NETSCREEN-IDS-MIB
File:
NETSCREEN-IDS-MIB.mib (23857 bytes)
Imported modules
Imported symbols
Defined Types
NsIdsAttkMonEntry |
|
SEQUENCE |
|
|
|
|
nsIdsAttkMonIfIdx |
Integer32 |
|
|
nsIdsAttkMonVsys |
Integer32 |
|
|
nsIdsAttkMonSynAttk |
Counter32 |
|
|
nsIdsAttkMonTearDrop |
Counter32 |
|
|
nsIdsAttkMonSrcRoute |
Counter32 |
|
|
nsIdsAttkMonPingDeath |
Counter32 |
|
|
nsIdsAttkMonAddrSpoof |
Counter32 |
|
|
nsIdsAttkMonLand |
Counter32 |
|
|
nsIdsAttkMonIcmpFlood |
Counter32 |
|
|
nsIdsAttkMonUdpFlood |
Counter32 |
|
|
nsIdsAttkMonWinnuke |
Counter32 |
|
|
nsIdsAttkMonPortScan |
Counter32 |
|
|
nsIdsAttkMonIpSweep |
Counter32 |
|
|
nsAttkMonSynFrag |
Counter32 |
|
|
nsAttkMonTcpNoFlag |
Counter32 |
|
|
nsAttkMonIpUnknownProt |
Counter32 |
|
|
nsAttkMonIpOptBad |
Counter32 |
|
|
nsAttkMonIpOptRecord |
Counter32 |
|
|
nsAttkMonIpOptTimestamp |
Counter32 |
|
|
nsAttkMonIpOptSCHT |
Counter32 |
|
|
nsAttkMonIpOptLSR |
Counter32 |
|
|
nsAttkMonIpOptSSR |
Counter32 |
|
|
nsAttkMonIpOptStream |
Counter32 |
|
|
nsAttkMonIcmpFrag |
Counter32 |
|
|
nsAttkMonIcmpLarge |
Counter32 |
|
|
nsAttkMonTcpSynFin |
Counter32 |
|
|
nsAttkMonTcpFinNoAck |
Counter32 |
|
|
nsAttkMonHttpMalUrl |
Counter32 |
|
|
nsAttkMonSessMalNum |
Counter32 |
|
|
nsAttkMonSynAckAck |
Counter32 |
|
|
nsAttkMonIpFrag |
Counter32 |
|
|
nsIdsAttkMonIfInfo |
Integer32 |
|
NsIdsProtectSetEntry |
|
SEQUENCE |
|
|
|
|
nsIdsProtectZoneIdx |
Integer32 |
|
|
nsIdsDetectPingOfDeath |
INTEGER |
|
|
nsIdsDetectTearDrop |
INTEGER |
|
|
nsIdsDetectWinNuke |
INTEGER |
|
|
nsIdsFilterIpSrcRoute |
INTEGER |
|
|
nsIdsDetectPortScan |
INTEGER |
|
|
nsIdsDetectAddrSweep |
INTEGER |
|
|
nsIdsDetectLand |
INTEGER |
|
|
nsIdsBlockComponent |
INTEGER |
|
|
nsIdsDetectIpSpoof |
INTEGER |
|
|
nsIdsDetectSyn |
INTEGER |
|
|
nsIdsDetectIcmpFlood |
INTEGER |
|
|
nsIdsDetectUdpFlood |
INTEGER |
|
|
nsIdsDetectSynFrag |
INTEGER |
|
|
nsIdsDetectTcpNoFlag |
INTEGER |
|
|
nsIdsDetectIpUnknownProt |
INTEGER |
|
|
nsIdsDetectIpOptBad |
INTEGER |
|
|
nsIdsDetectIpOptRecord |
INTEGER |
|
|
nsIdsDetectIpOptTimestamp |
INTEGER |
|
|
nsIdsDetectIpOptSCHT |
INTEGER |
|
|
nsIdsDetectIpOptLSR |
INTEGER |
|
|
nsIdsDetectIpOptSSR |
INTEGER |
|
|
nsIdsDetectIpOptStream |
INTEGER |
|
|
nsIdsDetectIcmpFrag |
INTEGER |
|
|
nsIdsDetectIcmpLarge |
INTEGER |
|
|
nsIdsDetectTcpSynFin |
INTEGER |
|
|
nsIdsDetectTcpFinNoAck |
INTEGER |
|
|
nsIdsHttpMalUrl |
INTEGER |
|
|
nsIdsSessMalNum |
INTEGER |
|
|
nsIdsDetectSynAckAck |
INTEGER |
|
|
nsIdsDetectIpFrag |
INTEGER |
|
NsIdsProtectThreshEntry |
|
SEQUENCE |
|
|
|
|
nsIdsProtectThreshZoneIdx |
Integer32 |
|
|
nsIdsSynAttackThresh |
Integer32 |
|
|
nsIdsSynAttackTimeout |
Integer32 |
|
|
nsIdsSynAttackAlmTh |
Integer32 |
|
|
nsIdsSynAttackQueSize |
Integer32 |
|
|
nsIdsSynAttackAgeTime |
Integer32 |
|
|
nsIdsIcmpFloodThresh |
Integer32 |
|
|
nsIdsUdpFloodThresh |
Integer32 |
|
|
nsIdsPortScanThresh |
Integer32 |
|
|
nsIdsIpSweepThresh |
Integer32 |
|
|
nsIdsSynAckAckThres |
Integer32 |
|
Defined Values
nsIdsProtect |
1.3.6.1.4.1.3224.3.1 |
This module defines NetScreen private MIBs DI Setting. |
MODULE-IDENTITY |
|
|
|
nsIdsProtectSetTable |
1.3.6.1.4.1.3224.3.1.1 |
NetScreen ScreenOS can allow DI protection on each of
NetScreen device's physical interface. This table collects the
DI protection configuration on each physical interface. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
NsIdsProtectSetEntry |
|
nsIdsProtectSetEntry |
1.3.6.1.4.1.3224.3.1.1.1 |
Hold the DI setting attribute. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NsIdsProtectSetEntry |
|
|
nsIdsDetectPingOfDeath |
1.3.6.1.4.1.3224.3.1.1.1.2 |
Detect Ping of Death. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectTearDrop |
1.3.6.1.4.1.3224.3.1.1.1.3 |
Detect Tear Drop Attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectWinNuke |
1.3.6.1.4.1.3224.3.1.1.1.4 |
Detect Win Nuke Attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsFilterIpSrcRoute |
1.3.6.1.4.1.3224.3.1.1.1.5 |
Detect Filter IP Source Route Option attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectPortScan |
1.3.6.1.4.1.3224.3.1.1.1.6 |
Detect Port Scan Death attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectAddrSweep |
1.3.6.1.4.1.3224.3.1.1.1.7 |
Detect Address Sweep Attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectLand |
1.3.6.1.4.1.3224.3.1.1.1.8 |
Detect Land Attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsBlockComponent |
1.3.6.1.4.1.3224.3.1.1.1.9 |
Block Java/ActiveX/ZIP/EXE Component. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpSpoof |
1.3.6.1.4.1.3224.3.1.1.1.10 |
Detect IP Spoofing attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectSyn |
1.3.6.1.4.1.3224.3.1.1.1.11 |
Detect SYN attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIcmpFlood |
1.3.6.1.4.1.3224.3.1.1.1.12 |
Detect ICMP Flood attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectUdpFlood |
1.3.6.1.4.1.3224.3.1.1.1.13 |
Detect UDP Flood attack. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectSynFrag |
1.3.6.1.4.1.3224.3.1.1.1.14 |
Detect SYN fragment |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectTcpNoFlag |
1.3.6.1.4.1.3224.3.1.1.1.15 |
Detect TCP without flag set. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpUnknownProt |
1.3.6.1.4.1.3224.3.1.1.1.16 |
Detect Unknown protocol IP packet. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpOptBad |
1.3.6.1.4.1.3224.3.1.1.1.17 |
Detect IP bad option. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpOptRecord |
1.3.6.1.4.1.3224.3.1.1.1.18 |
Detect IP record option. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpOptTimestamp |
1.3.6.1.4.1.3224.3.1.1.1.19 |
Detect IP timestamp option. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpOptSCHT |
1.3.6.1.4.1.3224.3.1.1.1.20 |
Detect IP security option. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpOptLSR |
1.3.6.1.4.1.3224.3.1.1.1.21 |
Detect Loose source route. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpOptSSR |
1.3.6.1.4.1.3224.3.1.1.1.22 |
Detect strict source route. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpOptStream |
1.3.6.1.4.1.3224.3.1.1.1.23 |
Detect IP stream option. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIcmpFrag |
1.3.6.1.4.1.3224.3.1.1.1.24 |
Detect ICMP fragment. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIcmpLarge |
1.3.6.1.4.1.3224.3.1.1.1.25 |
Detect large ICMP packet. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectTcpSynFin |
1.3.6.1.4.1.3224.3.1.1.1.26 |
Detect TCP syn fin both set. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectTcpFinNoAck |
1.3.6.1.4.1.3224.3.1.1.1.27 |
Detect TCP fin set without ack bit set. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsHttpMalUrl |
1.3.6.1.4.1.3224.3.1.1.1.28 |
Detect malicious URL. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsSessMalNum |
1.3.6.1.4.1.3224.3.1.1.1.29 |
Detect malicious session connection. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectSynAckAck |
1.3.6.1.4.1.3224.3.1.1.1.30 |
Detect SYN ACK ACK DoS. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsDetectIpFrag |
1.3.6.1.4.1.3224.3.1.1.1.31 |
Block IP fragment packet. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
disable(0), enabled(1) |
|
nsIdsProtectThreshTable |
1.3.6.1.4.1.3224.3.1.2 |
NetScreen ScreenOS can allow DI protection on each of
NetScreen device's physical interface. This table collects the
DI protection configuration on each physical interface. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
NsIdsProtectThreshEntry |
|
nsIdsProtectThreshEntry |
1.3.6.1.4.1.3224.3.1.2.1 |
Hold the DI setting attribute. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NsIdsProtectThreshEntry |
|
|
nsIdsAttkMonTable |
1.3.6.1.4.1.3224.3.2 |
The table monitors the intrusion attack attemps amount to
NetScreen Device. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
NsIdsAttkMonEntry |
|
nsIdsAttkMonEntry |
1.3.6.1.4.1.3224.3.2.1 |
An entry containing intrusion attack couters. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NsIdsAttkMonEntry |
|
|
nsIdsAttkMonIfIdx |
1.3.6.1.4.1.3224.3.2.1.1 |
unique interface id. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|
nsIdsAttkMonVsys |
1.3.6.1.4.1.3224.3.2.1.2 |
according NetScreen's concepts. each interface belongs to one
virtual system. This attribute displays the virtual system name
an interface belongs to. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
|
|
nsIdsAttkMonLand |
1.3.6.1.4.1.3224.3.2.1.8 |
land attack packet counter. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
nsIdsAttkMonIpSweep |
1.3.6.1.4.1.3224.3.2.1.13 |
address sweep attemp attack packet counter. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
nsAttkMonIpFrag |
1.3.6.1.4.1.3224.3.2.1.31 |
Block IP fragment packet. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
nsIdsAttkMonIfInfo |
1.3.6.1.4.1.3224.3.2.1.32 |
Internal id assigned to this interface. Stays persistent across resets. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|