Carried in the alarm-cutoff notification trap, this enumerated value records which interface, CLI, SNMP, or one of the two redundant control modules, issued the command to silence the chassis's audible or visual alarm indicators, letting an admin reviewing an alarm history determine who or what actually acknowledged a given alarm rather than just that it was acknowledged. If an alarm-cutoff trap shows origin snmp at a time no known NMS integration was scheduled to issue that command, that is worth investigating as either an unexpected automated action or unauthorized access to the SNMP write community.