initial commit; version 22.5.12042
This commit is contained in:
778
mibs/trendmicro/TPT-MISC-NOTIFY-MIB
Normal file
778
mibs/trendmicro/TPT-MISC-NOTIFY-MIB
Normal file
@ -0,0 +1,778 @@
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Trend Micro, Inc.
|
||||
-- Copyright information is in the DESCRIPTION section of the MODULE-IDENTITY.
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
TPT-MISC-NOTIFY-MIB
|
||||
|
||||
DEFINITIONS ::= BEGIN
|
||||
|
||||
IMPORTS
|
||||
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,
|
||||
Unsigned32, IpAddress, Integer32, Counter64
|
||||
FROM SNMPv2-SMI
|
||||
|
||||
DateAndTime,
|
||||
TEXTUAL-CONVENTION
|
||||
FROM SNMPv2-TC
|
||||
|
||||
Ipv6Address
|
||||
FROM IPV6-TC
|
||||
|
||||
InetAddress,
|
||||
InetAddressType
|
||||
FROM INET-ADDRESS-MIB
|
||||
|
||||
SnmpAdminString
|
||||
FROM SNMP-FRAMEWORK-MIB
|
||||
|
||||
tpt-tpa-objs, tpt-tpa-eventsV2, tpt-tpa-unkparams
|
||||
FROM TPT-TPAMIBS-MIB
|
||||
|
||||
SslInspectedFlag
|
||||
FROM TPT-POLICY-MIB
|
||||
;
|
||||
|
||||
tpt-misc-notify MODULE-IDENTITY
|
||||
LAST-UPDATED "201605251854Z" -- May 25, 2016
|
||||
ORGANIZATION "Trend Micro, Inc."
|
||||
CONTACT-INFO "www.trendmicro.com"
|
||||
DESCRIPTION
|
||||
"Notification definitions that have no other place to call home.
|
||||
|
||||
Copyright (C) 2016 Trend Micro Incorporated. All Rights Reserved.
|
||||
|
||||
Trend Micro makes no warranty of any kind with regard to this material,
|
||||
including, but not limited to, the implied warranties of merchantability
|
||||
and fitness for a particular purpose. Trend Micro shall not be liable for
|
||||
errors contained herein or for incidental or consequential damages in
|
||||
connection with the furnishing, performance, or use of this material. This
|
||||
document contains proprietary information, which is protected by copyright. No
|
||||
part of this document may be photocopied, reproduced, or translated into
|
||||
another language without the prior written consent of Trend Micro. The
|
||||
information is provided 'as is' without warranty of any kind and is subject to
|
||||
change without notice. The only warranties for Trend Micro products and
|
||||
services are set forth in the express warranty statements accompanying such
|
||||
products and services. Nothing herein should be construed as constituting an
|
||||
additional warranty. Trend Micro shall not be liable for technical or editorial
|
||||
errors or omissions contained herein. TippingPoint(R), the TippingPoint logo, and
|
||||
Digital Vaccine(R) are registered trademarks of Trend Micro. All other company
|
||||
and product names may be trademarks of their respective holders. All rights
|
||||
reserved. This document contains confidential information, trade secrets or
|
||||
both, which are the property of Trend Micro. No part of this documentation may
|
||||
be reproduced in any form or by any means or used to make any derivative work
|
||||
(such as translation, transformation, or adaptation) without written permission
|
||||
from Trend Micro or one of its subsidiaries. All other company and product
|
||||
names may be trademarks of their respective holders.
|
||||
"
|
||||
|
||||
REVISION "201605251854Z" -- May 25, 2016
|
||||
DESCRIPTION "Updated copyright information. Minor MIB syntax fixes."
|
||||
|
||||
REVISION "201605031726Z" -- May 03, 2016
|
||||
DESCRIPTION "Added emergency, alert, notice, info, and debug severity values to SystemLogSeverity."
|
||||
|
||||
REVISION "201505281330Z" -- May 28, 2015
|
||||
DESCRIPTION "Added SSL inspected flag parameter to quarantine notifications."
|
||||
|
||||
REVISION "201411111843Z" -- November 12, 2014
|
||||
DESCRIPTION "Added audit log notification and objects."
|
||||
|
||||
::= { tpt-tpa-objs 2 }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Device ID: first payload parameter of all notifications in this module.
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptMiscNotifyDeviceID OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..40))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The unique identifier of the device sending this notification."
|
||||
::= { tpt-tpa-unkparams 31 }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Managed notification
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptManagedNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that the device
|
||||
is now being managed by said management station."
|
||||
::= { tpt-tpa-eventsV2 9 }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Unmanaged notification
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptUnmanagedNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that the device
|
||||
is no longer being managed by said management station."
|
||||
::= { tpt-tpa-eventsV2 10 }
|
||||
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Textual convention for log file rollover notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
LogFileType ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The type of the file that has rolled over."
|
||||
SYNTAX INTEGER { system(1), alert(2), block(3), peer(4), audit(5),
|
||||
quarantine(6) }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Log file rollover notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptRolloverNotifyFileType OBJECT-TYPE
|
||||
SYNTAX LogFileType
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The type of the file that has rolled over."
|
||||
::= { tpt-tpa-unkparams 32 }
|
||||
|
||||
tptRolloverNotifyMaxFiles OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS deprecated
|
||||
DESCRIPTION
|
||||
"The maximum number of files maintained for this log file type."
|
||||
::= { tpt-tpa-unkparams 33 }
|
||||
|
||||
tptRolloverNotifyNumFiles OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS deprecated
|
||||
DESCRIPTION
|
||||
"The number of files that have rolled over."
|
||||
::= { tpt-tpa-unkparams 34 }
|
||||
|
||||
tptRolloverNotifyTime OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The rollover time of the most recent file pertaining to this notification
|
||||
(in seconds since January 1, 1970)."
|
||||
::= { tpt-tpa-unkparams 35 }
|
||||
|
||||
tptRolloverNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptRolloverNotifyFileType,
|
||||
tptRolloverNotifyTime }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that a log file
|
||||
has rolled over."
|
||||
::= { tpt-tpa-eventsV2 11 }
|
||||
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Textual convention for discovery notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
DiscoveryDelta ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"An indication of whether discovery results changed from the previous scan."
|
||||
SYNTAX INTEGER { changed(1), unchanged(2) }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Discovery notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptDiscoveryNotifyScanID OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..40))
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The unique identifier of the scan pertaining to this notification."
|
||||
::= { tpt-tpa-unkparams 42 }
|
||||
|
||||
tptDiscoveryNotifySegmentName OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..128))
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The name of the scanned segment pertaining to this notification."
|
||||
::= { tpt-tpa-unkparams 43 }
|
||||
|
||||
tptDiscoveryNotifyScanRange OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..40))
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The network address range requested in the scan pertaining to this
|
||||
notification."
|
||||
::= { tpt-tpa-unkparams 44 }
|
||||
|
||||
tptDiscoveryNotifyDelta OBJECT-TYPE
|
||||
SYNTAX DiscoveryDelta
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"An indication of whether discovery results changed from the previous scan.
|
||||
Undefined if this notification signifies the start of a scan."
|
||||
::= { tpt-tpa-unkparams 45 }
|
||||
|
||||
tptDiscoveryNotifyNewHosts OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The number of new hosts found by this scan (compared to the previous scan).
|
||||
Undefined if this notification signifies the start of a scan."
|
||||
::= { tpt-tpa-unkparams 46 }
|
||||
|
||||
tptDiscoveryNotifyChanged OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The number of hosts for which this scan found different results
|
||||
from the previous scan.
|
||||
Undefined if this notification signifies the start of a scan."
|
||||
::= { tpt-tpa-unkparams 47 }
|
||||
|
||||
tptDiscoveryNotifyUnchanged OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The number of existing hosts for which this scan found the same results
|
||||
(compared to the previous scan).
|
||||
Undefined if this notification signifies the start of a scan."
|
||||
::= { tpt-tpa-unkparams 48 }
|
||||
|
||||
tptDiscoveryNotifyNotFound OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The number of hosts found by the previous scan but not by this scan.
|
||||
Undefined if this notification signifies the start of a scan."
|
||||
::= { tpt-tpa-unkparams 49 }
|
||||
|
||||
tptDiscoveryNotifyUnknown OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The number of addresses scanned where no host was found and for which
|
||||
there was no previous scan data.
|
||||
Undefined if this notification signifies the start of a scan."
|
||||
::= { tpt-tpa-unkparams 50 }
|
||||
|
||||
tptDiscoveryNotifyStartTime OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The start time of the scan pertaining to this notification (in seconds
|
||||
since January 1, 1970)."
|
||||
::= { tpt-tpa-unkparams 51 }
|
||||
|
||||
tptDiscoveryNotifyStopTime OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The stop time of the scan pertaining to this notification (in seconds
|
||||
since January 1, 1970). A zero value indicates that this notification
|
||||
signifies the start of a scan."
|
||||
::= { tpt-tpa-unkparams 52 }
|
||||
|
||||
tptDiscoveryNotifyErrorText OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..80))
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"If the current scan terminated abnormally, this string describes the
|
||||
error condition. Otherwise, an empty string."
|
||||
::= { tpt-tpa-unkparams 53 }
|
||||
|
||||
tptDiscoveryNotifySchedID OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..40))
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"For a notification resulting from a scheduled scan, this value holds
|
||||
the scheduled scan identifier. Otherwise, this value is undefined."
|
||||
::= { tpt-tpa-unkparams 56 }
|
||||
|
||||
tptDiscoveryNotifyStartStop NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptDiscoveryNotifyScanID,
|
||||
tptDiscoveryNotifySegmentName, tptDiscoveryNotifyScanRange,
|
||||
tptDiscoveryNotifyDelta, tptDiscoveryNotifyNewHosts,
|
||||
tptDiscoveryNotifyChanged, tptDiscoveryNotifyUnchanged,
|
||||
tptDiscoveryNotifyNotFound, tptDiscoveryNotifyUnknown,
|
||||
tptDiscoveryNotifyStartTime, tptDiscoveryNotifyStopTime,
|
||||
tptDiscoveryNotifyErrorText, tptDiscoveryNotifySchedID }
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that a network
|
||||
discovery scan has started or stopped."
|
||||
::= { tpt-tpa-eventsV2 12 }
|
||||
|
||||
|
||||
tptDiscoveryNotifyHostNetAddr OBJECT-TYPE
|
||||
SYNTAX IpAddress
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The network address of the newly discovered host."
|
||||
::= { tpt-tpa-unkparams 54 }
|
||||
|
||||
tptDiscoveryNotifyHostDeviceID OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..40))
|
||||
MAX-ACCESS read-only
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"The unique identifier of the newly discovered host."
|
||||
::= { tpt-tpa-unkparams 55 }
|
||||
|
||||
tptDiscoveryNotifyNewHost NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptDiscoveryNotifyHostNetAddr,
|
||||
tptDiscoveryNotifyHostDeviceID }
|
||||
STATUS obsolete
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that a previously
|
||||
unknown host was discovered by a scan."
|
||||
::= { tpt-tpa-eventsV2 13 }
|
||||
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Textual convention for system log notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
SystemLogSeverity ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"An indication of the severity of a system log message."
|
||||
SYNTAX INTEGER { critical(1), error(2), emergency(3), warning(4), alert(5), notice(6), info(7), debug(8) }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- System log notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptSystemLogNotifyText OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..1024))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The text of the message being logged."
|
||||
::= { tpt-tpa-unkparams 92 }
|
||||
|
||||
tptSystemLogNotifySequence OBJECT-TYPE
|
||||
SYNTAX Counter64
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The log file entry sequence number corresponding to this notification."
|
||||
::= { tpt-tpa-unkparams 93 }
|
||||
|
||||
tptSystemLogNotifySeverity OBJECT-TYPE
|
||||
SYNTAX SystemLogSeverity
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The severity of the attack for this notification."
|
||||
::= { tpt-tpa-unkparams 94 }
|
||||
|
||||
tptSystemLogNotifyTimeSec OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The time this message was logged (in seconds since January 1, 1970)."
|
||||
::= { tpt-tpa-unkparams 95 }
|
||||
|
||||
tptSystemLogNotifyTimeNano OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The nanoseconds portion of tptSystemLogNotifyTimeSec."
|
||||
::= { tpt-tpa-unkparams 96 }
|
||||
|
||||
tptSystemLogNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptSystemLogNotifyText,
|
||||
tptSystemLogNotifySequence, tptSystemLogNotifySeverity,
|
||||
tptSystemLogNotifyTimeSec, tptSystemLogNotifyTimeNano }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that a critical,
|
||||
error, or warning message has been logged."
|
||||
::= { tpt-tpa-eventsV2 16 }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Textual convention for quarantine notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
AddOrRemove ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"An indication of whether a host was added to or removed from
|
||||
the quarantine list."
|
||||
SYNTAX INTEGER { add(1), remove(2) }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Quarantine notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptQuarantineNotifyHostNetAddr OBJECT-TYPE
|
||||
SYNTAX IpAddress
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The network address of the host being quarantined (or removed)."
|
||||
::= { tpt-tpa-unkparams 132 }
|
||||
|
||||
tptQuarantineNotifyHostNetAddrV6 OBJECT-TYPE
|
||||
SYNTAX Ipv6Address
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The IPv6 network address of the host being quarantined (or removed)."
|
||||
::= { tpt-tpa-unkparams 136 }
|
||||
|
||||
tptQuarantineNotifyReason OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..40))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The reason that a host was quarantined (undefined if action is remove)."
|
||||
::= { tpt-tpa-unkparams 133 }
|
||||
|
||||
tptQuarantineNotifySegmentName OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..128))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A string of the format <slot>:<index> that uniquely identifies the
|
||||
segment pertaining to this notification."
|
||||
::= { tpt-tpa-unkparams 134 }
|
||||
|
||||
tptQuarantineNotifyAction OBJECT-TYPE
|
||||
SYNTAX AddOrRemove
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Whether the host was added to or removed from the quarantine list."
|
||||
::= { tpt-tpa-unkparams 135 }
|
||||
|
||||
tptQuarantineNotifySslInspected OBJECT-TYPE
|
||||
SYNTAX SslInspectedFlag
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Flag indicating if this quarantine action was performed on an inspected SSL data stream."
|
||||
::= { tpt-tpa-unkparams 181 }
|
||||
|
||||
tptQuarantineNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptQuarantineNotifyHostNetAddr,
|
||||
tptQuarantineNotifyReason, tptQuarantineNotifySegmentName,
|
||||
tptQuarantineNotifyAction, tptQuarantineNotifyHostNetAddrV6,
|
||||
tptQuarantineNotifySslInspected}
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that a host has
|
||||
been either added to or removed from the quarantine list."
|
||||
::= { tpt-tpa-eventsV2 20 }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Textual convention(s) specific to congestion threshold notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
CongestionThresholdPhase ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The congestion threshold phase (entering, continuing, or exiting)."
|
||||
SYNTAX INTEGER { entering(1), continuing(2), exiting (3) }
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Congestion threshold notifications
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptCongestionPacketLoss OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The current packet loss rate per thousand (percent * 10)."
|
||||
::= { tpt-tpa-unkparams 153 }
|
||||
|
||||
tptCongestionNotifyPhase OBJECT-TYPE
|
||||
SYNTAX CongestionThresholdPhase
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Whether entering, continuing, or exiting congestion threshold mode."
|
||||
::= { tpt-tpa-unkparams 154 }
|
||||
|
||||
tptCongestionThreshold OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The current packet loss threshold per thousand (percent * 10)."
|
||||
::= { tpt-tpa-unkparams 155 }
|
||||
|
||||
tptTier3CongestionPacketLoss OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The current tier3 packet loss rate per thousand (percent * 10)."
|
||||
::= { tpt-tpa-unkparams 156 }
|
||||
|
||||
tptTier3CongestionNotifyPhase OBJECT-TYPE
|
||||
SYNTAX CongestionThresholdPhase
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Whether entering, continuing, or exiting tier3 congestion threshold mode."
|
||||
::= { tpt-tpa-unkparams 157 }
|
||||
|
||||
tptTier3CongestionThreshold OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The current tier3 packet loss threshold per thousand (percent * 10)."
|
||||
::= { tpt-tpa-unkparams 158 }
|
||||
|
||||
tptCongestionThresholdNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptCongestionNotifyPhase,
|
||||
tptCongestionPacketLoss, tptCongestionThreshold }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that the device-wide
|
||||
congestion has exceeded the configured congestion threshold."
|
||||
::= { tpt-tpa-eventsV2 25 }
|
||||
|
||||
tptiTier3CongestionThresholdNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptTier3CongestionNotifyPhase,
|
||||
tptTier3CongestionPacketLoss, tptTier3CongestionThreshold }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that the tier3
|
||||
congestion has exceeded the configured congestion threshold."
|
||||
::= { tpt-tpa-eventsV2 26 }
|
||||
|
||||
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
--
|
||||
-- Audit Log Notification
|
||||
--
|
||||
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
tptAuditLogNotify NOTIFICATION-TYPE
|
||||
OBJECTS {
|
||||
tptMiscNotifyDeviceID,
|
||||
tptAuditLogNotifyTime,
|
||||
tptAuditLogNotifyAccess,
|
||||
tptAuditLogNotifyType,
|
||||
tptAuditLogNotifyIpAddrType,
|
||||
tptAuditLogNotifyIpAddr,
|
||||
tptAuditLogNotifyCategory,
|
||||
tptAuditLogNotifyResult,
|
||||
tptAuditLogNotifyUser,
|
||||
tptAuditLogNotifyMessage
|
||||
}
|
||||
STATUS current
|
||||
DESCRIPTION "Audit-log notification.
|
||||
"
|
||||
::= { tpt-tpa-eventsV2 60 }
|
||||
|
||||
AuditLogResult ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION "The result of an audit check: success, or fail.
|
||||
"
|
||||
SYNTAX INTEGER { success(1), failed(2) }
|
||||
|
||||
AuditLogCategory ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION "The functional location of where an audit check was made and generated
|
||||
a log entry.
|
||||
"
|
||||
SYNTAX INTEGER {
|
||||
undefined(1),
|
||||
general(2),
|
||||
login(3),
|
||||
logout(4),
|
||||
user(5),
|
||||
time(6),
|
||||
policy(7),
|
||||
update(8),
|
||||
boot(9),
|
||||
report(10),
|
||||
host(11),
|
||||
cfg(12),
|
||||
device(13),
|
||||
sms(14),
|
||||
server(15),
|
||||
segment(16),
|
||||
license(17),
|
||||
ha(18),
|
||||
monitor(19),
|
||||
ipFilter(20),
|
||||
connTable(21),
|
||||
hostComm(22),
|
||||
tse(23),
|
||||
cf(24)
|
||||
}
|
||||
|
||||
tptAuditLogNotifyTime OBJECT-TYPE
|
||||
SYNTAX DateAndTime
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The date and time when the entry was logged.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 170 }
|
||||
|
||||
tptAuditLogNotifyAccess OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The access level of the user initiating the audit check and generating the log.
|
||||
This is a bit field with the following mapping:
|
||||
|
||||
0x0 - normal
|
||||
0x1 - operator
|
||||
0x4 - administrator
|
||||
0x8 - super-user
|
||||
"
|
||||
::= { tpt-tpa-unkparams 171 }
|
||||
|
||||
tptAuditLogNotifyType OBJECT-TYPE
|
||||
SYNTAX SnmpAdminString (SIZE(0..40))
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The interface source of the audit log action.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 172 }
|
||||
|
||||
tptAuditLogNotifyIpAddrType OBJECT-TYPE
|
||||
SYNTAX InetAddressType
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The type of IP address from which the user connected.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 173 }
|
||||
|
||||
tptAuditLogNotifyIpAddr OBJECT-TYPE
|
||||
SYNTAX InetAddress
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The IP address from which the user connected.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 174 }
|
||||
|
||||
tptAuditLogNotifyCategory OBJECT-TYPE
|
||||
SYNTAX AuditLogCategory
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The functional area where the audit log was generated.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 175 }
|
||||
|
||||
tptAuditLogNotifyResult OBJECT-TYPE
|
||||
SYNTAX AuditLogResult
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The result, pass or fail, of an audit check.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 176 }
|
||||
|
||||
tptAuditLogNotifyUser OBJECT-TYPE
|
||||
SYNTAX SnmpAdminString (SIZE(0..80))
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "The user initiating the audit check and generating the log.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 177 }
|
||||
|
||||
tptAuditLogNotifyMessage OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(0..4096))
|
||||
--SYNTAX SnmpAdminString (SIZE(0..4096))
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION "A description of what configuration change was attempted
|
||||
(and possibly succeeded) by the user.
|
||||
"
|
||||
::= { tpt-tpa-unkparams 178 }
|
||||
|
||||
tptAuditLogCapacityNotifyPercent OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The time of this notification
|
||||
(in seconds since January 1, 1970)."
|
||||
::= { tpt-tpa-unkparams 201 }
|
||||
|
||||
tptAuditLogCapacityOrFailureNotifyTime OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The time of this notification
|
||||
(in seconds since January 1, 1970)."
|
||||
::= { tpt-tpa-unkparams 202 }
|
||||
|
||||
tptAuditLogCapacityNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID, tptAuditLogCapacityNotifyPercent,
|
||||
tptRolloverNotifyTime }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that audit log file size
|
||||
has reached more than 75 percent."
|
||||
::= { tpt-tpa-eventsV2 61 }
|
||||
|
||||
tptLoggingFailureNotify NOTIFICATION-TYPE
|
||||
OBJECTS { tptMiscNotifyDeviceID,
|
||||
tptRolloverNotifyTime }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Notification: Used to inform the management station that logging has failed."
|
||||
::= { tpt-tpa-eventsV2 62 }
|
||||
|
||||
END
|
||||
|
||||
Reference in New Issue
Block a user