All MIBs › DECserver-Accounting-MIB › acctEntryEvent
acctEntryEvent
Module: DECserver-Accounting-MIB
OID (symbolic): DECserver-Accounting-MIB::acctEntryEvent
OID (numeric): 1.3.6.1.4.1.1.36.2.18.12.2.1.4
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: This object identifies the record type associated with its entry. The value logIn(2) identifies the entry as a log-in record. The value logOut(3) identifies the entry as a log-out record. The value sessionConnect(4) means the entry is a connect attempt record. The value sessionDisconnect(5) means the record is a disconnect record. For all password fail events (6-10), the value identifies the entry as a record flagging a failure to correctly provide the associated password. The value communityFail(11) identifies the record as flagging a failure to provide a valid community in an SNMP request. For all password modify events (12-16), the value identifies the entry as a record flagging a modification to an associated password. The value communityModified(17) indicates that the SNMP community data base at the managed system has been modified. The value other(1) indicates that some other event has occured.
What is acctEntryEvent?
This read-only integer classifies what kind of accounting event this log entry represents, covering logins, logouts, session connects/disconnects, various password-failure types, password modifications, and community-string changes. It's the field an admin reads first when scanning the accounting log to triage security-relevant activity, such as spotting a cluster of privilegedPasswordFail(7) entries that could indicate a brute-force attempt. For example, an entry with acctEntryEvent set to communityFail(11) flags that someone submitted an SNMP request with an invalid community string, worth investigating as a possible unauthorized access attempt.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1.36.2.18.12.2.1.4 snmpwalk -v2c -c public <target> DECserver-Accounting-MIB::acctEntryEvent
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1.36.2.18.12.2.1.4.1 snmpget -v2c -c public <target> DECserver-Accounting-MIB::acctEntryEvent.1
Start monitoring Digital Equipment Corporation (DEC) DECserver terminal server with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the DECserver-Accounting-MIB::acctEntryEvent OID value, configure state conditions and alerts, and monitor any Digital Equipment Corporation (DEC) DECserver terminal server from a single console.
OID Breakdown
Upper-level ancestors (7 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1 | proteon | BRS-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1.36 | dec | DECserver-Accounting-MIB |
| 1.3.6.1.4.1.1.36.2 | ema | DECserver-Accounting-MIB |
| 1.3.6.1.4.1.1.36.2.18 | mib_extensions_1 | DECserver-Accounting-MIB |
| 1.3.6.1.4.1.1.36.2.18.12 | decServeraccounting | DECserver-Accounting-MIB |
| 1.3.6.1.4.1.1.36.2.18.12.2 | acctTable | DECserver-Accounting-MIB |
| 1.3.6.1.4.1.1.36.2.18.12.2.1 | acctEntry | DECserver-Accounting-MIB |
| 1.3.6.1.4.1.1.36.2.18.12.2.1.4 | acctEntryEvent | DECserver-Accounting-MIB |