sigId
Module: NETRANGER
OID (symbolic): NETRANGER::sigId
OID (numeric): 1.3.6.1.4.1.2252.1.1.1.4.9
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: Describes which signature was detected. The full list of signatures can be found on a NetRanger system at /usr/nr/etc/signatures.
This object cannot be retrieved from the SNMP agent.
What is sigId?
Numeric ID of the attack signature that fired, cross-referenced against the signature list at /usr/nr/etc/signatures on the NetRanger sensor. Look up this value locally on the sensor to get the human-readable name of what was detected.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2252.1.1.1.4.9 snmpwalk -v2c -c public <target> NETRANGER::sigId
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2252.1.1.1.4.9.1 snmpget -v2c -c public <target> NETRANGER::sigId.1
Start monitoring Cisco NetRanger IDS sensor (Cisco Secure IDS appliance) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the NETRANGER::sigId OID value, configure state conditions and alerts, and monitor any Cisco NetRanger IDS sensor (Cisco Secure IDS appliance) from a single console.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2252 | wheelgroup | NETRANGER |
| 1.3.6.1.4.1.2252.1 | securityMgmt | NETRANGER |
| 1.3.6.1.4.1.2252.1.1 | netranger | NETRANGER |
| 1.3.6.1.4.1.2252.1.1.1 | nrTrapVars | NETRANGER |
| 1.3.6.1.4.1.2252.1.1.1.4 | alarm | NETRANGER |
| 1.3.6.1.4.1.2252.1.1.1.4.9 | sigId | NETRANGER |