/
A3COM-HUAWEI-IDS-MIB
executable file
·342 lines (307 loc) · 12.9 KB
/
A3COM-HUAWEI-IDS-MIB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
-- ==================================================================
-- Copyright (C) 2005 by HUAWEI-3COM TECHNOLOGIES. All rights reserved.
--
-- Description: HUAWEI-3COM IDS Management MIB
-- Reference:
-- Version: V1.0
-- History:
-- V1.00 2005/08/18 Created by Wang Hanlin
-- ==================================================================
A3COM-HUAWEI-IDS-MIB DEFINITIONS ::= BEGIN
IMPORTS
h3cCommon
FROM A3COM-HUAWEI-OID-MIB
Integer32, Unsigned32, OBJECT-TYPE, NOTIFICATION-TYPE, MODULE-IDENTITY
FROM SNMPv2-SMI
InetAddressType, InetAddress
FROM INET-ADDRESS-MIB;
h3cIDSMib MODULE-IDENTITY
LAST-UPDATED "200507141942Z"
ORGANIZATION
"Huawei-3com Technologies Co., Ltd."
CONTACT-INFO
"R&D Hangzhou, Huawei-3com Technologies Co., Ltd."
DESCRIPTION
"This MIB describes IDS private information.
IDS(Instruction Detecting System) is used to detect intruder activity. "
::= { h3cIds 1 }
--
-- Node definitions
--
h3cIds OBJECT IDENTIFIER ::= { h3cCommon 47 }
h3cIDSTrapGroup OBJECT IDENTIFIER ::= { h3cIDSMib 1 }
h3cIDSTrapInfo OBJECT IDENTIFIER ::= { h3cIDSTrapGroup 1 }
h3cIDSTrapIPFragmentQueueLen OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The length of IP fragment queue."
::= { h3cIDSTrapInfo 1 }
h3cIDSTrapStatSessionTabLen OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The length of status session table."
::= { h3cIDSTrapInfo 2 }
h3cIDSTrapIPAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The type of IP Address."
::= { h3cIDSTrapInfo 3 }
h3cIDSTrapIPAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"IP Address."
::= { h3cIDSTrapInfo 4 }
h3cIDSTrapUserName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"User name."
::= { h3cIDSTrapInfo 5 }
h3cIDSTrapLoginType OBJECT-TYPE
SYNTAX INTEGER {
telnet(1),
ssh(2),
web(3)
}
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Login type, including telnet, ssh and web."
::= { h3cIDSTrapInfo 6 }
h3cIDSTrapUpgradeType OBJECT-TYPE
SYNTAX INTEGER {
programme(1), -- image file of system
crb(2), -- custom rule base
vrb(3) -- vendor rule base
}
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Upgrade type, including programme(system image),
crb(custom rule base, one kind of configuration file),
vrb(vendor rule base, one kind of configuration file)."
::= { h3cIDSTrapInfo 7 }
h3cIDSTrapCRLName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"CRL(Certificate Revoke List) name."
::= { h3cIDSTrapInfo 8 }
h3cIDSTrapCertName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Certificate name."
::= { h3cIDSTrapInfo 9 }
h3cIDSTrapDetectRuleID OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The rule ID which is a unique identifier for a specified
detect rule."
::= { h3cIDSTrapInfo 10 }
h3cIDSTrapEngineID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"A unique number used to identify an interface."
::= { h3cIDSTrapInfo 11 }
h3cIDSTrapFileName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..256))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The file name."
::= { h3cIDSTrapInfo 12 }
h3cIDSTrapCfgLineInFile OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The line number in the configuration file."
::= { h3cIDSTrapInfo 13 }
h3cIDSTrapReasonForError OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..256))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The information of the notification. Although the format and
content of this object are device specific, they should be
defined uniformly in the device."
::= { h3cIDSTrapInfo 14 }
h3cIDSTrap OBJECT IDENTIFIER ::= { h3cIDSTrapGroup 2 }
h3cIDSTrapPrefix OBJECT IDENTIFIER ::= { h3cIDSTrap 0 }
h3cIDSTrapIPFragQueueFull NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapIPFragmentQueueLen,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when the IP fragment
queue is full. The h3cIDSTrapIPFragmentQueueLen describes
the length of current fragment queue.
The h3cIDSTrapReasonForError describes reason for error."
::= { h3cIDSTrapPrefix 1 }
h3cIDSTrapStatSessTabFull NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapStatSessionTabLen,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when the status session
table is full. The h3cIDSTrapStatSessionTabLen describes the
length of current status session table.
The h3cIDSTrapReasonForError describes reason for error."
::= { h3cIDSTrapPrefix 2 }
h3cIDSTrapDetectRuleParseFail NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapDetectRuleID,
h3cIDSTrapEngineID,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when failing to parse
the rules for detecting. The h3cIDSTrapDetectRuleID object describes
rule ID. The h3cIDSTrapEngineID object identifies an interface
the rule applies to. The h3cIDSTrapReasonForError object
describes reason for error."
::= { h3cIDSTrapPrefix 3 }
h3cIDSTrapDBConnLost NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapIPAddressType,
h3cIDSTrapIPAddress,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when connecting with
database server fails. The h3cIDSTrapIPAddressType object describes
the IP address type of database server. The h3cIDSTrapIPAddress
object describes the IP address of database server. The
h3cIDSTrapReasonForError describes reason of connecting failure."
::= { h3cIDSTrapPrefix 4 }
h3cIDSTrapCRLNeedUpdate NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapCRLName,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when IDS device detects
that CRL is out of date. The h3cIDSTrapCRLName object
describes the CRL(Certificate Revoke List) name.
The h3cIDSTrapReasonForError object describes reason for error."
::= { h3cIDSTrapPrefix 5 }
h3cIDSTrapCertOverdue NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapCertName,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when IDS device detects
that certificate is overdue. The h3cIDSTrapCertName object
describes the certificate name. The h3cIDSTrapReasonForError
object describes reason for error."
::= { h3cIDSTrapPrefix 6 }
h3cIDSTrapTooManyLoginFail NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapUserName,
h3cIDSTrapIPAddressType,
h3cIDSTrapIPAddress,
h3cIDSTrapLoginType,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when the login
failure times of a user over a certain number.
The h3cIDSTrapUserName object describes the user name
when logging in. The h3cIDSTrapIPAddressType object
describes the IP address type of client. The
h3cIDSTrapIPAddress object describes the IP address of
client. The h3cIDSTrapLoginType object describes
login type, including: telnet, ssh, web.
The h3cIDSTrapReasonForError object describes reason for error."
::= { h3cIDSTrapPrefix 7 }
h3cIDSTrapUpgradeError NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapUpgradeType,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when upgrading fails.
The h3cIDSTrapUpgradeType object describes upgrade type,
including: programme, vrb. The h3cIDSTrapReasonForError
object describes reason for error."
::= { h3cIDSTrapPrefix 8 }
h3cIDSTrapFileAccessError NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapFileName,
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when accessing file
fails. The h3cIDSTrapFileName object describes the name
of file accessed. The h3cIDSTrapReasonForError object describes
reason for error."
::= { h3cIDSTrapPrefix 9 }
h3cIDSTrapConsArithMemLow NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when memory used by
constructing the arithmetic to seek content is lacking.
The h3cIDSTrapReasonForError object describes reason for error."
::= { h3cIDSTrapPrefix 10 }
h3cIDSTrapSSRAMOperFail NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when reading or
writing SSRAM of CIE card fails. The h3cIDSTrapReasonForError
object describes reason for error."
::= { h3cIDSTrapPrefix 11 }
h3cIDSTrapPacketProcessDisorder NOTIFICATION-TYPE
OBJECTS {
h3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when packets processed
is in disorder. The h3cIDSTrapReasonForError object describes
reason for error."
::= { h3cIDSTrapPrefix 12 }
h3cIDSTrapCfgFileFormatError NOTIFICATION-TYPE
OBJECTS { h3cIDSTrapFileName, h3cIDSTrapCfgLineInFile }
STATUS current
DESCRIPTION
"When devices startup and load the configuration file,
if format error is found, this notification will be generated.
The h3cIDSTrapFileName object describes the name of
configuration file. The h3cIDSTrapCfgLineInFile object
describes the line number in the file."
::= { h3cIDSTrapPrefix 13 }
END