1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
|
-- ==================================================================
-- Copyright (C) 2005 New H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: IDS Management MIB
-- Reference:
-- Version: V1.0
-- History:
-- V1.00 2005/08/18 Created by Wang Hanlin
-- ==================================================================
HH3C-IDS-MIB DEFINITIONS ::= BEGIN
IMPORTS
hh3cCommon
FROM HH3C-OID-MIB
Integer32, Unsigned32, OBJECT-TYPE, NOTIFICATION-TYPE, MODULE-IDENTITY
FROM SNMPv2-SMI
InetAddressType, InetAddress
FROM INET-ADDRESS-MIB;
hh3cIDSMib MODULE-IDENTITY
LAST-UPDATED "200507141942Z"
ORGANIZATION
"New H3C Tech. Co., Ltd."
CONTACT-INFO
"Platform Team New H3C Tech. Co., Ltd.
Hai-Dian District Beijing P.R. China
http://www.h3c.com
Zip:100085
"
DESCRIPTION
"This MIB describes IDS private information.
IDS(Instruction Detecting System) is used to detect intruder activity. "
::= { hh3cIds 1 }
--
-- Node definitions
--
hh3cIds OBJECT IDENTIFIER ::= { hh3cCommon 47 }
hh3cIDSTrapGroup OBJECT IDENTIFIER ::= { hh3cIDSMib 1 }
hh3cIDSTrapInfo OBJECT IDENTIFIER ::= { hh3cIDSTrapGroup 1 }
hh3cIDSTrapIPFragmentQueueLen OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The length of IP fragment queue."
::= { hh3cIDSTrapInfo 1 }
hh3cIDSTrapStatSessionTabLen OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The length of status session table."
::= { hh3cIDSTrapInfo 2 }
hh3cIDSTrapIPAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The type of IP Address."
::= { hh3cIDSTrapInfo 3 }
hh3cIDSTrapIPAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"IP Address."
::= { hh3cIDSTrapInfo 4 }
hh3cIDSTrapUserName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"User name."
::= { hh3cIDSTrapInfo 5 }
hh3cIDSTrapLoginType OBJECT-TYPE
SYNTAX INTEGER {
telnet(1),
ssh(2),
web(3)
}
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Login type, including telnet, ssh and web."
::= { hh3cIDSTrapInfo 6 }
hh3cIDSTrapUpgradeType OBJECT-TYPE
SYNTAX INTEGER {
programme(1), -- image file of system
crb(2), -- custom rule base
vrb(3) -- vendor rule base
}
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Upgrade type, including programme(system image),
crb(custom rule base, one kind of configuration file),
vrb(vendor rule base, one kind of configuration file)."
::= { hh3cIDSTrapInfo 7 }
hh3cIDSTrapCRLName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"CRL(Certificate Revoke List) name."
::= { hh3cIDSTrapInfo 8 }
hh3cIDSTrapCertName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Certificate name."
::= { hh3cIDSTrapInfo 9 }
hh3cIDSTrapDetectRuleID OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The rule ID which is a unique identifier for a specified
detect rule."
::= { hh3cIDSTrapInfo 10 }
hh3cIDSTrapEngineID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"A unique number used to identify an interface."
::= { hh3cIDSTrapInfo 11 }
hh3cIDSTrapFileName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..256))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The file name."
::= { hh3cIDSTrapInfo 12 }
hh3cIDSTrapCfgLineInFile OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The line number in the configuration file."
::= { hh3cIDSTrapInfo 13 }
hh3cIDSTrapReasonForError OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..256))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The information of the notification. Although the format and
content of this object are device specific, they should be
defined uniformly in the device."
::= { hh3cIDSTrapInfo 14 }
hh3cIDSTrap OBJECT IDENTIFIER ::= { hh3cIDSTrapGroup 2 }
hh3cIDSTrapPrefix OBJECT IDENTIFIER ::= { hh3cIDSTrap 0 }
hh3cIDSTrapIPFragQueueFull NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapIPFragmentQueueLen,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when the IP fragment
queue is full. The hh3cIDSTrapIPFragmentQueueLen describes
the length of current fragment queue.
The hh3cIDSTrapReasonForError describes reason for error."
::= { hh3cIDSTrapPrefix 1 }
hh3cIDSTrapStatSessTabFull NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapStatSessionTabLen,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when the status session
table is full. The hh3cIDSTrapStatSessionTabLen describes the
length of current status session table.
The hh3cIDSTrapReasonForError describes reason for error."
::= { hh3cIDSTrapPrefix 2 }
hh3cIDSTrapDetectRuleParseFail NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapDetectRuleID,
hh3cIDSTrapEngineID,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when failing to parse
the rules for detecting. The hh3cIDSTrapDetectRuleID object describes
rule ID. The hh3cIDSTrapEngineID object identifies an interface
the rule applies to. The hh3cIDSTrapReasonForError object
describes reason for error."
::= { hh3cIDSTrapPrefix 3 }
hh3cIDSTrapDBConnLost NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapIPAddressType,
hh3cIDSTrapIPAddress,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when connecting with
database server fails. The hh3cIDSTrapIPAddressType object describes
the IP address type of database server. The hh3cIDSTrapIPAddress
object describes the IP address of database server. The
hh3cIDSTrapReasonForError describes reason of connecting failure."
::= { hh3cIDSTrapPrefix 4 }
hh3cIDSTrapCRLNeedUpdate NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapCRLName,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when IDS device detects
that CRL is out of date. The hh3cIDSTrapCRLName object
describes the CRL(Certificate Revoke List) name.
The hh3cIDSTrapReasonForError object describes reason for error."
::= { hh3cIDSTrapPrefix 5 }
hh3cIDSTrapCertOverdue NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapCertName,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when IDS device detects
that certificate is overdue. The hh3cIDSTrapCertName object
describes the certificate name. The hh3cIDSTrapReasonForError
object describes reason for error."
::= { hh3cIDSTrapPrefix 6 }
hh3cIDSTrapTooManyLoginFail NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapUserName,
hh3cIDSTrapIPAddressType,
hh3cIDSTrapIPAddress,
hh3cIDSTrapLoginType,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when the login
failure times of a user over a certain number.
The hh3cIDSTrapUserName object describes the user name
when logging in. The hh3cIDSTrapIPAddressType object
describes the IP address type of client. The
hh3cIDSTrapIPAddress object describes the IP address of
client. The hh3cIDSTrapLoginType object describes
login type, including: telnet, ssh, web.
The hh3cIDSTrapReasonForError object describes reason for error."
::= { hh3cIDSTrapPrefix 7 }
hh3cIDSTrapUpgradeError NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapUpgradeType,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when upgrading fails.
The hh3cIDSTrapUpgradeType object describes upgrade type,
including: programme, vrb. The hh3cIDSTrapReasonForError
object describes reason for error."
::= { hh3cIDSTrapPrefix 8 }
hh3cIDSTrapFileAccessError NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapFileName,
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when accessing file
fails. The hh3cIDSTrapFileName object describes the name
of file accessed. The hh3cIDSTrapReasonForError object describes
reason for error."
::= { hh3cIDSTrapPrefix 9 }
hh3cIDSTrapConsArithMemLow NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when memory used by
constructing the arithmetic to seek content is lacking.
The hh3cIDSTrapReasonForError object describes reason for error."
::= { hh3cIDSTrapPrefix 10 }
hh3cIDSTrapSSRAMOperFail NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when reading or
writing SSRAM of CIE card fails. The hh3cIDSTrapReasonForError
object describes reason for error."
::= { hh3cIDSTrapPrefix 11 }
hh3cIDSTrapPacketProcessDisorder NOTIFICATION-TYPE
OBJECTS {
hh3cIDSTrapReasonForError
}
STATUS current
DESCRIPTION
"This notification will be generated when packets processed
is in disorder. The hh3cIDSTrapReasonForError object describes
reason for error."
::= { hh3cIDSTrapPrefix 12 }
hh3cIDSTrapCfgFileFormatError NOTIFICATION-TYPE
OBJECTS { hh3cIDSTrapFileName, hh3cIDSTrapCfgLineInFile }
STATUS current
DESCRIPTION
"When devices startup and load the configuration file,
if format error is found, this notification will be generated.
The hh3cIDSTrapFileName object describes the name of
configuration file. The hh3cIDSTrapCfgLineInFile object
describes the line number in the file."
::= { hh3cIDSTrapPrefix 13 }
END
|
