IDS-MIB

File: IDS-MIB.mib (13263 bytes)

Imported modules

RFC1155-SMI RFC-1212 RFC1213-MIB
RFC-1215 RADWARE-MIB

Imported symbols

NetworkAddress IpAddress Counter
Gauge enterprises OBJECT-TYPE
DisplayString PhysAddress ipAddrEntry
TRAP-TYPE rsIDS

Defined Types

TruthValue  
INTEGER true(1), false(2)    

RowStatus  
INTEGER active(1), notInService(2), notReady(3), createAndGo(4), createAndWait(5), destroy(6)    

NetNumber  
STRING Size(4)    

RsIDSTrackingEntry  
SEQUENCE    
  rsIDSFilterGroupName DisplayString
  rsIDSTrackingTime INTEGER
  rsIDSThreshold INTEGER
  rsIDSFilterGroupType INTEGER
  rsIDSTrackingType INTEGER
  rsIDSStatus RowStatus

RsIDSStatsEntry  
SEQUENCE    
  rsIDSAttackIndex INTEGER
  rsIDSAttackName DisplayString
  rsIDSAttackSrcAddr IpAddress
  rsIDSAttackDstAddr IpAddress
  rsIDSAttackStatus DisplayString
  rsIDSAttacktime DisplayString
  rsIDSStatsStatus RowStatus

Defined Values

rsIDSTrackingTable 1.3.6.1.4.1.89.35.1.65.1
Table containing the parameters that are needed to detect intrusions
OBJECT-TYPE    
  SEQUENCE OF  
    RsIDSTrackingEntry

rsIDStrackingEntry 1.3.6.1.4.1.89.35.1.65.1.1
The row definition for this table.
OBJECT-TYPE    
  RsIDSTrackingEntry  

rsIDSFilterGroupName 1.3.6.1.4.1.89.35.1.65.1.1.1
The Name for the filter/group must be unique. that name should be the same as the name of the appropriate filter/group
OBJECT-TYPE    
  DisplayString Size(0..20)  

rsIDSTrackingTime 1.3.6.1.4.1.89.35.1.65.1.1.2
This variable indicates the time interval, in miliseconds, to track a detection
OBJECT-TYPE    
  INTEGER  

rsIDSThreshold 1.3.6.1.4.1.89.35.1.65.1.1.3
This variable indicates the threshold
OBJECT-TYPE    
  INTEGER  

rsIDSFilterGroupType 1.3.6.1.4.1.89.35.1.65.1.1.4
This variable indicates the object type- whether it is a filter or group
OBJECT-TYPE    
  INTEGER filter(1), group(2)  

rsIDSTrackingType 1.3.6.1.4.1.89.35.1.65.1.1.5
This variable indicates how to count
OBJECT-TYPE    
  INTEGER drop(0), reset(1), ncps(2), ncpd(3), ncpsd(4), ncpf(5), winnuke(6), landattack(7), synattackack(8), tcpsyn(9), tcpack(10), tcpsynack(11), tcprst(12), tcpfin(13), tcpelse(14)  

rsIDSStatus 1.3.6.1.4.1.89.35.1.65.1.1.6
This variable indicates the administrative status of this entry. Used to delete an entry of this table.
OBJECT-TYPE    
  RowStatus  

rsIDSDummy1 1.3.6.1.4.1.89.35.1.65.1.2
Dummy variable for stopping getnext.
OBJECT-TYPE    
  INTEGER  

rsIDSMechanismStatus 1.3.6.1.4.1.89.35.1.65.2
the IDS trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSTCPAgingTimeFreq 1.3.6.1.4.1.89.35.1.65.3
the TCP table aging time frequency
OBJECT-TYPE    
  INTEGER  

rsIDSNCPsAgingTimeFreq 1.3.6.1.4.1.89.35.1.65.4
the NCP's tables aging time frequency
OBJECT-TYPE    
  INTEGER  

rsIDSStatsAgingTimeFreq 1.3.6.1.4.1.89.35.1.65.5
the statistics table aging time frequency
OBJECT-TYPE    
  INTEGER  

rsIDSNCPSTableSize 1.3.6.1.4.1.89.35.1.65.6
the NCPS table size
OBJECT-TYPE    
  INTEGER  

rsIDSNCPDTableSize 1.3.6.1.4.1.89.35.1.65.7
the NCPD table size
OBJECT-TYPE    
  INTEGER  

rsIDSNCPSDTableSize 1.3.6.1.4.1.89.35.1.65.8
the NCPSD table size
OBJECT-TYPE    
  INTEGER  

rsIDSTCPTableSize 1.3.6.1.4.1.89.35.1.65.9
the TCP table size
OBJECT-TYPE    
  INTEGER  

rsIDSSTATSTableSize 1.3.6.1.4.1.89.35.1.65.10
the statistics table size
OBJECT-TYPE    
  INTEGER  

rsIDSBasic 1.3.6.1.4.1.89.35.1.65.11
the basic protection rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSAllServers 1.3.6.1.4.1.89.35.1.65.12
the All servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSUNIXServers 1.3.6.1.4.1.89.35.1.65.13
the unix servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSLotusServers 1.3.6.1.4.1.89.35.1.65.14
the Lotus servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSMSIISServers 1.3.6.1.4.1.89.35.1.65.15
the MS_IIS servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSMSFrontPageServers 1.3.6.1.4.1.89.35.1.65.16
the MS front page servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSApacheServers 1.3.6.1.4.1.89.35.1.65.17
the Apache servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSNetscapeWebServers 1.3.6.1.4.1.89.35.1.65.18
the Netscape_Web servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSNovellServers 1.3.6.1.4.1.89.35.1.65.19
the Novell servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSOracleServers 1.3.6.1.4.1.89.35.1.65.20
the Oracle servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSOmniHTTPDServers 1.3.6.1.4.1.89.35.1.65.21
the OmniHTTPD servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSWebSiteServers 1.3.6.1.4.1.89.35.1.65.22
the WebSite_WebSitePro servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSColdfusionServers 1.3.6.1.4.1.89.35.1.65.23
the Allaire_Coldfusion servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSIRIXServers 1.3.6.1.4.1.89.35.1.65.24
the IRIX servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSNCSAServers 1.3.6.1.4.1.89.35.1.65.25
the NCSA servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSCompaqServers 1.3.6.1.4.1.89.35.1.65.26
the Compaq_Web_Servers servers rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSbackdoors 1.3.6.1.4.1.89.35.1.65.27
the backdoors rule trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSTraps 1.3.6.1.4.1.89.35.1.65.28
the traps sending mechanism trigger
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

rsIDSStatsTable 1.3.6.1.4.1.89.35.1.65.29
Table containing the intrusion detection statistics
OBJECT-TYPE    
  SEQUENCE OF  
    RsIDSStatsEntry

rsIDSStatsEntry 1.3.6.1.4.1.89.35.1.65.29.1
The row definition for this table.
OBJECT-TYPE    
  RsIDSStatsEntry  

rsIDSAttackIndex 1.3.6.1.4.1.89.35.1.65.29.1.1
The index of the attack that was detected
OBJECT-TYPE    
  INTEGER  

rsIDSAttackName 1.3.6.1.4.1.89.35.1.65.29.1.2
The Name for the attack
OBJECT-TYPE    
  DisplayString Size(0..80)  

rsIDSAttackSrcAddr 1.3.6.1.4.1.89.35.1.65.29.1.3
The src address of the attack
OBJECT-TYPE    
  IpAddress  

rsIDSAttackDstAddr 1.3.6.1.4.1.89.35.1.65.29.1.4
The dest address of the attack
OBJECT-TYPE    
  IpAddress  

rsIDSAttackStatus 1.3.6.1.4.1.89.35.1.65.29.1.5
The status of the attack(started/terminated/occured)
OBJECT-TYPE    
  DisplayString Size(0..12)  

rsIDSAttacktime 1.3.6.1.4.1.89.35.1.65.29.1.6
The time of the attack
OBJECT-TYPE    
  DisplayString Size(0..32)  

rsIDSStatsStatus 1.3.6.1.4.1.89.35.1.65.29.1.7
This variable indicates the administrative status of this entry. Used to delete an entry of this table.
OBJECT-TYPE    
  RowStatus  

rsIDSDummy2 1.3.6.1.4.1.89.35.1.65.29.2
Dummy variable for stopping getnext.
OBJECT-TYPE    
  INTEGER  

rsIDSNCPDTableSizeAfterReset 1.3.6.1.4.1.89.35.1.65.30
the NCPD after-reset table size
OBJECT-TYPE    
  INTEGER  

rsIDSNCPSDTableSizeAfterReset 1.3.6.1.4.1.89.35.1.65.31
the NCPS after-reset table size
OBJECT-TYPE    
  INTEGER  

rsIDSTCPTableSizeAfterReset 1.3.6.1.4.1.89.35.1.65.32
the NCPS after-reset table size
OBJECT-TYPE    
  INTEGER  

rsIDSSTATSTableSizeAfterReset 1.3.6.1.4.1.89.35.1.65.33
the NCPS after-reset table size
OBJECT-TYPE    
  INTEGER