-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Trend Micro, Inc. -- Copyright information is in the DESCRIPTION section of the MODULE-IDENTITY. -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - TPT-MISC-NOTIFY-MIB DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, Unsigned32, IpAddress, Integer32, Counter64 FROM SNMPv2-SMI DateAndTime, TEXTUAL-CONVENTION FROM SNMPv2-TC Ipv6Address FROM IPV6-TC InetAddress, InetAddressType FROM INET-ADDRESS-MIB SnmpAdminString FROM SNMP-FRAMEWORK-MIB tpt-tpa-objs, tpt-tpa-eventsV2, tpt-tpa-unkparams FROM TPT-TPAMIBS-MIB SslInspectedFlag FROM TPT-POLICY-MIB ; tpt-misc-notify MODULE-IDENTITY LAST-UPDATED "201605251854Z" -- May 25, 2016 ORGANIZATION "Trend Micro, Inc." CONTACT-INFO "www.trendmicro.com" DESCRIPTION "Notification definitions that have no other place to call home. Copyright (C) 2016 Trend Micro Incorporated. All Rights Reserved. Trend Micro makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Trend Micro shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Trend Micro. The information is provided 'as is' without warranty of any kind and is subject to change without notice. The only warranties for Trend Micro products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Trend Micro shall not be liable for technical or editorial errors or omissions contained herein. TippingPoint(R), the TippingPoint logo, and Digital Vaccine(R) are registered trademarks of Trend Micro. All other company and product names may be trademarks of their respective holders. All rights reserved. This document contains confidential information, trade secrets or both, which are the property of Trend Micro. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from Trend Micro or one of its subsidiaries. All other company and product names may be trademarks of their respective holders. " REVISION "201605251854Z" -- May 25, 2016 DESCRIPTION "Updated copyright information. Minor MIB syntax fixes." REVISION "201605031726Z" -- May 03, 2016 DESCRIPTION "Added emergency, alert, notice, info, and debug severity values to SystemLogSeverity." REVISION "201505281330Z" -- May 28, 2015 DESCRIPTION "Added SSL inspected flag parameter to quarantine notifications." REVISION "201411111843Z" -- November 12, 2014 DESCRIPTION "Added audit log notification and objects." ::= { tpt-tpa-objs 2 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Device ID: first payload parameter of all notifications in this module. -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptMiscNotifyDeviceID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..40)) MAX-ACCESS read-only STATUS current DESCRIPTION "The unique identifier of the device sending this notification." ::= { tpt-tpa-unkparams 31 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Managed notification -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptManagedNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID } STATUS current DESCRIPTION "Notification: Used to inform the management station that the device is now being managed by said management station." ::= { tpt-tpa-eventsV2 9 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Unmanaged notification -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptUnmanagedNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID } STATUS current DESCRIPTION "Notification: Used to inform the management station that the device is no longer being managed by said management station." ::= { tpt-tpa-eventsV2 10 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Textual convention for log file rollover notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - LogFileType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The type of the file that has rolled over." SYNTAX INTEGER { system(1), alert(2), block(3), peer(4), audit(5), quarantine(6) } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Log file rollover notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptRolloverNotifyFileType OBJECT-TYPE SYNTAX LogFileType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the file that has rolled over." ::= { tpt-tpa-unkparams 32 } tptRolloverNotifyMaxFiles OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The maximum number of files maintained for this log file type." ::= { tpt-tpa-unkparams 33 } tptRolloverNotifyNumFiles OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The number of files that have rolled over." ::= { tpt-tpa-unkparams 34 } tptRolloverNotifyTime OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The rollover time of the most recent file pertaining to this notification (in seconds since January 1, 1970)." ::= { tpt-tpa-unkparams 35 } tptRolloverNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptRolloverNotifyFileType, tptRolloverNotifyTime } STATUS current DESCRIPTION "Notification: Used to inform the management station that a log file has rolled over." ::= { tpt-tpa-eventsV2 11 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Textual convention for discovery notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - DiscoveryDelta ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "An indication of whether discovery results changed from the previous scan." SYNTAX INTEGER { changed(1), unchanged(2) } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Discovery notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptDiscoveryNotifyScanID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..40)) MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The unique identifier of the scan pertaining to this notification." ::= { tpt-tpa-unkparams 42 } tptDiscoveryNotifySegmentName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..128)) MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The name of the scanned segment pertaining to this notification." ::= { tpt-tpa-unkparams 43 } tptDiscoveryNotifyScanRange OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..40)) MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The network address range requested in the scan pertaining to this notification." ::= { tpt-tpa-unkparams 44 } tptDiscoveryNotifyDelta OBJECT-TYPE SYNTAX DiscoveryDelta MAX-ACCESS read-only STATUS obsolete DESCRIPTION "An indication of whether discovery results changed from the previous scan. Undefined if this notification signifies the start of a scan." ::= { tpt-tpa-unkparams 45 } tptDiscoveryNotifyNewHosts OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The number of new hosts found by this scan (compared to the previous scan). Undefined if this notification signifies the start of a scan." ::= { tpt-tpa-unkparams 46 } tptDiscoveryNotifyChanged OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The number of hosts for which this scan found different results from the previous scan. Undefined if this notification signifies the start of a scan." ::= { tpt-tpa-unkparams 47 } tptDiscoveryNotifyUnchanged OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The number of existing hosts for which this scan found the same results (compared to the previous scan). Undefined if this notification signifies the start of a scan." ::= { tpt-tpa-unkparams 48 } tptDiscoveryNotifyNotFound OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The number of hosts found by the previous scan but not by this scan. Undefined if this notification signifies the start of a scan." ::= { tpt-tpa-unkparams 49 } tptDiscoveryNotifyUnknown OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The number of addresses scanned where no host was found and for which there was no previous scan data. Undefined if this notification signifies the start of a scan." ::= { tpt-tpa-unkparams 50 } tptDiscoveryNotifyStartTime OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The start time of the scan pertaining to this notification (in seconds since January 1, 1970)." ::= { tpt-tpa-unkparams 51 } tptDiscoveryNotifyStopTime OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The stop time of the scan pertaining to this notification (in seconds since January 1, 1970). A zero value indicates that this notification signifies the start of a scan." ::= { tpt-tpa-unkparams 52 } tptDiscoveryNotifyErrorText OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..80)) MAX-ACCESS read-only STATUS obsolete DESCRIPTION "If the current scan terminated abnormally, this string describes the error condition. Otherwise, an empty string." ::= { tpt-tpa-unkparams 53 } tptDiscoveryNotifySchedID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..40)) MAX-ACCESS read-only STATUS obsolete DESCRIPTION "For a notification resulting from a scheduled scan, this value holds the scheduled scan identifier. Otherwise, this value is undefined." ::= { tpt-tpa-unkparams 56 } tptDiscoveryNotifyStartStop NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptDiscoveryNotifyScanID, tptDiscoveryNotifySegmentName, tptDiscoveryNotifyScanRange, tptDiscoveryNotifyDelta, tptDiscoveryNotifyNewHosts, tptDiscoveryNotifyChanged, tptDiscoveryNotifyUnchanged, tptDiscoveryNotifyNotFound, tptDiscoveryNotifyUnknown, tptDiscoveryNotifyStartTime, tptDiscoveryNotifyStopTime, tptDiscoveryNotifyErrorText, tptDiscoveryNotifySchedID } STATUS obsolete DESCRIPTION "Notification: Used to inform the management station that a network discovery scan has started or stopped." ::= { tpt-tpa-eventsV2 12 } tptDiscoveryNotifyHostNetAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The network address of the newly discovered host." ::= { tpt-tpa-unkparams 54 } tptDiscoveryNotifyHostDeviceID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..40)) MAX-ACCESS read-only STATUS obsolete DESCRIPTION "The unique identifier of the newly discovered host." ::= { tpt-tpa-unkparams 55 } tptDiscoveryNotifyNewHost NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptDiscoveryNotifyHostNetAddr, tptDiscoveryNotifyHostDeviceID } STATUS obsolete DESCRIPTION "Notification: Used to inform the management station that a previously unknown host was discovered by a scan." ::= { tpt-tpa-eventsV2 13 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Textual convention for system log notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - SystemLogSeverity ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "An indication of the severity of a system log message." SYNTAX INTEGER { critical(1), error(2), emergency(3), warning(4), alert(5), notice(6), info(7), debug(8) } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- System log notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptSystemLogNotifyText OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..1024)) MAX-ACCESS read-only STATUS current DESCRIPTION "The text of the message being logged." ::= { tpt-tpa-unkparams 92 } tptSystemLogNotifySequence OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The log file entry sequence number corresponding to this notification." ::= { tpt-tpa-unkparams 93 } tptSystemLogNotifySeverity OBJECT-TYPE SYNTAX SystemLogSeverity MAX-ACCESS read-only STATUS current DESCRIPTION "The severity of the attack for this notification." ::= { tpt-tpa-unkparams 94 } tptSystemLogNotifyTimeSec OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The time this message was logged (in seconds since January 1, 1970)." ::= { tpt-tpa-unkparams 95 } tptSystemLogNotifyTimeNano OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The nanoseconds portion of tptSystemLogNotifyTimeSec." ::= { tpt-tpa-unkparams 96 } tptSystemLogNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptSystemLogNotifyText, tptSystemLogNotifySequence, tptSystemLogNotifySeverity, tptSystemLogNotifyTimeSec, tptSystemLogNotifyTimeNano } STATUS current DESCRIPTION "Notification: Used to inform the management station that a critical, error, or warning message has been logged." ::= { tpt-tpa-eventsV2 16 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Textual convention for quarantine notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - AddOrRemove ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "An indication of whether a host was added to or removed from the quarantine list." SYNTAX INTEGER { add(1), remove(2) } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Quarantine notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptQuarantineNotifyHostNetAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The network address of the host being quarantined (or removed)." ::= { tpt-tpa-unkparams 132 } tptQuarantineNotifyHostNetAddrV6 OBJECT-TYPE SYNTAX Ipv6Address MAX-ACCESS read-only STATUS current DESCRIPTION "The IPv6 network address of the host being quarantined (or removed)." ::= { tpt-tpa-unkparams 136 } tptQuarantineNotifyReason OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..40)) MAX-ACCESS read-only STATUS current DESCRIPTION "The reason that a host was quarantined (undefined if action is remove)." ::= { tpt-tpa-unkparams 133 } tptQuarantineNotifySegmentName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..128)) MAX-ACCESS read-only STATUS current DESCRIPTION "A string of the format : that uniquely identifies the segment pertaining to this notification." ::= { tpt-tpa-unkparams 134 } tptQuarantineNotifyAction OBJECT-TYPE SYNTAX AddOrRemove MAX-ACCESS read-only STATUS current DESCRIPTION "Whether the host was added to or removed from the quarantine list." ::= { tpt-tpa-unkparams 135 } tptQuarantineNotifySslInspected OBJECT-TYPE SYNTAX SslInspectedFlag MAX-ACCESS read-only STATUS current DESCRIPTION "Flag indicating if this quarantine action was performed on an inspected SSL data stream." ::= { tpt-tpa-unkparams 181 } tptQuarantineNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptQuarantineNotifyHostNetAddr, tptQuarantineNotifyReason, tptQuarantineNotifySegmentName, tptQuarantineNotifyAction, tptQuarantineNotifyHostNetAddrV6, tptQuarantineNotifySslInspected} STATUS current DESCRIPTION "Notification: Used to inform the management station that a host has been either added to or removed from the quarantine list." ::= { tpt-tpa-eventsV2 20 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Textual convention(s) specific to congestion threshold notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - CongestionThresholdPhase ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The congestion threshold phase (entering, continuing, or exiting)." SYNTAX INTEGER { entering(1), continuing(2), exiting (3) } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Congestion threshold notifications -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptCongestionPacketLoss OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current packet loss rate per thousand (percent * 10)." ::= { tpt-tpa-unkparams 153 } tptCongestionNotifyPhase OBJECT-TYPE SYNTAX CongestionThresholdPhase MAX-ACCESS read-only STATUS current DESCRIPTION "Whether entering, continuing, or exiting congestion threshold mode." ::= { tpt-tpa-unkparams 154 } tptCongestionThreshold OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current packet loss threshold per thousand (percent * 10)." ::= { tpt-tpa-unkparams 155 } tptTier3CongestionPacketLoss OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current tier3 packet loss rate per thousand (percent * 10)." ::= { tpt-tpa-unkparams 156 } tptTier3CongestionNotifyPhase OBJECT-TYPE SYNTAX CongestionThresholdPhase MAX-ACCESS read-only STATUS current DESCRIPTION "Whether entering, continuing, or exiting tier3 congestion threshold mode." ::= { tpt-tpa-unkparams 157 } tptTier3CongestionThreshold OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current tier3 packet loss threshold per thousand (percent * 10)." ::= { tpt-tpa-unkparams 158 } tptCongestionThresholdNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptCongestionNotifyPhase, tptCongestionPacketLoss, tptCongestionThreshold } STATUS current DESCRIPTION "Notification: Used to inform the management station that the device-wide congestion has exceeded the configured congestion threshold." ::= { tpt-tpa-eventsV2 25 } tptiTier3CongestionThresholdNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptTier3CongestionNotifyPhase, tptTier3CongestionPacketLoss, tptTier3CongestionThreshold } STATUS current DESCRIPTION "Notification: Used to inform the management station that the tier3 congestion has exceeded the configured congestion threshold." ::= { tpt-tpa-eventsV2 26 } -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- -- Audit Log Notification -- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tptAuditLogNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptAuditLogNotifyTime, tptAuditLogNotifyAccess, tptAuditLogNotifyType, tptAuditLogNotifyIpAddrType, tptAuditLogNotifyIpAddr, tptAuditLogNotifyCategory, tptAuditLogNotifyResult, tptAuditLogNotifyUser, tptAuditLogNotifyMessage } STATUS current DESCRIPTION "Audit-log notification. " ::= { tpt-tpa-eventsV2 60 } AuditLogResult ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The result of an audit check: success, or fail. " SYNTAX INTEGER { success(1), failed(2) } AuditLogCategory ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The functional location of where an audit check was made and generated a log entry. " SYNTAX INTEGER { undefined(1), general(2), login(3), logout(4), user(5), time(6), policy(7), update(8), boot(9), report(10), host(11), cfg(12), device(13), sms(14), server(15), segment(16), license(17), ha(18), monitor(19), ipFilter(20), connTable(21), hostComm(22), tse(23), cf(24) } tptAuditLogNotifyTime OBJECT-TYPE SYNTAX DateAndTime MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The date and time when the entry was logged. " ::= { tpt-tpa-unkparams 170 } tptAuditLogNotifyAccess OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The access level of the user initiating the audit check and generating the log. This is a bit field with the following mapping: 0x0 - normal 0x1 - operator 0x4 - administrator 0x8 - super-user " ::= { tpt-tpa-unkparams 171 } tptAuditLogNotifyType OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..40)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The interface source of the audit log action. " ::= { tpt-tpa-unkparams 172 } tptAuditLogNotifyIpAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The type of IP address from which the user connected. " ::= { tpt-tpa-unkparams 173 } tptAuditLogNotifyIpAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The IP address from which the user connected. " ::= { tpt-tpa-unkparams 174 } tptAuditLogNotifyCategory OBJECT-TYPE SYNTAX AuditLogCategory MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The functional area where the audit log was generated. " ::= { tpt-tpa-unkparams 175 } tptAuditLogNotifyResult OBJECT-TYPE SYNTAX AuditLogResult MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The result, pass or fail, of an audit check. " ::= { tpt-tpa-unkparams 176 } tptAuditLogNotifyUser OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..80)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The user initiating the audit check and generating the log. " ::= { tpt-tpa-unkparams 177 } tptAuditLogNotifyMessage OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..4096)) --SYNTAX SnmpAdminString (SIZE(0..4096)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "A description of what configuration change was attempted (and possibly succeeded) by the user. " ::= { tpt-tpa-unkparams 178 } tptAuditLogCapacityNotifyPercent OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The time of this notification (in seconds since January 1, 1970)." ::= { tpt-tpa-unkparams 201 } tptAuditLogCapacityOrFailureNotifyTime OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The time of this notification (in seconds since January 1, 1970)." ::= { tpt-tpa-unkparams 202 } tptAuditLogCapacityNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptAuditLogCapacityNotifyPercent, tptRolloverNotifyTime } STATUS current DESCRIPTION "Notification: Used to inform the management station that audit log file size has reached more than 75 percent." ::= { tpt-tpa-eventsV2 61 } tptLoggingFailureNotify NOTIFICATION-TYPE OBJECTS { tptMiscNotifyDeviceID, tptRolloverNotifyTime } STATUS current DESCRIPTION "Notification: Used to inform the management station that logging has failed." ::= { tpt-tpa-eventsV2 62 } END