ENTERASYS-THREAT-NOTIFICATION-MIB
AI MIB Summary
The ENTERASYS-THREAT-NOTIFICATION-MIB enables SNMP-based monitoring of security threat events and intrusion detection alerts on Enterasys Networks switches and routers. It provides structured access to specific threat notification metrics, including event types, source/destination details, and severity levels, to facilitate real-time security incident tracking and automated alerting.
This MIB module defines the portion of the SNMP enterprise MIBs under Enterasys Networks' enterprise OID pertaining to the Threat Notification feature.
Main OID:
etsysThreatNotificationMIB.1.3.6.1.4.1.5624.1.2.45
46
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
46 total| Object Name |
|---|
etsysThreatNotificationMIBThis MIB module defines the portion of the SNMP enterprise MIBs under Enterasys Networks' enterprise OID pertaining to the Threat Notification feature. MODULE-IDENTITY .1.3.6.1.4.1.5624.1.2.45 |
etsysThreatNotificationObjects OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.45.1 |
etsysThreatNotificationNotificationBranch OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.45.1.0 |
etsysThreatNotificationInformationMessage1An etsysThreatNotificationInformationMessage1 indicates that a potential threat has been identified. This trap should be generated when the IP address of the source of the threat is known, but not the device and interface. (etsysThreatNotificationSenderName and etsysThreatNotificationTargetAddress are optional objects) NOTIFICATION-TYPE .1.3.6.1.4.1.5624.1.2.45.1.0.1 |
etsysThreatNotificationInformationMessage2An etsysThreatNotificationInformationMessage2 indicates that a potential threat has been identified. This trap should be generated when the device and interface of the threat is known, but the IP address of the source may or may not be known. (etsysThreatNotificationSenderName, etsysThreatNotificationInitiatorAddress and etsysThreatNotificationTargetAddress are optional objects) NOTIFICATION-TYPE .1.3.6.1.4.1.5624.1.2.45.1.0.2 |
etsysThreatNotificationInformationMessage3The purpose of etsysThreatNotificationInformationMessage3 is to support devices that can only send single varbind notifications. See etsysThreatNotificationConsolidatedData for more details. NOTIFICATION-TYPE .1.3.6.1.4.1.5624.1.2.45.1.0.3 |
etsysThreatNotificationInformationMessage4An etsysThreatNotificationInformationMessage4 indicates that a potential threat has been identified. This trap should be generated when the device and interface of the threat is known, but the IP address of the source may or may not be known. (etsysThreatNotificationSenderName, etsysThreatNotificationInitiatorAddress and etsysThreatNotificationTargetAddress are optional objects) NOTIFICATION-TYPE .1.3.6.1.4.1.5624.1.2.45.1.0.4 |
etsysThreatUndoNotificationMessageAn etsysThreatUndoNotificationMessage indicates that a potential threat that had been identified has been resolved. When this message is received, if a user was quarantined, the action should be undone. NOTIFICATION-TYPE .1.3.6.1.4.1.5624.1.2.45.1.0.5 |
etsysThreatResponseNotificationMessageAn etsysThreatResponseNotificationMessage indicates that a potential threat that had been identified has been acted upon. When this message is received, a user was either quarantined, or the action was undone. NOTIFICATION-TYPE .1.3.6.1.4.1.5624.1.2.45.1.0.6 |
etsysThreatNotificationSystemBranch OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.45.1.1 |
etsysThreatNotificationSenderIDA name that identifies a sender or group of senders. ie. 'Dragon IDS', ACME IDS', 'VIRUS SCAN', 'DRAGON1', 'DRAGON2'ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.1 |
etsysThreatNotificationSenderNameThe name of the sensor that discovered the threat.ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.2 |
etsysThreatNotificationThreatCategoryA name that identifies a group of threat types.ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.3 |
etsysThreatNotificationThreatNameThe name of the signature that detected the threat.ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.4 |
etsysThreatNotificationDeviceAddressTypeThe address type of the device where the initiator of the threat was detected.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.5624.1.2.45.1.1.5 |
etsysThreatNotificationDeviceAddressThe address of the device where the initiator of the threat was detected.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.5624.1.2.45.1.1.6 |
etsysThreatNotificationDeviceIfIndexThe interface where the initiator was detected.ro InterfaceIndex (IF-MIB) .1.3.6.1.4.1.5624.1.2.45.1.1.7 |
etsysThreatNotificationInitiatorAddressTypeThe address type of the endstation that initiated the threat.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.5624.1.2.45.1.1.8 |
etsysThreatNotificationInitiatorAddressThe address of the endstation that initiated the threat.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.5624.1.2.45.1.1.9 |
etsysThreatNotificationTargetAddressTypeThe address type of the endstation that is threatened.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.5624.1.2.45.1.1.10 |
etsysThreatNotificationTargetAddressThe address of the endstation that is threatened.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.5624.1.2.45.1.1.11 |
etsysThreatNotificationConsolidatedDataThe purpose of this object is to support devices that can only send single varbind notification messages and should only be used in conjunction with etsysThreatNotificationInformationMessage3. The data should be encoded in the following format: object1='data' object2='data' object3='data' ... Here is an example: etsysThreatNotificationSenderID='dragon' etsysThreatNotificationSenderName='dragon' etsysThreatNotificationThreatCategory='ATTACKS' etsysThreatNotificationThreatName='HOST:APACHE:ETC-PASSWD' etsysThreatNotificationInitiatorAddress='1.1.1.1' etsysThreatNotificationTargetAddress='2.2.2.2'ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.12 |
etsysThreatNotificationInitiatorMacAddressThe MAC address of the endstation that is threatened.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.45.1.1.13 |
etsysThreatNotificationIncidentIDThe incident ID of an event. Used by etsysThreatUndoNotificationMessage to undo an action.ro Integer32 .1.3.6.1.4.1.5624.1.2.45.1.1.14 |
etsysThreatNotificationStatusThe status of an event. Used by etsysThreatResponseNotificationMessage.ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.15 |
etsysThreatNotificationDetailsThe details of an event. Used by etsysThreatResponseNotificationMessage.ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.16 |
etsysThreatNotificationActionThe action taken in response to an incident. Used by etsysThreatResponseNotificationMessage.ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.17 |
etsysThreatNotificationRuleNameThe name of the rule that was applied to this incident. Used by etsysThreatResponseNotificationMessage.ro DisplayString .1.3.6.1.4.1.5624.1.2.45.1.1.18 |
etsysThreatNotificationDateTimeThe date and time the incident was received. Used by etsysThreatResponseNotificationMessage.ro DateAndTime (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.45.1.1.19 |
etsysThreatNotificationLastUpdatedThe date and time the event was last updated. Used by etsysThreatResponseNotificationMessage.ro DateAndTime (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.45.1.1.20 |
etsysThreatNotificationConformance OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.45.2 |
etsysThreatNotificationGroups OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.45.2.1 |
etsysThreatNotificationMessage1SystemGroupA collection of objects required for etsysThreatNotificationMessage1 providing information about possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.1 |
etsysThreatNotificationMessage2SystemGroupA collection of objects required for etsysThreatNotificationMessage2 providing information about possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.2 |
etsysThreatNotificationMessage3SystemGroupA collection of objects required for etsysThreatNotificationMessage3 providing information about possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.3 |
etsysThreatNotificationMessage1GroupA collection of notifications used to alert a management application of possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.4 |
etsysThreatNotificationMessage2GroupA collection of notifications used to alert a management application of possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.5 |
etsysThreatNotificationMessage3GroupA collection of notifications used to alert a management application of possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.6 |
etsysThreatNotificationMessage4SystemGroupA collection of objects required for etsysThreatNotificationMessage4 providing information about possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.7 |
etsysThreatNotificationMessage4GroupA collection of notifications used to alert a management application of possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.8 |
etsysThreatUndoNotificationMessageSystemGroupA collection of objects required for etsysThreatUndoNotificationMessage providing information about possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.9 |
etsysThreatUndoNotificationMessageGroupA collection of notifications used to alert a management application of possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.10 |
etsysThreatResponseNotificationMessageSystemGroupA collection of objects required for etsysThreatResponseNotificationMessage providing information about possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.11 |
etsysThreatResponseNotificationMessageGroupA collection of notifications used to alert a management application of possible threats on a network. Unknown .1.3.6.1.4.1.5624.1.2.45.2.1.12 |
etsysThreatNotificationCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.45.2.2 |
etsysThreatNotificationComplianceThe compliance statement for devices that support threat notifications. Unknown .1.3.6.1.4.1.5624.1.2.45.2.2.1 |