FLOWMON-IAD-MIB DEFINITIONS ::= BEGIN

--
-- Flowmon Networks FMC MIB file
-- This MIB file is used for reporting statistics,
-- alerts and other events generated by FMC module.
-- FMC stands for Flowmon Monitoring Center
-- 
-- the root of the subtree under the private.enterprise node
-- is represented by flowmon node
--


IMPORTS
    MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, Unsigned32, enterprises
        FROM SNMPv2-SMI
    DisplayString, TimeStamp
        FROM SNMPv2-TC;

flowmonIadMIB MODULE-IDENTITY
    LAST-UPDATED "201806060823Z"
    ORGANIZATION "FLOWMON NETWORKS"
    CONTACT-INFO    
        "Postal:    Flowmon Networks a.s.
                    Sochorova 3232/34
                    616 00 Brno
                    Czech Republic
         Contact:   Martin Elich
         E-Mail:    martin.elich@flowmon.com"
    DESCRIPTION
        "This MIB module defines objects for Flowmon DDoS Defender alerting."
    REVISION     "201806060823Z"
    DESCRIPTION
        "Last revision."
    ::= { iad 1 }

flowmon OBJECT IDENTIFIER ::= { enterprises 39499 }
iad     OBJECT IDENTIFIER ::= { flowmon 2 }

-- "traps" must have zero index in order to be able to transalate "alert" into TRAP_TYPE or SNMPv1 Trap-PDU
traps OBJECT IDENTIFIER ::= { iad 0 }
datatypes OBJECT IDENTIFIER ::= { iad 2 }

alertName OBJECT-TYPE
    SYNTAX        DisplayString
    MAX-ACCESS    read-only
    STATUS        current
    DESCRIPTION   "Notification name"
    ::= { datatypes 1 }

eventTime OBJECT-TYPE
    SYNTAX        Unsigned32
    MAX-ACCESS    read-write
    STATUS        current
    DESCRIPTION
        "Start time in epoch format"
    ::= { datatypes 2 }

device OBJECT-TYPE
    SYNTAX        DisplayString (SIZE (0..255))
    MAX-ACCESS    read-write
    STATUS        current
    DESCRIPTION
        "Device indentifier"
    ::= { datatypes 3 }


segment OBJECT-TYPE
    SYNTAX       DisplayString (SIZE (0..4096))
    MAX-ACCESS   read-write
    STATUS       current
    DESCRIPTION
        "Relevant segment name"
    ::= { datatypes 4 }

attackId OBJECT-TYPE
    SYNTAX        Unsigned32
    MAX-ACCESS    read-write
    STATUS        current
    DESCRIPTION
        "Unique attack identifier"
    ::= { datatypes 5 }

alert NOTIFICATION-TYPE
    OBJECTS { alertName, device, segment, eventTime }
    STATUS current
    DESCRIPTION "Flowmon DDoS Defender Alert"
    ::= { traps 1 }

attackAlert NOTIFICATION-TYPE
    OBJECTS { alertName, device, segment, attackId, eventTime }
    STATUS current
    DESCRIPTION "Flowmon DDoS Defender Attack Alert"
    ::= { traps 2 }

END