All MIBs › ATTACK-MIB › deviceAttackTrap
deviceAttackTrap
Module: ATTACK-MIB
OID (symbolic): ATTACK-MIB::deviceAttackTrap
OID (numeric): 1.3.6.1.4.1.3417.2.3.2.0.1
Node type: NOTIFICATION-TYPE
Description: At the start of an attack a notification is generated with 'deviceAttackStatus = under-attack(2)'. At the end of an attack a notification is generated with 'deviceAttackStatus = no-attack(1)'.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' ATTACK-MIB::deviceAttackTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.3417.2.3.2.0.1
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:64196->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (82891460) 9 days, 14:15:14.60 SNMPv2-MIB::snmpTrapOID.0 = OID: ATTACK-MIB::deviceAttackTrap
SNMPv3 example:
snmptrap -v3 -l authPriv -u snmpv3user -a SHA -A "AuthPass1" -x AES -X "PrivPass1" <manager> '' ATTACK-MIB::deviceAttackTrap
Start monitoring Blue Coat Systems security appliances (attack detection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ATTACK-MIB::deviceAttackTrap OID value, configure state conditions and alerts, and monitor any Blue Coat Systems security appliances (attack detection) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3417 | blueCoat | BLUECOAT-MIB |
| 1.3.6.1.4.1.3417.2 | blueCoatMgmt | BLUECOAT-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3417.2.3 | deviceAttackMIB | ATTACK-MIB |
| 1.3.6.1.4.1.3417.2.3.2 | deviceAttackMIBNotifications | ATTACK-MIB |
| 1.3.6.1.4.1.3417.2.3.2.0 | deviceAttackMIBNotificationsPrefix | ATTACK-MIB |
| 1.3.6.1.4.1.3417.2.3.2.0.1 | deviceAttackTrap | ATTACK-MIB |