All MIBs › IPSEC-SPD-MIB › spdPacketNotification
spdPacketNotification
Module: IPSEC-SPD-MIB
OID (symbolic): IPSEC-SPD-MIB::spdPacketNotification
OID (numeric): 1.3.6.1.2.1.153.2.0.2
Node type: NOTIFICATION-TYPE
Description:
Notification that a packet passed through a Security Association (SA). Only SAs created by actions with packet logging enabled will result in this notification getting sent. The objects sent MUST include the spdActionExecuted, which will indicate which action was executed within the scope of the rule. Additionally, the spdIPSourceType, spdIPSourceAddress, spdIPDestinationType, and spdIPDestinationAddress objects MUST be included to indicate the packet source and destination of the packet that triggered the action. The spdIPEndpointAddType, spdIPEndpointAddress, and spdPacketDirection objects are included to indicate which endpoint the packet was associated with. Finally, spdPacketPart is included to enable sending a variable sized part of the front of the packet with the size dependent on the value of the object of TC syntax 'SpdIPPacketLogging', which indicated that logging should be done.
A spdPacketNotification SHOULD be limited to a maximum of one notification sent per minute for any action notifications that do not have any other configuration controlling their send rate.
An action notification SHOULD be limited to a maximum of one notification sent per minute for any action notifications that do not have any other configuration controlling their send rate.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' IPSEC-SPD-MIB::spdPacketNotification snmptrap -v2c -c public <manager> '' 1.3.6.1.2.1.153.2.0.2
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:59024->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (201440400) 23 days, 7:33:24.00 SNMPv2-MIB::snmpTrapOID.0 = OID: IPSEC-SPD-MIB::spdPacketNotification
SNMPv3 example:
snmptrap -v3 -l authPriv -u snmpv3user -a SHA -A "AuthPass1" -x AES -X "PrivPass1" <manager> '' IPSEC-SPD-MIB::spdPacketNotification
OID Breakdown
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | BIANCA-BRICK-PPP-MIB |
| 1.3.6 | dod | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1 | internet | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1.2 | mgmt | BKTEL-HFC862-BASE-MIB |
| 1.3.6.1.2.1 | mib_2 | CHECKPOINT-MIB-2 |
| 1.3.6.1.2.1.153 | spdMIB | IPSEC-SPD-MIB |
| 1.3.6.1.2.1.153.2 | spdNotificationObjects | IPSEC-SPD-MIB |
| 1.3.6.1.2.1.153.2.0 | spdNotifications | IPSEC-SPD-MIB |
| 1.3.6.1.2.1.153.2.0.2 | spdPacketNotification | IPSEC-SPD-MIB |