FE-FIREEYE-MIB: View SNMP OID List / Download MIB
VENDOR: FIREEYE INC.
Home | MIB: FE-FIREEYE-MIB | |||
---|---|---|---|---|
Download as: |
Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
|
|||
Object Name | OID | Type | Access | Info |
fireeye | 1.3.6.1.4.1.25597 | |||
variables | 1.3.6.1.4.1.25597.1 | |||
lms | 1.3.6.1.4.1.25597.1.1 | |||
lmsVersion | 1.3.6.1.4.1.25597.1.1.1 | octet string | no-access |
System software version string |
eventTable | 1.3.6.1.4.1.25597.1.1.2 | no-access |
List of events |
|
1.3.6.1.4.1.25597.1.1.2.1 | no-access |
Entry for one event |
||
eventIndex | 1.3.6.1.4.1.25597.1.1.2.1.1 | unsigned32 | no-access |
Synthetic numeric unique ID of event |
eventId | 1.3.6.1.4.1.25597.1.1.2.1.2 | unsigned32 | no-access |
Id of event |
eventType | 1.3.6.1.4.1.25597.1.1.2.1.3 | octet string | no-access |
Type of event |
eventDate | 1.3.6.1.4.1.25597.1.1.2.1.4 | octet string | no-access |
Date of event |
eventTime | 1.3.6.1.4.1.25597.1.1.2.1.5 | octet string | no-access |
Time of event |
eventTraceId | 1.3.6.1.4.1.25597.1.1.2.1.6 | counter64 | no-access |
Trace ID of event |
eventSrcIp | 1.3.6.1.4.1.25597.1.1.2.1.7 | ipaddress | no-access |
Source IP address of event |
eventDstIp | 1.3.6.1.4.1.25597.1.1.2.1.8 | ipaddress | no-access |
Destination IP address of event |
eventSrcMac | 1.3.6.1.4.1.25597.1.1.2.1.9 | octet string | no-access |
Source MAC address of event |
eventDstMac | 1.3.6.1.4.1.25597.1.1.2.1.10 | octet string | no-access |
Destination MAC address of event |
eventDstPort | 1.3.6.1.4.1.25597.1.1.2.1.11 | integer32 | no-access |
Attacked port of event |
eventVlan | 1.3.6.1.4.1.25597.1.1.2.1.12 | integer32 | no-access |
VLAN of event |
eventProtocol | 1.3.6.1.4.1.25597.1.1.2.1.13 | octet string | no-access |
IP protocol of event |
eventProfileId | 1.3.6.1.4.1.25597.1.1.2.1.14 | unsigned32 | no-access |
Profile ID of event |
eventOsInfo | 1.3.6.1.4.1.25597.1.1.2.1.15 | octet string | no-access |
OS info of event |
eventService | 1.3.6.1.4.1.25597.1.1.2.1.16 | octet string | no-access |
Attacked service of event |
eventAttackType | 1.3.6.1.4.1.25597.1.1.2.1.17 | octet string | no-access |
Attack type of event |
eventSignatureName | 1.3.6.1.4.1.25597.1.1.2.1.18 | octet string | no-access |
Signature name of event |
eventSignatureType | 1.3.6.1.4.1.25597.1.1.2.1.19 | octet string | no-access |
Signature type of event |
eventSrcHost | 1.3.6.1.4.1.25597.1.1.2.1.20 | octet string | no-access |
Host name of event |
eventCncNo | 1.3.6.1.4.1.25597.1.1.2.1.21 | unsigned32 | no-access |
Cncno of event |
alertSignatureId | 1.3.6.1.4.1.25597.1.1.2.1.22 | unsigned32 | no-access |
Malware Identification |
alertCncHost | 1.3.6.1.4.1.25597.1.1.2.1.23 | octet string | no-access |
Alert CNC host name |
alertCncPort | 1.3.6.1.4.1.25597.1.1.2.1.24 | integer32 | no-access |
Alert CNC Port |
alertChecksum | 1.3.6.1.4.1.25597.1.1.2.1.25 | octet string | no-access |
Alert Malware Checksum |
alertAnalysisType | 1.3.6.1.4.1.25597.1.1.2.1.26 | octet string | no-access |
Alert analysis type |
alertProfile | 1.3.6.1.4.1.25597.1.1.2.1.27 | octet string | no-access |
Alert analysis profile |
alertAction | 1.3.6.1.4.1.25597.1.1.2.1.28 | octet string | no-access |
Alert action taken |
alertInterface | 1.3.6.1.4.1.25597.1.1.2.1.29 | octet string | no-access |
Appliance interface |
alertSensorIp | 1.3.6.1.4.1.25597.1.1.2.1.30 | ipaddress | no-access |
Appliance IP address |
alertSensorHost | 1.3.6.1.4.1.25597.1.1.2.1.31 | octet string | no-access |
Appliance host name |
alertSensorProduct | 1.3.6.1.4.1.25597.1.1.2.1.32 | octet string | no-access |
Product Name |
alertSensorRelease | 1.3.6.1.4.1.25597.1.1.2.1.33 | octet string | no-access |
Alert URL |
alertUrl | 1.3.6.1.4.1.25597.1.1.2.1.34 | octet string | no-access |
Alert URL |
eventSrcAddrType | 1.3.6.1.4.1.25597.1.1.2.1.35 | inetaddresstype | no-access |
Source IP address type |
eventSrcAddr | 1.3.6.1.4.1.25597.1.1.2.1.36 | inetaddress | no-access |
Source IP address |
eventDstAddrType | 1.3.6.1.4.1.25597.1.1.2.1.37 | inetaddresstype | no-access |
Destination IP address type |
eventDstAddr | 1.3.6.1.4.1.25597.1.1.2.1.38 | inetaddress | no-access |
Destination IP address |
eventSensorAddrType | 1.3.6.1.4.1.25597.1.1.2.1.39 | inetaddresstype | no-access |
Sensor IP address type |
eventSensorAddr | 1.3.6.1.4.1.25597.1.1.2.1.40 | inetaddress | no-access |
Sensor IP address |
eventSrcPort | 1.3.6.1.4.1.25597.1.1.2.1.41 | integer32 | no-access |
Source port |
eventDateTime | 1.3.6.1.4.1.25597.1.1.2.1.42 | octet string | no-access |
Date and time of the event |
ipsSignatureId | 1.3.6.1.4.1.25597.1.1.2.1.43 | unsigned32 | no-access |
IPS signature id |
ipsSignatureRevision | 1.3.6.1.4.1.25597.1.1.2.1.44 | unsigned32 | no-access |
IPS signature revision |
ipsMatchCount | 1.3.6.1.4.1.25597.1.1.2.1.45 | gauge32 | no-access |
Attack count |
ipsSeverity | 1.3.6.1.4.1.25597.1.1.2.1.46 | octet string | no-access |
Severity |
ipsSignatureName | 1.3.6.1.4.1.25597.1.1.2.1.47 | octet string | no-access |
Name of the signature |
ipsReferenceId | 1.3.6.1.4.1.25597.1.1.2.1.48 | octet string | no-access |
Reference ID |
ipsBlockMode | 1.3.6.1.4.1.25597.1.1.2.1.49 | octet string | no-access |
isBlocked |
ipsAttackTarget | 1.3.6.1.4.1.25597.1.1.2.1.50 | octet string | no-access |
Attack target |
eventCount | 1.3.6.1.4.1.25597.1.1.3 | unsigned32 | no-access |
Number of events |
notifications | 1.3.6.1.4.1.25597.3 | |||
notificationPrefix | 1.3.6.1.4.1.25597.3.0 | |||
fireeyeAlert | 1.3.6.1.4.1.25597.3.0.1 |
Execution anomaly detected |
||
executionAnomaly | 1.3.6.1.4.1.25597.3.0.2 |
Execution anomaly detected |
||
networkAnomaly | 1.3.6.1.4.1.25597.3.0.3 |
Network anomaly detected |
||
signatureMatch | 1.3.6.1.4.1.25597.3.0.4 |
Signature match detected |
||
ccConnect | 1.3.6.1.4.1.25597.3.0.9 |
CC connect detected |
||
ccSigmatch | 1.3.6.1.4.1.25597.3.0.10 |
CC sigmatch detected |
||
osChange | 1.3.6.1.4.1.25597.3.0.11 |
OS change anomaly detected |
||
ipsAlert | 1.3.6.1.4.1.25597.3.0.12 |
IPS anomaly detected. |
||
feCommon | 1.3.6.1.4.1.25597.11 | |||
feSystem | 1.3.6.1.4.1.25597.11.1 | |||
feSystemTraps | 1.3.6.1.4.1.25597.11.1.0 | |||
feExcessiveTemperature | 1.3.6.1.4.1.25597.11.1.0.1 |
Excessive temperature has reached. |
||
feNormalTemperature | 1.3.6.1.4.1.25597.11.1.0.2 |
Temperature is normal. |
||
feIfLinkChange | 1.3.6.1.4.1.25597.11.1.0.3 |
The speed of an interface has changed. |
||
feSystemInfo | 1.3.6.1.4.1.25597.11.1.1 | |||
feSystemStatus | 1.3.6.1.4.1.25597.11.1.1.1 | octet string | read-only |
Overall system status |
feHardwareModel | 1.3.6.1.4.1.25597.11.1.1.2 | octet string | read-only |
Hardware model |
feSerialNumber | 1.3.6.1.4.1.25597.11.1.1.3 | octet string | read-only |
Serial number |
feTemperatureValue | 1.3.6.1.4.1.25597.11.1.1.4 | integer32 | read-only |
System temperature in Celsius |
feTemperatureStatus | 1.3.6.1.4.1.25597.11.1.1.5 | octet string | read-only |
System temperature status |
feTemperatureIsHealthy | 1.3.6.1.4.1.25597.11.1.1.6 | truthvalue | read-only |
Whether or not the temperature is normal. |
feIfLinkChangeIfname | 1.3.6.1.4.1.25597.11.1.1.7 | octet string | no-access |
The name of the interface that has changed its speed. |
feIfLinkChangeOldAdminUp | 1.3.6.1.4.1.25597.11.1.1.8 | truthvalue | no-access |
The old admin up state of the interface. |
feIfLinkChangeNewAdminUp | 1.3.6.1.4.1.25597.11.1.1.9 | truthvalue | no-access |
The new admin up state of the interface. |
feIfLinkChangeOldLinkUp | 1.3.6.1.4.1.25597.11.1.1.10 | truthvalue | no-access |
The old link up state of the interface. |
feIfLinkChangeNewLinkUp | 1.3.6.1.4.1.25597.11.1.1.11 | truthvalue | no-access |
The new link up state of the interface. |
feIfLinkChangeOldSpeed | 1.3.6.1.4.1.25597.11.1.1.12 | integer32 | no-access |
The old speed of the interface. |
feIfLinkChangeNewSpeed | 1.3.6.1.4.1.25597.11.1.1.13 | integer32 | no-access |
The new speed of the interface. |
feIfLinkChangeOldDuplex | 1.3.6.1.4.1.25597.11.1.1.14 | integer32 | no-access |
The old duplex of the interface. |
feIfLinkChangeNewDuplex | 1.3.6.1.4.1.25597.11.1.1.15 | integer32 | no-access |
The new duplex of the interface. |
feIfLinkChangeOldAutoNeg | 1.3.6.1.4.1.25597.11.1.1.16 | truthvalue | no-access |
The old auto negotiation of the interface. |
feIfLinkChangeNewAutoNeg | 1.3.6.1.4.1.25597.11.1.1.17 | truthvalue | no-access |
The new auto negotiation of the interface. |
feStorage | 1.3.6.1.4.1.25597.11.2 | |||
feStorageTraps | 1.3.6.1.4.1.25597.11.2.0 | |||
feRaidFailure | 1.3.6.1.4.1.25597.11.2.0.1 |
A RAID error has occurred. |
||
feRaidRecover | 1.3.6.1.4.1.25597.11.2.0.2 |
RAID has recovered. |
||
fePhysicalDiskFailure | 1.3.6.1.4.1.25597.11.2.0.3 |
A physical disk has failed. |
||
fePhysicalDiskRecover | 1.3.6.1.4.1.25597.11.2.0.4 |
A physical disk has recovered. |
||
feStorageInfo | 1.3.6.1.4.1.25597.11.2.1 | |||
feRaidStatus | 1.3.6.1.4.1.25597.11.2.1.1 | octet string | read-only |
RAID status |
feRaidIsHealthy | 1.3.6.1.4.1.25597.11.2.1.2 | truthvalue | read-only |
Whether or not RAID is healthy overall. |
fePhysicalDiskTable | 1.3.6.1.4.1.25597.11.2.1.3 | no-access |
The physical disk table |
|
1.3.6.1.4.1.25597.11.2.1.3.1 | no-access |
An entry for one physical disk |
||
fePhysicalDiskIndex | 1.3.6.1.4.1.25597.11.2.1.3.1.1 | unsigned32 | read-only |
A unique value for each disk |
fePhysicalDiskName | 1.3.6.1.4.1.25597.11.2.1.3.1.2 | octet string | read-only |
Physical disk name |
fePhysicalDiskStatus | 1.3.6.1.4.1.25597.11.2.1.3.1.3 | octet string | read-only |
Physical disk status |
fePhysicalDiskIsHealthy | 1.3.6.1.4.1.25597.11.2.1.3.1.4 | truthvalue | read-only |
Whether a physical disk is healthy. |
fePhysicalDiskDeviceSupport | 1.3.6.1.4.1.25597.11.2.1.3.1.5 | octet string | read-only |
Physical disk configuration, e.g. RAID |
fePhysicalDiskSelfAssess | 1.3.6.1.4.1.25597.11.2.1.3.1.6 | octet string | read-only |
Self assess of a physical disk |
fePhysicalDiskTotalBytes | 1.3.6.1.4.1.25597.11.2.1.3.1.7 | octet string | read-only |
The capacity of a physical disk. |
fePowerSupply | 1.3.6.1.4.1.25597.11.3 | |||
fePowerSupplyTraps | 1.3.6.1.4.1.25597.11.3.0 | |||
fePowerSupplyFailure | 1.3.6.1.4.1.25597.11.3.0.1 |
A power supply has failed. |
||
fePowerSupplyRecover | 1.3.6.1.4.1.25597.11.3.0.2 |
A power supply has recovered. |
||
fePowerSupplyInfo | 1.3.6.1.4.1.25597.11.3.1 | |||
fePowerSupplyOverallStatus | 1.3.6.1.4.1.25597.11.3.1.1 | octet string | read-only |
Overall power supply status |
fePowerSupplyOverallIsHealthy | 1.3.6.1.4.1.25597.11.3.1.2 | truthvalue | read-only |
Whether or not power supply is healthy overall. |
fePowerSupplyTable | 1.3.6.1.4.1.25597.11.3.1.3 | no-access |
The power supply table |
|
1.3.6.1.4.1.25597.11.3.1.3.1 | no-access |
An entry for one physical disk |
||
fePowerSupplyIndex | 1.3.6.1.4.1.25597.11.3.1.3.1.1 | unsigned32 | read-only |
A unique value for each power supply |
fePowerSupplyStatus | 1.3.6.1.4.1.25597.11.3.1.3.1.2 | octet string | read-only |
Power supply status |
fePowerSupplyIsHealthy | 1.3.6.1.4.1.25597.11.3.1.3.1.3 | truthvalue | read-only |
Whether a power supply is healthy. |
feFanHealth | 1.3.6.1.4.1.25597.11.4 | |||
feFanHealthTraps | 1.3.6.1.4.1.25597.11.4.0 | |||
feFanFailure | 1.3.6.1.4.1.25597.11.4.0.1 |
A fan has failed. |
||
feFanRecover | 1.3.6.1.4.1.25597.11.4.0.2 |
A fan has recovered. |
||
feFanHealthInfo | 1.3.6.1.4.1.25597.11.4.1 | |||
feFanOverallStatus | 1.3.6.1.4.1.25597.11.4.1.1 | octet string | read-only |
Overall fan status |
feFanOverallIsHealthy | 1.3.6.1.4.1.25597.11.4.1.2 | truthvalue | read-only |
Whether or not fan is healthy overall. |
feFanStatusTable | 1.3.6.1.4.1.25597.11.4.1.3 | no-access |
The Fan Status table |
|
1.3.6.1.4.1.25597.11.4.1.3.1 | no-access |
An entry for one fan |
||
feFanIndex | 1.3.6.1.4.1.25597.11.4.1.3.1.1 | unsigned32 | read-only |
A unique value for each fan status table entry |
feFanStatus | 1.3.6.1.4.1.25597.11.4.1.3.1.2 | octet string | read-only |
Fan status |
feFanIsHealthy | 1.3.6.1.4.1.25597.11.4.1.3.1.3 | truthvalue | read-only |
Whether a fan is healthy. |
feFanSpeed | 1.3.6.1.4.1.25597.11.4.1.3.1.4 | unsigned32 | read-only |
Fan speed in rpm |
feApplication | 1.3.6.1.4.1.25597.11.5 | |||
feApplicationTraps | 1.3.6.1.4.1.25597.11.5.0 | |||
feLicenseStateChanged | 1.3.6.1.4.1.25597.11.5.0.1 |
A license state has changed. |
||
feSecurityUpdateFailed | 1.3.6.1.4.1.25597.11.5.0.2 |
Security update has failed. |
||
feApplicationInfo | 1.3.6.1.4.1.25597.11.5.1 | |||
feInstalledSystemImage | 1.3.6.1.4.1.25597.11.5.1.1 | octet string | read-only |
Current installed system image |
feSystemImageVersionCurrent | 1.3.6.1.4.1.25597.11.5.1.2 | octet string | read-only |
Current system image version |
feSystemImageVersionLatest | 1.3.6.1.4.1.25597.11.5.1.3 | octet string | read-only |
Latest system image version |
feIsSystemImageLatest | 1.3.6.1.4.1.25597.11.5.1.4 | truthvalue | read-only |
Whether or not the current system image is the latest. |
feSecurityContentVersion | 1.3.6.1.4.1.25597.11.5.1.5 | octet string | read-only |
Security content version |
feLastContentUpdatePassed | 1.3.6.1.4.1.25597.11.5.1.6 | truthvalue | read-only |
Whether the last security content updated has passed. |
feLastContentUpdateTime | 1.3.6.1.4.1.25597.11.5.1.7 | octet string | read-only |
The last update time for security contents |
feGIVersionTable | 1.3.6.1.4.1.25597.11.5.1.8 | no-access |
The guest image version table |
|
1.3.6.1.4.1.25597.11.5.1.8.1 | no-access |
An entry for one guest image |
||
feGIIndex | 1.3.6.1.4.1.25597.11.5.1.8.1.1 | unsigned32 | read-only |
A unique value for each guest image |
feGIName | 1.3.6.1.4.1.25597.11.5.1.8.1.2 | octet string | read-only |
Guest image name |
feGIVersion | 1.3.6.1.4.1.25597.11.5.1.8.1.3 | octet string | read-only |
Guest image version |
feGIEnabled | 1.3.6.1.4.1.25597.11.5.1.8.1.4 | truthvalue | read-only |
Whether guest image is enabled. |
feGIInstallDateTime | 1.3.6.1.4.1.25597.11.5.1.8.1.5 | octet string | read-only |
Guest image install date and time |
feActiveVMs | 1.3.6.1.4.1.25597.11.5.1.9 | unsigned32 | read-only |
Number of active VMs |
feProductLicenseActive | 1.3.6.1.4.1.25597.11.5.1.10 | truthvalue | read-only |
Whether the product license is active. |
feContentLicenseActive | 1.3.6.1.4.1.25597.11.5.1.11 | truthvalue | read-only |
Whether the content license is active. |
feSupportLicenseActive | 1.3.6.1.4.1.25597.11.5.1.12 | truthvalue | read-only |
Whether the support license is active. |
feLicenseFeatureName | 1.3.6.1.4.1.25597.11.5.1.13 | octet string | no-access |
License feature name for the feLicenseStateChanged event. |
feLicenseNewActiveState | 1.3.6.1.4.1.25597.11.5.1.14 | truthvalue | no-access |
The new license active state for the feLicenseStateChanged event. |
feLicenseOldActiveState | 1.3.6.1.4.1.25597.11.5.1.15 | truthvalue | no-access |
The old license active state for the feLicenseStateChanged event. |
feCMS | 1.3.6.1.4.1.25597.12 | |||
feCMSTraps | 1.3.6.1.4.1.25597.12.0 | |||
feCMSHAUnexpectedFailover | 1.3.6.1.4.1.25597.12.0.1 |
An unexpected fail-over on CMS-HA has occurred. |
||
feCMSHAManualFailover | 1.3.6.1.4.1.25597.12.0.2 |
A manual fail-over on CMS-HA has occurred. |
||
feCMSInfo | 1.3.6.1.4.1.25597.12.1 | |||
feTotalAppliancesAttached | 1.3.6.1.4.1.25597.12.1.1 | unsigned32 | read-only |
Total appliances attached |
feTotalWMPSAttached | 1.3.6.1.4.1.25597.12.1.2 | unsigned32 | read-only |
Total WMPS attached |
feTotalEMPSAttached | 1.3.6.1.4.1.25597.12.1.3 | unsigned32 | read-only |
Total EMPS attached |
feTotalFMPSAttached | 1.3.6.1.4.1.25597.12.1.4 | unsigned32 | read-only |
Total FMPS attached |
feTotalMASAttached | 1.3.6.1.4.1.25597.12.1.5 | unsigned32 | read-only |
Total MAS attached |
feCMSApplianceTable | 1.3.6.1.4.1.25597.12.1.6 | no-access |
The CMS managed appliance table |
|
1.3.6.1.4.1.25597.12.1.6.1 | no-access |
An entry for one CMS managed appliance |
||
feCMSApplianceIndex | 1.3.6.1.4.1.25597.12.1.6.1.1 | unsigned32 | read-only |
A unique value for each CMS managed appliance |
feCMSApplianceName | 1.3.6.1.4.1.25597.12.1.6.1.2 | octet string | read-only |
The name of the CMS managed appliance |
feCMSApplianceDiskSpacePassed | 1.3.6.1.4.1.25597.12.1.6.1.3 | truthvalue | read-only |
Whether a CMS managed appliance passed disk space check. |
feCMSApplianceFanPassed | 1.3.6.1.4.1.25597.12.1.6.1.4 | truthvalue | read-only |
Whether a CMS managed appliance passed fan check. |
feCMSAppliancePowerSupplyPassed | 1.3.6.1.4.1.25597.12.1.6.1.5 | truthvalue | read-only |
Whether a CMS managed appliance passed power supply check. |
feCMSApplianceRaidPassed | 1.3.6.1.4.1.25597.12.1.6.1.6 | truthvalue | read-only |
Whether a CMS managed appliance passed RAID check. |
feCMSApplianceTemperaturePassed | 1.3.6.1.4.1.25597.12.1.6.1.7 | truthvalue | read-only |
Whether a CMS managed appliance passed temperature check. |
feEMPS | 1.3.6.1.4.1.25597.13 | |||
feEMPSTraps | 1.3.6.1.4.1.25597.13.0 | |||
feDeferredQueueThreshold | 1.3.6.1.4.1.25597.13.0.1 |
Deferred queue email count exceeded a certain threshold. |
||
feBypassCountThreshold | 1.3.6.1.4.1.25597.13.0.2 |
Current bypass count exceeded a certain threshold. |
||
feSmtpInterfaceRefuseConnection | 1.3.6.1.4.1.25597.13.0.3 |
SMTP interface set to refuse connections because of congestion. |
||
feSmtpInterfaceRecover | 1.3.6.1.4.1.25597.13.0.4 |
SMTP interface re-enabled after recover. |
||
feEMPSBypassStateEntered | 1.3.6.1.4.1.25597.13.0.5 |
Email bypass state entered. |
||
feEMPSBypassStateExited | 1.3.6.1.4.1.25597.13.0.6 |
Email bypass state exited. |
||
feEMPSInfo | 1.3.6.1.4.1.25597.13.1 | |||
feTotalEmailCount | 1.3.6.1.4.1.25597.13.1.1 | counter64 | read-only |
This is a count of all the emails coming into postfix and also includes emails which do not contain any URL or attachment (email on fast path). This will be the cumulative value and maintained across appliance reboots. |
feTotalEmailCountH | 1.3.6.1.4.1.25597.13.1.2 | counter32 | read-only |
This is a count of all the emails coming into postfix and also includes emails which do not contain any URL or attachment (email on fast path). This will be the cumulative value and maintained across appliance reboots. feTotalEmailCountH is the high order 32bit of the 64bit counter. |
feTotalEmailCountL | 1.3.6.1.4.1.25597.13.1.3 | counter32 | read-only |
This is a count of all the emails coming into postfix and also includes emails which do not contain any URL or attachment (email on fast path). This will be the cumulative value and maintained across appliance reboots. feTotalEmailCountL is the low order 32bit of the 64bit counter. |
feInfectedEmailCount | 1.3.6.1.4.1.25597.13.1.4 | counter64 | read-only |
This is a count of all the email which are determined to be malicious. This is the same as 'Total Email Received with Malicious Content' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. |
feInfectedEmailCountH | 1.3.6.1.4.1.25597.13.1.5 | counter32 | read-only |
This is a count of all the email which are determined to be malicious. This is the same as 'Total Email Received with Malicious Content' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feInfectedEmailCountH is the high order 32bit of the 64bit counter. |
feInfectedEmailCountL | 1.3.6.1.4.1.25597.13.1.6 | counter32 | read-only |
This is a count of all the email which are determined to be malicious. This is the same as 'Total Email Received with Malicious Content' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feInfectedEmailCountL is the low order 32bit of the 64bit counter. |
feAnalyzedEmailCount | 1.3.6.1.4.1.25597.13.1.7 | counter64 | read-only |
This is cumulative count of all the email which were analyzed. This is the same as 'Total Emails Received and Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. |
feAnalyzedEmailCountH | 1.3.6.1.4.1.25597.13.1.8 | counter32 | read-only |
This is cumulative count of all the email which were analyzed. This is the same as 'Total Emails Received and Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. feAnalyzedEmailCountH is the high order 32bit of the 64bit counter. |
feAnalyzedEmailCountL | 1.3.6.1.4.1.25597.13.1.9 | counter32 | read-only |
This is cumulative count of all the email which were analyzed. This is the same as 'Total Emails Received and Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. feAnalyzedEmailCountL is the low order 32bit of the 64bit counter. |
feTotalUrlCount | 1.3.6.1.4.1.25597.13.1.10 | counter64 | read-only |
This is a count of all the URLs received whether they are processed or not. This is the same as 'Total URLs Received' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. |
feTotalUrlCountH | 1.3.6.1.4.1.25597.13.1.11 | counter32 | read-only |
This is a count of all the URLs received whether they are processed or not. This is the same as 'Total URLs Received' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feTotalUrlCountH is the high order 32bit of the 64bit counter. |
feTotalUrlCountL | 1.3.6.1.4.1.25597.13.1.12 | counter32 | read-only |
This is a count of all the URLs received whether they are processed or not. This is the same as 'Total URLs Received' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feTotalUrlCountL is the low order 32bit of the 64bit counter. |
feInfectedUrlCount | 1.3.6.1.4.1.25597.13.1.13 | counter64 | read-only |
This is a count of all the URLs that are determined to be malicious and is the same as 'Total URLs Considered Malicious' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. |
feInfectedUrlCountH | 1.3.6.1.4.1.25597.13.1.14 | counter32 | read-only |
This is a count of all the URLs that are determined to be malicious and is the same as 'Total URLs Considered Malicious' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feInfectedUrlCountH is the high order 32bit of the 64bit counter. |
feInfectedUrlCountL | 1.3.6.1.4.1.25597.13.1.15 | counter32 | read-only |
This is a count of all the URLs that are determined to be malicious and is the same as 'Total URLs Considered Malicious' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feInfectedUrlCountH is the low order 32bit of the 64bit counter. |
feAnalyzedUrlCount | 1.3.6.1.4.1.25597.13.1.16 | counter64 | read-only |
This is the cumulative count of all the URLs that were analyzed and is the same as 'Total URLs Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. |
feAnalyzedUrlCountH | 1.3.6.1.4.1.25597.13.1.17 | counter32 | read-only |
This is the cumulative count of all the URLs that were analyzed and is the same as 'Total URLs Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. feAnalyzedUrlCountH is the high order 32bit of the 64bit counter. |
feAnalyzedUrlCountL | 1.3.6.1.4.1.25597.13.1.18 | counter32 | read-only |
This is the cumulative count of all the URLs that were analyzed and is the same as 'Total URLs Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. feAnalyzedUrlCountL is the low order 32bit of the 64bit counter. |
feTotalAttachmentCount | 1.3.6.1.4.1.25597.13.1.19 | counter64 | read-only |
This is a count of all the attachment received whether they are processed or not. This is the same as 'Total Attachments Received' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. |
feTotalAttachmentCountH | 1.3.6.1.4.1.25597.13.1.20 | counter32 | read-only |
This is a count of all the attachment received whether they are processed or not. This is the same as 'Total Attachments Received' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feTotalAttachmentCountH is the high order 32bit of the 64bit counter. |
feTotalAttachmentCountL | 1.3.6.1.4.1.25597.13.1.21 | counter32 | read-only |
This is a count of all the attachment received whether they are processed or not. This is the same as 'Total Attachments Received' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feTotalAttachmentCountL is the low order 32bit of the 64bit counter. |
feInfectedAttachmentCount | 1.3.6.1.4.1.25597.13.1.22 | counter64 | read-only |
This is a count of all the attachment that are determined to be malicious and is the same as 'Total Attachments Considered Malicious' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. |
feInfectedAttachmentCountH | 1.3.6.1.4.1.25597.13.1.23 | counter32 | read-only |
This is a count of all the attachment that are determined to be malicious and is the same as 'Total Attachments Considered Malicious' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feInfectedAttachmentCountH is the high order 32bit of the 64bit counter. |
feInfectedAttachmentCountL | 1.3.6.1.4.1.25597.13.1.24 | counter32 | read-only |
This is a count of all the attachment that are determined to be malicious and is the same as 'Total Attachments Considered Malicious' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feInfectedAttachmentCountL is the low order 32bit of the 64bit counter. |
feAnalyzedAttachmentCount | 1.3.6.1.4.1.25597.13.1.25 | counter64 | read-only |
This is the cumulative count of all the attachment that we analyzed for maliciousness. This is the same as 'Total Attachments Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. |
feAnalyzedAttachmentCountH | 1.3.6.1.4.1.25597.13.1.26 | counter32 | read-only |
This is the cumulative count of all the attachment that we analyzed for maliciousness. This is the same as 'Total Attachments Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. feAnalyzedAttachmentCountH is the high order 32bit of the 64bit counter. |
feAnalyzedAttachmentCountL | 1.3.6.1.4.1.25597.13.1.27 | counter32 | read-only |
This is the cumulative count of all the attachment that we analyzed for maliciousness. This is the same as 'Total Attachments Analyzed' that we currently show in the output to CLI command 'show email-analysis statistics'. This counter will maintain its value across reboots. feAnalyzedAttachmentCountL is the low order 32bit of the 64bit counter. |
feTotalEmailHasAttachment | 1.3.6.1.4.1.25597.13.1.28 | counter64 | read-only |
This is a count of all the emails containing at least one attachment. This value will be the cumulative and preserved across appliance reboots. |
feTotalEmailHasAttachmentH | 1.3.6.1.4.1.25597.13.1.29 | counter32 | read-only |
This is a count of all the emails containing at least one attachment. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasAttachmentH is the high order 32bit of the 64bit counter. |
feTotalEmailHasAttachmentL | 1.3.6.1.4.1.25597.13.1.30 | counter32 | read-only |
This is a count of all the emails containing at least one attachment. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasAttachmentL is the low order 32bit of the 64bit counter. |
feTotalEmailHasUrl | 1.3.6.1.4.1.25597.13.1.31 | counter64 | read-only |
This is a count of all the emails containing at least one URL. This value will be the cumulative and preserved across appliance reboots. |
feTotalEmailHasUrlH | 1.3.6.1.4.1.25597.13.1.32 | counter32 | read-only |
This is a count of all the emails containing at least one URL. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasUrlH is the high order 32bit of the 64bit counter. |
feTotalEmailHasUrlL | 1.3.6.1.4.1.25597.13.1.33 | counter32 | read-only |
This is a count of all the emails containing at least one URL. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasUrlL is the low order 32bit of the 64bit counter. |
feTotalEmailHasBadAttachment | 1.3.6.1.4.1.25597.13.1.34 | counter64 | read-only |
This is a count of all the emails containing at least one attachment determined to be malicious. This value will be the cumulative and preserved across appliance reboots. |
feTotalEmailHasBadAttachmentH | 1.3.6.1.4.1.25597.13.1.35 | counter32 | read-only |
This is a count of all the emails containing at least one attachment determined to be malicious. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasBadAttachmentH is the high order 32bit of the 64bit counter. |
feTotalEmailHasBadAttachmentL | 1.3.6.1.4.1.25597.13.1.36 | counter32 | read-only |
This is a count of all the emails containing at least one attachment determined to be malicious. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasBadAttachmentL is the low order 32bit of the 64bit counter. |
feTotalEmailHasBadUrl | 1.3.6.1.4.1.25597.13.1.37 | counter64 | read-only |
This is a count of all the emails containing at least one URL determined to be malicious. This value will be the cumulative and preserved across appliance reboots. |
feTotalEmailHasBadUrlH | 1.3.6.1.4.1.25597.13.1.38 | counter32 | read-only |
This is a count of all the emails containing at least one URL determined to be malicious. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasBadUrlH is the high order 32bit of the 64bit counter. |
feTotalEmailHasBadUrlL | 1.3.6.1.4.1.25597.13.1.39 | counter32 | read-only |
This is a count of all the emails containing at least one URL determined to be malicious. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasBadUrlL is the low order 32bit of the 64bit counter. |
feeQuarantineUsage | 1.3.6.1.4.1.25597.13.1.40 | unsigned32 | read-only |
This is consumed capacity in term of percentage of max capacity. This is a snapshot value and represents current consumption value. |
feBypassEmailCount | 1.3.6.1.4.1.25597.13.1.41 | counter64 | read-only |
This is a count of Bypassed Emails and is the same as 'Total Emails Bypassed' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. |
feBypassEmailCountH | 1.3.6.1.4.1.25597.13.1.42 | counter32 | read-only |
This is a count of Bypassed Emails and is the same as 'Total Emails Bypassed' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feBypassEmailCountH is the high order 32bit of the 64bit counter. |
feBypassEmailCountL | 1.3.6.1.4.1.25597.13.1.43 | counter32 | read-only |
This is a count of Bypassed Emails and is the same as 'Total Emails Bypassed' that we currently show in the output to CLI command 'show email-analysis statistics'. This will be the cumulative value and is maintained across appliance reboots. feBypassEmailCountL is the low order 32bit of the 64bit counter. |
feDeferredEmailCount | 1.3.6.1.4.1.25597.13.1.44 | unsigned32 | read-only |
This is a count of deferred emails and will represent snapshot current value. |
feHoldQueueEmailCount | 1.3.6.1.4.1.25597.13.1.45 | unsigned32 | read-only |
This is a count of emails in the hold queue and will represent current snapshot value. |
feOpenSmtpConnections | 1.3.6.1.4.1.25597.13.1.46 | unsigned32 | read-only |
This is a snapshot value of currently open SMTP connections. |
feWMPS | 1.3.6.1.4.1.25597.14 | |||
feWMPSTraps | 1.3.6.1.4.1.25597.14.0 | |||
feHttpThroughputNotIncrease | 1.3.6.1.4.1.25597.14.0.1 |
HTTP throughput has not increased for a specified time. |
||
feHardwareBypassEntered | 1.3.6.1.4.1.25597.14.0.2 |
Permanent hardware bypass mode entered. |
||
feWMPSInfo | 1.3.6.1.4.1.25597.14.1 | |||
feMAS | 1.3.6.1.4.1.25597.15 | |||
feMASTraps | 1.3.6.1.4.1.25597.15.0 | |||
feMaliciousMaid | 1.3.6.1.4.1.25597.15.0.1 |
A malicious URL or file detected. |
||
feMASInfo | 1.3.6.1.4.1.25597.15.1 | |||
feTotalObjectAnalyzedCount | 1.3.6.1.4.1.25597.15.1.1 | counter64 | read-only |
This is a count of all the object analyzed, including all children of any samples, including URL. |
feTotalObjectAnalyzedCountH | 1.3.6.1.4.1.25597.15.1.2 | counter32 | read-only |
This is a count of all the object analyzed, including all children of any samples, including URL. feTotalObjectAnalyzedCountH is the high order 32bit of the 64bit counter. |
feTotalObjectAnalyzedCountL | 1.3.6.1.4.1.25597.15.1.3 | counter32 | read-only |
This is a count of all the object analyzed, including all children of any samples, including URL. feTotalObjectAnalyzedCountL is the low order 32bit of the 64bit counter. |
feTotalMaliciousObjectCount | 1.3.6.1.4.1.25597.15.1.4 | counter64 | read-only |
This is a count of all malicious samples detected. |
feTotalMaliciousObjectCountH | 1.3.6.1.4.1.25597.15.1.5 | counter32 | read-only |
This is a count of all malicious samples detected. feTotalMaliciousObjectCountH is the high order 32bit of the 64bit counter. |
feTotalMaliciousObjectCountL | 1.3.6.1.4.1.25597.15.1.6 | counter32 | read-only |
This is a count of all malicious samples detected. feTotalMaliciousObjectCountL is the low order 32bit of the 64bit counter. |
feTotalUrlAnalyzedCount | 1.3.6.1.4.1.25597.15.1.7 | counter64 | read-only |
This is a count of all samples that has file type: url. |
feTotalUrlAnalyzedCountH | 1.3.6.1.4.1.25597.15.1.8 | counter32 | read-only |
This is a count of all samples that has file type: url. feTotalUrlAnalyzedCountH is the high order 32bit of the 64bit counter. |
feTotalUrlAnalyzedCountL | 1.3.6.1.4.1.25597.15.1.9 | counter32 | read-only |
This is a count of all samples that has file type: url. feTotalUrlAnalyzedCountL is the low order 32bit of the 64bit counter. |
feTotalMaliciousUrlCount | 1.3.6.1.4.1.25597.15.1.10 | counter64 | read-only |
This is a count of all samples that has file type 'url' and also are malicious. |
feTotalMaliciousUrlCountH | 1.3.6.1.4.1.25597.15.1.11 | counter32 | read-only |
This is a count of all samples that has file type 'url' and also are malicious. feTotalMaliciousUrlCountH is the high order 32bit of the 64bit counter. |
feTotalMaliciousUrlCountL | 1.3.6.1.4.1.25597.15.1.12 | counter32 | read-only |
This is a count of all samples that has file type 'url' and also are malicious. feTotalMaliciousUrlCountL is the low order 32bit of the 64bit counter. |
feTotalFileUploadedCount | 1.3.6.1.4.1.25597.15.1.13 | counter64 | read-only |
This is a count of all object that has no parent (basically, children will not be counted). |
feTotalFileUploadedCountH | 1.3.6.1.4.1.25597.15.1.14 | counter32 | read-only |
This is a count of all object that has no parent (basically, children will not be counted). feTotalFileUploadedCountH is the high order 32bit of the 64bit counter. |
feTotalFileUploadedCountL | 1.3.6.1.4.1.25597.15.1.15 | counter32 | read-only |
This is a count of all object that has no parent (basically, children will not be counted). feTotalFileUploadedCountL is the low order 32bit of the 64bit counter. |
feTotalMaliciousFileCount | 1.3.6.1.4.1.25597.15.1.16 | counter64 | read-only |
This is a count of all object that has no parent (basically children will not be counted), and are not URL. |
feTotalMaliciousFileCountH | 1.3.6.1.4.1.25597.15.1.17 | counter32 | read-only |
This is a count of all object that has no parent (basically children will not be counted), and are not URL. feTotalMaliciousFileCountH is the high order 32bit of the 64bit counter. |
feTotalMaliciousFileCountL | 1.3.6.1.4.1.25597.15.1.18 | counter32 | read-only |
This is a count of all object that has no parent (basically children will not be counted), and are not URL. feTotalMaliciousFileCountL is the low order 32bit of the 64bit counter. |
feTotalLiveModeCount | 1.3.6.1.4.1.25597.15.1.19 | counter64 | read-only |
This is a count of all object that are submitted for live mode. |
feTotalLiveModeCountH | 1.3.6.1.4.1.25597.15.1.20 | counter32 | read-only |
This is a count of all object that are submitted for live mode. feTotalLiveModeCountH is the high order 32bit of the 64bit counter. |
feTotalLiveModeCountL | 1.3.6.1.4.1.25597.15.1.21 | counter32 | read-only |
This is a count of all object that are submitted for live mode. feTotalLiveModeCountL is the low order 32bit of the 64bit counter. |
feTotalMaliciousLiveModeCount | 1.3.6.1.4.1.25597.15.1.22 | counter64 | read-only |
This is a count of all object that are submitted for live mode and are malicious. Live mode object has no children. |
feTotalMaliciousLiveModeCountH | 1.3.6.1.4.1.25597.15.1.23 | counter32 | read-only |
This is a count of all object that are submitted for live mode and are malicious. Live mode object has no children. feTotalMaliciousLiveModeCountH is the high order 32bit of the 64bit counter. |
feTotalMaliciousLiveModeCountL | 1.3.6.1.4.1.25597.15.1.24 | counter32 | read-only |
This is a count of all object that are submitted for live mode and are malicious. Live mode object has no children. feTotalMaliciousLiveModeCountL is the low order 32bit of the 64bit counter. |
feMaid | 1.3.6.1.4.1.25597.15.1.25 | counterbasedgauge64 | no-access |
ID of the malicious sample/url. |
feMibAdminInfo | 1.3.6.1.4.1.25597.20 | |||
fireeyeMibModule | 1.3.6.1.4.1.25597.20.1 |
FireEye Inc Vendor MIB |
||
feMibCompliances | 1.3.6.1.4.1.25597.20.2 | |||
feMibCompliance | 1.3.6.1.4.1.25597.20.2.1 |
The requirements for conformance to the FireEye MIB. |
||
feMibGroups | 1.3.6.1.4.1.25597.20.3 | |||
feVariablesGroup | 1.3.6.1.4.1.25597.20.3.1 |
This groups contains objects for malware alerts. |
||
feNotificationsGroup | 1.3.6.1.4.1.25597.20.3.2 |
This groups contains notifications for malware alerts. |
||
feSystemInfoGroup | 1.3.6.1.4.1.25597.20.3.11 |
FireEye System Info Group. |
||
feSystemTrapGroup | 1.3.6.1.4.1.25597.20.3.12 |
FireEye System Trap Group. |
||
feStorageInfoGroup | 1.3.6.1.4.1.25597.20.3.13 |
FireEye Storage Info Group. |
||
feStorageTrapGroup | 1.3.6.1.4.1.25597.20.3.14 |
FireEye Storage Trap Group. |
||
fePowerSupplyInfoGroup | 1.3.6.1.4.1.25597.20.3.15 |
FireEye Power Supply Info Group. |
||
fePowerSupplyTrapGroup | 1.3.6.1.4.1.25597.20.3.16 |
FireEye Power Supply Trap Group. |
||
feFanHealthInfoGroup | 1.3.6.1.4.1.25597.20.3.17 |
FireEye Fan Health Info Group. |
||
feFanHealthTrapGroup | 1.3.6.1.4.1.25597.20.3.18 |
FireEye Fan Health Trap Group. |
||
feApplicationInfoGroup | 1.3.6.1.4.1.25597.20.3.19 |
FireEye Application Info Group. |
||
feApplicationTrapGroup | 1.3.6.1.4.1.25597.20.3.20 |
FireEye Application Trap Group. |
||
feCMSInfoGroup | 1.3.6.1.4.1.25597.20.3.21 |
FireEye CMPS Info Group. |
||
feCMSTrapGroup | 1.3.6.1.4.1.25597.20.3.22 |
FireEye CMS Trap Group. |
||
feEMPSInfoGroup | 1.3.6.1.4.1.25597.20.3.23 |
FireEye Email MPS Group. |
||
feEMPSTrapGroup | 1.3.6.1.4.1.25597.20.3.24 |
FireEye Email MPS Trap Group. |
||
feWMPSTrapGroup | 1.3.6.1.4.1.25597.20.3.26 |
FireEye Web MPS Trap Group. |
||
feMASInfoGroup | 1.3.6.1.4.1.25597.20.3.27 |
FireEye MAS Group. |
||
feMASTrapGroup | 1.3.6.1.4.1.25597.20.3.28 |
FireEye MAS Trap Group. |