ifInUcastPkts_prev": 2450181, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 13218, + "ifOutUcastPkts_prev": 13218, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 364013018, + "ifInOctets_prev": 364013018, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 16984393, + "ifOutOctets_prev": 16984393, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/3", + "ifName": "G1/3", + "portName": null, + "ifIndex": 4, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": "up", + "ifAdminStatus": "up", + "ifAdminStatus_prev": "up", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/3", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 5544222, + "ifInUcastPkts_prev": 5544222, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 5779, + "ifOutUcastPkts_prev": 5779, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 6991775269, + "ifInOctets_prev": 6991775269, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 867527, + "ifOutOctets_prev": 867527, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/4", + "ifName": "G1/4", + "portName": null, + "ifIndex": 5, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "up", + "ifOperStatus_prev": "up", + "ifAdminStatus": "up", + "ifAdminStatus_prev": "up", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/4", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 2454087, + "ifInUcastPkts_prev": 2454087, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 13091, + "ifOutUcastPkts_prev": 13091, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 375019111, + "ifInOctets_prev": 375019111, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 16884121, + "ifOutOctets_prev": 16884121, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/5", + "ifName": "G1/5", + "portName": null, + "ifIndex": 6, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/5", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/6", + "ifName": "G1/6", + "portName": null, + "ifIndex": 7, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/6", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/7", + "ifName": "G1/7", + "portName": null, + "ifIndex": 8, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/7", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G1/8", + "ifName": "G1/8", + "portName": null, + "ifIndex": 9, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G1/8", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/1", + "ifName": "G3/1", + "portName": null, + "ifIndex": 10, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/1", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/2", + "ifName": "G3/2", + "portName": null, + "ifIndex": 11, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/2", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/3", + "ifName": "G3/3", + "portName": null, + "ifIndex": 12, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/3", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + }, + { + "port_descr_type": null, + "port_descr_descr": null, + "port_descr_circuit": null, + "port_descr_speed": null, + "port_descr_notes": null, + "ifDescr": "G3/4", + "ifName": "G3/4", + "portName": null, + "ifIndex": 13, + "ifSpeed": 10000000000, + "ifSpeed_prev": 10000000000, + "ifConnectorPresent": null, + "ifOperStatus": "down", + "ifOperStatus_prev": "down", + "ifAdminStatus": "down", + "ifAdminStatus_prev": "down", + "ifDuplex": "fullDuplex", + "ifMtu": null, + "ifType": "ethernetCsmacd", + "ifAlias": "G3/4", + "ifPhysAddress": null, + "ifLastChange": 0, + "ifVlan": null, + "ifTrunk": null, + "ignore": 0, + "disabled": 0, + "deleted": 0, + "pagpOperationMode": null, + "pagpPortState": null, + "pagpPartnerDeviceId": null, + "pagpPartnerLearnMethod": null, + "pagpPartnerIfIndex": null, + "pagpPartnerGroupIfIndex": null, + "pagpPartnerDeviceName": null, + "pagpEthcOperationMode": null, + "pagpDeviceId": null, + "pagpGroupIfIndex": null, + "ifInUcastPkts": 0, + "ifInUcastPkts_prev": 0, + "ifInUcastPkts_delta": 0, + "ifInUcastPkts_rate": 0, + "ifOutUcastPkts": 0, + "ifOutUcastPkts_prev": 0, + "ifOutUcastPkts_delta": 0, + "ifOutUcastPkts_rate": 0, + "ifInErrors": 0, + "ifInErrors_prev": 0, + "ifInErrors_delta": 0, + "ifInErrors_rate": 0, + "ifOutErrors": 0, + "ifOutErrors_prev": 0, + "ifOutErrors_delta": 0, + "ifOutErrors_rate": 0, + "ifInOctets": 0, + "ifInOctets_prev": 0, + "ifInOctets_delta": 0, + "ifInOctets_rate": 0, + "ifOutOctets": 0, + "ifOutOctets_prev": 0, + "ifOutOctets_delta": 0, + "ifOutOctets_rate": 0, + "poll_prev": null, + "ifInNUcastPkts": 0, + "ifInNUcastPkts_prev": 0, + "ifInNUcastPkts_delta": null, + "ifInNUcastPkts_rate": null, + "ifOutNUcastPkts": 0, + "ifOutNUcastPkts_prev": 0, + "ifOutNUcastPkts_delta": null, + "ifOutNUcastPkts_rate": null, + "ifInDiscards": 0, + "ifInDiscards_prev": 0, + "ifInDiscards_delta": null, + "ifInDiscards_rate": null, + "ifOutDiscards": 0, + "ifOutDiscards_prev": 0, + "ifOutDiscards_delta": null, + "ifOutDiscards_rate": null, + "ifInUnknownProtos": 0, + "ifInUnknownProtos_prev": 0, + "ifInUnknownProtos_delta": null, + "ifInUnknownProtos_rate": null, + "ifInBroadcastPkts": 0, + "ifInBroadcastPkts_prev": 0, + "ifInBroadcastPkts_delta": null, + "ifInBroadcastPkts_rate": null, + "ifOutBroadcastPkts": 0, + "ifOutBroadcastPkts_prev": 0, + "ifOutBroadcastPkts_delta": null, + "ifOutBroadcastPkts_rate": null, + "ifInMulticastPkts": 0, + "ifInMulticastPkts_prev": 0, + "ifInMulticastPkts_delta": null, + "ifInMulticastPkts_rate": null, + "ifOutMulticastPkts": 0, + "ifOutMulticastPkts_prev": 0, + "ifOutMulticastPkts_delta": null, + "ifOutMulticastPkts_rate": null + } + ] + } + }, + "processors": { + "discovery": { + "processors": [ + { + "entPhysicalIndex": 0, + "hrDeviceIndex": 0, + "processor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.5.1.1.2", + "processor_index": "2", + "processor_type": "mlos-nsp", + "processor_usage": 26, + "processor_descr": "Processor", + "processor_precision": 1, + "processor_perc_warn": 75 + } + ] + }, + "poller": "matches discovery" + }, + "mempools": { + "discovery": { + "mempools": [ + { + "mempool_index": "1", + "entPhysicalIndex": null, + "mempool_type": "mlos-nsp", + "mempool_class": "system", + "mempool_precision": 1, + "mempool_descr": "Memory", + "mempool_perc": 38, + "mempool_perc_oid": ".1.3.6.1.4.1.8962.2.1.3.1.4.1.1.4.1", + "mempool_used": 38, + "mempool_used_oid": null, + "mempool_free": 62, + "mempool_free_oid": null, + "mempool_total": 100, + "mempool_total_oid": null, + "mempool_largestfree": null, + "mempool_lowestfree": null, + "mempool_deleted": 0, + "mempool_perc_warn": 90 + } + ] + }, + "poller": "matches discovery" + }, + "sensors": { + "discovery": { + "sensors": [ + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.64", + "sensor_index": "ATD", + "sensor_type": "mlos-nsp", + "sensor_descr": "ATD", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 7, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.2", + "sensor_index": "Blacklist", + "sensor_type": "mlos-nsp", + "sensor_descr": "Blacklist", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 55, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.512", + "sensor_index": "Flash Analysis Engine", + "sensor_type": "mlos-nsp", + "sensor_descr": "Flash Analysis Engine", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 0, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.16", + "sensor_index": "Gateway Anti-Malware", + "sensor_type": "mlos-nsp", + "sensor_descr": "Gateway Anti-Malware", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 24, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.1", + "sensor_index": "GTI File Reputation", + "sensor_type": "mlos-nsp", + "sensor_descr": "GTI File Reputation", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 50, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.128", + "sensor_index": "MATD-AV", + "sensor_type": "mlos-nsp", + "sensor_descr": "MATD-AV", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 4, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.4", + "sensor_index": "McAfee Cloud", + "sensor_type": "mlos-nsp", + "sensor_descr": "McAfee Cloud", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 0, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.16384", + "sensor_index": "MVX Engine", + "sensor_type": "mlos-nsp", + "sensor_descr": "MVX Engine", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 4, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.4096", + "sensor_index": "NSP Malware Engine", + "sensor_type": "mlos-nsp", + "sensor_descr": "NSP Malware Engine", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 1, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.8", + "sensor_index": "PDF Emulation", + "sensor_type": "mlos-nsp", + "sensor_descr": "PDF Emulation", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 40, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.32", + "sensor_index": "Save File", + "sensor_type": "mlos-nsp", + "sensor_descr": "Save File", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 25, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.1024", + "sensor_index": "Threat Intelligence Exchange", + "sensor_type": "mlos-nsp", + "sensor_descr": "Threat Intelligence Exchange", + "group": "Malware Engine File Counters", + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 72, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "count", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.3.1.1.5.1.7.2", + "sensor_index": "totalAlertsSentCount", + "sensor_type": "mlos-nsp", + "sensor_descr": "Alerts sent to ISM", + "group": null, + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 500, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": null + }, + { + "sensor_deleted": 0, + "sensor_class": "state", + "poller_type": "snmp", + "sensor_oid": ".1.3.6.1.4.1.8962.2.1.2.1.18.2.0", + "sensor_index": "0", + "sensor_type": "l2ModeStatus", + "sensor_descr": "Sensor Mode", + "group": null, + "sensor_divisor": 1, + "sensor_multiplier": 1, + "sensor_current": 2, + "sensor_limit": null, + "sensor_limit_warn": null, + "sensor_limit_low": null, + "sensor_limit_low_warn": null, + "sensor_alert": 1, + "sensor_custom": "No", + "entPhysicalIndex": null, + "entPhysicalIndex_measured": null, + "sensor_prev": null, + "user_func": null, + "rrd_type": "GAUGE", + "state_name": "l2ModeStatus" + } + ], + "state_indexes": [ + { + "state_name": "l2ModeStatus", + "state_descr": "Layer 2 Mode", + "state_draw_graph": 0, + "state_value": 1, + "state_generic_value": 0 + }, + { + "state_name": "l2ModeStatus", + "state_descr": "IPS Mode", + "state_draw_graph": 0, + "state_value": 2, + "state_generic_value": 0 + } + ] + }, + "poller": "matches discovery" + } +} diff --git a/tests/snmpsim/mlos-nsp_ns9500.snmprec b/tests/snmpsim/mlos-nsp_ns9500.snmprec new file mode 100644 index 0000000000..8bb7458503 --- /dev/null +++ b/tests/snmpsim/mlos-nsp_ns9500.snmprec @@ -0,0 +1,785 @@ +1.3.6.1.2.1.1.1.0|4|Linux HOSTNAME 5.4.0-105-generic #1 SMP Fri Jul 8 15:13:18 UTC 2022 x86_64 +1.3.6.1.2.1.1.2.0|6|1.3.6.1.4.1.8072.3.2.10 +1.3.6.1.2.1.1.3.0|67|68250386 +1.3.6.1.2.1.1.4.0|4| +1.3.6.1.2.1.1.5.0|4| +1.3.6.1.2.1.1.6.0|4| +1.3.6.1.2.1.11.1.0|65|232029 +1.3.6.1.2.1.11.2.0|65|153052 +1.3.6.1.2.1.11.3.0|65|0 +1.3.6.1.2.1.11.4.0|65|0 +1.3.6.1.2.1.11.5.0|65|0 +1.3.6.1.2.1.11.6.0|65|0 +1.3.6.1.2.1.11.8.0|65|0 +1.3.6.1.2.1.11.9.0|65|0 +1.3.6.1.2.1.11.10.0|65|0 +1.3.6.1.2.1.11.11.0|65|0 +1.3.6.1.2.1.11.12.0|65|0 +1.3.6.1.2.1.11.13.0|65|670277 +1.3.6.1.2.1.11.14.0|65|0 +1.3.6.1.2.1.11.15.0|65|48344 +1.3.6.1.2.1.11.16.0|65|80389 +1.3.6.1.2.1.11.17.0|65|39 +1.3.6.1.2.1.11.18.0|65|0 +1.3.6.1.2.1.11.19.0|65|0 +1.3.6.1.2.1.11.20.0|65|0 +1.3.6.1.2.1.11.21.0|65|0 +1.3.6.1.2.1.11.22.0|65|0 +1.3.6.1.2.1.11.24.0|65|0 +1.3.6.1.2.1.11.25.0|65|0 +1.3.6.1.2.1.11.26.0|65|0 +1.3.6.1.2.1.11.27.0|65|0 +1.3.6.1.2.1.11.28.0|65|153075 +1.3.6.1.2.1.11.29.0|65|0 +1.3.6.1.2.1.11.31.0|65|0 +1.3.6.1.2.1.11.32.0|65|0 +1.3.6.1.4.1.8962.2.1.2.1.1.1.0|4|HOSTNAME +1.3.6.1.4.1.8962.2.1.2.1.1.4.0|4|IPS-NS9500 +1.3.6.1.4.1.8962.2.1.2.1.1.5.0|4|A1234567891 +1.3.6.1.4.1.8962.2.1.2.1.1.6.0|4|TRELLIX-NETWORK-SECURITY-PLATFORM +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.2.1|4|G0/1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.2.2|4|G0/2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.1|4|G1/1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.2|4|G1/2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.3|4|G1/3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.4|4|G1/4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.5|4|G1/5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.6|4|G1/6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.7|4|G1/7 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.3.8|4|G1/8 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.5.1|4|G3/1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.5.2|4|G3/2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.5.3|4|G3/3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.1.5.4|4|G3/4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.2.1|2|7 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.2.2|2|7 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.1|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.2|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.3|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.4|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.5|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.6|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.7|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.3.8|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.5.1|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.5.2|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.5.3|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.2.5.4|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.2.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.2.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.5|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.6|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.7|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.3.8|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.5.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.3.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.2.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.2.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.5|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.6|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.7|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.3.8|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.5.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.4.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.2.1|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.2.2|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.5|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.6|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.7|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.3.8|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.5.5.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.6|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.3.8|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.6.5.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.2.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.3|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.4|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.5|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.6|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.7|2|8 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.3.8|2|7 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.5.3|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.7.5.4|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.2.1|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.2.2|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.1|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.2|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.3|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.4|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.5|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.6|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.7|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.3.8|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.5.1|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.5.2|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.5.3|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.8.5.4|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.2.1|2|12 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.2.2|2|12 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.1|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.2|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.3|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.4|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.5|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.6|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.7|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.3.8|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.5.1|2|9 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.5.2|2|9 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.5.3|2|9 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.9.5.4|2|9 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.6|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.3.8|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.10.5.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.2.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.6|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.3.8|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.11.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.2.1|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.2.2|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.1|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.2|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.3|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.4|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.5|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.6|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.7|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.3.8|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.5.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.13.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.6|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.3.8|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.5.1|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.5.2|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.5.3|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.14.5.4|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.6|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.3.8|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.15.5.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.6|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.3.8|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.22.5.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.2.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.2.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.5|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.6|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.7|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.3.8|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.5.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.23.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.2.1|2|10 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.2.2|2|10 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.1|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.2|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.3|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.4|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.5|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.6|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.7|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.3.8|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.24.5.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.2.1|2|0 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.2.2|2|0 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.5|2|0 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.6|2|0 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.7|2|0 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.3.8|2|0 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.5.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.25.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.6|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.3.8|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.5.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.26.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.2.1|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.2.2|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.1|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.2|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.3|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.4|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.5|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.6|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.7|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.3.8|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.5.1|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.5.2|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.5.3|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.27.5.4|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.2.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.2.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.5|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.6|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.7|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.3.8|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.5.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.5.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.5.3|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.31.5.4|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.2.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.5|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.6|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.7|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.3.8|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.5.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.5.2|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.5.3|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.33.5.4|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.2.1|2|1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.2.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.1|2|3 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.2|2|4 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.3|2|5 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.4|2|6 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.5|2|7 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.6|2|8 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.7|2|9 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.3.8|2|10 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.5.1|2|27 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.5.2|2|28 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.5.3|2|29 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.35.5.4|2|30 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.2.1|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.2.2|2|2 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.1|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.2|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.3|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.4|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.5|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.6|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.7|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.3.8|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.5.1|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.5.2|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.5.3|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.36.5.4|2|-1 +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.2.1|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.2.2|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.1|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.2|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.3|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.4|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.5|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.6|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.7|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.3.8|4| +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.5.1|4|Not Applicable +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.5.2|4|Not Applicable +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.5.3|4|Not Applicable +1.3.6.1.4.1.8962.2.1.2.1.11.1.1.37.5.4|4|Not Applicable +1.3.6.1.4.1.8962.2.1.2.1.18.2.0|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.1.2|2|26 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.2.2|2|25 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.3.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.4.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.5.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.6.2|2|1000 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.7.2|2|500 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.8.2|2|1 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.9.2|2|10000 +1.3.6.1.4.1.8962.2.1.3.1.1.5.1.10.2|70|1000000000 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.1|70|5504783 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.2|70|2450181 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.3|70|5544222 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.4|70|2454087 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.1.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.1|70|5504783 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.2|70|2450181 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.3|70|5544222 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.4|70|2454087 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.2.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.3.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.4.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.1|70|6952773376 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.2|70|364013018 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.3|70|6991775269 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.4|70|375019111 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.5.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.6.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.1|70|5779 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.2|70|13218 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.3|70|5779 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.4|70|13091 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.7.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.1|70|5779 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.2|70|13218 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.3|70|5779 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.4|70|13091 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.8.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.9.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.10.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.1|70|860081 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.2|70|16984393 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.3|70|867527 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.4|70|16884121 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.11.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.2.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.2.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.5|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.6|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.7|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.3.8|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.5.1|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.5.2|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.5.3|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.7.1.12.5.4|70|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.1|4|GTI File Reputation +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.2|4|Blacklist +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.4|4|McAfee Cloud +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.8|4|PDF Emulation +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.16|4|Gateway Anti-Malware +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.32|4|Save File +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.64|4|ATD +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.128|4|MATD-AV +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.512|4|Flash Analysis Engine +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.1024|4|Threat Intelligence Exchange +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.4096|4|NSP Malware Engine +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.2.16384|4|MVX Engine +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.1|2|50 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.2|2|55 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.8|2|40 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.16|2|24 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.32|2|25 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.64|2|7 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.128|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.1024|2|72 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.4096|2|1 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.3.16384|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.1|2|7 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.8|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.16|2|3 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.64|2|3 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.128|2|3 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.1024|2|7 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.4096|2|1 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.4.16384|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.5.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.64|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.128|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.6.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.7.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.8.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.9.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.64|2|9 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.10.16384|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.11.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.12.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.1|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.16|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.64|2|9 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.1024|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.13.16384|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.1|2|7 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.2|2|7 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.8|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.16|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.32|2|3 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.64|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.128|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.1024|2|7 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.4096|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.14.16384|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.1|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.2|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.8|2|9 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.16|2|4 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.32|2|5 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.64|2|5 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.128|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.1024|2|2 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.4096|2|-9 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.15.16384|2|5 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.16.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.64|2|3 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.128|2|3 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.17.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.64|2|6 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.18.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.1|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.2|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.4|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.8|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.16|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.32|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.64|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.128|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.512|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.1024|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.4096|2|0 +1.3.6.1.4.1.8962.2.1.3.1.1.11.1.1.19.16384|2|0 +1.3.6.1.4.1.8962.2.1.3.1.4.1.1.4.1|2|38