logstash-input-snmp 0.1.0.beta4 → 0.1.0.beta5

Sign up to get free protection for your applications and to get access to all the features.
Files changed (309) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +5 -0
  3. data/lib/logstash/inputs/snmp.rb +75 -12
  4. data/lib/logstash/inputs/snmp/base_client.rb +162 -0
  5. data/lib/logstash/inputs/snmp/client.rb +11 -109
  6. data/lib/logstash/inputs/snmp/clientv3.rb +139 -0
  7. data/lib/logstash/inputs/snmp/mib.rb +22 -20
  8. data/lib/mibs/ietf/ACCOUNTING-CONTROL-MIB.dic +1316 -0
  9. data/lib/mibs/ietf/ADSL-LINE-EXT-MIB.dic +1724 -0
  10. data/lib/mibs/ietf/ADSL-LINE-MIB.dic +7297 -0
  11. data/lib/mibs/ietf/ADSL-TC-MIB.dic +160 -0
  12. data/lib/mibs/ietf/ADSL2-LINE-MIB.dic +8663 -0
  13. data/lib/mibs/ietf/ADSL2-LINE-TC-MIB.dic +1462 -0
  14. data/lib/mibs/ietf/AGENTX-MIB.dic +817 -0
  15. data/lib/mibs/ietf/AGGREGATE-MIB.dic +708 -0
  16. data/lib/mibs/ietf/ALARM-MIB.dic +1734 -0
  17. data/lib/mibs/ietf/APM-MIB.dic +2870 -0
  18. data/lib/mibs/ietf/APPC-MIB.dic +8687 -0
  19. data/lib/mibs/ietf/APPLETALK-MIB.dic +4399 -0
  20. data/lib/mibs/ietf/APPLICATION-MIB.dic +3750 -0
  21. data/lib/mibs/ietf/APPN-DLUR-MIB.dic +972 -0
  22. data/lib/mibs/ietf/APPN-MIB.dic +9364 -0
  23. data/lib/mibs/ietf/APPN-TRAP-MIB.dic +664 -0
  24. data/lib/mibs/ietf/APS-MIB.dic +2430 -0
  25. data/lib/mibs/ietf/ARC-MIB.dic +552 -0
  26. data/lib/mibs/ietf/ATM-ACCOUNTING-INFORMATION-MIB.dic +816 -0
  27. data/lib/mibs/ietf/ATM-MIB.dic +4104 -0
  28. data/lib/mibs/ietf/ATM-TC-MIB.dic +914 -0
  29. data/lib/mibs/ietf/ATM2-MIB.dic +4715 -0
  30. data/lib/mibs/ietf/BFD-STD-MIB.dic +2367 -0
  31. data/lib/mibs/ietf/BFD-TC-STD-MIB.dic +202 -0
  32. data/lib/mibs/ietf/BGP4-MIB.dic +1931 -0
  33. data/lib/mibs/ietf/BLDG-HVAC-MIB.dic +812 -0
  34. data/lib/mibs/ietf/BRIDGE-MIB.dic +2257 -0
  35. data/lib/mibs/ietf/CAPWAP-BASE-MIB.dic +4128 -0
  36. data/lib/mibs/ietf/CAPWAP-DOT11-MIB.dic +482 -0
  37. data/lib/mibs/ietf/CHARACTER-MIB.dic +1140 -0
  38. data/lib/mibs/ietf/CIRCUIT-IF-MIB.dic +493 -0
  39. data/lib/mibs/ietf/CLNS-MIB.dic +1702 -0
  40. data/lib/mibs/ietf/COFFEE-POT-MIB.dic +282 -0
  41. data/lib/mibs/ietf/COPS-CLIENT-MIB.dic +1270 -0
  42. data/lib/mibs/ietf/DECNET-PHIV-MIB.dic +5837 -0
  43. data/lib/mibs/ietf/DIAL-CONTROL-MIB.dic +2139 -0
  44. data/lib/mibs/ietf/DIFFSERV-CONFIG-MIB.dic +378 -0
  45. data/lib/mibs/ietf/DIFFSERV-MIB.dic +5073 -0
  46. data/lib/mibs/ietf/DIRECTORY-SERVER-MIB.dic +1041 -0
  47. data/lib/mibs/ietf/DISMAN-EVENT-MIB.dic +3151 -0
  48. data/lib/mibs/ietf/DISMAN-EXPRESSION-MIB.dic +1716 -0
  49. data/lib/mibs/ietf/DISMAN-NSLOOKUP-MIB.dic +698 -0
  50. data/lib/mibs/ietf/DISMAN-PING-MIB.dic +2635 -0
  51. data/lib/mibs/ietf/DISMAN-SCHEDULE-MIB.dic +1744 -0
  52. data/lib/mibs/ietf/DISMAN-SCRIPT-MIB.dic +2820 -0
  53. data/lib/mibs/ietf/DISMAN-TRACEROUTE-MIB.dic +3239 -0
  54. data/lib/mibs/ietf/DLSW-MIB.dic +5635 -0
  55. data/lib/mibs/ietf/DNS-RESOLVER-MIB.dic +1765 -0
  56. data/lib/mibs/ietf/DNS-SERVER-MIB.dic +1593 -0
  57. data/lib/mibs/ietf/DOCS-BPI-MIB.dic +2634 -0
  58. data/lib/mibs/ietf/DOCS-CABLE-DEVICE-MIB.dic +5042 -0
  59. data/lib/mibs/ietf/DOCS-IETF-BPI2-MIB.dic +5478 -0
  60. data/lib/mibs/ietf/DOCS-IETF-CABLE-DEVICE-NOTIFICATION-MIB.dic +2447 -0
  61. data/lib/mibs/ietf/DOCS-IETF-QOS-MIB.dic +4886 -0
  62. data/lib/mibs/ietf/DOCS-IETF-SUBMGT-MIB.dic +1331 -0
  63. data/lib/mibs/ietf/DOCS-IF-MIB.dic +7980 -0
  64. data/lib/mibs/ietf/DOT12-IF-MIB.dic +1066 -0
  65. data/lib/mibs/ietf/DOT12-RPTR-MIB.dic +2669 -0
  66. data/lib/mibs/ietf/DOT3-EPON-MIB.dic +3297 -0
  67. data/lib/mibs/ietf/DOT3-OAM-MIB.dic +2830 -0
  68. data/lib/mibs/ietf/DS0-MIB.dic +466 -0
  69. data/lib/mibs/ietf/DS0BUNDLE-MIB.dic +468 -0
  70. data/lib/mibs/ietf/DS1-MIB.dic +4890 -0
  71. data/lib/mibs/ietf/DS3-MIB.dic +2719 -0
  72. data/lib/mibs/ietf/DSA-MIB.dic +888 -0
  73. data/lib/mibs/ietf/DSMON-MIB.dic +6177 -0
  74. data/lib/mibs/ietf/DVB-RCS-MIB.dic +5764 -0
  75. data/lib/mibs/ietf/EBN-MIB.dic +1026 -0
  76. data/lib/mibs/ietf/EFM-CU-MIB.dic +4335 -0
  77. data/lib/mibs/ietf/ENTITY-MIB.dic +2235 -0
  78. data/lib/mibs/ietf/ENTITY-SENSOR-MIB.dic +653 -0
  79. data/lib/mibs/ietf/ENTITY-STATE-MIB.dic +457 -0
  80. data/lib/mibs/ietf/ENTITY-STATE-TC-MIB.dic +260 -0
  81. data/lib/mibs/ietf/ETHER-CHIPSET-MIB.dic +787 -0
  82. data/lib/mibs/ietf/EtherLike-MIB.dic +2548 -0
  83. data/lib/mibs/ietf/FC-MGMT-MIB.dic +3465 -0
  84. data/lib/mibs/ietf/FCIP-MGMT-MIB.dic +1596 -0
  85. data/lib/mibs/ietf/FDDI-SMT73-MIB.dic +3378 -0
  86. data/lib/mibs/ietf/FIBRE-CHANNEL-FE-MIB.dic +2504 -0
  87. data/lib/mibs/ietf/FLOAT-TC-MIB.dic +128 -0
  88. data/lib/mibs/ietf/FLOW-METER-MIB.dic +3201 -0
  89. data/lib/mibs/ietf/FORCES-MIB.dic +598 -0
  90. data/lib/mibs/ietf/FR-ATM-PVC-SERVICE-IWF-MIB.dic +1601 -0
  91. data/lib/mibs/ietf/FR-MFR-MIB.dic +1351 -0
  92. data/lib/mibs/ietf/FRAME-RELAY-DTE-MIB.dic +1688 -0
  93. data/lib/mibs/ietf/FRNETSERV-MIB.dic +3940 -0
  94. data/lib/mibs/ietf/FRSLD-MIB.dic +2580 -0
  95. data/lib/mibs/ietf/Finisher-MIB.dic +1416 -0
  96. data/lib/mibs/ietf/GMPLS-LABEL-STD-MIB.dic +965 -0
  97. data/lib/mibs/ietf/GMPLS-LSR-STD-MIB.dic +693 -0
  98. data/lib/mibs/ietf/GMPLS-TC-STD-MIB.dic +180 -0
  99. data/lib/mibs/ietf/GMPLS-TE-STD-MIB.dic +2542 -0
  100. data/lib/mibs/ietf/GSMP-MIB.dic +2468 -0
  101. data/lib/mibs/ietf/HC-ALARM-MIB.dic +1050 -0
  102. data/lib/mibs/ietf/HC-PerfHist-TC-MIB.dic +310 -0
  103. data/lib/mibs/ietf/HC-RMON-MIB.dic +4456 -0
  104. data/lib/mibs/ietf/HDSL2-SHDSL-LINE-MIB.dic +3955 -0
  105. data/lib/mibs/ietf/HOST-RESOURCES-MIB.dic +2453 -0
  106. data/lib/mibs/ietf/HPR-IP-MIB.dic +640 -0
  107. data/lib/mibs/ietf/HPR-MIB.dic +1959 -0
  108. data/lib/mibs/ietf/IANA-ITU-ALARM-TC-MIB.dic +936 -0
  109. data/lib/mibs/ietf/IF-CAP-STACK-MIB.dic +356 -0
  110. data/lib/mibs/ietf/IF-INVERTED-STACK-MIB.dic +220 -0
  111. data/lib/mibs/ietf/IF-MIB.dic +2753 -0
  112. data/lib/mibs/ietf/IFCP-MGMT-MIB.dic +1717 -0
  113. data/lib/mibs/ietf/IGMP-STD-MIB.dic +809 -0
  114. data/lib/mibs/ietf/INET-ADDRESS-MIB.dic +570 -0
  115. data/lib/mibs/ietf/INTEGRATED-SERVICES-GUARANTEED-MIB.dic +319 -0
  116. data/lib/mibs/ietf/INTEGRATED-SERVICES-MIB.dic +1196 -0
  117. data/lib/mibs/ietf/INTERFACETOPN-MIB.dic +1705 -0
  118. data/lib/mibs/ietf/IP-FORWARD-MIB.dic +1853 -0
  119. data/lib/mibs/ietf/IP-MIB.dic +7064 -0
  120. data/lib/mibs/ietf/IPATM-IPMC-MIB.dic +4830 -0
  121. data/lib/mibs/ietf/IPFIX-MIB.dic +2334 -0
  122. data/lib/mibs/ietf/IPFIX-SELECTOR-MIB.dic +215 -0
  123. data/lib/mibs/ietf/IPMCAST-MIB.dic +3390 -0
  124. data/lib/mibs/ietf/IPMROUTE-STD-MIB.dic +1246 -0
  125. data/lib/mibs/ietf/IPOA-MIB.dic +2372 -0
  126. data/lib/mibs/ietf/IPS-AUTH-MIB.dic +1609 -0
  127. data/lib/mibs/ietf/IPSEC-SPD-MIB.dic +3989 -0
  128. data/lib/mibs/ietf/IPV6-FLOW-LABEL-MIB.dic +110 -0
  129. data/lib/mibs/ietf/IPV6-ICMP-MIB.dic +748 -0
  130. data/lib/mibs/ietf/IPV6-MIB.dic +2028 -0
  131. data/lib/mibs/ietf/IPV6-MLD-MIB.dic +659 -0
  132. data/lib/mibs/ietf/IPV6-TCP-MIB.dic +332 -0
  133. data/lib/mibs/ietf/IPV6-UDP-MIB.dic +209 -0
  134. data/lib/mibs/ietf/ISCSI-MIB.dic +4613 -0
  135. data/lib/mibs/ietf/ISDN-MIB.dic +1796 -0
  136. data/lib/mibs/ietf/ISIS-MIB.dic +6215 -0
  137. data/lib/mibs/ietf/ISNS-MIB.dic +6578 -0
  138. data/lib/mibs/ietf/ITU-ALARM-MIB.dic +665 -0
  139. data/lib/mibs/ietf/ITU-ALARM-TC-MIB.dic +137 -0
  140. data/lib/mibs/ietf/Job-Monitoring-MIB.dic +2519 -0
  141. data/lib/mibs/ietf/L2TP-MIB.dic +4050 -0
  142. data/lib/mibs/ietf/LANGTAG-TC-MIB.dic +104 -0
  143. data/lib/mibs/ietf/LISP-MIB.dic +4067 -0
  144. data/lib/mibs/ietf/LMP-MIB.dic +5166 -0
  145. data/lib/mibs/ietf/MALLOC-MIB.dic +2156 -0
  146. data/lib/mibs/ietf/MAU-MIB.dic +2619 -0
  147. data/lib/mibs/ietf/MIDCOM-MIB.dic +2856 -0
  148. data/lib/mibs/ietf/MIOX25-MIB.dic +828 -0
  149. data/lib/mibs/ietf/MIP-MIB.dic +3473 -0
  150. data/lib/mibs/ietf/MOBILEIPV6-MIB.dic +5228 -0
  151. data/lib/mibs/ietf/MPLS-FTN-STD-MIB.dic +1594 -0
  152. data/lib/mibs/ietf/MPLS-L3VPN-STD-MIB.dic +2548 -0
  153. data/lib/mibs/ietf/MPLS-LC-ATM-STD-MIB.dic +491 -0
  154. data/lib/mibs/ietf/MPLS-LC-FR-STD-MIB.dic +395 -0
  155. data/lib/mibs/ietf/MPLS-LDP-ATM-STD-MIB.dic +1019 -0
  156. data/lib/mibs/ietf/MPLS-LDP-FRAME-RELAY-STD-MIB.dic +862 -0
  157. data/lib/mibs/ietf/MPLS-LDP-GENERIC-STD-MIB.dic +445 -0
  158. data/lib/mibs/ietf/MPLS-LDP-STD-MIB.dic +3657 -0
  159. data/lib/mibs/ietf/MPLS-LSR-STD-MIB.dic +3103 -0
  160. data/lib/mibs/ietf/MPLS-TC-STD-MIB.dic +911 -0
  161. data/lib/mibs/ietf/MPLS-TE-STD-MIB.dic +3673 -0
  162. data/lib/mibs/ietf/MSDP-MIB.dic +1893 -0
  163. data/lib/mibs/ietf/MTA-MIB.dic +1898 -0
  164. data/lib/mibs/ietf/Modem-MIB.dic +2054 -0
  165. data/lib/mibs/ietf/NAT-MIB.dic +3866 -0
  166. data/lib/mibs/ietf/NETWORK-SERVICES-MIB.dic +1034 -0
  167. data/lib/mibs/ietf/NHDP-MIB.dic +3005 -0
  168. data/lib/mibs/ietf/NHRP-MIB.dic +3660 -0
  169. data/lib/mibs/ietf/NOTIFICATION-LOG-MIB.dic +1156 -0
  170. data/lib/mibs/ietf/NTPv4-MIB.dic +1535 -0
  171. data/lib/mibs/ietf/OPT-IF-MIB.dic +8972 -0
  172. data/lib/mibs/ietf/OSPF-MIB.dic +5963 -0
  173. data/lib/mibs/ietf/OSPF-TRAP-MIB.dic +1190 -0
  174. data/lib/mibs/ietf/OSPFV3-MIB.dic +5708 -0
  175. data/lib/mibs/ietf/P-BRIDGE-MIB.dic +1499 -0
  176. data/lib/mibs/ietf/PARALLEL-MIB.dic +476 -0
  177. data/lib/mibs/ietf/PIM-MIB.dic +1393 -0
  178. data/lib/mibs/ietf/PIM-STD-MIB.dic +6819 -0
  179. data/lib/mibs/ietf/PINT-MIB.dic +830 -0
  180. data/lib/mibs/ietf/PKTC-IETF-MTA-MIB.dic +3191 -0
  181. data/lib/mibs/ietf/PKTC-IETF-SIG-MIB.dic +4713 -0
  182. data/lib/mibs/ietf/PMIPV6-MIB.dic +3010 -0
  183. data/lib/mibs/ietf/PMIPV6-TC-MIB.dic +293 -0
  184. data/lib/mibs/ietf/POLICY-BASED-MANAGEMENT-MIB.dic +3316 -0
  185. data/lib/mibs/ietf/POWER-ETHERNET-MIB.dic +959 -0
  186. data/lib/mibs/ietf/PPP-BRIDGE-NCP-MIB.dic +587 -0
  187. data/lib/mibs/ietf/PPP-IP-NCP-MIB.dic +269 -0
  188. data/lib/mibs/ietf/PPP-LCP-MIB.dic +994 -0
  189. data/lib/mibs/ietf/PPP-SEC-MIB.dic +411 -0
  190. data/lib/mibs/ietf/PSAMP-MIB.dic +998 -0
  191. data/lib/mibs/ietf/PTOPO-MIB.dic +1135 -0
  192. data/lib/mibs/ietf/PW-ATM-MIB.dic +1642 -0
  193. data/lib/mibs/ietf/PW-CEP-STD-MIB.dic +3661 -0
  194. data/lib/mibs/ietf/PW-STD-MIB.dic +3592 -0
  195. data/lib/mibs/ietf/PW-TC-STD-MIB.dic +437 -0
  196. data/lib/mibs/ietf/PW-TDM-MIB.dic +1896 -0
  197. data/lib/mibs/ietf/PerfHist-TC-MIB.dic +152 -0
  198. data/lib/mibs/ietf/Printer-MIB.dic +6665 -0
  199. data/lib/mibs/ietf/Q-BRIDGE-MIB.dic +3115 -0
  200. data/lib/mibs/ietf/RADIUS-ACC-CLIENT-MIB.dic +991 -0
  201. data/lib/mibs/ietf/RADIUS-ACC-SERVER-MIB.dic +1183 -0
  202. data/lib/mibs/ietf/RADIUS-AUTH-CLIENT-MIB.dic +1073 -0
  203. data/lib/mibs/ietf/RADIUS-AUTH-SERVER-MIB.dic +1251 -0
  204. data/lib/mibs/ietf/RADIUS-DYNAUTH-CLIENT-MIB.dic +1116 -0
  205. data/lib/mibs/ietf/RADIUS-DYNAUTH-SERVER-MIB.dic +1003 -0
  206. data/lib/mibs/ietf/RAQMON-MIB.dic +2695 -0
  207. data/lib/mibs/ietf/RBRIDGE-MIB.dic +2981 -0
  208. data/lib/mibs/ietf/RDBMS-MIB.dic +1935 -0
  209. data/lib/mibs/ietf/RFC1065-SMI.dic +108 -0
  210. data/lib/mibs/ietf/RFC1155-SMI.dic +118 -0
  211. data/lib/mibs/ietf/RFC1158-MIB.dic +2440 -0
  212. data/lib/mibs/ietf/RFC1213-MIB.dic +3434 -0
  213. data/lib/mibs/ietf/RFC1269-MIB.dic +557 -0
  214. data/lib/mibs/ietf/RFC1271-MIB.dic +4135 -0
  215. data/lib/mibs/ietf/RFC1285-MIB.dic +2842 -0
  216. data/lib/mibs/ietf/RFC1316-MIB.dic +800 -0
  217. data/lib/mibs/ietf/RFC1381-MIB.dic +1347 -0
  218. data/lib/mibs/ietf/RFC1382-MIB.dic +3820 -0
  219. data/lib/mibs/ietf/RFC1414-MIB.dic +214 -0
  220. data/lib/mibs/ietf/RIPv2-MIB.dic +773 -0
  221. data/lib/mibs/ietf/RMON-MIB.dic +5551 -0
  222. data/lib/mibs/ietf/RMON2-MIB.dic +8224 -0
  223. data/lib/mibs/ietf/ROHC-MIB.dic +1613 -0
  224. data/lib/mibs/ietf/ROHC-RTP-MIB.dic +859 -0
  225. data/lib/mibs/ietf/ROHC-UNCOMPRESSED-MIB.dic +267 -0
  226. data/lib/mibs/ietf/RPKI-ROUTER-MIB.dic +1363 -0
  227. data/lib/mibs/ietf/RS-232-MIB.dic +1335 -0
  228. data/lib/mibs/ietf/RSERPOOL-MIB.dic +2501 -0
  229. data/lib/mibs/ietf/RSTP-MIB.dic +427 -0
  230. data/lib/mibs/ietf/RSVP-MIB.dic +4135 -0
  231. data/lib/mibs/ietf/RTP-MIB.dic +1376 -0
  232. data/lib/mibs/ietf/SCSI-MIB.dic +3804 -0
  233. data/lib/mibs/ietf/SCTP-MIB.dic +1924 -0
  234. data/lib/mibs/ietf/SFLOW-MIB.dic +568 -0
  235. data/lib/mibs/ietf/SIP-COMMON-MIB.dic +2769 -0
  236. data/lib/mibs/ietf/SIP-MIB.dic +1438 -0
  237. data/lib/mibs/ietf/SIP-SERVER-MIB.dic +1150 -0
  238. data/lib/mibs/ietf/SIP-TC-MIB.dic +257 -0
  239. data/lib/mibs/ietf/SIP-UA-MIB.dic +268 -0
  240. data/lib/mibs/ietf/SLAPM-MIB.dic +4527 -0
  241. data/lib/mibs/ietf/SMON-MIB.dic +1758 -0
  242. data/lib/mibs/ietf/SNA-NAU-MIB.dic +4042 -0
  243. data/lib/mibs/ietf/SNA-SDLC-MIB.dic +3858 -0
  244. data/lib/mibs/ietf/SNMP-COMMUNITY-MIB.dic +715 -0
  245. data/lib/mibs/ietf/SNMP-FRAMEWORK-MIB.dic +709 -0
  246. data/lib/mibs/ietf/SNMP-MPD-MIB.dic +230 -0
  247. data/lib/mibs/ietf/SNMP-NOTIFICATION-MIB.dic +859 -0
  248. data/lib/mibs/ietf/SNMP-PROXY-MIB.dic +414 -0
  249. data/lib/mibs/ietf/SNMP-REPEATER-MIB.dic +4335 -0
  250. data/lib/mibs/ietf/SNMP-SSH-TM-MIB.dic +447 -0
  251. data/lib/mibs/ietf/SNMP-TARGET-MIB.dic +924 -0
  252. data/lib/mibs/ietf/SNMP-TLS-TM-MIB.dic +1449 -0
  253. data/lib/mibs/ietf/SNMP-TSM-MIB.dic +315 -0
  254. data/lib/mibs/ietf/SNMP-USER-BASED-SM-MIB.dic +1164 -0
  255. data/lib/mibs/ietf/SNMP-USM-AES-MIB.dic +95 -0
  256. data/lib/mibs/ietf/SNMP-USM-DH-OBJECTS-MIB.dic +653 -0
  257. data/lib/mibs/ietf/SNMP-VIEW-BASED-ACM-MIB.dic +1202 -0
  258. data/lib/mibs/ietf/SNMPv2-MIB.dic +1382 -0
  259. data/lib/mibs/ietf/SNMPv2-SMI.dic +223 -0
  260. data/lib/mibs/ietf/SNMPv2-USEC-MIB.dic +405 -0
  261. data/lib/mibs/ietf/SONET-MIB.dic +3308 -0
  262. data/lib/mibs/ietf/SOURCE-ROUTING-MIB.dic +542 -0
  263. data/lib/mibs/ietf/SSPM-MIB.dic +1530 -0
  264. data/lib/mibs/ietf/SYSAPPL-MIB.dic +2092 -0
  265. data/lib/mibs/ietf/T11-FC-FABRIC-ADDR-MGR-MIB.dic +1779 -0
  266. data/lib/mibs/ietf/T11-FC-FABRIC-CONFIG-SERVER-MIB.dic +2822 -0
  267. data/lib/mibs/ietf/T11-FC-FABRIC-LOCK-MIB.dic +700 -0
  268. data/lib/mibs/ietf/T11-FC-FSPF-MIB.dic +1889 -0
  269. data/lib/mibs/ietf/T11-FC-NAME-SERVER-MIB.dic +1775 -0
  270. data/lib/mibs/ietf/T11-FC-ROUTE-MIB.dic +655 -0
  271. data/lib/mibs/ietf/T11-FC-RSCN-MIB.dic +1110 -0
  272. data/lib/mibs/ietf/T11-FC-VIRTUAL-FABRIC-MIB.dic +770 -0
  273. data/lib/mibs/ietf/T11-FC-ZONE-SERVER-MIB.dic +3886 -0
  274. data/lib/mibs/ietf/T11-TC-MIB.dic +110 -0
  275. data/lib/mibs/ietf/TCP-ESTATS-MIB.dic +3926 -0
  276. data/lib/mibs/ietf/TCP-MIB.dic +1319 -0
  277. data/lib/mibs/ietf/TCPIPX-MIB.dic +457 -0
  278. data/lib/mibs/ietf/TE-LINK-STD-MIB.dic +2876 -0
  279. data/lib/mibs/ietf/TE-MIB.dic +2924 -0
  280. data/lib/mibs/ietf/TED-MIB.dic +1749 -0
  281. data/lib/mibs/ietf/TIME-AGGREGATE-MIB.dic +550 -0
  282. data/lib/mibs/ietf/TN3270E-MIB.dic +2785 -0
  283. data/lib/mibs/ietf/TN3270E-RT-MIB.dic +1317 -0
  284. data/lib/mibs/ietf/TOKEN-RING-RMON-MIB.dic +2820 -0
  285. data/lib/mibs/ietf/TOKENRING-MIB.dic +1184 -0
  286. data/lib/mibs/ietf/TOKENRING-STATION-SR-MIB.dic +292 -0
  287. data/lib/mibs/ietf/TRANSPORT-ADDRESS-MIB.dic +610 -0
  288. data/lib/mibs/ietf/TRIP-MIB.dic +3159 -0
  289. data/lib/mibs/ietf/TRIP-TC-MIB.dic +241 -0
  290. data/lib/mibs/ietf/TUNNEL-MIB.dic +1095 -0
  291. data/lib/mibs/ietf/UDP-MIB.dic +751 -0
  292. data/lib/mibs/ietf/UDPLITE-MIB.dic +704 -0
  293. data/lib/mibs/ietf/UPS-MIB.dic +3088 -0
  294. data/lib/mibs/ietf/URI-TC-MIB.dic +193 -0
  295. data/lib/mibs/ietf/UUID-TC-MIB.dic +135 -0
  296. data/lib/mibs/ietf/VDSL-LINE-EXT-MCM-MIB.dic +989 -0
  297. data/lib/mibs/ietf/VDSL-LINE-EXT-SCM-MIB.dic +605 -0
  298. data/lib/mibs/ietf/VDSL-LINE-MIB.dic +4518 -0
  299. data/lib/mibs/ietf/VDSL2-LINE-MIB.dic +11029 -0
  300. data/lib/mibs/ietf/VDSL2-LINE-TC-MIB.dic +3152 -0
  301. data/lib/mibs/ietf/VPN-TC-STD-MIB.dic +121 -0
  302. data/lib/mibs/ietf/VRRP-MIB.dic +1163 -0
  303. data/lib/mibs/ietf/VRRPV3-MIB.dic +1403 -0
  304. data/lib/mibs/ietf/WWW-MIB.dic +1810 -0
  305. data/lib/mibs/logstash/iso.dic +18 -0
  306. data/logstash-input-snmp.gemspec +1 -1
  307. data/spec/inputs/snmp/mib_spec.rb +10 -17
  308. data/spec/inputs/snmp_spec.rb +27 -1
  309. metadata +302 -2
@@ -0,0 +1,315 @@
1
+ # python version 1.0 DO NOT EDIT
2
+ #
3
+ # This python file has been generated by smidump version 0.5.0:
4
+ #
5
+ # smidump -f python SNMP-TSM-MIB
6
+
7
+ FILENAME = "./libsmi-0.5.0/mibs/ietf/SNMP-TSM-MIB"
8
+
9
+ MIB = {
10
+ "moduleName" : "SNMP-TSM-MIB",
11
+
12
+ "SNMP-TSM-MIB" : {
13
+ "nodetype" : "module",
14
+ "language" : "SMIv2",
15
+ "organization" :
16
+ """ISMS Working Group""",
17
+ "contact" :
18
+ """WG-EMail: isms@lists.ietf.org
19
+ Subscribe: isms-request@lists.ietf.org
20
+
21
+ Chairs:
22
+ Juergen Quittek
23
+ NEC Europe Ltd.
24
+ Network Laboratories
25
+ Kurfuersten-Anlage 36
26
+ 69115 Heidelberg
27
+ Germany
28
+ +49 6221 90511-15
29
+ quittek@netlab.nec.de
30
+
31
+ Juergen Schoenwaelder
32
+ Jacobs University Bremen
33
+ Campus Ring 1
34
+ 28725 Bremen
35
+ Germany
36
+ +49 421 200-3587
37
+ j.schoenwaelder@jacobs-university.de
38
+
39
+
40
+
41
+
42
+
43
+ Editor:
44
+ David Harrington
45
+ Huawei Technologies USA
46
+ 1700 Alma Dr.
47
+ Plano TX 75075
48
+ USA
49
+ +1 603-436-8634
50
+ ietfdbh@comcast.net
51
+
52
+ Wes Hardaker
53
+ Cobham Analytic Solutions
54
+ P.O. Box 382
55
+ Davis, CA 95617
56
+ USA
57
+ +1 530 792 1913
58
+ ietf@hardakers.net""",
59
+ "description" :
60
+ """The Transport Security Model MIB.
61
+
62
+ In keeping with the RFC 3411 design decisions to use
63
+ self-contained documents, the RFC that contains the definition
64
+ of this MIB module also includes the elements of procedure
65
+ that are needed for processing the Transport Security Model
66
+ for SNMP. These MIB objects SHOULD NOT be modified via other
67
+ subsystems or models defined in other documents. This allows
68
+ the Transport Security Model for SNMP to be designed and
69
+ documented as independent and self-contained, having no direct
70
+ impact on other modules, and this allows this module to be
71
+ upgraded and supplemented as the need arises, and to move
72
+ along the standards track on different time-lines from other
73
+ modules.
74
+
75
+ Copyright (c) 2009 IETF Trust and the persons
76
+ identified as authors of the code. All rights reserved.
77
+
78
+ Redistribution and use in source and binary forms, with or
79
+ without modification, are permitted provided that the
80
+ following conditions are met:
81
+
82
+ - Redistributions of source code must retain the above copyright
83
+ notice, this list of conditions and the following disclaimer.
84
+
85
+ - Redistributions in binary form must reproduce the above
86
+ copyright notice, this list of conditions and the following
87
+ disclaimer in the documentation and/or other materials
88
+ provided with the distribution.
89
+
90
+
91
+
92
+
93
+ - Neither the name of Internet Society, IETF or IETF Trust,
94
+ nor the names of specific contributors, may be used to endorse
95
+ or promote products derived from this software without
96
+ specific prior written permission.
97
+
98
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
99
+ CONTRIBUTORS 'AS IS' AND ANY EXPRESS OR IMPLIED WARRANTIES,
100
+ INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
101
+ MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
102
+ DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
103
+ CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
104
+ SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
105
+ NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
106
+ LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
107
+ HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
108
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
109
+ OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
110
+ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
111
+
112
+ This version of this MIB module is part of RFC 5591;
113
+ see the RFC itself for full legal notices.""",
114
+ "revisions" : (
115
+ {
116
+ "date" : "2009-06-09 00:00",
117
+ "description" :
118
+ """The initial version, published in RFC 5591.""",
119
+ },
120
+ ),
121
+ "identity node" : "snmpTsmMIB",
122
+ },
123
+
124
+ "imports" : (
125
+ {"module" : "SNMPv2-SMI", "name" : "MODULE-IDENTITY"},
126
+ {"module" : "SNMPv2-SMI", "name" : "OBJECT-TYPE"},
127
+ {"module" : "SNMPv2-SMI", "name" : "mib-2"},
128
+ {"module" : "SNMPv2-SMI", "name" : "Counter32"},
129
+ {"module" : "SNMPv2-CONF", "name" : "MODULE-COMPLIANCE"},
130
+ {"module" : "SNMPv2-CONF", "name" : "OBJECT-GROUP"},
131
+ {"module" : "SNMPv2-TC", "name" : "TruthValue"},
132
+ ),
133
+
134
+ "nodes" : {
135
+ "snmpTsmMIB" : {
136
+ "nodetype" : "node",
137
+ "moduleName" : "SNMP-TSM-MIB",
138
+ "oid" : "1.3.6.1.2.1.190",
139
+ "status" : "current",
140
+ }, # node
141
+ "snmpTsmNotifications" : {
142
+ "nodetype" : "node",
143
+ "moduleName" : "SNMP-TSM-MIB",
144
+ "oid" : "1.3.6.1.2.1.190.0",
145
+ }, # node
146
+ "snmpTsmMIBObjects" : {
147
+ "nodetype" : "node",
148
+ "moduleName" : "SNMP-TSM-MIB",
149
+ "oid" : "1.3.6.1.2.1.190.1",
150
+ }, # node
151
+ "snmpTsmStats" : {
152
+ "nodetype" : "node",
153
+ "moduleName" : "SNMP-TSM-MIB",
154
+ "oid" : "1.3.6.1.2.1.190.1.1",
155
+ }, # node
156
+ "snmpTsmInvalidCaches" : {
157
+ "nodetype" : "scalar",
158
+ "moduleName" : "SNMP-TSM-MIB",
159
+ "oid" : "1.3.6.1.2.1.190.1.1.1",
160
+ "status" : "current",
161
+ "syntax" : {
162
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
163
+ },
164
+ "access" : "readonly",
165
+ "description" :
166
+ """The number of incoming messages dropped because the
167
+
168
+
169
+
170
+ tmStateReference referred to an invalid cache.""",
171
+ }, # scalar
172
+ "snmpTsmInadequateSecurityLevels" : {
173
+ "nodetype" : "scalar",
174
+ "moduleName" : "SNMP-TSM-MIB",
175
+ "oid" : "1.3.6.1.2.1.190.1.1.2",
176
+ "status" : "current",
177
+ "syntax" : {
178
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
179
+ },
180
+ "access" : "readonly",
181
+ "description" :
182
+ """The number of incoming messages dropped because
183
+ the securityLevel asserted by the Transport Model was
184
+ less than the securityLevel requested by the
185
+ application.""",
186
+ }, # scalar
187
+ "snmpTsmUnknownPrefixes" : {
188
+ "nodetype" : "scalar",
189
+ "moduleName" : "SNMP-TSM-MIB",
190
+ "oid" : "1.3.6.1.2.1.190.1.1.3",
191
+ "status" : "current",
192
+ "syntax" : {
193
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
194
+ },
195
+ "access" : "readonly",
196
+ "description" :
197
+ """The number of messages dropped because
198
+ snmpTsmConfigurationUsePrefix was set to true and
199
+ there is no known prefix for the specified transport
200
+ domain.""",
201
+ }, # scalar
202
+ "snmpTsmInvalidPrefixes" : {
203
+ "nodetype" : "scalar",
204
+ "moduleName" : "SNMP-TSM-MIB",
205
+ "oid" : "1.3.6.1.2.1.190.1.1.4",
206
+ "status" : "current",
207
+ "syntax" : {
208
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
209
+ },
210
+ "access" : "readonly",
211
+ "description" :
212
+ """The number of messages dropped because
213
+ the securityName associated with an outgoing message
214
+ did not contain a valid transport domain prefix.""",
215
+ }, # scalar
216
+ "snmpTsmConfiguration" : {
217
+ "nodetype" : "node",
218
+ "moduleName" : "SNMP-TSM-MIB",
219
+ "oid" : "1.3.6.1.2.1.190.1.2",
220
+ }, # node
221
+ "snmpTsmConfigurationUsePrefix" : {
222
+ "nodetype" : "scalar",
223
+ "moduleName" : "SNMP-TSM-MIB",
224
+ "oid" : "1.3.6.1.2.1.190.1.2.1",
225
+ "status" : "current",
226
+ "syntax" : {
227
+ "type" : { "module" :"SNMPv2-TC", "name" : "TruthValue"},
228
+ },
229
+ "access" : "readwrite",
230
+ "default" : "false",
231
+ "description" :
232
+ """If this object is set to true, then securityNames
233
+ passing to and from the application are expected to
234
+ contain a transport-domain-specific prefix. If this
235
+ object is set to true, then a domain-specific prefix
236
+ will be added by the TSM to the securityName for
237
+ incoming messages and removed from the securityName
238
+ when processing outgoing messages. Transport domains
239
+ and prefixes are maintained in a registry by IANA.
240
+ This object SHOULD persist across system reboots.""",
241
+ }, # scalar
242
+ "snmpTsmConformance" : {
243
+ "nodetype" : "node",
244
+ "moduleName" : "SNMP-TSM-MIB",
245
+ "oid" : "1.3.6.1.2.1.190.2",
246
+ }, # node
247
+ "snmpTsmCompliances" : {
248
+ "nodetype" : "node",
249
+ "moduleName" : "SNMP-TSM-MIB",
250
+ "oid" : "1.3.6.1.2.1.190.2.1",
251
+ }, # node
252
+ "snmpTsmGroups" : {
253
+ "nodetype" : "node",
254
+ "moduleName" : "SNMP-TSM-MIB",
255
+ "oid" : "1.3.6.1.2.1.190.2.2",
256
+ }, # node
257
+ }, # nodes
258
+
259
+ "groups" : {
260
+ "snmpTsmGroup" : {
261
+ "nodetype" : "group",
262
+ "moduleName" : "SNMP-TSM-MIB",
263
+ "oid" : "1.3.6.1.2.1.190.2.2.2",
264
+ "status" : "current",
265
+ "members" : {
266
+ "snmpTsmInvalidCaches" : {
267
+ "nodetype" : "member",
268
+ "module" : "SNMP-TSM-MIB"
269
+ },
270
+ "snmpTsmInadequateSecurityLevels" : {
271
+ "nodetype" : "member",
272
+ "module" : "SNMP-TSM-MIB"
273
+ },
274
+ "snmpTsmUnknownPrefixes" : {
275
+ "nodetype" : "member",
276
+ "module" : "SNMP-TSM-MIB"
277
+ },
278
+ "snmpTsmInvalidPrefixes" : {
279
+ "nodetype" : "member",
280
+ "module" : "SNMP-TSM-MIB"
281
+ },
282
+ "snmpTsmConfigurationUsePrefix" : {
283
+ "nodetype" : "member",
284
+ "module" : "SNMP-TSM-MIB"
285
+ },
286
+ }, # members
287
+ "description" :
288
+ """A collection of objects for maintaining
289
+ information of an SNMP engine that implements
290
+
291
+
292
+
293
+ the SNMP Transport Security Model.""",
294
+ }, # group
295
+ }, # groups
296
+
297
+ "compliances" : {
298
+ "snmpTsmCompliance" : {
299
+ "nodetype" : "compliance",
300
+ "moduleName" : "SNMP-TSM-MIB",
301
+ "oid" : "1.3.6.1.2.1.190.2.1.1",
302
+ "status" : "current",
303
+ "description" :
304
+ """The compliance statement for SNMP engines that support
305
+ the SNMP-TSM-MIB.""",
306
+ "requires" : {
307
+ "snmpTsmGroup" : {
308
+ "nodetype" : "mandatory",
309
+ "module" : "SNMP-TSM-MIB"
310
+ },
311
+ }, # requires
312
+ }, # compliance
313
+ }, # compliances
314
+
315
+ }
@@ -0,0 +1,1164 @@
1
+ # python version 1.0 DO NOT EDIT
2
+ #
3
+ # This python file has been generated by smidump version 0.5.0:
4
+ #
5
+ # smidump -f python SNMP-USER-BASED-SM-MIB
6
+
7
+ FILENAME = "./libsmi-0.5.0/mibs/ietf/SNMP-USER-BASED-SM-MIB"
8
+
9
+ MIB = {
10
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
11
+
12
+ "SNMP-USER-BASED-SM-MIB" : {
13
+ "nodetype" : "module",
14
+ "language" : "SMIv2",
15
+ "organization" :
16
+ """SNMPv3 Working Group""",
17
+ "contact" :
18
+ """WG-email: snmpv3@lists.tislabs.com
19
+ Subscribe: majordomo@lists.tislabs.com
20
+ In msg body: subscribe snmpv3
21
+
22
+ Chair: Russ Mundy
23
+ Network Associates Laboratories
24
+ postal: 15204 Omega Drive, Suite 300
25
+ Rockville, MD 20850-4601
26
+ USA
27
+ email: mundy@tislabs.com
28
+
29
+
30
+
31
+ phone: +1 301-947-7107
32
+
33
+ Co-Chair: David Harrington
34
+ Enterasys Networks
35
+ Postal: 35 Industrial Way
36
+ P. O. Box 5004
37
+ Rochester, New Hampshire 03866-5005
38
+ USA
39
+ EMail: dbh@enterasys.com
40
+ Phone: +1 603-337-2614
41
+
42
+ Co-editor Uri Blumenthal
43
+ Lucent Technologies
44
+ postal: 67 Whippany Rd.
45
+ Whippany, NJ 07981
46
+ USA
47
+ email: uri@lucent.com
48
+ phone: +1-973-386-2163
49
+
50
+ Co-editor: Bert Wijnen
51
+ Lucent Technologies
52
+ postal: Schagen 33
53
+ 3461 GL Linschoten
54
+ Netherlands
55
+ email: bwijnen@lucent.com
56
+ phone: +31-348-480-685""",
57
+ "description" :
58
+ """The management information definitions for the
59
+ SNMP User-based Security Model.
60
+
61
+ Copyright (C) The Internet Society (2002). This
62
+ version of this MIB module is part of RFC 3414;
63
+ see the RFC itself for full legal notices.""",
64
+ "revisions" : (
65
+ {
66
+ "date" : "2002-10-16 00:00",
67
+ "description" :
68
+ """Changes in this revision:
69
+ - Updated references and contact info.
70
+ - Clarification to usmUserCloneFrom DESCRIPTION
71
+ clause
72
+ - Fixed 'command responder' into 'command generator'
73
+ in last para of DESCRIPTION clause of
74
+ usmUserTable.
75
+ This revision published as RFC3414.""",
76
+ },
77
+ {
78
+ "date" : "1999-01-20 00:00",
79
+ "description" :
80
+ """Clarifications, published as RFC2574""",
81
+ },
82
+ {
83
+ "date" : "1997-11-20 00:00",
84
+ "description" :
85
+ """Initial version, published as RFC2274""",
86
+ },
87
+ ),
88
+ "identity node" : "snmpUsmMIB",
89
+ },
90
+
91
+ "imports" : (
92
+ {"module" : "SNMPv2-SMI", "name" : "MODULE-IDENTITY"},
93
+ {"module" : "SNMPv2-SMI", "name" : "OBJECT-TYPE"},
94
+ {"module" : "SNMPv2-SMI", "name" : "OBJECT-IDENTITY"},
95
+ {"module" : "SNMPv2-SMI", "name" : "snmpModules"},
96
+ {"module" : "SNMPv2-SMI", "name" : "Counter32"},
97
+ {"module" : "SNMPv2-TC", "name" : "TEXTUAL-CONVENTION"},
98
+ {"module" : "SNMPv2-TC", "name" : "TestAndIncr"},
99
+ {"module" : "SNMPv2-TC", "name" : "RowStatus"},
100
+ {"module" : "SNMPv2-TC", "name" : "RowPointer"},
101
+ {"module" : "SNMPv2-TC", "name" : "StorageType"},
102
+ {"module" : "SNMPv2-TC", "name" : "AutonomousType"},
103
+ {"module" : "SNMPv2-CONF", "name" : "MODULE-COMPLIANCE"},
104
+ {"module" : "SNMPv2-CONF", "name" : "OBJECT-GROUP"},
105
+ {"module" : "SNMP-FRAMEWORK-MIB", "name" : "SnmpAdminString"},
106
+ {"module" : "SNMP-FRAMEWORK-MIB", "name" : "SnmpEngineID"},
107
+ {"module" : "SNMP-FRAMEWORK-MIB", "name" : "snmpAuthProtocols"},
108
+ {"module" : "SNMP-FRAMEWORK-MIB", "name" : "snmpPrivProtocols"},
109
+ ),
110
+
111
+ "typedefs" : {
112
+ "KeyChange" : {
113
+ "basetype" : "OctetString",
114
+ "status" : "current",
115
+ "description" :
116
+ """Every definition of an object with this syntax must identify
117
+ a protocol P, a secret key K, and a hash algorithm H
118
+ that produces output of L octets.
119
+
120
+ The object's value is a manager-generated, partially-random
121
+ value which, when modified, causes the value of the secret
122
+ key K, to be modified via a one-way function.
123
+
124
+ The value of an instance of this object is the concatenation
125
+ of two components: first a 'random' component and then a
126
+ 'delta' component.
127
+
128
+ The lengths of the random and delta components
129
+ are given by the corresponding value of the protocol P;
130
+ if P requires K to be a fixed length, the length of both the
131
+ random and delta components is that fixed length; if P
132
+ allows the length of K to be variable up to a particular
133
+ maximum length, the length of the random component is that
134
+ maximum length and the length of the delta component is any
135
+ length less than or equal to that maximum length.
136
+ For example, usmHMACMD5AuthProtocol requires K to be a fixed
137
+ length of 16 octets and L - of 16 octets.
138
+ usmHMACSHAAuthProtocol requires K to be a fixed length of
139
+ 20 octets and L - of 20 octets. Other protocols may define
140
+ other sizes, as deemed appropriate.
141
+
142
+
143
+
144
+ When a requester wants to change the old key K to a new
145
+ key keyNew on a remote entity, the 'random' component is
146
+ obtained from either a true random generator, or from a
147
+ pseudorandom generator, and the 'delta' component is
148
+ computed as follows:
149
+
150
+ - a temporary variable is initialized to the existing value
151
+ of K;
152
+ - if the length of the keyNew is greater than L octets,
153
+ then:
154
+ - the random component is appended to the value of the
155
+ temporary variable, and the result is input to the
156
+ the hash algorithm H to produce a digest value, and
157
+ the temporary variable is set to this digest value;
158
+ - the value of the temporary variable is XOR-ed with
159
+ the first (next) L-octets (16 octets in case of MD5)
160
+ of the keyNew to produce the first (next) L-octets
161
+ (16 octets in case of MD5) of the 'delta' component.
162
+ - the above two steps are repeated until the unused
163
+ portion of the keyNew component is L octets or less,
164
+ - the random component is appended to the value of the
165
+ temporary variable, and the result is input to the
166
+ hash algorithm H to produce a digest value;
167
+ - this digest value, truncated if necessary to be the same
168
+ length as the unused portion of the keyNew, is XOR-ed
169
+ with the unused portion of the keyNew to produce the
170
+ (final portion of the) 'delta' component.
171
+
172
+ For example, using MD5 as the hash algorithm H:
173
+
174
+ iterations = (lenOfDelta - 1)/16; /* integer division */
175
+ temp = keyOld;
176
+ for (i = 0; i < iterations; i++) {
177
+ temp = MD5 (temp || random);
178
+ delta[i*16 .. (i*16)+15] =
179
+ temp XOR keyNew[i*16 .. (i*16)+15];
180
+ }
181
+ temp = MD5 (temp || random);
182
+ delta[i*16 .. lenOfDelta-1] =
183
+ temp XOR keyNew[i*16 .. lenOfDelta-1];
184
+
185
+ The 'random' and 'delta' components are then concatenated as
186
+ described above, and the resulting octet string is sent to
187
+ the recipient as the new value of an instance of this object.
188
+
189
+ At the receiver side, when an instance of this object is set
190
+ to a new value, then a new value of K is computed as follows:
191
+
192
+
193
+
194
+
195
+ - a temporary variable is initialized to the existing value
196
+ of K;
197
+ - if the length of the delta component is greater than L
198
+ octets, then:
199
+ - the random component is appended to the value of the
200
+ temporary variable, and the result is input to the
201
+ hash algorithm H to produce a digest value, and the
202
+ temporary variable is set to this digest value;
203
+ - the value of the temporary variable is XOR-ed with
204
+ the first (next) L-octets (16 octets in case of MD5)
205
+ of the delta component to produce the first (next)
206
+ L-octets (16 octets in case of MD5) of the new value
207
+ of K.
208
+ - the above two steps are repeated until the unused
209
+ portion of the delta component is L octets or less,
210
+ - the random component is appended to the value of the
211
+ temporary variable, and the result is input to the
212
+ hash algorithm H to produce a digest value;
213
+ - this digest value, truncated if necessary to be the same
214
+ length as the unused portion of the delta component, is
215
+ XOR-ed with the unused portion of the delta component to
216
+ produce the (final portion of the) new value of K.
217
+
218
+ For example, using MD5 as the hash algorithm H:
219
+
220
+ iterations = (lenOfDelta - 1)/16; /* integer division */
221
+ temp = keyOld;
222
+ for (i = 0; i < iterations; i++) {
223
+ temp = MD5 (temp || random);
224
+ keyNew[i*16 .. (i*16)+15] =
225
+ temp XOR delta[i*16 .. (i*16)+15];
226
+ }
227
+ temp = MD5 (temp || random);
228
+ keyNew[i*16 .. lenOfDelta-1] =
229
+ temp XOR delta[i*16 .. lenOfDelta-1];
230
+
231
+ The value of an object with this syntax, whenever it is
232
+ retrieved by the management protocol, is always the zero
233
+ length string.
234
+
235
+ Note that the keyOld and keyNew are the localized keys.
236
+
237
+ Note that it is probably wise that when an SNMP entity sends
238
+ a SetRequest to change a key, that it keeps a copy of the old
239
+ key until it has confirmed that the key change actually
240
+ succeeded.""",
241
+ },
242
+ }, # typedefs
243
+
244
+ "nodes" : {
245
+ "usmNoAuthProtocol" : {
246
+ "nodetype" : "node",
247
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
248
+ "oid" : "1.3.6.1.6.3.10.1.1.1",
249
+ "status" : "current",
250
+ "description" :
251
+ """No Authentication Protocol.""",
252
+ }, # node
253
+ "usmHMACMD5AuthProtocol" : {
254
+ "nodetype" : "node",
255
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
256
+ "oid" : "1.3.6.1.6.3.10.1.1.2",
257
+ "status" : "current",
258
+ "description" :
259
+ """The HMAC-MD5-96 Digest Authentication Protocol.""",
260
+ "reference" :
261
+ """- H. Krawczyk, M. Bellare, R. Canetti HMAC:
262
+ Keyed-Hashing for Message Authentication,
263
+ RFC2104, Feb 1997.
264
+ - Rivest, R., Message Digest Algorithm MD5, RFC1321.""",
265
+ }, # node
266
+ "usmHMACSHAAuthProtocol" : {
267
+ "nodetype" : "node",
268
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
269
+ "oid" : "1.3.6.1.6.3.10.1.1.3",
270
+ "status" : "current",
271
+ "description" :
272
+ """The HMAC-SHA-96 Digest Authentication Protocol.""",
273
+ "reference" :
274
+ """- H. Krawczyk, M. Bellare, R. Canetti, HMAC:
275
+ Keyed-Hashing for Message Authentication,
276
+ RFC2104, Feb 1997.
277
+ - Secure Hash Algorithm. NIST FIPS 180-1.""",
278
+ }, # node
279
+ "usmNoPrivProtocol" : {
280
+ "nodetype" : "node",
281
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
282
+ "oid" : "1.3.6.1.6.3.10.1.2.1",
283
+ "status" : "current",
284
+ "description" :
285
+ """No Privacy Protocol.""",
286
+ }, # node
287
+ "usmDESPrivProtocol" : {
288
+ "nodetype" : "node",
289
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
290
+ "oid" : "1.3.6.1.6.3.10.1.2.2",
291
+ "status" : "current",
292
+ "description" :
293
+ """The CBC-DES Symmetric Encryption Protocol.""",
294
+ "reference" :
295
+ """- Data Encryption Standard, National Institute of
296
+ Standards and Technology. Federal Information
297
+ Processing Standard (FIPS) Publication 46-1.
298
+
299
+
300
+
301
+ Supersedes FIPS Publication 46,
302
+ (January, 1977; reaffirmed January, 1988).
303
+
304
+ - Data Encryption Algorithm, American National
305
+ Standards Institute. ANSI X3.92-1981,
306
+ (December, 1980).
307
+
308
+ - DES Modes of Operation, National Institute of
309
+ Standards and Technology. Federal Information
310
+ Processing Standard (FIPS) Publication 81,
311
+ (December, 1980).
312
+
313
+ - Data Encryption Algorithm - Modes of Operation,
314
+ American National Standards Institute.
315
+ ANSI X3.106-1983, (May 1983).""",
316
+ }, # node
317
+ "snmpUsmMIB" : {
318
+ "nodetype" : "node",
319
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
320
+ "oid" : "1.3.6.1.6.3.15",
321
+ "status" : "current",
322
+ }, # node
323
+ "usmMIBObjects" : {
324
+ "nodetype" : "node",
325
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
326
+ "oid" : "1.3.6.1.6.3.15.1",
327
+ }, # node
328
+ "usmStats" : {
329
+ "nodetype" : "node",
330
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
331
+ "oid" : "1.3.6.1.6.3.15.1.1",
332
+ }, # node
333
+ "usmStatsUnsupportedSecLevels" : {
334
+ "nodetype" : "scalar",
335
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
336
+ "oid" : "1.3.6.1.6.3.15.1.1.1",
337
+ "status" : "current",
338
+ "syntax" : {
339
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
340
+ },
341
+ "access" : "readonly",
342
+ "description" :
343
+ """The total number of packets received by the SNMP
344
+ engine which were dropped because they requested a
345
+ securityLevel that was unknown to the SNMP engine
346
+ or otherwise unavailable.""",
347
+ }, # scalar
348
+ "usmStatsNotInTimeWindows" : {
349
+ "nodetype" : "scalar",
350
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
351
+ "oid" : "1.3.6.1.6.3.15.1.1.2",
352
+ "status" : "current",
353
+ "syntax" : {
354
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
355
+ },
356
+ "access" : "readonly",
357
+ "description" :
358
+ """The total number of packets received by the SNMP
359
+ engine which were dropped because they appeared
360
+ outside of the authoritative SNMP engine's window.""",
361
+ }, # scalar
362
+ "usmStatsUnknownUserNames" : {
363
+ "nodetype" : "scalar",
364
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
365
+ "oid" : "1.3.6.1.6.3.15.1.1.3",
366
+ "status" : "current",
367
+ "syntax" : {
368
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
369
+ },
370
+ "access" : "readonly",
371
+ "description" :
372
+ """The total number of packets received by the SNMP
373
+ engine which were dropped because they referenced a
374
+ user that was not known to the SNMP engine.""",
375
+ }, # scalar
376
+ "usmStatsUnknownEngineIDs" : {
377
+ "nodetype" : "scalar",
378
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
379
+ "oid" : "1.3.6.1.6.3.15.1.1.4",
380
+ "status" : "current",
381
+ "syntax" : {
382
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
383
+ },
384
+ "access" : "readonly",
385
+ "description" :
386
+ """The total number of packets received by the SNMP
387
+ engine which were dropped because they referenced an
388
+ snmpEngineID that was not known to the SNMP engine.""",
389
+ }, # scalar
390
+ "usmStatsWrongDigests" : {
391
+ "nodetype" : "scalar",
392
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
393
+ "oid" : "1.3.6.1.6.3.15.1.1.5",
394
+ "status" : "current",
395
+ "syntax" : {
396
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
397
+ },
398
+ "access" : "readonly",
399
+ "description" :
400
+ """The total number of packets received by the SNMP
401
+ engine which were dropped because they didn't
402
+ contain the expected digest value.""",
403
+ }, # scalar
404
+ "usmStatsDecryptionErrors" : {
405
+ "nodetype" : "scalar",
406
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
407
+ "oid" : "1.3.6.1.6.3.15.1.1.6",
408
+ "status" : "current",
409
+ "syntax" : {
410
+ "type" : { "module" :"SNMPv2-SMI", "name" : "Counter32"},
411
+ },
412
+ "access" : "readonly",
413
+ "description" :
414
+ """The total number of packets received by the SNMP
415
+ engine which were dropped because they could not be
416
+ decrypted.""",
417
+ }, # scalar
418
+ "usmUser" : {
419
+ "nodetype" : "node",
420
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
421
+ "oid" : "1.3.6.1.6.3.15.1.2",
422
+ }, # node
423
+ "usmUserSpinLock" : {
424
+ "nodetype" : "scalar",
425
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
426
+ "oid" : "1.3.6.1.6.3.15.1.2.1",
427
+ "status" : "current",
428
+ "syntax" : {
429
+ "type" : { "module" :"SNMPv2-TC", "name" : "TestAndIncr"},
430
+ },
431
+ "access" : "readwrite",
432
+ "description" :
433
+ """An advisory lock used to allow several cooperating
434
+ Command Generator Applications to coordinate their
435
+ use of facilities to alter secrets in the
436
+ usmUserTable.""",
437
+ }, # scalar
438
+ "usmUserTable" : {
439
+ "nodetype" : "table",
440
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
441
+ "oid" : "1.3.6.1.6.3.15.1.2.2",
442
+ "status" : "current",
443
+ "description" :
444
+ """The table of users configured in the SNMP engine's
445
+ Local Configuration Datastore (LCD).
446
+
447
+ To create a new user (i.e., to instantiate a new
448
+ conceptual row in this table), it is recommended to
449
+ follow this procedure:
450
+
451
+ 1) GET(usmUserSpinLock.0) and save in sValue.
452
+
453
+
454
+
455
+ 2) SET(usmUserSpinLock.0=sValue,
456
+ usmUserCloneFrom=templateUser,
457
+ usmUserStatus=createAndWait)
458
+ You should use a template user to clone from
459
+ which has the proper auth/priv protocol defined.
460
+
461
+ If the new user is to use privacy:
462
+
463
+ 3) generate the keyChange value based on the secret
464
+ privKey of the clone-from user and the secret key
465
+ to be used for the new user. Let us call this
466
+ pkcValue.
467
+ 4) GET(usmUserSpinLock.0) and save in sValue.
468
+ 5) SET(usmUserSpinLock.0=sValue,
469
+ usmUserPrivKeyChange=pkcValue
470
+ usmUserPublic=randomValue1)
471
+ 6) GET(usmUserPulic) and check it has randomValue1.
472
+ If not, repeat steps 4-6.
473
+
474
+ If the new user will never use privacy:
475
+
476
+ 7) SET(usmUserPrivProtocol=usmNoPrivProtocol)
477
+
478
+ If the new user is to use authentication:
479
+
480
+ 8) generate the keyChange value based on the secret
481
+ authKey of the clone-from user and the secret key
482
+ to be used for the new user. Let us call this
483
+ akcValue.
484
+ 9) GET(usmUserSpinLock.0) and save in sValue.
485
+ 10) SET(usmUserSpinLock.0=sValue,
486
+ usmUserAuthKeyChange=akcValue
487
+ usmUserPublic=randomValue2)
488
+ 11) GET(usmUserPulic) and check it has randomValue2.
489
+ If not, repeat steps 9-11.
490
+
491
+ If the new user will never use authentication:
492
+
493
+ 12) SET(usmUserAuthProtocol=usmNoAuthProtocol)
494
+
495
+ Finally, activate the new user:
496
+
497
+ 13) SET(usmUserStatus=active)
498
+
499
+ The new user should now be available and ready to be
500
+ used for SNMPv3 communication. Note however that access
501
+ to MIB data must be provided via configuration of the
502
+ SNMP-VIEW-BASED-ACM-MIB.
503
+
504
+
505
+
506
+ The use of usmUserSpinlock is to avoid conflicts with
507
+ another SNMP command generator application which may
508
+ also be acting on the usmUserTable.""",
509
+ }, # table
510
+ "usmUserEntry" : {
511
+ "nodetype" : "row",
512
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
513
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1",
514
+ "create" : "true",
515
+ "status" : "current",
516
+ "linkage" : [
517
+ "usmUserEngineID",
518
+ "usmUserName",
519
+ ],
520
+ "description" :
521
+ """A user configured in the SNMP engine's Local
522
+ Configuration Datastore (LCD) for the User-based
523
+ Security Model.""",
524
+ }, # row
525
+ "usmUserEngineID" : {
526
+ "nodetype" : "column",
527
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
528
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.1",
529
+ "status" : "current",
530
+ "syntax" : {
531
+ "type" : { "module" :"SNMP-FRAMEWORK-MIB", "name" : "SnmpEngineID"},
532
+ },
533
+ "access" : "noaccess",
534
+ "description" :
535
+ """An SNMP engine's administratively-unique identifier.
536
+
537
+ In a simple agent, this value is always that agent's
538
+ own snmpEngineID value.
539
+
540
+ The value can also take the value of the snmpEngineID
541
+ of a remote SNMP engine with which this user can
542
+ communicate.""",
543
+ }, # column
544
+ "usmUserName" : {
545
+ "nodetype" : "column",
546
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
547
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.2",
548
+ "status" : "current",
549
+ "syntax" : {
550
+ "type" : {
551
+ "basetype" : "OctetString",
552
+ "parent module" : {
553
+ "name" : "SNMP-FRAMEWORK-MIB",
554
+ "type" : "SnmpAdminString",
555
+ },
556
+ "ranges" : [
557
+ {
558
+ "min" : "1",
559
+ "max" : "32"
560
+ },
561
+ ],
562
+ "range" : {
563
+ "min" : "1",
564
+ "max" : "32"
565
+ },
566
+ },
567
+ },
568
+ "access" : "noaccess",
569
+ "description" :
570
+ """A human readable string representing the name of
571
+ the user.
572
+
573
+ This is the (User-based Security) Model dependent
574
+ security ID.""",
575
+ }, # column
576
+ "usmUserSecurityName" : {
577
+ "nodetype" : "column",
578
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
579
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.3",
580
+ "status" : "current",
581
+ "syntax" : {
582
+ "type" : { "module" :"SNMP-FRAMEWORK-MIB", "name" : "SnmpAdminString"},
583
+ },
584
+ "access" : "readonly",
585
+ "description" :
586
+ """A human readable string representing the user in
587
+ Security Model independent format.
588
+
589
+ The default transformation of the User-based Security
590
+ Model dependent security ID to the securityName and
591
+ vice versa is the identity function so that the
592
+ securityName is the same as the userName.""",
593
+ }, # column
594
+ "usmUserCloneFrom" : {
595
+ "nodetype" : "column",
596
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
597
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.4",
598
+ "status" : "current",
599
+ "syntax" : {
600
+ "type" : { "module" :"SNMPv2-TC", "name" : "RowPointer"},
601
+ },
602
+ "access" : "readwrite",
603
+ "description" :
604
+ """A pointer to another conceptual row in this
605
+ usmUserTable. The user in this other conceptual
606
+ row is called the clone-from user.
607
+
608
+ When a new user is created (i.e., a new conceptual
609
+ row is instantiated in this table), the privacy and
610
+ authentication parameters of the new user must be
611
+ cloned from its clone-from user. These parameters are:
612
+ - authentication protocol (usmUserAuthProtocol)
613
+ - privacy protocol (usmUserPrivProtocol)
614
+ They will be copied regardless of what the current
615
+ value is.
616
+
617
+ Cloning also causes the initial values of the secret
618
+ authentication key (authKey) and the secret encryption
619
+
620
+
621
+
622
+ key (privKey) of the new user to be set to the same
623
+ values as the corresponding secrets of the clone-from
624
+ user to allow the KeyChange process to occur as
625
+ required during user creation.
626
+
627
+ The first time an instance of this object is set by
628
+ a management operation (either at or after its
629
+ instantiation), the cloning process is invoked.
630
+ Subsequent writes are successful but invoke no
631
+ action to be taken by the receiver.
632
+ The cloning process fails with an 'inconsistentName'
633
+ error if the conceptual row representing the
634
+ clone-from user does not exist or is not in an active
635
+ state when the cloning process is invoked.
636
+
637
+ When this object is read, the ZeroDotZero OID
638
+ is returned.""",
639
+ }, # column
640
+ "usmUserAuthProtocol" : {
641
+ "nodetype" : "column",
642
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
643
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.5",
644
+ "status" : "current",
645
+ "syntax" : {
646
+ "type" : { "module" :"SNMPv2-TC", "name" : "AutonomousType"},
647
+ },
648
+ "access" : "readwrite",
649
+ "default" : "1.3.6.1.6.3.10.1.1.1",
650
+ "description" :
651
+ """An indication of whether messages sent on behalf of
652
+ this user to/from the SNMP engine identified by
653
+ usmUserEngineID, can be authenticated, and if so,
654
+ the type of authentication protocol which is used.
655
+
656
+ An instance of this object is created concurrently
657
+ with the creation of any other object instance for
658
+ the same user (i.e., as part of the processing of
659
+ the set operation which creates the first object
660
+ instance in the same conceptual row).
661
+
662
+ If an initial set operation (i.e. at row creation time)
663
+ tries to set a value for an unknown or unsupported
664
+ protocol, then a 'wrongValue' error must be returned.
665
+
666
+ The value will be overwritten/set when a set operation
667
+ is performed on the corresponding instance of
668
+ usmUserCloneFrom.
669
+
670
+ Once instantiated, the value of such an instance of
671
+ this object can only be changed via a set operation to
672
+ the value of the usmNoAuthProtocol.
673
+
674
+ If a set operation tries to change the value of an
675
+
676
+
677
+
678
+ existing instance of this object to any value other
679
+ than usmNoAuthProtocol, then an 'inconsistentValue'
680
+ error must be returned.
681
+
682
+ If a set operation tries to set the value to the
683
+ usmNoAuthProtocol while the usmUserPrivProtocol value
684
+ in the same row is not equal to usmNoPrivProtocol,
685
+ then an 'inconsistentValue' error must be returned.
686
+ That means that an SNMP command generator application
687
+ must first ensure that the usmUserPrivProtocol is set
688
+ to the usmNoPrivProtocol value before it can set
689
+ the usmUserAuthProtocol value to usmNoAuthProtocol.""",
690
+ }, # column
691
+ "usmUserAuthKeyChange" : {
692
+ "nodetype" : "column",
693
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
694
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.6",
695
+ "status" : "current",
696
+ "syntax" : {
697
+ "type" : { "module" :"SNMP-USER-BASED-SM-MIB", "name" : "KeyChange"},
698
+ },
699
+ "access" : "readwrite",
700
+ "default" : "",
701
+ "description" :
702
+ """An object, which when modified, causes the secret
703
+ authentication key used for messages sent on behalf
704
+ of this user to/from the SNMP engine identified by
705
+ usmUserEngineID, to be modified via a one-way
706
+ function.
707
+
708
+ The associated protocol is the usmUserAuthProtocol.
709
+ The associated secret key is the user's secret
710
+ authentication key (authKey). The associated hash
711
+ algorithm is the algorithm used by the user's
712
+ usmUserAuthProtocol.
713
+
714
+ When creating a new user, it is an 'inconsistentName'
715
+ error for a set operation to refer to this object
716
+ unless it is previously or concurrently initialized
717
+ through a set operation on the corresponding instance
718
+ of usmUserCloneFrom.
719
+
720
+ When the value of the corresponding usmUserAuthProtocol
721
+ is usmNoAuthProtocol, then a set is successful, but
722
+ effectively is a no-op.
723
+
724
+ When this object is read, the zero-length (empty)
725
+ string is returned.
726
+
727
+ The recommended way to do a key change is as follows:
728
+
729
+
730
+
731
+
732
+ 1) GET(usmUserSpinLock.0) and save in sValue.
733
+ 2) generate the keyChange value based on the old
734
+ (existing) secret key and the new secret key,
735
+ let us call this kcValue.
736
+
737
+ If you do the key change on behalf of another user:
738
+
739
+ 3) SET(usmUserSpinLock.0=sValue,
740
+ usmUserAuthKeyChange=kcValue
741
+ usmUserPublic=randomValue)
742
+
743
+ If you do the key change for yourself:
744
+
745
+ 4) SET(usmUserSpinLock.0=sValue,
746
+ usmUserOwnAuthKeyChange=kcValue
747
+ usmUserPublic=randomValue)
748
+
749
+ If you get a response with error-status of noError,
750
+ then the SET succeeded and the new key is active.
751
+ If you do not get a response, then you can issue a
752
+ GET(usmUserPublic) and check if the value is equal
753
+ to the randomValue you did send in the SET. If so, then
754
+ the key change succeeded and the new key is active
755
+ (probably the response got lost). If not, then the SET
756
+ request probably never reached the target and so you
757
+ can start over with the procedure above.""",
758
+ }, # column
759
+ "usmUserOwnAuthKeyChange" : {
760
+ "nodetype" : "column",
761
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
762
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.7",
763
+ "status" : "current",
764
+ "syntax" : {
765
+ "type" : { "module" :"SNMP-USER-BASED-SM-MIB", "name" : "KeyChange"},
766
+ },
767
+ "access" : "readwrite",
768
+ "default" : "",
769
+ "description" :
770
+ """Behaves exactly as usmUserAuthKeyChange, with one
771
+ notable difference: in order for the set operation
772
+ to succeed, the usmUserName of the operation
773
+ requester must match the usmUserName that
774
+ indexes the row which is targeted by this
775
+ operation.
776
+ In addition, the USM security model must be
777
+ used for this operation.
778
+
779
+ The idea here is that access to this column can be
780
+ public, since it will only allow a user to change
781
+ his own secret authentication key (authKey).
782
+ Note that this can only be done once the row is active.
783
+
784
+
785
+
786
+ When a set is received and the usmUserName of the
787
+ requester is not the same as the umsUserName that
788
+ indexes the row which is targeted by this operation,
789
+ then a 'noAccess' error must be returned.
790
+
791
+ When a set is received and the security model in use
792
+ is not USM, then a 'noAccess' error must be returned.""",
793
+ }, # column
794
+ "usmUserPrivProtocol" : {
795
+ "nodetype" : "column",
796
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
797
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.8",
798
+ "status" : "current",
799
+ "syntax" : {
800
+ "type" : { "module" :"SNMPv2-TC", "name" : "AutonomousType"},
801
+ },
802
+ "access" : "readwrite",
803
+ "default" : "1.3.6.1.6.3.10.1.2.1",
804
+ "description" :
805
+ """An indication of whether messages sent on behalf of
806
+ this user to/from the SNMP engine identified by
807
+ usmUserEngineID, can be protected from disclosure,
808
+ and if so, the type of privacy protocol which is used.
809
+
810
+ An instance of this object is created concurrently
811
+ with the creation of any other object instance for
812
+ the same user (i.e., as part of the processing of
813
+ the set operation which creates the first object
814
+ instance in the same conceptual row).
815
+
816
+ If an initial set operation (i.e. at row creation time)
817
+ tries to set a value for an unknown or unsupported
818
+ protocol, then a 'wrongValue' error must be returned.
819
+
820
+ The value will be overwritten/set when a set operation
821
+ is performed on the corresponding instance of
822
+ usmUserCloneFrom.
823
+
824
+ Once instantiated, the value of such an instance of
825
+ this object can only be changed via a set operation to
826
+ the value of the usmNoPrivProtocol.
827
+
828
+ If a set operation tries to change the value of an
829
+ existing instance of this object to any value other
830
+ than usmNoPrivProtocol, then an 'inconsistentValue'
831
+ error must be returned.
832
+
833
+ Note that if any privacy protocol is used, then you
834
+ must also use an authentication protocol. In other
835
+ words, if usmUserPrivProtocol is set to anything else
836
+ than usmNoPrivProtocol, then the corresponding instance
837
+ of usmUserAuthProtocol cannot have a value of
838
+
839
+
840
+
841
+ usmNoAuthProtocol. If it does, then an
842
+ 'inconsistentValue' error must be returned.""",
843
+ }, # column
844
+ "usmUserPrivKeyChange" : {
845
+ "nodetype" : "column",
846
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
847
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.9",
848
+ "status" : "current",
849
+ "syntax" : {
850
+ "type" : { "module" :"SNMP-USER-BASED-SM-MIB", "name" : "KeyChange"},
851
+ },
852
+ "access" : "readwrite",
853
+ "default" : "",
854
+ "description" :
855
+ """An object, which when modified, causes the secret
856
+ encryption key used for messages sent on behalf
857
+ of this user to/from the SNMP engine identified by
858
+ usmUserEngineID, to be modified via a one-way
859
+ function.
860
+
861
+ The associated protocol is the usmUserPrivProtocol.
862
+ The associated secret key is the user's secret
863
+ privacy key (privKey). The associated hash
864
+ algorithm is the algorithm used by the user's
865
+ usmUserAuthProtocol.
866
+
867
+ When creating a new user, it is an 'inconsistentName'
868
+ error for a set operation to refer to this object
869
+ unless it is previously or concurrently initialized
870
+ through a set operation on the corresponding instance
871
+ of usmUserCloneFrom.
872
+
873
+ When the value of the corresponding usmUserPrivProtocol
874
+ is usmNoPrivProtocol, then a set is successful, but
875
+ effectively is a no-op.
876
+
877
+ When this object is read, the zero-length (empty)
878
+ string is returned.
879
+ See the description clause of usmUserAuthKeyChange for
880
+ a recommended procedure to do a key change.""",
881
+ }, # column
882
+ "usmUserOwnPrivKeyChange" : {
883
+ "nodetype" : "column",
884
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
885
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.10",
886
+ "status" : "current",
887
+ "syntax" : {
888
+ "type" : { "module" :"SNMP-USER-BASED-SM-MIB", "name" : "KeyChange"},
889
+ },
890
+ "access" : "readwrite",
891
+ "default" : "",
892
+ "description" :
893
+ """Behaves exactly as usmUserPrivKeyChange, with one
894
+ notable difference: in order for the Set operation
895
+ to succeed, the usmUserName of the operation
896
+ requester must match the usmUserName that indexes
897
+
898
+
899
+
900
+ the row which is targeted by this operation.
901
+ In addition, the USM security model must be
902
+ used for this operation.
903
+
904
+ The idea here is that access to this column can be
905
+ public, since it will only allow a user to change
906
+ his own secret privacy key (privKey).
907
+ Note that this can only be done once the row is active.
908
+
909
+ When a set is received and the usmUserName of the
910
+ requester is not the same as the umsUserName that
911
+ indexes the row which is targeted by this operation,
912
+ then a 'noAccess' error must be returned.
913
+
914
+ When a set is received and the security model in use
915
+ is not USM, then a 'noAccess' error must be returned.""",
916
+ }, # column
917
+ "usmUserPublic" : {
918
+ "nodetype" : "column",
919
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
920
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.11",
921
+ "status" : "current",
922
+ "syntax" : {
923
+ "type" : {
924
+ "basetype" : "OctetString",
925
+ "ranges" : [
926
+ {
927
+ "min" : "0",
928
+ "max" : "32"
929
+ },
930
+ ],
931
+ "range" : {
932
+ "min" : "0",
933
+ "max" : "32"
934
+ },
935
+ },
936
+ },
937
+ "access" : "readwrite",
938
+ "default" : "",
939
+ "description" :
940
+ """A publicly-readable value which can be written as part
941
+ of the procedure for changing a user's secret
942
+ authentication and/or privacy key, and later read to
943
+ determine whether the change of the secret was
944
+ effected.""",
945
+ }, # column
946
+ "usmUserStorageType" : {
947
+ "nodetype" : "column",
948
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
949
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.12",
950
+ "status" : "current",
951
+ "syntax" : {
952
+ "type" : { "module" :"SNMPv2-TC", "name" : "StorageType"},
953
+ },
954
+ "access" : "readwrite",
955
+ "default" : "nonVolatile",
956
+ "description" :
957
+ """The storage type for this conceptual row.
958
+
959
+ Conceptual rows having the value 'permanent' must
960
+ allow write-access at a minimum to:
961
+
962
+ - usmUserAuthKeyChange, usmUserOwnAuthKeyChange
963
+ and usmUserPublic for a user who employs
964
+ authentication, and
965
+ - usmUserPrivKeyChange, usmUserOwnPrivKeyChange
966
+ and usmUserPublic for a user who employs
967
+ privacy.
968
+
969
+
970
+
971
+ Note that any user who employs authentication or
972
+ privacy must allow its secret(s) to be updated and
973
+ thus cannot be 'readOnly'.
974
+
975
+ If an initial set operation tries to set the value to
976
+ 'readOnly' for a user who employs authentication or
977
+ privacy, then an 'inconsistentValue' error must be
978
+ returned. Note that if the value has been previously
979
+ set (implicit or explicit) to any value, then the rules
980
+ as defined in the StorageType Textual Convention apply.
981
+
982
+ It is an implementation issue to decide if a SET for
983
+ a readOnly or permanent row is accepted at all. In some
984
+ contexts this may make sense, in others it may not. If
985
+ a SET for a readOnly or permanent row is not accepted
986
+ at all, then a 'wrongValue' error must be returned.""",
987
+ }, # column
988
+ "usmUserStatus" : {
989
+ "nodetype" : "column",
990
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
991
+ "oid" : "1.3.6.1.6.3.15.1.2.2.1.13",
992
+ "status" : "current",
993
+ "syntax" : {
994
+ "type" : { "module" :"SNMPv2-TC", "name" : "RowStatus"},
995
+ },
996
+ "access" : "readwrite",
997
+ "description" :
998
+ """The status of this conceptual row.
999
+
1000
+ Until instances of all corresponding columns are
1001
+ appropriately configured, the value of the
1002
+ corresponding instance of the usmUserStatus column
1003
+ is 'notReady'.
1004
+
1005
+ In particular, a newly created row for a user who
1006
+ employs authentication, cannot be made active until the
1007
+ corresponding usmUserCloneFrom and usmUserAuthKeyChange
1008
+ have been set.
1009
+
1010
+ Further, a newly created row for a user who also
1011
+ employs privacy, cannot be made active until the
1012
+ usmUserPrivKeyChange has been set.
1013
+
1014
+ The RowStatus TC [RFC2579] requires that this
1015
+ DESCRIPTION clause states under which circumstances
1016
+ other objects in this row can be modified:
1017
+
1018
+ The value of this object has no effect on whether
1019
+ other objects in this conceptual row can be modified,
1020
+ except for usmUserOwnAuthKeyChange and
1021
+ usmUserOwnPrivKeyChange. For these 2 objects, the
1022
+
1023
+
1024
+
1025
+ value of usmUserStatus MUST be active.""",
1026
+ }, # column
1027
+ "usmMIBConformance" : {
1028
+ "nodetype" : "node",
1029
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
1030
+ "oid" : "1.3.6.1.6.3.15.2",
1031
+ }, # node
1032
+ "usmMIBCompliances" : {
1033
+ "nodetype" : "node",
1034
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
1035
+ "oid" : "1.3.6.1.6.3.15.2.1",
1036
+ }, # node
1037
+ "usmMIBGroups" : {
1038
+ "nodetype" : "node",
1039
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
1040
+ "oid" : "1.3.6.1.6.3.15.2.2",
1041
+ }, # node
1042
+ }, # nodes
1043
+
1044
+ "groups" : {
1045
+ "usmMIBBasicGroup" : {
1046
+ "nodetype" : "group",
1047
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
1048
+ "oid" : "1.3.6.1.6.3.15.2.2.1",
1049
+ "status" : "current",
1050
+ "members" : {
1051
+ "usmStatsUnsupportedSecLevels" : {
1052
+ "nodetype" : "member",
1053
+ "module" : "SNMP-USER-BASED-SM-MIB"
1054
+ },
1055
+ "usmStatsNotInTimeWindows" : {
1056
+ "nodetype" : "member",
1057
+ "module" : "SNMP-USER-BASED-SM-MIB"
1058
+ },
1059
+ "usmStatsUnknownUserNames" : {
1060
+ "nodetype" : "member",
1061
+ "module" : "SNMP-USER-BASED-SM-MIB"
1062
+ },
1063
+ "usmStatsUnknownEngineIDs" : {
1064
+ "nodetype" : "member",
1065
+ "module" : "SNMP-USER-BASED-SM-MIB"
1066
+ },
1067
+ "usmStatsWrongDigests" : {
1068
+ "nodetype" : "member",
1069
+ "module" : "SNMP-USER-BASED-SM-MIB"
1070
+ },
1071
+ "usmStatsDecryptionErrors" : {
1072
+ "nodetype" : "member",
1073
+ "module" : "SNMP-USER-BASED-SM-MIB"
1074
+ },
1075
+ "usmUserSpinLock" : {
1076
+ "nodetype" : "member",
1077
+ "module" : "SNMP-USER-BASED-SM-MIB"
1078
+ },
1079
+ "usmUserSecurityName" : {
1080
+ "nodetype" : "member",
1081
+ "module" : "SNMP-USER-BASED-SM-MIB"
1082
+ },
1083
+ "usmUserCloneFrom" : {
1084
+ "nodetype" : "member",
1085
+ "module" : "SNMP-USER-BASED-SM-MIB"
1086
+ },
1087
+ "usmUserAuthProtocol" : {
1088
+ "nodetype" : "member",
1089
+ "module" : "SNMP-USER-BASED-SM-MIB"
1090
+ },
1091
+ "usmUserAuthKeyChange" : {
1092
+ "nodetype" : "member",
1093
+ "module" : "SNMP-USER-BASED-SM-MIB"
1094
+ },
1095
+ "usmUserOwnAuthKeyChange" : {
1096
+ "nodetype" : "member",
1097
+ "module" : "SNMP-USER-BASED-SM-MIB"
1098
+ },
1099
+ "usmUserPrivProtocol" : {
1100
+ "nodetype" : "member",
1101
+ "module" : "SNMP-USER-BASED-SM-MIB"
1102
+ },
1103
+ "usmUserPrivKeyChange" : {
1104
+ "nodetype" : "member",
1105
+ "module" : "SNMP-USER-BASED-SM-MIB"
1106
+ },
1107
+ "usmUserOwnPrivKeyChange" : {
1108
+ "nodetype" : "member",
1109
+ "module" : "SNMP-USER-BASED-SM-MIB"
1110
+ },
1111
+ "usmUserPublic" : {
1112
+ "nodetype" : "member",
1113
+ "module" : "SNMP-USER-BASED-SM-MIB"
1114
+ },
1115
+ "usmUserStorageType" : {
1116
+ "nodetype" : "member",
1117
+ "module" : "SNMP-USER-BASED-SM-MIB"
1118
+ },
1119
+ "usmUserStatus" : {
1120
+ "nodetype" : "member",
1121
+ "module" : "SNMP-USER-BASED-SM-MIB"
1122
+ },
1123
+ }, # members
1124
+ "description" :
1125
+ """A collection of objects providing for configuration
1126
+ of an SNMP engine which implements the SNMP
1127
+ User-based Security Model.""",
1128
+ }, # group
1129
+ }, # groups
1130
+
1131
+ "compliances" : {
1132
+ "usmMIBCompliance" : {
1133
+ "nodetype" : "compliance",
1134
+ "moduleName" : "SNMP-USER-BASED-SM-MIB",
1135
+ "oid" : "1.3.6.1.6.3.15.2.1.1",
1136
+ "status" : "current",
1137
+ "description" :
1138
+ """The compliance statement for SNMP engines which
1139
+ implement the SNMP-USER-BASED-SM-MIB.""",
1140
+ "requires" : {
1141
+ "usmMIBBasicGroup" : {
1142
+ "nodetype" : "mandatory",
1143
+ "module" : "SNMP-USER-BASED-SM-MIB"
1144
+ },
1145
+ }, # requires
1146
+ "refinements" : {
1147
+ "usmUserAuthProtocol" : {
1148
+ "module" : "SNMP-USER-BASED-SM-MIB",
1149
+ "access" : "readonly",
1150
+ "description" :
1151
+ """Write access is not required.""",
1152
+ },
1153
+ "usmUserPrivProtocol" : {
1154
+ "module" : "SNMP-USER-BASED-SM-MIB",
1155
+ "access" : "readonly",
1156
+ "description" :
1157
+ """Write access is not required.""",
1158
+ },
1159
+ }, # refinements
1160
+
1161
+ }, # compliance
1162
+ }, # compliances
1163
+
1164
+ }