-- file automatically created TELDAT-TRAP-TIPS-MIB DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY,OBJECT-TYPE,OBJECT-IDENTITY,NOTIFICATION-TYPE,Integer32,IpAddress FROM SNMPv2-SMI DisplayString FROM SNMPv2-TC telEventTraps FROM TELDAT-MIB; tipsTrapsMIB MODULE-IDENTITY LAST-UPDATED "201401200930Z" ORGANIZATION "Teldat, S.A." CONTACT-INFO "Teldat, S.A. Customer Service Postal: Parque Tecnologico de Madrid Tres Cantos 28760 Madrid, SPAIN Tel.: +34 918 076 565 http://www.teldat.com" DESCRIPTION "This Module Information Base file is defined for managing received SNMP notifications generated by the TIPS event subsystem." REVISION "201401200930Z" DESCRIPTION "Initial implementation" ::= { telEventTraps 221 } tipsEventsGroup OBJECT IDENTIFIER ::= { tipsTrapsMIB 1 } tipsNotifications OBJECT IDENTIFIER ::= { tipsTrapsMIB 2 } tipsNotificationsPrefix OBJECT IDENTIFIER ::= { tipsNotifications 0 } tipsEventObjects1 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.1 packet processed" ::= { tipsEventsGroup 1 } tips1SourceIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'sourceIp' in event TIPS.1" ::= { tipsEventObjects1 1 } tips1DestinationIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'destinationIp' in event TIPS.1" ::= { tipsEventObjects1 2 } tipsEventObjects2 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.2 tips alert has been generated" ::= { tipsEventsGroup 2 } tips2Msg OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'msg' in event TIPS.2" ::= { tipsEventObjects2 1 } tipsEventObjects3 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.3 tips state changed" ::= { tipsEventsGroup 3 } tips3State OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'state' in event TIPS.3" ::= { tipsEventObjects3 1 } tipsEventObjects4 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.4 packet processed" ::= { tipsEventsGroup 4 } tips4SourceIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'sourceIp' in event TIPS.4" ::= { tipsEventObjects4 1 } tips4DestinationIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'destinationIp' in event TIPS.4" ::= { tipsEventObjects4 2 } tipsEventObjects5 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.5 TIPS IP Spoofing engine has too many pending address resolutions for the specified address on the specified interface." ::= { tipsEventsGroup 5 } tips5IpSrc OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipSrc' in event TIPS.5" ::= { tipsEventObjects5 1 } tips5Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.5" ::= { tipsEventObjects5 2 } tipsEventObjects6 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.6 TIPS IP Spoofing engine has too many pending packets from the specified source IP addres on reception of a new packet with specified mac and ip addresses on the specified interface." ::= { tipsEventsGroup 6 } tips6MacSrc OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macSrc' in event TIPS.6" ::= { tipsEventObjects6 1 } tips6MacDst OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macDst' in event TIPS.6" ::= { tipsEventObjects6 2 } tips6IpSrc OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipSrc' in event TIPS.6" ::= { tipsEventObjects6 3 } tips6IpDst OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipDst' in event TIPS.6" ::= { tipsEventObjects6 4 } tips6Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.6" ::= { tipsEventObjects6 5 } tipsEventObjects7 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.7 TIPS IP Spoofing engine received the specified packet on the specified interface and enqueued it while resolving source address." ::= { tipsEventsGroup 7 } tips7MacSrc OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macSrc' in event TIPS.7" ::= { tipsEventObjects7 1 } tips7MacDst OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macDst' in event TIPS.7" ::= { tipsEventObjects7 2 } tips7IpSrc OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipSrc' in event TIPS.7" ::= { tipsEventObjects7 3 } tips7IpDst OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipDst' in event TIPS.7" ::= { tipsEventObjects7 4 } tips7Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.7" ::= { tipsEventObjects7 5 } tipsEventObjects8 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.8 TIPS IP Spoofing engine sends an arp request for the specified address on the specified interface." ::= { tipsEventsGroup 8 } tips8IpAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipAddress' in event TIPS.8" ::= { tipsEventObjects8 1 } tips8Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.8" ::= { tipsEventObjects8 2 } tipsEventObjects9 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.9 TIPS IP Spoofing engine sent arp requests for the specified ip address on the specified interface. These requests timed out." ::= { tipsEventsGroup 9 } tips9IpAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipAddress' in event TIPS.9" ::= { tipsEventObjects9 1 } tips9Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.9" ::= { tipsEventObjects9 2 } tipsEventObjects10 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.10 TIPS IP Spoofing engine dropped the specified packet as a result of the specified reason. Possible reasons follow. 'timeout' when address resolution times out. 'mismatch' when address resolution provides a different mac address. 'DoS' when new untrusted source address packets are received short after address resolution completed successfully." ::= { tipsEventsGroup 10 } tips10Reason OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'reason' in event TIPS.10" ::= { tipsEventObjects10 1 } tips10MacSrc OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macSrc' in event TIPS.10" ::= { tipsEventObjects10 2 } tips10MacDst OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macDst' in event TIPS.10" ::= { tipsEventObjects10 3 } tips10IpSrc OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipSrc' in event TIPS.10" ::= { tipsEventObjects10 4 } tips10IpDst OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipDst' in event TIPS.10" ::= { tipsEventObjects10 5 } tips10Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.10" ::= { tipsEventObjects10 6 } tipsEventObjects11 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.11 TIPS IP Spoofing engine received an arp response with the specified mac address for the specified ip address on the specified interface." ::= { tipsEventsGroup 11 } tips11MacAddress OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macAddress' in event TIPS.11" ::= { tipsEventObjects11 1 } tips11IpAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipAddress' in event TIPS.11" ::= { tipsEventObjects11 2 } tips11Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.11" ::= { tipsEventObjects11 3 } tipsEventObjects12 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.12 TIPS IP Spoofing engine forwarded the specified packet." ::= { tipsEventsGroup 12 } tips12MacSrc OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macSrc' in event TIPS.12" ::= { tipsEventObjects12 1 } tips12MacDst OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macDst' in event TIPS.12" ::= { tipsEventObjects12 2 } tips12IpSrc OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipSrc' in event TIPS.12" ::= { tipsEventObjects12 3 } tips12IpDst OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipDst' in event TIPS.12" ::= { tipsEventObjects12 4 } tips12Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.12" ::= { tipsEventObjects12 5 } tipsEventObjects13 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.13 TIPS IP Spoofing engine ignored a malformed packet with the specified mac addresses on the specified interface." ::= { tipsEventsGroup 13 } tips13MacSrc OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macSrc' in event TIPS.13" ::= { tipsEventObjects13 1 } tips13MacDst OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macDst' in event TIPS.13" ::= { tipsEventObjects13 2 } tips13Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.13" ::= { tipsEventObjects13 3 } tipsEventObjects14 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.14 TIPS IP Spoofing engine would drop the specified packet as a result of the specified reason. Possible reasons follow. 'timeout' when address resolution times out. 'mismatch' when address resolution provides a different mac address. 'DoS' when new untrusted source address packets are received short after address resolution completed successfully." ::= { tipsEventsGroup 14 } tips14Reason OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'reason' in event TIPS.14" ::= { tipsEventObjects14 1 } tips14MacSrc OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macSrc' in event TIPS.14" ::= { tipsEventObjects14 2 } tips14MacDst OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macDst' in event TIPS.14" ::= { tipsEventObjects14 3 } tips14IpSrc OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipSrc' in event TIPS.14" ::= { tipsEventObjects14 4 } tips14IpDst OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipDst' in event TIPS.14" ::= { tipsEventObjects14 5 } tips14Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.14" ::= { tipsEventObjects14 6 } tipsEventObjects15 OBJECT-IDENTITY STATUS current DESCRIPTION "Event TIPS.15 TIPS IP Spoofing engine would forward the specified packet." ::= { tipsEventsGroup 15 } tips15MacSrc OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macSrc' in event TIPS.15" ::= { tipsEventObjects15 1 } tips15MacDst OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'macDst' in event TIPS.15" ::= { tipsEventObjects15 2 } tips15IpSrc OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipSrc' in event TIPS.15" ::= { tipsEventObjects15 3 } tips15IpDst OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'ipDst' in event TIPS.15" ::= { tipsEventObjects15 4 } tips15Interface OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Parameter 'interface' in event TIPS.15" ::= { tipsEventObjects15 5 } tipsNotification1 NOTIFICATION-TYPE OBJECTS { tips1SourceIp, tips1DestinationIp } STATUS current DESCRIPTION "Notification of Event TIPS.1 Message: 'IP packet beeing processed $1->$2' Parameters list: $1: tips1SourceIp $2: tips1DestinationIp packet processed" ::= { tipsNotificationsPrefix 1 } tipsNotification2 NOTIFICATION-TYPE OBJECTS { tips2Msg } STATUS current DESCRIPTION "Notification of Event TIPS.2 Message: 'TIPS alert: $1' Parameters list: $1: tips2Msg tips alert has been generated" ::= { tipsNotificationsPrefix 2 } tipsNotification3 NOTIFICATION-TYPE OBJECTS { tips3State } STATUS current DESCRIPTION "Notification of Event TIPS.3 Message: 'TIPS state changed $1' Parameters list: $1: tips3State tips state changed" ::= { tipsNotificationsPrefix 3 } tipsNotification4 NOTIFICATION-TYPE OBJECTS { tips4SourceIp, tips4DestinationIp } STATUS current DESCRIPTION "Notification of Event TIPS.4 Message: 'IP packet discarded $1->$2' Parameters list: $1: tips4SourceIp $2: tips4DestinationIp packet processed" ::= { tipsNotificationsPrefix 4 } tipsNotification5 NOTIFICATION-TYPE OBJECTS { tips5IpSrc, tips5Interface } STATUS current DESCRIPTION "Notification of Event TIPS.5 Message: 'Ip spoofing pending ip queue full for $1 on interface $2' Parameters list: $1: tips5IpSrc $2: tips5Interface TIPS IP Spoofing engine has too many pending address resolutions for the specified address on the specified interface." ::= { tipsNotificationsPrefix 5 } tipsNotification6 NOTIFICATION-TYPE OBJECTS { tips6MacSrc, tips6MacDst, tips6IpSrc, tips6IpDst, tips6Interface } STATUS current DESCRIPTION "Notification of Event TIPS.6 Message: 'Ip spoofing pending ip packet queue full for mac $1->$2 ip $3->$4 on interface $5' Parameters list: $1: tips6MacSrc $2: tips6MacDst $3: tips6IpSrc $4: tips6IpDst $5: tips6Interface TIPS IP Spoofing engine has too many pending packets from the specified source IP addres on reception of a new packet with specified mac and ip addresses on the specified interface." ::= { tipsNotificationsPrefix 6 } tipsNotification7 NOTIFICATION-TYPE OBJECTS { tips7MacSrc, tips7MacDst, tips7IpSrc, tips7IpDst, tips7Interface } STATUS current DESCRIPTION "Notification of Event TIPS.7 Message: 'Ip spoofing enqueued for resolution a packet $1->$2 ip $3->$4 on interface $5' Parameters list: $1: tips7MacSrc $2: tips7MacDst $3: tips7IpSrc $4: tips7IpDst $5: tips7Interface TIPS IP Spoofing engine received the specified packet on the specified interface and enqueued it while resolving source address." ::= { tipsNotificationsPrefix 7 } tipsNotification8 NOTIFICATION-TYPE OBJECTS { tips8IpAddress, tips8Interface } STATUS current DESCRIPTION "Notification of Event TIPS.8 Message: 'Ip spoofing sends an arp request for $1 on interface $2' Parameters list: $1: tips8IpAddress $2: tips8Interface TIPS IP Spoofing engine sends an arp request for the specified address on the specified interface." ::= { tipsNotificationsPrefix 8 } tipsNotification9 NOTIFICATION-TYPE OBJECTS { tips9IpAddress, tips9Interface } STATUS current DESCRIPTION "Notification of Event TIPS.9 Message: 'Ip spoofing arp request timed out for ip address $1 on interface $2' Parameters list: $1: tips9IpAddress $2: tips9Interface TIPS IP Spoofing engine sent arp requests for the specified ip address on the specified interface. These requests timed out." ::= { tipsNotificationsPrefix 9 } tipsNotification10 NOTIFICATION-TYPE OBJECTS { tips10Reason, tips10MacSrc, tips10MacDst, tips10IpSrc, tips10IpDst, tips10Interface } STATUS current DESCRIPTION "Notification of Event TIPS.10 Message: 'Ip spoofing dropped by reason $1 packet $2->$3 ip $4->$5 on interface $6' Parameters list: $1: tips10Reason $2: tips10MacSrc $3: tips10MacDst $4: tips10IpSrc $5: tips10IpDst $6: tips10Interface TIPS IP Spoofing engine dropped the specified packet as a result of the specified reason. Possible reasons follow. 'timeout' when address resolution times out. 'mismatch' when address resolution provides a different mac address. 'DoS' when new untrusted source address packets are received short after address resolution completed successfully." ::= { tipsNotificationsPrefix 10 } tipsNotification11 NOTIFICATION-TYPE OBJECTS { tips11MacAddress, tips11IpAddress, tips11Interface } STATUS current DESCRIPTION "Notification of Event TIPS.11 Message: 'Ip spoofing received an arp response of $1 for $2 on interface $3' Parameters list: $1: tips11MacAddress $2: tips11IpAddress $3: tips11Interface TIPS IP Spoofing engine received an arp response with the specified mac address for the specified ip address on the specified interface." ::= { tipsNotificationsPrefix 11 } tipsNotification12 NOTIFICATION-TYPE OBJECTS { tips12MacSrc, tips12MacDst, tips12IpSrc, tips12IpDst, tips12Interface } STATUS current DESCRIPTION "Notification of Event TIPS.12 Message: 'Ip spoofing forward packet $1->$2 ip $3->$4 on interface $5' Parameters list: $1: tips12MacSrc $2: tips12MacDst $3: tips12IpSrc $4: tips12IpDst $5: tips12Interface TIPS IP Spoofing engine forwarded the specified packet." ::= { tipsNotificationsPrefix 12 } tipsNotification13 NOTIFICATION-TYPE OBJECTS { tips13MacSrc, tips13MacDst, tips13Interface } STATUS current DESCRIPTION "Notification of Event TIPS.13 Message: 'Ip spoofing ignored a malformed packet $1->$2 on interface $3' Parameters list: $1: tips13MacSrc $2: tips13MacDst $3: tips13Interface TIPS IP Spoofing engine ignored a malformed packet with the specified mac addresses on the specified interface." ::= { tipsNotificationsPrefix 13 } tipsNotification14 NOTIFICATION-TYPE OBJECTS { tips14Reason, tips14MacSrc, tips14MacDst, tips14IpSrc, tips14IpDst, tips14Interface } STATUS current DESCRIPTION "Notification of Event TIPS.14 Message: 'Ip spoofing would be dropped by reason $1 packet $2->$3 ip $4->$5 on interface $6' Parameters list: $1: tips14Reason $2: tips14MacSrc $3: tips14MacDst $4: tips14IpSrc $5: tips14IpDst $6: tips14Interface TIPS IP Spoofing engine would drop the specified packet as a result of the specified reason. Possible reasons follow. 'timeout' when address resolution times out. 'mismatch' when address resolution provides a different mac address. 'DoS' when new untrusted source address packets are received short after address resolution completed successfully." ::= { tipsNotificationsPrefix 14 } tipsNotification15 NOTIFICATION-TYPE OBJECTS { tips15MacSrc, tips15MacDst, tips15IpSrc, tips15IpDst, tips15Interface } STATUS current DESCRIPTION "Notification of Event TIPS.15 Message: 'Ip spoofing would forward packet $1->$2 ip $3->$4 on interface $5' Parameters list: $1: tips15MacSrc $2: tips15MacDst $3: tips15IpSrc $4: tips15IpDst $5: tips15Interface TIPS IP Spoofing engine would forward the specified packet." ::= { tipsNotificationsPrefix 15 } END