This object identifies which management interface, CLI, the web (httpd), or SNMP, was the source of a configuration change reported in a trap. Administrators use it to determine how a given change was made, useful for auditing whether changes came from an authorized console session or an SNMP set that might not have gone through change control. For example, seeing 'snmp' as the source for an unexpected configuration change would direct an investigation toward whatever management system holds SNMP write access to the device.