ALCATEL-IND1-APP-FINGERPRINT-MIB

All MIBs › ALCATEL-IND1-APP-FINGERPRINT-MIB

Organization: Alcatel-Lucent

Last Updated: 2013--0-1-

Category: Vendor: Alcatel-Lucent

Description: Alcatel OmniSwitch deep packet inspection MIB for application fingerprinting and traffic classification policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ALCATEL-IND1-APP-FINGERPRINT-MIB?

This MIB is an Alcatel-Lucent OmniSwitch enterprise module for the Application Fingerprint deep packet inspection feature on the OS10K product line, used to classify traffic by application signature. It exposes global administrative state, signature file management, per-port operation mode and status, and named application/policy group mappings. From a monitoring standpoint it primarily reveals software feature status - whether app-fingerprinting is administratively enabled, which signature file is loaded, and per-port operational/row status - letting operators confirm the DPI engine is active and correctly classifying traffic on each port. It is a proprietary Alcatel MIB built on standard SNMP table conventions (RowStatus) rather than any external classification standard. It is deployed in OmniSwitch OS10K core/data-center switches where application-aware QoS or security policy enforcement is required. Engineers can download the ALCATEL-IND1-APP-FINGERPRINT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ALCATEL-IND1-APP-FINGERPRINT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Alcatel-Lucent OmniSwitch OS10K series switches

Monitoring Examples

An operator would poll alaAppFPGlobalAdminState and alaAppFPGlobalSignatureFile to confirm the fingerprinting engine is enabled and running the expected signature database, then walk alaAppFPPortTable/alaAppFPPortEntry to check alaAppFPPortOperationMode and alaAppFPPortStatus per port. A port showing alaAppFPPortStatus as disabled or alaAppFPPortRowStatus as not active would indicate DPI classification has silently stopped on that port, letting traffic bypass fingerprint-based policy. Cross-referencing alaAppFPAppNameTable would confirm which named application groups are currently recognized.

What Can Be Monitored

app-fingerprinting global admin state
signature file loaded
per-port operation mode
per-port fingerprinting status
recognized application name/policy groups

Imported Objects

From ALCATEL-IND1-BASE

softentIND1AppFingerPrintMIB

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex

From INET-ADDRESS-MIB

InetAddress
InetAddressType
InetPortNumber

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus

How to Use in IPNetwork Monitor

Example using alaAppFPTotalMatchedLast1Hour OID:

Select an Alcatel-Lucent Enterprise OmniSwitch OS10K-series switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type alaAppFPTotalMatchedLast1Hour into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of application-fingerprint matches recorded in the last hour. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
alcatelIND1AppFPMIB	1.3.6.1.4.1.6486.801.1.2.1.73.1			This module describes an authoritative enterprise-specific Simple Network Management Protocol (SNMP) Management Information Base (MIB): Fingerprint Application for OS10K Product Line. The right to make changes in specification and other information contained in this document without prior notice is reserved. No liability shall be assumed for any incidental, indirect, special, or consequential damages whatsoever arising from or related to this document or the information contained herein. Vendors, end-users, and other interested parties are granted non-exclusive license to use this specification in connection with management of the products for which it is intended to be used. Copyright (C) 2013 Alcatel-Lucent ALL RIGHTS RESERVED WORLDWIDE
alcatelIND1AppFPMIBObjects	1.3.6.1.4.1.6486.801.1.2.1.73.1.1			Alcatel-Lucent Application Fingerprint/ Application signature Subsystem Managed Objects. MIB to characterrize application using thier defined finger print and /or signature.
alaAppFPMIBNotifications	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.0
NTF appFPSignatureMatchTrap	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.0.1			A Software Trouble report is sent by whatever application encountering a problem during its execution and would want to make the user aware of problem for maintenance purpose.
alaAppFPGlobalMIBConfigObjects	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.1
INT alaAppFPGlobalAdminState	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.1.1	INTEGER	read-write	Alcatel-Lucent App Fingerprint Config mode.
STR alaAppFPGlobalSignatureFile	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.1.2	SnmpAdminString	read-write	Alcatel-Lucent App Fingerprint Signature Filename.
INT alaAppFPGlobalReloadSignatureFile	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.1.3	INTEGER	read-write	Alcatel-Lucent App Fingerprint Signature filename to reload.
INT alaAppFPGlobalTrapConfig	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.1.4	INTEGER	read-write	Alcatel-Lucent App Fingerprint Trap Config mode.
alaAppFPMIBObjects	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2
alaAppFPPortTable	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.1		not-accessible	This table contains one row for each port.
alaAppFPPortEntry	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.1.1		not-accessible	Information about the App Fingerprint Port Mode. Port modes are as defined below
NUM alaAppFPPort	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.1.1.1	InterfaceIndex	not-accessible	The ifIndex component of this instance.
STR alaAppFPGroupNameOrPolicyList	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.1.1.2	SnmpAdminString	not-accessible	App Group name or QoS Policy List name associated with the alaAppFPPort. If the alaAppFPPortOperationMode is unp(3), this should be set to 'UNP'. The 0 length string is allowed only in SNMP SET destroy operation. It is used when all the assigned groups for that port are wished to deleted. This feature is provided for user firendly support. SNMP Get with 0 length string will be rejected
INT alaAppFPPortOperationMode	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.1.1.3	INTEGER	read-create	It indicates the operation mode of the app-fingerprint feature running on the port. If the operation mode is set to unp(3), the alaAppFPGroupNameOrPolicyList value should be 'UNP'.
INT alaAppFPPortStatus	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.1.1.4	INTEGER	read-only	It indicates that the Group Name or Policy List Name associated with the port is valid or invalid. If it is invalid, then the specified Group Name or Policy List Name is inactive at the moment.
ROW alaAppFPPortRowStatus	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.1.1.5	RowStatus	read-create
alaAppFPAppNameTable	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.2		not-accessible	This table contains one row for each App signature.
alaAppFPAppNameEntry	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.2.1		not-accessible	Information about the App Name and its Signature.
STR alaAppFPAppName	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.2.1.1	SnmpAdminString	not-accessible
STR alaAppFPAppDescription	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.2.1.2	SnmpAdminString	read-only
STR alaAppFPAppSignature	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.2.1.3	SnmpAdminString	read-only
alaAppFPDatabaseTable	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3		not-accessible	This table contains one row for each multi-tuple classifier.
alaAppFPDatabaseEntry	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1		not-accessible	Information about the App Info database as gathered from monitoring each configured port.
NUM alaAppFPDbPort	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.1	InterfaceIndex	not-accessible
STR alaAppFPDbAppGroupName	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.2	SnmpAdminString	not-accessible
STR alaAppFPDbAppName	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.3	SnmpAdminString	not-accessible
MAC alaAppFPDbSrcMacAddr	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.4	MacAddress	not-accessible
U32 alaAppFPDbVlanId	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.5	Unsigned32	not-accessible
IPt alaAppFPDbSrcIpAddrType	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.6	InetAddressType	not-accessible
IP alaAppFPDbSrcIpAddr	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.7	InetAddress	not-accessible
INE alaAppFPDbSrcPort	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.8	InetPortNumber	not-accessible
IPt alaAppFPDbDstIpAddrType	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.9	InetAddressType	read-only
IP alaAppFPDbDstIpAddr	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.10	InetAddress	read-only
INE alaAppFPDbDstPort	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.11	InetPortNumber	read-only
MAC alaAppFPDbDstMacAddr	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.3.1.12	MacAddress	read-only
alaAppFPAppGrpNameTable	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.4		not-accessible	This table contains one row for group name and description.
appFPAppGrpNameEntry	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.4.1		not-accessible	Information about the App Name.
STR alaAppFPAppGroupName	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.4.1.1	SnmpAdminString	not-accessible
STR alaAppFPGrpAppName	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.4.1.2	SnmpAdminString	read-only
alaAppFPStatsTable	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.5		not-accessible	This table contains total captured packets for all multi-tuple classifiers.
alaAppFPStatsEntry	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.5.1		not-accessible	Information about the App Info database for all packets captured.
NUM alaAppFPStatsPort	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.5.1.1	InterfaceIndex	not-accessible
STR alaAppFPStatsGroupName	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.5.1.2	SnmpAdminString	not-accessible
STR alaAppFPStatsAppName	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.5.1.3	SnmpAdminString	not-accessible
C32 alaAppFPTotalMatchedLast1HourEx	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.5.1.4	Counter32	read-only
C32 alaAppFPTotalMatchedLast1Day	1.3.6.1.4.1.6486.801.1.2.1.73.1.1.2.5.1.5	Counter32	read-only
alcatelIND1AppFPMIBConformance	1.3.6.1.4.1.6486.801.1.2.1.73.1.2			Alcatel-Lucent Fingerprint Subsystem Conformance Information.
alcatelIND1AppFPMIBGroups	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.1			Branch For ALU Fingerprint MIB Subsystem Units Of Conformance.
alaAppFPModuleConfigGroup	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.1.1			App Fingerprint Control Modules Group.
alaAppFPModulePortModeGroup	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.1.2			App Fingerprint Control Modules Group.
alaAppFPModulePortDBGroup	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.1.3			App Fingerprint Control Modules Group.
alaAppFPModulePortStatsGroup	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.1.4			App Fingerprint Control Modules Group.
alaAppFPNotificationsGroup	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.1.5			Collection of Notifications for management of App Fingerprint.
alcatelIND1AppFPMIBCompliances	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.2			Branch For ALU Fingerprint MIB Subsystem Compliance Statements.
alaAppFPMIBCompliance	1.3.6.1.4.1.6486.801.1.2.1.73.1.2.2.1			Compliance statement for App Fingerprint.

RFC description

Alcatel-Lucent application fingerprinting MIB for OS10K product line network application identification.

Start monitoring Alcatel-Lucent Enterprise OmniSwitch OS10K-series switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ALCATEL-IND1-APP-FINGERPRINT-MIB