-- SunScreen(tm) MIB
-- @(#)sunscreen.mib	3.5 99/11/03
-- Copyright 1995, 1996, 1997, 1998, 1999 Sun Microsystems, Inc.
--
-- This mib covers the SunScreen(tm) product lines.  
--

SUN-SUNSCREEN

DEFINITIONS ::= BEGIN

	IMPORTS
 		enterprises
 			FROM RFC1155-SMI;

  sunNode             OBJECT IDENTIFIER ::= { enterprises 42 }
  sunProducts         OBJECT IDENTIFIER ::= { sunNode 2 }
  sunScreen           OBJECT IDENTIFIER ::= { sunProducts 11 }
  sunScreenTrap       OBJECT IDENTIFIER ::= { sunScreen 1 }
  sunScreenIntervalTrap OBJECT IDENTIFIER ::= { sunScreen 2 }

  interface OBJECT-TYPE
      SYNTAX   INTEGER  
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "The SunScreen(tm) network interface on which the packet was received"
      ::= { sunScreenTrap 1 }

  interfaceName OBJECT-TYPE
      SYNTAX   DisplayString  
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "The SunScreen(tm) network interface on which the packet was received"
      ::= { sunScreenTrap 6 }


  errorReason OBJECT-TYPE
      SYNTAX   INTEGER	{
	passed(1),			-- packet was passed
	noRuleOrDenyRule(256),		-- no rule or explicit DENY rule for packet
	noState(257),			-- no state entry found
	noMemory(258),			-- no memory left
	tooManySessions(259),		-- too many sessions
	invalidPort(260),		-- invalid port
	invalidFormat(261),		-- invalid format
	invalidDirection(262),		-- wrong direction (req vs rsp)
	tooManyResponses(263),		-- too many responses received
	tooShort(264),			-- packet too short
	invalidProtocol(265),		-- invalid protocol
	noPortmapEntry(266),		-- no portmap entry found
	invalidPortMapEntry(267),	-- invalid port map entry
	nisProtocolError(268),		-- NIS protocol error
	invalidInterface(269),		-- invalid interface
	invalidPolicy(270),		-- src/dst/service ok, but policy wrong
	invalidIdentity(271),		-- invalid identity
	invalidSourceAddress(272),	-- invalid source address
	stalePolicy(273),		-- stale policy
	fragmentTooBig(274),		-- fragment too big
	fragmentOverlap(275),		-- fragment overlap
	certNotInGroup(276),		-- source certificate not in group
	certNotInRule(277),		-- certificate not in rule
	invalidEncrypt(278),		-- attempt to encrypt decrypted packet
	noSKIPState(279),		-- no state associated with policy
	staleSKIPPolicy(280)		-- stale SKIP policy
      }  
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "The reason the SunScreen(tm) alert was generated"
      ::= { sunScreenTrap 2 }

  packetLength OBJECT-TYPE
      SYNTAX   INTEGER  
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "The actual length of the packet in bytes."
      ::= { sunScreenTrap 3 }

  lengthLogged OBJECT-TYPE
      SYNTAX   INTEGER  
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "The length of the data logged in bytes."
      ::= { sunScreenTrap 4 }

  packetData OBJECT-TYPE
      SYNTAX   OCTET STRING  
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "The packet data."
      ::= { sunScreenTrap 5 }

 
   
packetAlert TRAP-TYPE
	ENTERPRISE sunNode
	VARIABLES { interface, errorReason, packetLength, lengthLogged,
			 packetData }
	DESCRIPTION
		"Packet was received that triggered alert."
	::= 6

  cpuUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
	  "Average percentile CPU usage."
      ::= { sunScreenIntervalTrap 1 }

  memoryAvail OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
	  "Current swap space available, in kbytes."
      ::= { sunScreenIntervalTrap 2 }

  swapIn OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "Current swap ins."
      ::= { sunScreenIntervalTrap 3 }

  swapOut OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
	  "Current swap outs."
      ::= { sunScreenIntervalTrap 4 }

  scanRate OBJECT-TYPE
      SYNTAX    INTEGER
      ACCESS    read-only
      STATUS    mandatory
      DESCRIPTION
	"Current scan rate."
      ::= { sunScreenIntervalTrap 5 }

  tcpUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
	  "Current number of TCP connections in the SunScreen(tm) statetable."
      ::= { sunScreenIntervalTrap 6 }

  ipUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
 	  "Current number of IP connections in the SunScreen(tm) statetable."
      ::= { sunScreenIntervalTrap 7 }

  udpUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
	  "Current number of UDP connections in the SunScreen(tm) statetable."
      ::= { sunScreenIntervalTrap 8 }

  rootUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
	  "Disk usage of the root partition, /."
      ::= { sunScreenIntervalTrap 9 }

  varUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "Disk usage of the var partition, /var."
      ::= { sunScreenIntervalTrap 10 }

  etcUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "Disk usage of the configuration partition, /etc/opt."
      ::= { sunScreenIntervalTrap 11 }

  tmpUsage OBJECT-TYPE
      SYNTAX   INTEGER
      ACCESS   read-only
      STATUS   mandatory
      DESCRIPTION
          "Disk usage of the configuration partition, /tmp."
      ::= { sunScreenIntervalTrap 12 }

 
packetAlert TRAP-TYPE
	ENTERPRISE sunNode
	VARIABLES { cpuUsage, memoryUsage, swapIn, swapOut, scanRate, tcpUsage,
		    ipUsage, udpUsage, rootUsage, varUsage, etcUsage, tmpUsage }
	DESCRIPTION
		"Information sent out by SunScreen(tm) on a preset interval."
	::= 7

END





