3025 lines
87 KiB
Plaintext
3025 lines
87 KiB
Plaintext
-- **************************************************************
|
||
-- TRELLIX CONFIDENTIAL
|
||
-- TRELLIX-SENSOR-PERF-MIB:
|
||
-- Trellix Sensor Performance MIB
|
||
--
|
||
-- Copyright (c) 2022 MUSARUBRA US, LLC
|
||
-- All rights reserved.
|
||
--
|
||
-- *****************************************************************
|
||
|
||
TRELLIX-SENSOR-PERF-MIB DEFINITIONS ::= BEGIN
|
||
|
||
IMPORTS
|
||
OBJECT-TYPE, MODULE-IDENTITY, Gauge32,
|
||
TimeTicks, IpAddress, Counter32, Counter64, Integer32
|
||
FROM SNMPv2-SMI
|
||
DisplayString, TruthValue
|
||
FROM SNMPv2-TC
|
||
ivSensorPerformance, intfPortIndex, npIndex,
|
||
processorIndex, slotIndex, rateLimitQueueIndex
|
||
FROM TRELLIX-SENSOR-SMI;
|
||
|
||
ivSensorPerformanceMIB MODULE-IDENTITY
|
||
LAST-UPDATED "200707090000Z"
|
||
ORGANIZATION
|
||
"MUSARUBRA US LLC"
|
||
CONTACT-INFO
|
||
"Trellix Customer Service Department
|
||
|
||
Postal: 6220 American Center Drive
|
||
San Jose CA 95002-2563
|
||
|
||
|
||
Tel: +1-800-338-8754
|
||
|
||
E-mail: support@mcafee.com"
|
||
DESCRIPTION
|
||
"The Performance MIB for the Trellix Sensor product."
|
||
|
||
REVISION "200707090000Z"
|
||
DESCRIPTION
|
||
"Initial version of this MIB module."
|
||
::= { ivSensorPerformance 1 }
|
||
|
||
sensorCardPerfGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 1 }
|
||
|
||
--
|
||
-- TCP Perf Table
|
||
tcpPerfTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF TcpPerfEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 1 }
|
||
|
||
tcpPerfEntry OBJECT-TYPE
|
||
SYNTAX TcpPerfEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models."
|
||
INDEX { slotIndex }
|
||
::= { tcpPerfTable 1 }
|
||
|
||
TcpPerfEntry ::= SEQUENCE {
|
||
tcpMaxFlowsSupported
|
||
Integer32,
|
||
tcpActiveTCPFlowsCount
|
||
Counter32,
|
||
tcpActiveUDPFlowsCount
|
||
Counter32,
|
||
tcpFlowsCreatedCount
|
||
Counter32,
|
||
tcpFlowsTimedOutCount
|
||
Counter32,
|
||
tcpFlowsInTimewaitCount
|
||
Counter32,
|
||
tcpFlowsInSYNStateCount
|
||
Counter32,
|
||
tcpInactiveTCPFlowsCount
|
||
Counter32,
|
||
tcpFreeTCBCount
|
||
Counter32,
|
||
tcpSynCookieInbStatus
|
||
INTEGER,
|
||
tcpSynCookieOutbStatus
|
||
INTEGER,
|
||
tcpSynCookieProxiedConnCount
|
||
Counter32
|
||
}
|
||
|
||
tcpMaxFlowsSupported OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of flows supported in the sensor."
|
||
::= { tcpPerfEntry 1 }
|
||
|
||
tcpActiveTCPFlowsCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of TCP flows currently active ( similar to tcpCurrEstablished)"
|
||
::= { tcpPerfEntry 2 }
|
||
|
||
tcpActiveUDPFlowsCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of UDP flows currently active"
|
||
::= { tcpPerfEntry 3 }
|
||
|
||
tcpFlowsCreatedCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of connections established through successful 3-way handshakes"
|
||
::= { tcpPerfEntry 4 }
|
||
|
||
tcpFlowsTimedOutCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of unsuccessful connection completions"
|
||
::= { tcpPerfEntry 5 }
|
||
|
||
tcpFlowsInTimewaitCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of TCP flows currently in timewait state "
|
||
::= { tcpPerfEntry 6 }
|
||
|
||
tcpFlowsInSYNStateCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of TCP flows currently in SYN state "
|
||
::= { tcpPerfEntry 7 }
|
||
|
||
tcpInactiveTCPFlowsCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of TCP flows currently inactive "
|
||
::= { tcpPerfEntry 8 }
|
||
|
||
tcpFreeTCBCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of free TCBs"
|
||
::= { tcpPerfEntry 9 }
|
||
|
||
tcpSynCookieInbStatus OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
enable(1),
|
||
disable(2)
|
||
}
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Status of syn cookie for inbound TCP connections"
|
||
::= { tcpPerfEntry 10 }
|
||
|
||
tcpSynCookieOutbStatus OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
enable(1),
|
||
disable(2)
|
||
}
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Status of syn cookie for outbound TCP connections"
|
||
::= { tcpPerfEntry 11 }
|
||
|
||
tcpSynCookieProxiedConnCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of syn cookie proxied TCP connections"
|
||
::= { tcpPerfEntry 12 }
|
||
|
||
--The ifTable contains information on the entity's
|
||
--interfaces.
|
||
--
|
||
|
||
intfPortIfTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF IntfPortIfEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 3 }
|
||
|
||
intfPortIfEntry OBJECT-TYPE
|
||
SYNTAX IntfPortIfEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"An interface entry containing objects at the
|
||
subnetwork layer and below for a particular interface."
|
||
INDEX { slotIndex,
|
||
intfPortIndex }
|
||
::= { intfPortIfTable 1 }
|
||
|
||
IntfPortIfEntry ::= SEQUENCE {
|
||
intfPortTotalPktsRecv
|
||
Counter32,
|
||
intfPortTotalUnicastPktsRecv
|
||
Counter32,
|
||
intfPortTotalMulticastPktsRecv
|
||
Counter32,
|
||
intfPortTotalBroadcastPktsRecv
|
||
Counter32,
|
||
intfPortTotalBytesRecv
|
||
Counter32,
|
||
intfPortTotalCRCErrorsRecv
|
||
Counter32,
|
||
intfPortTotalPktsSent
|
||
Counter32,
|
||
intfPortTotalUnicastPktsSent
|
||
Counter32,
|
||
intfPortTotalMulticastPktsSent
|
||
Counter32,
|
||
intfPortTotalBroadcastPktsSent
|
||
Counter32,
|
||
intfPortTotalBytesSent
|
||
Counter32,
|
||
intfPortTotalCRCErrorsSent
|
||
Counter32,
|
||
intfPortResetCounters
|
||
INTEGER,
|
||
intfPortNbadFlowRecordCount
|
||
Counter32
|
||
}
|
||
|
||
intfPortTotalPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets that this interface port has
|
||
recieved."
|
||
::= { intfPortIfEntry 1 }
|
||
|
||
intfPortTotalUnicastPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of unicast packets that this interface port has
|
||
recieved."
|
||
::= { intfPortIfEntry 2 }
|
||
|
||
intfPortTotalMulticastPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of multicast packets that this interface port
|
||
has recieved."
|
||
::= { intfPortIfEntry 3 }
|
||
|
||
intfPortTotalBroadcastPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of unicast packets that this interface port has
|
||
recieved."
|
||
::= { intfPortIfEntry 4 }
|
||
|
||
intfPortTotalBytesRecv OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of bytes that this interface port has recieved."
|
||
::= { intfPortIfEntry 5 }
|
||
|
||
intfPortTotalCRCErrorsRecv OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets received with bad CRC and bad
|
||
alignment."
|
||
::= { intfPortIfEntry 6 }
|
||
|
||
intfPortTotalPktsSent OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets that have been sent on this
|
||
interface."
|
||
::= { intfPortIfEntry 7 }
|
||
|
||
intfPortTotalUnicastPktsSent OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of unicast packets that have been sent on
|
||
this interface."
|
||
::= { intfPortIfEntry 8 }
|
||
|
||
intfPortTotalMulticastPktsSent OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of multicast packets that have been sent on
|
||
this interface."
|
||
::= { intfPortIfEntry 9 }
|
||
|
||
intfPortTotalBroadcastPktsSent OBJECT-TYPE
|
||
SYNTAX Counter32 (0..2147483647)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of broadcast packets that have been sent on
|
||
this interface."
|
||
::= { intfPortIfEntry 10 }
|
||
|
||
intfPortTotalBytesSent OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of bytes that have been sent on this interface."
|
||
::= { intfPortIfEntry 11 }
|
||
|
||
intfPortTotalCRCErrorsSent OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets that have been sent with bad CRC."
|
||
::= { intfPortIfEntry 12 }
|
||
|
||
intfPortResetCounters OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset (0)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Reset all the above (only intfPortIfEntry 1 - 13) counters"
|
||
::= { intfPortIfEntry 13 }
|
||
|
||
intfPortNbadFlowRecordCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of flow records generated from this monitoring port."
|
||
::= { intfPortIfEntry 14 }
|
||
|
||
--The ipSpoofTable contains information on the entity's
|
||
--ip spoof stats on the interfaces.
|
||
--
|
||
|
||
intfPortIpSpoofTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF IntfPortIpSpoofEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 4 }
|
||
|
||
intfPortIpSpoofEntry OBJECT-TYPE
|
||
SYNTAX IntfPortIpSpoofEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"An interface entry containing objects that
|
||
indicate specific IP Spoof Pkt statistics.
|
||
"
|
||
INDEX { slotIndex,
|
||
intfPortIndex }
|
||
::= { intfPortIpSpoofTable 1 }
|
||
|
||
IntfPortIpSpoofEntry ::= SEQUENCE {
|
||
intfPortClrSpoofCounts
|
||
INTEGER,
|
||
intfPortGetInSpoofCount
|
||
Counter32,
|
||
intfPortGetOutSpoofCount
|
||
Counter32
|
||
}
|
||
|
||
intfPortClrSpoofCounts OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset (0)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Reset clears all the spoof counters in this table."
|
||
::= { intfPortIpSpoofEntry 1 }
|
||
|
||
intfPortGetInSpoofCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Get the (inside) spoof pkt count."
|
||
::= { intfPortIpSpoofEntry 2 }
|
||
|
||
intfPortGetOutSpoofCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Get the (outside) spoof pkt count."
|
||
::= { intfPortIpSpoofEntry 3 }
|
||
|
||
--
|
||
-- Sensor Perfomance Table
|
||
--
|
||
sensorPerfTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF SensorPerfEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 5 }
|
||
|
||
sensorPerfEntry OBJECT-TYPE
|
||
SYNTAX SensorPerfEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This table give the sensor performance related information.
|
||
This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models."
|
||
INDEX { slotIndex }
|
||
::= { sensorPerfTable 1 }
|
||
|
||
SensorPerfEntry ::= SEQUENCE {
|
||
sensorAvgLoad
|
||
Integer32,
|
||
sensorHighestLoad
|
||
Integer32,
|
||
pendingIPFragReassemblyCount
|
||
Integer32,
|
||
totalPacketsLoggedCount
|
||
Integer32,
|
||
totalAlertsSentCount
|
||
Integer32,
|
||
sensorLoadIndicatorConfig
|
||
Integer32,
|
||
sensorMaxTrafficCapacity
|
||
Integer32,
|
||
sensorTotalBytesProcessed
|
||
Counter64,
|
||
sensorTotalL2FCount
|
||
Counter64
|
||
|
||
}
|
||
|
||
sensorAvgLoad OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Average percentage utilisation of the sensor processors"
|
||
::= { sensorPerfEntry 1 }
|
||
|
||
sensorHighestLoad OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Percentage utilization of the most loaded sensor processor"
|
||
::= { sensorPerfEntry 2 }
|
||
|
||
pendingIPFragReassemblyCount OBJECT-TYPE
|
||
SYNTAX Integer32 (0..2147483647)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of IP fragment lists currently being reassembled"
|
||
::= { sensorPerfEntry 5 }
|
||
|
||
totalPacketsLoggedCount OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets logged sent to ISM."
|
||
::= { sensorPerfEntry 6 }
|
||
|
||
totalAlertsSentCount OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of alerts sent to ISM"
|
||
::= { sensorPerfEntry 7 }
|
||
|
||
sensorLoadIndicatorConfig OBJECT-TYPE
|
||
SYNTAX Integer32 {
|
||
off (0),
|
||
on (1)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Option to switch off/on the sensor load indicator. This value is not persisted across sensor reboots.
|
||
Default : off"
|
||
::= { sensorPerfEntry 8 }
|
||
|
||
sensorMaxTrafficCapacity OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object provides the maximum traffic processing capacity (in Mbps) of the sensor over the given slot."
|
||
::= { sensorPerfEntry 9 }
|
||
|
||
sensorTotalBytesProcessed OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object provides the sum of total bytes of data received over all the monitoring ports."
|
||
::= { sensorPerfEntry 10 }
|
||
|
||
sensorTotalL2FCount OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This counter gives total number of packets on all ports that
|
||
were sent out without going through the sensor due to layer2 forward."
|
||
::= { sensorPerfEntry 11 }
|
||
|
||
--
|
||
-- Statistics that gives information about the sensor memory utilization
|
||
--
|
||
|
||
sensorMemUsageTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF SensorMemUsageEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 6 }
|
||
|
||
sensorMemUsageEntry OBJECT-TYPE
|
||
SYNTAX SensorMemUsageEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This entry gives information about the sensor memory utilized.
|
||
This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models."
|
||
INDEX { slotIndex }
|
||
::= { sensorMemUsageTable 1 }
|
||
|
||
SensorMemUsageEntry ::= SEQUENCE {
|
||
sensorAvgTcpUdpFlows
|
||
Integer32,
|
||
sensorMaxTcpUdpFlows
|
||
Integer32,
|
||
sensorAvgIpFragFlows
|
||
Integer32,
|
||
sensorMaxIpFragFlows
|
||
Integer32,
|
||
sensorAvgIcmpFlows
|
||
Integer32,
|
||
sensorMaxIcmpFlows
|
||
Integer32,
|
||
sensorAvgSslFlows
|
||
Integer32,
|
||
sensorMaxSslFlows
|
||
Integer32,
|
||
sensorAvgFragReassemblyBuffers
|
||
Integer32,
|
||
sensorMaxFragReassemblyBuffers
|
||
Integer32,
|
||
sensorAvgPacketBuffers
|
||
Integer32,
|
||
sensorMaxPacketBuffers
|
||
Integer32,
|
||
sensorAvgAttackMarkerNodes
|
||
Integer32,
|
||
sensorMaxAttackMarkerNodes
|
||
Integer32,
|
||
sensorAvgShellMarkerNodes
|
||
Integer32,
|
||
sensorMaxShellMarkerNodes
|
||
Integer32,
|
||
sensorAvgL7DcapAlertBuffers
|
||
Integer32,
|
||
sensorMaxL7DcapAlertBuffers
|
||
Integer32,
|
||
sensorAvgL7DcapFlows
|
||
Integer32,
|
||
sensorMaxL7DcapFlows
|
||
Integer32
|
||
}
|
||
|
||
sensorAvgTcpUdpFlows OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used TCP and UDP flows across all PEs<45>."
|
||
::= { sensorMemUsageEntry 1 }
|
||
|
||
sensorMaxTcpUdpFlows OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used TCP and UDP flows on a single PE."
|
||
::= { sensorMemUsageEntry 2 }
|
||
|
||
sensorAvgIpFragFlows OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used IP Fragment flows across all PEs<45>."
|
||
::= { sensorMemUsageEntry 3 }
|
||
|
||
sensorMaxIpFragFlows OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used IP Fragment flows on a single PE."
|
||
::= { sensorMemUsageEntry 4 }
|
||
|
||
sensorAvgIcmpFlows OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used ICMP flows across all PEs<45>."
|
||
::= { sensorMemUsageEntry 5 }
|
||
|
||
sensorMaxIcmpFlows OBJECT-TYPE
|
||
SYNTAX Integer32 (0..100)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used ICMP flows on a single PE."
|
||
::= { sensorMemUsageEntry 6 }
|
||
|
||
sensorAvgSslFlows OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used SSL flows across all PEs<45>."
|
||
::= { sensorMemUsageEntry 7 }
|
||
|
||
sensorMaxSslFlows OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used SSL flows on a single PE."
|
||
::= { sensorMemUsageEntry 8 }
|
||
|
||
sensorAvgFragReassemblyBuffers OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used fragment reassembly buffers across all PEs<45>."
|
||
::= { sensorMemUsageEntry 9 }
|
||
|
||
sensorMaxFragReassemblyBuffers OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used fragment reassembly buffers on a single PE."
|
||
::= { sensorMemUsageEntry 10 }
|
||
|
||
sensorAvgPacketBuffers OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used packet buffers across all PEs<45>."
|
||
::= { sensorMemUsageEntry 11 }
|
||
|
||
sensorMaxPacketBuffers OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used packet buffers on a single PE."
|
||
::= { sensorMemUsageEntry 12 }
|
||
|
||
sensorAvgAttackMarkerNodes OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used attack marker nodes across all PEs<45>."
|
||
::= { sensorMemUsageEntry 13 }
|
||
|
||
sensorMaxAttackMarkerNodes OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used attack marker nodes on a single PE."
|
||
::= { sensorMemUsageEntry 14 }
|
||
|
||
sensorAvgShellMarkerNodes OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the used shell marker nodes across all PEs<45>."
|
||
::= { sensorMemUsageEntry 15 }
|
||
|
||
sensorMaxShellMarkerNodes OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the used shell marker nodes on a single PE."
|
||
::= { sensorMemUsageEntry 16 }
|
||
|
||
sensorAvgL7DcapAlertBuffers OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the layer7Dcap buffers across all PEs."
|
||
::= { sensorMemUsageEntry 17 }
|
||
|
||
sensorMaxL7DcapAlertBuffers OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of the layer7Dcap buffers on a single PE."
|
||
::= { sensorMemUsageEntry 18 }
|
||
|
||
sensorAvgL7DcapFlows OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the average percentage of the layer7Dcap flows across all PEs."
|
||
::= { sensorMemUsageEntry 19 }
|
||
|
||
sensorMaxL7DcapFlows OBJECT-TYPE
|
||
SYNTAX Integer32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This gives the maximum percentage of layer7Dcap flows on a single PE."
|
||
::= { sensorMemUsageEntry 20 }
|
||
|
||
--The intfPortIf64Table contains 64bit counter information on the entity's
|
||
--interfaces. It's the 64 bit equivalent of 32bit based intfPortIfTable
|
||
--
|
||
|
||
intfPortIf64Table OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF IntfPortIf64Entry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 7 }
|
||
|
||
intfPortIf64Entry OBJECT-TYPE
|
||
SYNTAX IntfPortIf64Entry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"An interface entry containing 64bit counter objects at the
|
||
subnetwork layer and below for a particular
|
||
interface."
|
||
INDEX { slotIndex,
|
||
intfPortIndex }
|
||
::= { intfPortIf64Table 1 }
|
||
|
||
IntfPortIf64Entry ::= SEQUENCE {
|
||
intfPortTotalPktsRecv64
|
||
Counter64,
|
||
intfPortTotalUnicastPktsRecv64
|
||
Counter64,
|
||
intfPortTotalMulticastPktsRecv64
|
||
Counter64,
|
||
intfPortTotalBroadcastPktsRecv64
|
||
Counter64,
|
||
intfPortTotalBytesRecv64
|
||
Counter64,
|
||
intfPortTotalCRCErrorsRecv64
|
||
Counter64,
|
||
intfPortTotalPktsSent64
|
||
Counter64,
|
||
intfPortTotalUnicastPktsSent64
|
||
Counter64,
|
||
intfPortTotalMulticastPktsSent64
|
||
Counter64,
|
||
intfPortTotalBroadcastPktsSent64
|
||
Counter64,
|
||
intfPortTotalBytesSent64
|
||
Counter64,
|
||
intfPortTotalCRCErrorsSent64
|
||
Counter64,
|
||
intfPortResetCounters64
|
||
INTEGER
|
||
}
|
||
|
||
intfPortTotalPktsRecv64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of packets that this interface port has
|
||
recieved."
|
||
::= { intfPortIf64Entry 1 }
|
||
|
||
intfPortTotalUnicastPktsRecv64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of unicast packets that this interface port has
|
||
recieved."
|
||
::= { intfPortIf64Entry 2 }
|
||
|
||
intfPortTotalMulticastPktsRecv64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of multicast packets that this interface port
|
||
has recieved."
|
||
::= { intfPortIf64Entry 3 }
|
||
|
||
intfPortTotalBroadcastPktsRecv64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of unicast packets that this interface port has
|
||
recieved."
|
||
::= { intfPortIf64Entry 4 }
|
||
|
||
intfPortTotalBytesRecv64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of bytes that this interface port has recieved."
|
||
::= { intfPortIf64Entry 5 }
|
||
|
||
intfPortTotalCRCErrorsRecv64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of packets received with bad CRC and bad
|
||
alignment."
|
||
::= { intfPortIf64Entry 6 }
|
||
|
||
intfPortTotalPktsSent64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of packets that have been sent on this
|
||
interface."
|
||
::= { intfPortIf64Entry 7 }
|
||
|
||
intfPortTotalUnicastPktsSent64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of unicast packets that have been sent on
|
||
this interface."
|
||
::= { intfPortIf64Entry 8 }
|
||
|
||
intfPortTotalMulticastPktsSent64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of multicast packets that have been sent on
|
||
this interface."
|
||
::= { intfPortIf64Entry 9 }
|
||
|
||
intfPortTotalBroadcastPktsSent64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of broadcast packets that have been sent on
|
||
this interface."
|
||
::= { intfPortIf64Entry 10 }
|
||
|
||
intfPortTotalBytesSent64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of bytes that have been sent on this interface."
|
||
::= { intfPortIf64Entry 11 }
|
||
|
||
intfPortTotalCRCErrorsSent64 OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total 64bit count of packets that have been sent with bad CRC."
|
||
::= { intfPortIf64Entry 12 }
|
||
|
||
intfPortResetCounters64 OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset (0)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Reset all the above (only intfPortIf64Entry 1 - 12) counters"
|
||
::= { intfPortIf64Entry 13 }
|
||
|
||
--
|
||
-- This group contains Malware related stats. These are applicable to
|
||
-- all M-series except NAC-only appliances.
|
||
|
||
|
||
malwareCounterTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF MalwareCounterEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 8 }
|
||
|
||
malwareCounterEntry OBJECT-TYPE
|
||
SYNTAX MalwareCounterEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Entry containing malware specific statistics.
|
||
This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models."
|
||
INDEX { slotIndex }
|
||
::= { malwareCounterTable 1 }
|
||
|
||
|
||
MalwareCounterEntry ::= SEQUENCE {
|
||
malwareTotalQueriesSent
|
||
Counter32,
|
||
malwareUnresolvedQueriesQ
|
||
Counter32,
|
||
malwareTotalQueryResBelowMalTh
|
||
Counter32,
|
||
malwareTotalQueryResAboveMalTh
|
||
Counter32,
|
||
malwareBlocked
|
||
Counter32,
|
||
malwareTotalUDQueries
|
||
Counter32,
|
||
malwareUDDetected
|
||
Counter32,
|
||
malwareUDBlocked
|
||
Counter32,
|
||
malwareTempError
|
||
Counter32,
|
||
malwareProtocolError
|
||
Counter32,
|
||
malwareNoDomainError
|
||
Counter32,
|
||
malwareNoDataError
|
||
Counter32,
|
||
malwareOutOfMemoryError
|
||
Counter32,
|
||
malwareBadQueryError
|
||
Counter32,
|
||
malwareUnknownError
|
||
Counter32,
|
||
malwareFFPLastIncrTimeStamp
|
||
Counter32
|
||
}
|
||
|
||
|
||
malwareTotalQueriesSent OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of queries sent."
|
||
::= { malwareCounterEntry 1 }
|
||
|
||
malwareUnresolvedQueriesQ OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of unresolved queries(currently in queue)."
|
||
::= { malwareCounterEntry 2 }
|
||
|
||
malwareTotalQueryResBelowMalTh OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of query responses received below malware threshold(dirty)."
|
||
::= { malwareCounterEntry 3 }
|
||
|
||
malwareTotalQueryResAboveMalTh OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of query responses received above malware threshold(clean)."
|
||
::= { malwareCounterEntry 4 }
|
||
|
||
malwareBlocked OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of malwares blocked."
|
||
::= { malwareCounterEntry 5 }
|
||
|
||
malwareTotalUDQueries OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of user-defined malware queries."
|
||
::= { malwareCounterEntry 6 }
|
||
|
||
malwareUDDetected OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of user-defined malware detected."
|
||
::= { malwareCounterEntry 7 }
|
||
|
||
malwareUDBlocked OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of user-defined malware blocked."
|
||
::= { malwareCounterEntry 8 }
|
||
|
||
malwareTempError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"temporary error, the resolver nameserver was not able to process our query or timed out."
|
||
::= { malwareCounterEntry 9 }
|
||
|
||
malwareProtocolError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"protocol error, a nameserver returned malformed reply."
|
||
::= { malwareCounterEntry 10 }
|
||
|
||
malwareNoDomainError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"the domain name(implying md5 + mcafee.com) does not exist ."
|
||
::= { malwareCounterEntry 11 }
|
||
|
||
malwareNoDataError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"there is no data of requested type found. ."
|
||
::= { malwareCounterEntry 12 }
|
||
|
||
malwareOutOfMemoryError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"out of memory while processing request ."
|
||
::= { malwareCounterEntry 13 }
|
||
|
||
malwareBadQueryError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"some aspect of the query (most common is the domain name in question) is invalid, and the library can't even start a query."
|
||
::= { malwareCounterEntry 14 }
|
||
|
||
malwareUnknownError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"unknown error."
|
||
::= { malwareCounterEntry 15 }
|
||
|
||
malwareFFPLastIncrTimeStamp OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Malware FFP Last Successful Incremental Update Timestamp."
|
||
::= { malwareCounterEntry 16 }
|
||
|
||
|
||
--The layer2FwdStatsTable contains l2f counter information on the entity's
|
||
--interfaces.
|
||
--
|
||
|
||
layer2FwdStatsTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF Layer2FwdStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 9 }
|
||
|
||
layer2FwdStatsEntry OBJECT-TYPE
|
||
SYNTAX Layer2FwdStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"An interface entry containing layer2 forward statistics for each
|
||
object at their respective interface."
|
||
INDEX { slotIndex,
|
||
intfPortIndex }
|
||
::= { layer2FwdStatsTable 1 }
|
||
|
||
Layer2FwdStatsEntry ::= SEQUENCE {
|
||
layer2FwdCounter
|
||
Counter64
|
||
}
|
||
|
||
layer2FwdCounter OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This counter gives the number of packets that were sent out without
|
||
going through the sensor due to layer2 forward."
|
||
::= { layer2FwdStatsEntry 1 }
|
||
|
||
--
|
||
-- Sensor Pkt Count Table
|
||
--
|
||
sensorPktCountTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF SensorPktCountEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { sensorCardPerfGrp 10 }
|
||
|
||
sensorPktCountEntry OBJECT-TYPE
|
||
SYNTAX SensorPktCountEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This table give the sensor packet count related information.
|
||
This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models."
|
||
INDEX { slotIndex }
|
||
::= { sensorPktCountTable 1 }
|
||
|
||
SensorPktCountEntry ::= SEQUENCE {
|
||
unknownProtoPktsFwdCount
|
||
Counter64,
|
||
unknownProtoPktsFwdPercent
|
||
OCTET STRING,
|
||
unknownProtoPktsFwdLastTimestamp
|
||
INTEGER,
|
||
latencyPktsFwdPercent
|
||
OCTET STRING
|
||
}
|
||
|
||
unknownProtoPktsFwdCount OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of unknown protocol packets forwarded by the sensor without processing."
|
||
::= { sensorPktCountEntry 1 }
|
||
|
||
unknownProtoPktsFwdPercent OBJECT-TYPE
|
||
SYNTAX OCTET STRING (SIZE(256))
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Percentage of number of unknown protocol packets forwarded by the sensor without processing to total packets."
|
||
::= { sensorPktCountEntry 2 }
|
||
|
||
unknownProtoPktsFwdLastTimestamp OBJECT-TYPE
|
||
SYNTAX INTEGER (0..4294967295)
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"UTC Time at the sensor when the last unknown protocol packet was forwarded by the sensor without processing."
|
||
::= { sensorPktCountEntry 3 }
|
||
|
||
latencyPktsFwdPercent OBJECT-TYPE
|
||
SYNTAX OCTET STRING (SIZE(256))
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Percentage of number of latency packets forwarded by the sensor to total packets."
|
||
::= { sensorPktCountEntry 4 }
|
||
|
||
malwareStatsGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 11 }
|
||
|
||
malwareEngineStatsTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF MalwareEngineStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"
|
||
|
||
"
|
||
::= { malwareStatsGrp 1 }
|
||
|
||
malwareEngineStatsEntry OBJECT-TYPE
|
||
SYNTAX MalwareEngineStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Each entry specified is indexed by <malware engine Id>.
|
||
Additonaly it contains the
|
||
"
|
||
INDEX { malwareEngineIndex }
|
||
::= { malwareEngineStatsTable 1 }
|
||
|
||
MalwareEngineStatsEntry ::= SEQUENCE {
|
||
malwareEngineIndex
|
||
INTEGER,
|
||
malwareStatsEngineName
|
||
DisplayString,
|
||
totalMalwareFilesProcessed
|
||
INTEGER,
|
||
numMalwareScoreClean
|
||
INTEGER,
|
||
numMalwareScoreVLow
|
||
INTEGER,
|
||
numMalwareScoreLow
|
||
INTEGER,
|
||
numMalwareScoreMedium
|
||
INTEGER,
|
||
numMalwareScoreHigh
|
||
INTEGER,
|
||
numMalwareScoreVHigh
|
||
INTEGER,
|
||
numMalwareAlertsSent
|
||
INTEGER,
|
||
numMalwareAttacksBlocked
|
||
INTEGER,
|
||
numMalwareTcpResetSent
|
||
INTEGER,
|
||
numMalwareScoreUnknown
|
||
INTEGER,
|
||
numMalwareFileSubmitted
|
||
INTEGER,
|
||
numMalwareFileIgnored
|
||
INTEGER,
|
||
numMalwareCacheReferences
|
||
INTEGER,
|
||
numMalwareStaticResponse
|
||
INTEGER,
|
||
numMalwareDynamicResponse
|
||
INTEGER,
|
||
numMalwareDropUnderLoad
|
||
INTEGER
|
||
}
|
||
|
||
malwareEngineIndex OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Malware engine index"
|
||
::= { malwareEngineStatsEntry 1 }
|
||
|
||
malwareStatsEngineName OBJECT-TYPE
|
||
SYNTAX DisplayString (SIZE(0..256))
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the malware engine name string."
|
||
::= { malwareEngineStatsEntry 2 }
|
||
|
||
totalMalwareFilesProcessed OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the total number of malware files processed by the specific malware engine. "
|
||
::= { malwareEngineStatsEntry 3 }
|
||
|
||
numMalwareScoreClean OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of clean malware files processed by the specific malware engine."
|
||
::= { malwareEngineStatsEntry 4 }
|
||
|
||
numMalwareScoreVLow OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware alerts generated by the specific malware engine and having malware score as very low."
|
||
::= { malwareEngineStatsEntry 5 }
|
||
|
||
numMalwareScoreLow OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware alerts generated by the specific malware engine and having malware score as low."
|
||
::= { malwareEngineStatsEntry 6 }
|
||
|
||
numMalwareScoreMedium OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware alerts generated by the specific malware engine and having malware score as medium. "
|
||
::= { malwareEngineStatsEntry 7 }
|
||
|
||
numMalwareScoreHigh OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware alerts generated by the specific malware engine and having malware score as high."
|
||
::= { malwareEngineStatsEntry 8 }
|
||
|
||
numMalwareScoreVHigh OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware alerts generated by the specific malware engine and having malware score as very high."
|
||
::= { malwareEngineStatsEntry 9 }
|
||
|
||
numMalwareAlertsSent OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware alerts sent to NSM, by the sensor for the specific malware engine."
|
||
::= { malwareEngineStatsEntry 10 }
|
||
|
||
numMalwareAttacksBlocked OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware attacks blocked by the sensor for the specific malware engine. "
|
||
::= { malwareEngineStatsEntry 11 }
|
||
|
||
numMalwareTcpResetSent OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware TCP Resets sent by the sensor for the specific malware engine."
|
||
::= { malwareEngineStatsEntry 12 }
|
||
|
||
numMalwareScoreUnknown OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware alerts generated by the specific malware engine and having malware score as unknown."
|
||
::= { malwareEngineStatsEntry 13 }
|
||
|
||
numMalwareFileSubmitted OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware files submitted to any of the malware engine."
|
||
::= { malwareEngineStatsEntry 14 }
|
||
|
||
numMalwareFileIgnored OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware files submitted to the malware engine but not being processed by that malware engine."
|
||
::= { malwareEngineStatsEntry 15 }
|
||
|
||
numMalwareCacheReferences OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware results obtained from cache."
|
||
::= { malwareEngineStatsEntry 16 }
|
||
|
||
numMalwareStaticResponse OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware responses obtained from ATD using static analysis"
|
||
::= { malwareEngineStatsEntry 17 }
|
||
|
||
numMalwareDynamicResponse OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware responses obtained from ATD based on dynamic analysis within ATD"
|
||
::= { malwareEngineStatsEntry 18 }
|
||
|
||
numMalwareDropUnderLoad OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware files dropped i.e not being inspected because of load."
|
||
::= { malwareEngineStatsEntry 19 }
|
||
|
||
malwareFileStatsTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF MalwareFileStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"
|
||
|
||
"
|
||
::= { malwareStatsGrp 2 }
|
||
|
||
malwareFileStatsEntry OBJECT-TYPE
|
||
SYNTAX MalwareFileStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Each entry specified is indexed by <malware file type index>.
|
||
"
|
||
INDEX { malwareFileTypeIndex }
|
||
::= { malwareFileStatsTable 1 }
|
||
|
||
MalwareFileStatsEntry ::= SEQUENCE {
|
||
malwareFileTypeIndex
|
||
INTEGER,
|
||
malwareFileTypeName
|
||
DisplayString,
|
||
numMalwareFilesProcessed
|
||
INTEGER
|
||
}
|
||
|
||
malwareFileTypeIndex OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"malware file type index."
|
||
::= { malwareFileStatsEntry 1 }
|
||
|
||
malwareFileTypeName OBJECT-TYPE
|
||
SYNTAX DisplayString (SIZE(0..256))
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the file type name string."
|
||
::= { malwareFileStatsEntry 2 }
|
||
|
||
numMalwareFilesProcessed OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of malware file processed of the specific file type."
|
||
::= { malwareFileStatsEntry 3 }
|
||
|
||
malwareStatsClearCounters OBJECT-TYPE
|
||
SYNTAX TruthValue
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Configuration option to reset malware statistics counters through SNMP. Default: false (2)"
|
||
|
||
::= { malwareStatsGrp 3 }
|
||
|
||
malwareRESTStatsTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF MalwareRESTStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"
|
||
Error Counters of GTI File Reputation REST feature
|
||
"
|
||
::= { malwareStatsGrp 4 }
|
||
|
||
malwareRESTStatsEntry OBJECT-TYPE
|
||
SYNTAX MalwareRESTStatsEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"
|
||
Error Counters of GTI File Reputation REST feature
|
||
"
|
||
INDEX { malwareEngineIndex }
|
||
::= { malwareRESTStatsTable 1 }
|
||
|
||
MalwareRESTStatsEntry ::= SEQUENCE {
|
||
malwareRESTEngineName
|
||
DisplayString,
|
||
numMalwareInternalServerError
|
||
INTEGER,
|
||
numMalwareInvalidJSON
|
||
INTEGER,
|
||
numMalwareUnsupportedOperation
|
||
INTEGER,
|
||
numMalwareMissingMandatoryParam
|
||
INTEGER,
|
||
numMalwareIncorrectProtocalFormat
|
||
INTEGER,
|
||
numMalwareMaxOperationExceeded
|
||
INTEGER,
|
||
numMalwareInvalidProtocalVersion
|
||
INTEGER,
|
||
numMalwareDuplicateParameter
|
||
INTEGER,
|
||
numMalwareMissingCIInfo
|
||
INTEGER,
|
||
numMalwareMandatoryParamEmpty
|
||
INTEGER,
|
||
numMalwareInvalidMandatoryParamFormat
|
||
INTEGER,
|
||
numMalwareFailedToConnect
|
||
INTEGER,
|
||
numMalwareEmptyInput
|
||
INTEGER,
|
||
numMalwareEmptyCIParam
|
||
INTEGER,
|
||
numMalwareInvalidCIParamFormat
|
||
INTEGER,
|
||
numMalwareDuplicateCIParam
|
||
INTEGER,
|
||
numMalwareGenericServerError
|
||
INTEGER,
|
||
numMalwareOtherError
|
||
INTEGER,
|
||
numMalwarePreSubmitError
|
||
INTEGER,
|
||
numMalwareCurlFailed
|
||
INTEGER,
|
||
numMalwareHttpBadRequest
|
||
INTEGER,
|
||
numMalwareHttpUnauthorized
|
||
INTEGER,
|
||
numMalwareHttpUnsupportedMedia
|
||
INTEGER,
|
||
numMalwareHttpUnknownError
|
||
INTEGER,
|
||
numMalwareJsonParseError
|
||
INTEGER,
|
||
numMalwareHashNotFound
|
||
INTEGER
|
||
}
|
||
|
||
malwareRESTEngineName OBJECT-TYPE
|
||
SYNTAX DisplayString (SIZE(0..256))
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the indexed malware engine name"
|
||
::= { malwareRESTStatsEntry 1 }
|
||
|
||
numMalwareInternalServerError OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Internal GTI Server error"
|
||
::= { malwareRESTStatsEntry 2 }
|
||
|
||
numMalwareInvalidJSON OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Invalid JSON format Error"
|
||
::= { malwareRESTStatsEntry 3 }
|
||
|
||
numMalwareUnsupportedOperation OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Unsupported Operation Error"
|
||
::= { malwareRESTStatsEntry 4 }
|
||
|
||
numMalwareMissingMandatoryParam OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Missing mandatory parameter Error"
|
||
::= { malwareRESTStatsEntry 5 }
|
||
|
||
numMalwareIncorrectProtocalFormat OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Incorrect GTI protocol format Error"
|
||
::= { malwareRESTStatsEntry 6 }
|
||
|
||
numMalwareMaxOperationExceeded OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Max number of operations exceeded"
|
||
::= { malwareRESTStatsEntry 7 }
|
||
|
||
numMalwareInvalidProtocalVersion OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Invalid protocol version Error"
|
||
::= { malwareRESTStatsEntry 8 }
|
||
|
||
numMalwareDuplicateParameter OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Duplicate parameter Error"
|
||
::= { malwareRESTStatsEntry 9 }
|
||
|
||
numMalwareMissingCIInfo OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Missing mandatory client information parameter Error"
|
||
::= { malwareRESTStatsEntry 10 }
|
||
|
||
numMalwareMandatoryParamEmpty OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Empty mandatory parameter Error"
|
||
::= { malwareRESTStatsEntry 11 }
|
||
|
||
numMalwareInvalidMandatoryParamFormat OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Invalid mandatory parameter format Error"
|
||
::= { malwareRESTStatsEntry 12 }
|
||
|
||
numMalwareFailedToConnect OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Failed to obtain a Connection Error"
|
||
::= { malwareRESTStatsEntry 13 }
|
||
|
||
numMalwareEmptyInput OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Empty Input Error"
|
||
::= { malwareRESTStatsEntry 14 }
|
||
|
||
numMalwareEmptyCIParam OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Empty client information parameter Error"
|
||
::= { malwareRESTStatsEntry 15 }
|
||
|
||
numMalwareInvalidCIParamFormat OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Invalid client information parameter format Error"
|
||
::= { malwareRESTStatsEntry 16 }
|
||
|
||
numMalwareDuplicateCIParam OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Duplicate client information parameter Error"
|
||
::= { malwareRESTStatsEntry 17 }
|
||
|
||
numMalwareGenericServerError OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Generic GTI Server error"
|
||
::= { malwareRESTStatsEntry 18 }
|
||
|
||
numMalwareOtherError OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of other GTI Server Error"
|
||
::= { malwareRESTStatsEntry 19 }
|
||
|
||
numMalwarePreSubmitError OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of error while creating REST query"
|
||
::= { malwareRESTStatsEntry 20 }
|
||
|
||
numMalwareCurlFailed OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of CURL perform failed"
|
||
::= { malwareRESTStatsEntry 21 }
|
||
|
||
numMalwareHttpBadRequest OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of HTTP 400 Errors"
|
||
::= { malwareRESTStatsEntry 22 }
|
||
|
||
numMalwareHttpUnauthorized OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of HTTP 401 Errors"
|
||
::= { malwareRESTStatsEntry 23 }
|
||
|
||
numMalwareHttpUnsupportedMedia OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of HTTP 415 Errors"
|
||
::= { malwareRESTStatsEntry 24 }
|
||
|
||
numMalwareHttpUnknownError OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of other HTTP Errors"
|
||
::= { malwareRESTStatsEntry 25 }
|
||
|
||
numMalwareJsonParseError OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Errors while parsing JSON response object"
|
||
::= { malwareRESTStatsEntry 26 }
|
||
|
||
numMalwareHashNotFound OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Number of Hash is not found in GTI server"
|
||
::= { malwareRESTStatsEntry 27 }
|
||
|
||
advancedBotnetStatsGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 12 }
|
||
|
||
callBackDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This objects returns the number alerts pertaining to callback detector matches."
|
||
::= { advancedBotnetStatsGrp 1 }
|
||
|
||
dgaZombieDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of alerts with respect to DGA zombies detected."
|
||
::= { advancedBotnetStatsGrp 2 }
|
||
|
||
dgaCnCServerDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of alert pertaining to the CnC(command and control) server suspect detected."
|
||
::= { advancedBotnetStatsGrp 3 }
|
||
|
||
dgaConectionToCnCServerDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of alert pertaining to the CnC(command and control) and DGA zombie callback detected"
|
||
::= { advancedBotnetStatsGrp 4 }
|
||
|
||
fastFluxDnsDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of alerts pertaining to IP flux botnet activity detected."
|
||
::= { advancedBotnetStatsGrp 5 }
|
||
|
||
fastFluxAgentConnectionDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of alerts pertaining to IP flux agent call back detected"
|
||
::= { advancedBotnetStatsGrp 6 }
|
||
|
||
|
||
zeroDayBotnetDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of alerts pertaining to Other zero day botnet detected"
|
||
::= { advancedBotnetStatsGrp 7 }
|
||
|
||
knownBotnetDetected OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object returns the number of alerts pertaining to known botnets detected."
|
||
::= { advancedBotnetStatsGrp 8 }
|
||
|
||
|
||
sensorIntfStatGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 13 }
|
||
|
||
sensorTotalPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets that sensor has
|
||
recieved."
|
||
|
||
::= { sensorIntfStatGrp 1 }
|
||
|
||
|
||
sensorTotalUnicastPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of unicast packets that sensor has
|
||
recieved."
|
||
::= { sensorIntfStatGrp 2 }
|
||
|
||
|
||
sensorTotalMulticastPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of multicast packets that sensor
|
||
has recieved."
|
||
|
||
::= { sensorIntfStatGrp 3 }
|
||
|
||
sensorTotalBroadcastPktsRecv OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of unicast packets that sensor has
|
||
recieved."
|
||
::= { sensorIntfStatGrp 4 }
|
||
|
||
sensorTotalBytesRecv OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of bytes that sensor has recieved."
|
||
::= { sensorIntfStatGrp 5 }
|
||
|
||
sensorTotalCRCErrorsRecv OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets received with bad CRC and bad
|
||
alignment in sensor."
|
||
::= { sensorIntfStatGrp 6 }
|
||
|
||
sensorTotalPktsSent OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets that have been sent on sensor."
|
||
::= { sensorIntfStatGrp 7 }
|
||
|
||
sensorTotalUnicastPktsSent OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of unicast packets that have been sent on
|
||
sensor."
|
||
::= { sensorIntfStatGrp 8 }
|
||
|
||
sensorTotalMulticastPktsSent OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of multicast packets that have been sent on
|
||
sensor."
|
||
::= { sensorIntfStatGrp 9 }
|
||
|
||
sensorTotalBroadcastPktsSent OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of broadcast packets that have been sent on
|
||
sensor."
|
||
::= { sensorIntfStatGrp 10 }
|
||
|
||
sensorTotalBytesSent OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of bytes that have been sent on sensor."
|
||
::= { sensorIntfStatGrp 11 }
|
||
|
||
sensorTotalCRCErrorsSent OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of packets that have been sent with bad CRC on sensor."
|
||
::= { sensorIntfStatGrp 12 }
|
||
|
||
sensorIntfResetCounters OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset(1)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Resets the counters in sensor interface stats table"
|
||
::= { sensorIntfStatGrp 13 }
|
||
|
||
sensorNbadFlowRecordCount OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total count of flow records generated by the sensor."
|
||
::= { sensorIntfStatGrp 14 }
|
||
|
||
|
||
--
|
||
-- This group contains MIB objects applicable for SSL statistics
|
||
--
|
||
sslStatisticsGrp OBJECT IDENTIFIER ::= { sensorCardPerfGrp 14}
|
||
|
||
-- This group consists of scalar for ssl statistics
|
||
sslCounterGrp OBJECT IDENTIFIER ::= { sslStatisticsGrp 1}
|
||
|
||
outboundsslConnectionAttemptsClientToSensor OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl connections attempt from client to sensor in outbound direction"
|
||
::= { sslCounterGrp 1 }
|
||
|
||
outboundsslConnectionAttemptsSensorToServer OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl connections attempt from sensor to external server in outbound direction"
|
||
::= { sslCounterGrp 2 }
|
||
|
||
outboundsslEndToEndSslHandshakeInProgress OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl handshake in progress for outbound direction"
|
||
::= { sslCounterGrp 3 }
|
||
|
||
outboundsslEndToEndSslFlowsEstablished OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl flows established for outbound direction"
|
||
::= { sslCounterGrp 4 }
|
||
|
||
outboundsslWhitelistedFlows OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl flows being whitelisted for outbound direction"
|
||
::= { sslCounterGrp 5 }
|
||
|
||
outboundsslAttacksDetected OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of attacks detected in ssl packets in outbound direction"
|
||
::= { sslCounterGrp 6 }
|
||
|
||
outboundsslTotalRSAFlows OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of flows seen with RSA key exchange in outbound direction"
|
||
::= { sslCounterGrp 7 }
|
||
|
||
outboundsslTotalDHFlows OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of flows seen with Diffie Hellman key exchange in outbound direction"
|
||
::= { sslCounterGrp 8 }
|
||
|
||
outboundsslTotalNonSslFlows OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of non ssl flows seen in outbound direction"
|
||
::= { sslCounterGrp 9 }
|
||
|
||
outboundsslUntrustedCertCounts OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of untrusted certificates seen in outbound direction"
|
||
::= { sslCounterGrp 10 }
|
||
|
||
outboundsslUntrustedCertFlowsBlockOrSkipped OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl flows blocked or skipped due to untrusted certificates seen in outbound direction"
|
||
::= { sslCounterGrp 11 }
|
||
|
||
outboundsslUnknownCertCounts OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of unknown certificates seen in outbound direction"
|
||
::= { sslCounterGrp 12 }
|
||
|
||
outboundsslUnknownCertFlowsBlockOrSkipped OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl flows blocked or skipped due to unknown validity of certificates seen in outbound direction"
|
||
::= { sslCounterGrp 13 }
|
||
|
||
outboundsslUnsupportedCipherSuiteFlowsBlockedOrSkipped OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl flows blocked or skipped due to unsupported cipher suite in outbound direction"
|
||
::= { sslCounterGrp 14 }
|
||
|
||
outboundsslGeneralDecryptionFailureFlowsBlockOrSkipped OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of ssl flows blocked or skipped due to general decryption failure in outbound direction"
|
||
::= { sslCounterGrp 15 }
|
||
|
||
sslEventConnectionRecycled OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of connections ran out of ssl connection structure but was able to prematurely retire one that has not been recently used. To prevent this increase SSL connection count in the NSM."
|
||
::= { sslCounterGrp 16 }
|
||
|
||
sslEventConnectionExhausted OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of connection for which the sensor could not allocate a new SSL connection structure because all SSL connection structures were in use. To resolve this increase SSL connection count in the NSM."
|
||
::= { sslCounterGrp 17 }
|
||
|
||
sslEventPacketsWithNoConnection OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of SSL packets received that did not have a corresponding SSL structure."
|
||
::= { sslCounterGrp 18 }
|
||
|
||
sslEventSessionAllocationError OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Sensor could not allocate new SSL session structure because all SSL session resource were in use. This indicates more simultaneous SSL sessions were in use than the sensor was configured to processs. To resolve this, increase the SSL connection count or decrease the SSL cache time on the NSM"
|
||
::= { sslCounterGrp 19 }
|
||
|
||
sslEventUnsupportedDiffieHellmanCipherSuite OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"A cipher suite that uses Diffie-Hellman was negotiated. The sensor will not be able to detect attacks in this SSL connection. Configure the server to only allow cipher suites that use RSA"
|
||
::= { sslCounterGrp 20 }
|
||
|
||
sslEventUnsupportedExportCipher OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total connection that used SSLv3/TLS export cipher was negotiated, which the sensor cannot decrypt due to the use of ephemeral RSA"
|
||
::= { sslCounterGrp 21 }
|
||
|
||
sslEventUnsupportedOrUnknownCipher OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total connection where cipher was negotiated that the Sensor cannot decrypt."
|
||
::= { sslCounterGrp 22 }
|
||
|
||
sslMisMatchedCertCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This object specifies the total number of certificates seen in the traffic which did not matched any of the server certificate"
|
||
::= { sslCounterGrp 23 }
|
||
|
||
sslStatsResetCounters OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset (0)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Reset all the ssl statistics counters"
|
||
::= { sslCounterGrp 24 }
|
||
|
||
sslEventConnectionKeyMatched OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total connection where cipher was negotiated and the Master Secret lookup returned a match"
|
||
::= { sslCounterGrp 28 }
|
||
|
||
|
||
|
||
-- This table contains entries for certs matches
|
||
sslCertsCounterTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF SslCertsCounterEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Table containing cert match details"
|
||
::= { sslStatisticsGrp 2}
|
||
|
||
sslCertsCounterEntry OBJECT-TYPE
|
||
SYNTAX SslCertsCounterEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This MIB object contains all the attributes that are specific to the L2 fwd entry for TCP table. Indexed by intfPortLinearIndex and entry number."
|
||
INDEX { certEntryIndex }
|
||
::= { sslCertsCounterTable 1 }
|
||
|
||
SslCertsCounterEntry ::= SEQUENCE {
|
||
certEntryIndex
|
||
INTEGER,
|
||
sslCertId
|
||
INTEGER,
|
||
sslCertAlias
|
||
DisplayString,
|
||
sslCertMatchCount
|
||
Counter32
|
||
}
|
||
|
||
certEntryIndex OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This is certificate entry index"
|
||
::= { sslCertsCounterEntry 1 }
|
||
|
||
sslCertId OBJECT-TYPE
|
||
SYNTAX INTEGER
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This is certificate Id"
|
||
::= { sslCertsCounterEntry 2 }
|
||
|
||
sslCertAlias OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(0..64))
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This is certificate alias name"
|
||
::= { sslCertsCounterEntry 3 }
|
||
|
||
sslCertMatchCount OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This is total number of flows matching the certificate"
|
||
::= { sslCertsCounterEntry 4 }
|
||
|
||
|
||
sensorPacketDropGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 2 }
|
||
|
||
sensorPktDropTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF SensorPktDropEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Table containing packets dropped at sensor level under various categories"
|
||
::= { sensorPacketDropGrp 1 }
|
||
|
||
sensorPktDropEntry OBJECT-TYPE
|
||
SYNTAX SensorPktDropEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This entry is indexed by a fixed value chassis slotIndex of 2 (two) for all models."
|
||
INDEX { slotIndex }
|
||
::= { sensorPktDropTable 1 }
|
||
|
||
SensorPktDropEntry ::= SEQUENCE {
|
||
rateLimitPktDrop
|
||
Counter32,
|
||
ipPktSanityChkDrop
|
||
Counter32,
|
||
ipv6PktSanityChkDrop
|
||
Counter32,
|
||
sensorPktDropResetCounters
|
||
INTEGER
|
||
}
|
||
|
||
rateLimitPktDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to sensor rate limiting"
|
||
::= { sensorPktDropEntry 1 }
|
||
|
||
ipPktSanityChkDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to IPV4 sanity check failure"
|
||
::= { sensorPktDropEntry 2 }
|
||
|
||
ipv6PktSanityChkDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to IPV6 sanity check failure"
|
||
::= { sensorPktDropEntry 3 }
|
||
|
||
sensorPktDropResetCounters OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset(0)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Resets the counters in sensor packet drop table"
|
||
::= { sensorPktDropEntry 4 }
|
||
|
||
intfPortPktDropTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF IntfPortPktDropEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Table to maintain sensor interface level packet drop statistics"
|
||
::= { sensorPacketDropGrp 2 }
|
||
|
||
|
||
intfPortPktDropEntry OBJECT-TYPE
|
||
SYNTAX IntfPortPktDropEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"An interface entry that maintains the dropped packet statistics for various categories"
|
||
INDEX { slotIndex,
|
||
intfPortIndex }
|
||
::= { intfPortPktDropTable 1 }
|
||
|
||
IntfPortPktDropEntry ::= SEQUENCE {
|
||
|
||
intfPortIpChksumErrorDrop
|
||
Counter32,
|
||
intfPortTcpChksumErrorDrop
|
||
Counter32,
|
||
intfPortUdpChksumErrorDrop
|
||
Counter32,
|
||
intfPortIcmpChksumErrorDrop
|
||
Counter32,
|
||
intfPortIcmpv6ChksumErrorDrop
|
||
Counter32,
|
||
intfPortAclDrop
|
||
Counter32,
|
||
intfPortBadPacketDrop
|
||
Counter32,
|
||
intfPortColdStartPacketDrop
|
||
Counter32,
|
||
intfPortAttackPacketDrop
|
||
Counter32,
|
||
intfPortIpReassemTimeoutDrop
|
||
Counter32,
|
||
intfPortIpv6ReassemTimeoutDrop
|
||
Counter32,
|
||
intfPortTcpOutOfOrderTimeoutDrop
|
||
Counter32,
|
||
intfPortTcpProtoErrorDrop
|
||
Counter32,
|
||
intfPortUdpProtoErrorDrop
|
||
Counter32,
|
||
intfPortIcmpProtoErrorDrop
|
||
Counter32,
|
||
intfPortIcmpv6ProtoErrorDrop
|
||
Counter32,
|
||
intfPortIpProtoErrorDrop
|
||
Counter32,
|
||
intfPortIpv6ProtoErrorDrop
|
||
Counter32,
|
||
intfPortCRCErrorDrop
|
||
Counter32,
|
||
intfPortOtherLayer2ErrorDrop
|
||
Counter32,
|
||
intfPortOffHdrLenErrorDrop
|
||
Counter32,
|
||
intfPortSysOutOfResourceDrop
|
||
Counter32,
|
||
intfPortPktDropResetCounters
|
||
INTEGER,
|
||
intfPortHostIsolationv4Drop
|
||
Counter32,
|
||
intfPortHostIsolationv6Drop
|
||
Counter32,
|
||
intfPortLayer2MiscDrop
|
||
Counter32
|
||
}
|
||
|
||
intfPortIpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect IP checksum"
|
||
::= { intfPortPktDropEntry 1 }
|
||
|
||
intfPortTcpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect TCP checksum"
|
||
::= { intfPortPktDropEntry 2 }
|
||
|
||
intfPortUdpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect UDP checksum"
|
||
::= { intfPortPktDropEntry 3 }
|
||
|
||
intfPortIcmpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect ICMP v4 checksum"
|
||
::= { intfPortPktDropEntry 4 }
|
||
|
||
intfPortIcmpv6ChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect ICMP v6 checksum"
|
||
::= { intfPortPktDropEntry 5 }
|
||
|
||
intfPortAclDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to configured ACL Rules"
|
||
::= { intfPortPktDropEntry 6 }
|
||
|
||
intfPortBadPacketDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to non-existence of a valid flow"
|
||
::= { intfPortPktDropEntry 7 }
|
||
|
||
intfPortColdStartPacketDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to cold start packet drop action"
|
||
::= { intfPortPktDropEntry 8 }
|
||
|
||
intfPortAttackPacketDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number packets dropped due to recommended/configured attack response action"
|
||
::= { intfPortPktDropEntry 9 }
|
||
|
||
intfPortIpReassemTimeoutDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to IPV4 fragment reassembly timeout"
|
||
::= { intfPortPktDropEntry 10 }
|
||
|
||
intfPortIpv6ReassemTimeoutDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to IPV6 fragment reassembly timeout"
|
||
::= { intfPortPktDropEntry 11 }
|
||
|
||
intfPortTcpOutOfOrderTimeoutDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to TCP out of order reassembly timeout"
|
||
::= { intfPortPktDropEntry 12 }
|
||
|
||
intfPortTcpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in TCP Protocol"
|
||
::= { intfPortPktDropEntry 13 }
|
||
|
||
intfPortUdpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in UDP Protocol"
|
||
::= { intfPortPktDropEntry 14 }
|
||
|
||
intfPortIcmpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in ICMP v4 Protocol"
|
||
::= { intfPortPktDropEntry 15 }
|
||
|
||
intfPortIcmpv6ProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in ICMP v6 Protocol"
|
||
::= { intfPortPktDropEntry 16 }
|
||
|
||
|
||
intfPortIpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in IPv4 protocol"
|
||
::= { intfPortPktDropEntry 17 }
|
||
|
||
intfPortIpv6ProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in IPv6 protocol"
|
||
::= { intfPortPktDropEntry 18 }
|
||
|
||
intfPortCRCErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number packets dropped to CRC check failures"
|
||
::= { intfPortPktDropEntry 19 }
|
||
|
||
intfPortOtherLayer2ErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to other Layer2 errors"
|
||
::= { intfPortPktDropEntry 20 }
|
||
|
||
intfPortOffHdrLenErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to offset index length errors"
|
||
::= { intfPortPktDropEntry 21 }
|
||
|
||
intfPortSysOutOfResourceDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to sensor running out of resource"
|
||
::= { intfPortPktDropEntry 22 }
|
||
|
||
intfPortPktDropResetCounters OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset(0),
|
||
reset-ratelimit-stats(1)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"For a value reset(0), resets the counters in this interface port level table.
|
||
For a value reset-ratelimit-stats(1), resets all the queue-level ratelimit
|
||
counters over this port."
|
||
::= { intfPortPktDropEntry 23 }
|
||
|
||
intfPortHostIsolationv4Drop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of IPv4 packets dropped due to host isolation configuration"
|
||
::= { intfPortPktDropEntry 24 }
|
||
|
||
intfPortHostIsolationv6Drop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of IPv6 packets dropped due to host isolation configuration"
|
||
::= { intfPortPktDropEntry 25 }
|
||
|
||
intfPortLayer2MiscDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of non-error packets received on monitoring ports dropped in the layer2 switch because of other reasons"
|
||
::= { intfPortPktDropEntry 26 }
|
||
|
||
intfPortQRateLimitDropTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF IntfPortQRateLimitDropEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Table to maintain sensor interface and queue level rate-limit drop statistics"
|
||
::= { sensorPacketDropGrp 3 }
|
||
|
||
intfPortQRateLimitDropEntry OBJECT-TYPE
|
||
SYNTAX IntfPortQRateLimitDropEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"An interface queue entry that maintains the dropped packet statistics for various categories"
|
||
INDEX { slotIndex,
|
||
intfPortIndex,
|
||
rateLimitQueueIndex }
|
||
::= { intfPortQRateLimitDropTable 1 }
|
||
|
||
IntfPortQRateLimitDropEntry ::= SEQUENCE {
|
||
|
||
intfPortQRateLimitBandwidth
|
||
Counter32,
|
||
intfPortQRateLimitBytesDrop
|
||
Counter32,
|
||
intfPortQRateLimitPktsDrop
|
||
Counter32,
|
||
intfPortQRateLimitDropResetCounters
|
||
INTEGER
|
||
}
|
||
|
||
intfPortQRateLimitBandwidth OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This counter gives the configured ratelimit bandwidth in bytes, for the specified port and queue indicies."
|
||
::= { intfPortQRateLimitDropEntry 1 }
|
||
|
||
intfPortQRateLimitBytesDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This counter gives the actual ratelimit bytes dropped for the specified port and queue indicies."
|
||
::= { intfPortQRateLimitDropEntry 2 }
|
||
|
||
intfPortQRateLimitPktsDrop OBJECT-TYPE
|
||
SYNTAX Counter32
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This counter gives the actual ratelimit packets dropped for the specified port and queue indicies."
|
||
::= { intfPortQRateLimitDropEntry 3 }
|
||
|
||
intfPortQRateLimitDropResetCounters OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
reset(0)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This counter resets the rateLimit drop counter of the specified port and queue indicies."
|
||
::= { intfPortQRateLimitDropEntry 4 }
|
||
|
||
|
||
sensorPacketDropStatGrp OBJECT IDENTIFIER ::= { sensorPacketDropGrp 4}
|
||
|
||
sensorIpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect IP checksum by the sensor."
|
||
::= { sensorPacketDropStatGrp 1 }
|
||
|
||
sensorTcpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect TCP checksum by the sensor."
|
||
::= { sensorPacketDropStatGrp 2 }
|
||
|
||
sensorUdpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect UDP checksum by the sensor."
|
||
::= { sensorPacketDropStatGrp 3 }
|
||
|
||
sensorIcmpChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect ICMP v4 checksum by the sensor."
|
||
::= { sensorPacketDropStatGrp 4 }
|
||
|
||
sensorIcmpv6ChksumErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to incorrect ICMP v6 checksum by the sensor."
|
||
::= { sensorPacketDropStatGrp 5 }
|
||
|
||
sensorAclDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to configured ACL Rules by the sensor."
|
||
::= { sensorPacketDropStatGrp 6 }
|
||
|
||
sensorBadPacketDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to non-existence of a valid flow by the sensor."
|
||
::= { sensorPacketDropStatGrp 7 }
|
||
|
||
sensorColdStartPacketDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to cold start packet drop action by the sensor."
|
||
::= { sensorPacketDropStatGrp 8 }
|
||
|
||
sensorAttackPacketDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number packets dropped due to recommended/configured attack response action by the sensor."
|
||
::= { sensorPacketDropStatGrp 9 }
|
||
|
||
sensorIpReassemTimeoutDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to IPV4 fragment reassembly timeout by the sensor."
|
||
::= { sensorPacketDropStatGrp 10 }
|
||
|
||
sensorIpv6ReassemTimeoutDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to IPV6 fragment reassembly timeout by the sensor."
|
||
::= { sensorPacketDropStatGrp 11 }
|
||
|
||
sensorTcpOutOfOrderTimeoutDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to TCP out of order reassembly timeout by the sensor."
|
||
::= { sensorPacketDropStatGrp 12 }
|
||
|
||
sensorTcpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in TCP Protocol by the sensor."
|
||
::= { sensorPacketDropStatGrp 13 }
|
||
|
||
sensorUdpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in UDP Protocol by the sensor."
|
||
::= { sensorPacketDropStatGrp 14 }
|
||
|
||
sensorIcmpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in ICMP v4 Protocol by the sensor."
|
||
::= { sensorPacketDropStatGrp 15 }
|
||
|
||
sensorIcmpv6ProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in ICMP v6 Protocol by the sensor."
|
||
::= { sensorPacketDropStatGrp 16 }
|
||
|
||
sensorIpProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in IPv4 protocol by the sensor."
|
||
::= { sensorPacketDropStatGrp 17 }
|
||
|
||
sensorIpv6ProtoErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to errors in IPv6 protocol by the sensor."
|
||
::= { sensorPacketDropStatGrp 18 }
|
||
|
||
sensorCRCErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number packets dropped to CRC check failures by the sensor."
|
||
::= { sensorPacketDropStatGrp 19 }
|
||
|
||
sensorOtherLayer2ErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to other Layer2 errors by the sensor."
|
||
::= { sensorPacketDropStatGrp 20 }
|
||
|
||
sensorOffHdrLenErrorDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to offset index length errors by the sensor."
|
||
::= { sensorPacketDropStatGrp 21 }
|
||
|
||
sensorSysOutOfResourceDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped due to sensor running out of resource by the sensor."
|
||
::= { sensorPacketDropStatGrp 22 }
|
||
|
||
sensorPktDropStatResetCounters OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Resets the counters in sensor packet drop table"
|
||
::= { sensorPacketDropStatGrp 23 }
|
||
|
||
sensorHostIsolationv4Drop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of IPv4 packets dropped due to host isolation configuration by the sensor."
|
||
::= { sensorPacketDropStatGrp 24 }
|
||
|
||
sensorHostIsolationv6Drop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of IPv6 packets dropped due to host isolation configuration by the sensor."
|
||
::= { sensorPacketDropStatGrp 25 }
|
||
|
||
sensorLayer2BackplaneDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packets dropped on the uplink ports of layer2 switch"
|
||
::= { sensorPacketDropStatGrp 26 }
|
||
|
||
sensorLayer2MiscDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of non-error packets received on all monitoring ports dropped in the layer2 switch because of other reasons"
|
||
::= { sensorPacketDropStatGrp 27 }
|
||
|
||
sensorNICDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packet dropped at NIC level"
|
||
::= { sensorPacketDropStatGrp 28 }
|
||
|
||
sensorFrontEndMiscDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of packet dropped at Frontend level"
|
||
::= { sensorPacketDropStatGrp 29 }
|
||
|
||
sensorBackEndMiscDrop OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of Misc packet dropped at Backend level"
|
||
::= { sensorPacketDropStatGrp 30 }
|
||
|
||
|
||
pktCapStatGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 3 }
|
||
|
||
pktCapTotal OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total number of Packet Capture"
|
||
::= {pktCapStatGrp 1 }
|
||
|
||
pktCapDropTotal OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Number of Packet drops due to sensor load/port load."
|
||
::= {pktCapStatGrp 2 }
|
||
|
||
|
||
controlPathPerfGrp OBJECT IDENTIFIER ::= { ivSensorPerformanceMIB 4 }
|
||
|
||
controlPathMemUsageTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF ControlPathMemUsageEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
""
|
||
::= { controlPathPerfGrp 1 }
|
||
|
||
controlPathMemUsageEntry OBJECT-TYPE
|
||
SYNTAX ControlPathMemUsageEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"This entry gives information about the Control path memory utilized.
|
||
This entry is indexed by a fixed value chassis slotIndex of 1 (one) for all models."
|
||
INDEX { slotIndex }
|
||
::= { controlPathMemUsageTable 1 }
|
||
|
||
ControlPathMemUsageEntry ::= SEQUENCE {
|
||
sysMemFree
|
||
Counter,
|
||
sysMemCached
|
||
Counter,
|
||
sysMemBuffers
|
||
Counter,
|
||
sysMemUtilisation
|
||
Counter
|
||
}
|
||
|
||
sysMemFree OBJECT-TYPE
|
||
SYNTAX Counter
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Control Path system free memory available in MB"
|
||
::= {controlPathMemUsageEntry 1 }
|
||
|
||
sysMemCached OBJECT-TYPE
|
||
SYNTAX Counter
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Control Path system cached memory in MB"
|
||
::= {controlPathMemUsageEntry 2 }
|
||
|
||
sysMemBuffers OBJECT-TYPE
|
||
SYNTAX Counter
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Control Path system buffer memory in MB"
|
||
::= {controlPathMemUsageEntry 3 }
|
||
|
||
sysMemUtilisation OBJECT-TYPE
|
||
SYNTAX Counter
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"Total Control Path system memory utilisation in percentage"
|
||
::= {controlPathMemUsageEntry 4 }
|
||
|
||
|
||
|
||
|
||
END
|