<head><META http-equiv="Content-Type" content="text/html; charset=UTF-8"> <link rel="stylesheet" type="text/css" href="mof.css" xmlns:lxslt="http://xml.apache.org/xslt"> <title>DMTF Schema Documentation Schema Documentation</title> </head><html> <body bgcolor="White"> <hr> </hr> <a name="CIM_IPNetworkSecurityIndication"></a> <H1>Class CIM_IPNetworkSecurityIndication<BR>extends <a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a> </H1>IPNetworkSecurityIndication is a class that represents events that have a network context, i.e. a source or destination address is a necessary property of the indication. More specific Indication subclasses that can derive from this class are for example, firewall or intrusion detection subclasses. This class is not limited to use on IPv4 networks but has numerical property support for IPv4 networks that can be used for efficient implementations of search and analysis.<h3> Table of Contents<br> <a href="#c_hierarchy">Hierarchy</a> <br> <a href="#c_subclasses">Direct Known Subclasses</a> <br> <a href="#c_qualifiers">Class Qualifiers</a> <br> <a href="#c_properties">Class Properties</a> <br> <a href="#c_methods">Class Methods</a> <br> </h3> <hr> </hr> <H2> <a name="c_hierarchy">Class Hierarchy</a> </H2> <a href="CIM_Indication.html">CIM_Indication</a> <br data="@NAME"> |<br> +--<a href="CIM_ProcessIndication.html">CIM_ProcessIndication</a> <br data="@NAME"> |<br> +--<a href="CIM_AlertIndication.html">CIM_AlertIndication</a> <br data="@NAME"> |<br> +--<a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a> <br data="@NAME"> |<br> +--<b>CIM_IPNetworkSecurityIndication</b> <br data="CIM_IPNetworkSecurityIndication -- CIM_SecurityIndication"> <H2> <a name="c_subclasses">Direct Known Subclasses</a> </H2> <a href="CIM_IPPacketFilterIndication.html">CIM_IPPacketFilterIndication</a> <BR> <H2> <a name="c_qualifiers">Class Qualifiers</a> </H2> <TABLE BORDER="1" CELLPADDING="1" WIDTH="100%"> <TR> <TH>Name</TH><TH>Data Type</TH><TH>Value</TH> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">IPNetworkSecurityIndication is a class that represents events that have a network context, i.e. a source or destination address is a necessary property of the indication. More specific Indication subclasses that can derive from this class are for example, firewall or intrusion detection subclasses. This class is not limited to use on IPv4 networks but has numerical property support for IPv4 networks that can be used for efficient implementations of search and analysis.</TD> </TR> <TR> <TD VALIGN="TOP">Experimental</TD><TD VALIGN="TOP">boolean</TD><TD VALIGN="TOP">true</TD> </TR> <TR> <TD VALIGN="TOP">Indication</TD><TD VALIGN="TOP">boolean</TD><TD VALIGN="TOP">true</TD> </TR> <TR> <TD VALIGN="TOP">UMLPackagePath</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM::Event</TD> </TR> <TR> <TD VALIGN="TOP">Version</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">2.10.0</TD> </TR> </TABLE> <H2> <a name="c_properties">Class Properties</a> </H2> <H3>Local Class Properties</H3> <TABLE WIDTH="100%" CELLPADDING="1" BORDER="1"> <TR> <TH ROWSPAN="2"><B>Name</B></TH><TH ROWSPAN="2"><B>Data Type</B></TH><TH ROWSPAN="2"><B>Default Value</B></TH><TH COLSPAN="5"><B>Qualifiers</B></TH> </TR> <TR> <TH>Name</TH><TH>Data Type</TH><TH>Value</TH> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">DestAddress</TH><TD ROWSPAN="3" VALIGN="TOP">string</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The address for the destination of the network traffic associated with this Indication from the Detector's point of view. This address MUST be identical to the IPv4NumericDestAddress if both property values are not NULL and the IPVersionSupport property is "IPv4".</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.IPv4NumericDestAddress, CIM_IPNetworkSecurityIndication.IPVersionSupport</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">DestMACAddress</TH><TD ROWSPAN="3" VALIGN="TOP">string</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The MAC address for the destination address for this message from the Detector's point of view.</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.DestAddress, CIM_IPNetworkSecurityIndication.IPv4NumericDestAddress</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">DestPort</TH><TD ROWSPAN="3" VALIGN="TOP">uint32</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The port for the destination address for this message from the Detector's point of view.</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.DestAddress, CIM_IPNetworkSecurityIndication.IPv4NumericDestAddress</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">DestPrefixLength</TH><TD ROWSPAN="3" VALIGN="TOP">uint8</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The prefix length for the IPv6 address for the destination of the network traffic associated with this Indication from the Detector's point of view.</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.DestAddress, CIM_IPNetworkSecurityIndication.IPVersionSupport</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">IPv4NumericDestAddress</TH><TD ROWSPAN="3" VALIGN="TOP">uint32</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The IPv4 destination address in numeric form. This address MUST be identical to the DestAddress property if both property values are not NULL and the IPVersionSupport property is "IPv4".</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.DestAddress, CIM_IPNetworkSecurityIndication.IPVersionSupport</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">IPv4NumericSourceAddress</TH><TD ROWSPAN="3" VALIGN="TOP">uint32</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The IPv4 source address in numeric form. This address MUST be identical to the SourceAddress property if both property values are not NULL and the IPVersionSupport property is "IPv4".</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.SourceAddress, CIM_IPNetworkSecurityIndication.IPVersionSupport</TD> </TR> <TR> <TH ROWSPAN="5" VALIGN="TOP">IPVersionSupport</TH><TD ROWSPAN="5" VALIGN="TOP">uint16</TD><TD ROWSPAN="5" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">This property explicitly defines support for different versions of the IP protocol for the traffic associated with this Indication.</TD> </TR> <TR> <TD VALIGN="TOP">Required</TD><TD VALIGN="TOP">boolean</TD><TD VALIGN="TOP">true</TD> </TR> <TR> <TD VALIGN="TOP">ValueMap</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">0, 2, 3</TD> </TR> <TR> <TD VALIGN="TOP">Values</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">Unknown, IPv4, IPv6</TD> </TR> <TR> <TH ROWSPAN="6" VALIGN="TOP">MessageType</TH><TD ROWSPAN="6" VALIGN="TOP">uint16</TD><TD ROWSPAN="6" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">An integer indicating the type of message to which the Indication applies. Generic indications of this class SHOULD set the value to Unknown. DMTF subclasses will define specific values from the DMTF Class Reserved range.</TD> </TR> <TR> <TD VALIGN="TOP">Override</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">MessageType</TD> </TR> <TR> <TD VALIGN="TOP">Required</TD><TD VALIGN="TOP">boolean</TD><TD VALIGN="TOP">true</TD> </TR> <TR> <TD VALIGN="TOP">ValueMap</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">0, .., 2, 3..500, 16000..</TD> </TR> <TR> <TD VALIGN="TOP">Values</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">Unknown, DMTF Reserved, Not Applicable, DMTF Class Reserved, Vendor Reserved</TD> </TR> <TR> <TH ROWSPAN="5" VALIGN="TOP">Protocol</TH><TD ROWSPAN="5" VALIGN="TOP">uint16</TD><TD ROWSPAN="5" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">An integer indicating the type of network protocol for the traffic associated with this Indication.</TD> </TR> <TR> <TD VALIGN="TOP">Required</TD><TD VALIGN="TOP">boolean</TD><TD VALIGN="TOP">true</TD> </TR> <TR> <TD VALIGN="TOP">ValueMap</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">0, 2, 3, 4, 5, 6</TD> </TR> <TR> <TD VALIGN="TOP">Values</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">Unknown, ARP, TCP, UDP, ICMP, IGMP</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">SourceAddress</TH><TD ROWSPAN="3" VALIGN="TOP">string</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The address for the originator of the network traffic associated with this Indication from the Detector's point of view. This address MUST be identical to the IPv4NumericSourceAddress if both property values are not NULL and the IPVersionSupport property is "IPv4" .</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.IPv4NumericSourceAddress, CIM_IPNetworkSecurityIndication.IPVersionSupport</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">SourceMACAddress</TH><TD ROWSPAN="3" VALIGN="TOP">string</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The MAC address for the source address for this message from the Detector's point of view.</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.SourceAddress, CIM_IPNetworkSecurityIndication.IPv4NumericSourceAddress</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">SourcePort</TH><TD ROWSPAN="3" VALIGN="TOP">uint32</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The port for the source address for this message from the Detector's point of view.</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.SourceAddress, CIM_IPNetworkSecurityIndication.IPv4NumericSourceAddress</TD> </TR> <TR> <TH ROWSPAN="3" VALIGN="TOP">SourcePrefixLength</TH><TD ROWSPAN="3" VALIGN="TOP">uint8</TD><TD ROWSPAN="3" VALIGN="TOP"></TD> </TR> <TR> <TD VALIGN="TOP">Description</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">The prefix length for the IPv6 address for the originator of the network traffic associated with this Indication from the Detector's point of view.</TD> </TR> <TR> <TD VALIGN="TOP">ModelCorrespondence</TD><TD VALIGN="TOP">string</TD><TD VALIGN="TOP">CIM_IPNetworkSecurityIndication.SourceAddress, CIM_IPNetworkSecurityIndication.IPVersionSupport</TD> </TR> </TABLE> <H3>Inherited Properties</H3> <TABLE BORDER="1" CELLPADDING="1" WIDTH="60%"> <TR> <TH>Name</TH><TH>Data Type</TH><TH>Class Origin</TH> </TR> <TR> <TH VALIGN="TOP">AlertingElementFormat</TH><TD VALIGN="TOP">uint16</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">AlertingManagedElement</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">AlertType</TH><TD VALIGN="TOP">uint16</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">Description</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">EventCount</TH><TD VALIGN="TOP">uint16</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">EventID</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">EventTime</TH><TD VALIGN="TOP">datetime</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">IndicationFilterName</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_Indication.html">CIM_Indication</a></TD> </TR> <TR> <TH VALIGN="TOP">IndicationIdentifier</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">IndicationStartCountTime</TH><TD VALIGN="TOP">datetime</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">IndicationTime</TH><TD VALIGN="TOP">datetime</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">Message</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">MessageID</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">OtherAlertingElementFormat</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">OtherAlertType</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">OtherSeverity</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_Indication.html">CIM_Indication</a></TD> </TR> <TR> <TH VALIGN="TOP">OwningEntity</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">PerceivedSeverity</TH><TD VALIGN="TOP">uint16</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">ProbableCause</TH><TD VALIGN="TOP">uint16</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">ProbableCauseDescription</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">ProviderName</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">SystemCreationClassName</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">SystemName</TH><TD VALIGN="TOP">string</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">Trending</TH><TD VALIGN="TOP">uint16</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">CorrelatedIndications</TH><TD VALIGN="TOP">string[]</TD><TD VALIGN="TOP"><a href="CIM_Indication.html">CIM_Indication</a></TD> </TR> <TR> <TH VALIGN="TOP">Effects</TH><TD VALIGN="TOP">uint16[]</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">Mechanisms</TH><TD VALIGN="TOP">uint16[]</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">MessageArguments</TH><TD VALIGN="TOP">string[]</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">MoreSpecificEffects</TH><TD VALIGN="TOP">string[]</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">MoreSpecificMechanisms</TH><TD VALIGN="TOP">string[]</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">MoreSpecificResources</TH><TD VALIGN="TOP">string[]</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">RecommendedActions</TH><TD VALIGN="TOP">string[]</TD><TD VALIGN="TOP"><a href="CIM_AlertIndication.html">CIM_AlertIndication</a></TD> </TR> <TR> <TH VALIGN="TOP">Resources</TH><TD VALIGN="TOP">uint16[]</TD><TD VALIGN="TOP"><a href="CIM_SecurityIndication.html">CIM_SecurityIndication</a></TD> </TR> </TABLE> <h2> <a name="c_methods">Class Methods</a> </h2> </body> </html>
