协议分析网

　　waldbusser@ins.com In addition, the Host Resources MIB mailing list is dedicated to discussion of this MIB. To join the mailing list, send a request message to hostmib-request@andrew.cmu.edu. The mailing list address is hostmib@andrew.cmu.edu." DESCRIPTION "This MIB module registers type definitions for storage types, device types, and file system types. After the initial revision, this module will be maintained by IANA." REVISION "200003060000Z" -- 6 March 2000 DESCRIPTION "The original version of this module, published as RFC 2790." ::= { hrMIBAdminInfo 4 } -- Registrations for some storage types, for use with hrStorageType hrStorageTypes OBJECT IDENTIFIER ::= { hrStorage 1 } hrStorageOther OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used when no other defined type is appropriate." ::= { hrStorageTypes 1 } hrStorageRam OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for RAM." ::= { hrStorageTypes 2 } hrStorageVirtualMemory OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for virtual memory, temporary storage of swapped or paged memory." ::= { hrStorageTypes 3 } hrStorageFixedDisk OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for non-removable rigid rotating magnetic storage devices." ::= { hrStorageTypes 4 } hrStorageRemovableDisk OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for removable rigid rotating magnetic storage devices." ::= { hrStorageTypes 5 } hrStorageFloppyDisk OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for non-rigid rotating magnetic storage devices." ::= { hrStorageTypes 6 } hrStorageCompactDisc OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for read-only rotating optical storage devices." ::= { hrStorageTypes 7 } hrStorageRamDisk OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for a file system that is stored in RAM." ::= { hrStorageTypes 8 } hrStorageFlashMemory OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for flash memory." ::= { hrStorageTypes 9 } hrStorageNetworkDisk OBJECT-IDENTITY STATUS current DESCRIPTION "The storage type identifier used for a networked file system." ::= { hrStorageTypes 10 } -- Registrations for some device types, for use with hrDeviceType hrDeviceTypes OBJECT IDENTIFIER ::= { hrDevice 1 } hrDeviceOther OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used when no other defined type is appropriate." ::= { hrDeviceTypes 1 } hrDeviceUnknown OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used when the device type is unknown." ::= { hrDeviceTypes 2 } hrDeviceProcessor OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a CPU." ::= { hrDeviceTypes 3 } hrDeviceNetwork OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a network interface." ::= { hrDeviceTypes 4 } hrDevicePrinter OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a printer." ::= { hrDeviceTypes 5 } hrDeviceDiskStorage OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a disk drive." ::= { hrDeviceTypes 6 } hrDeviceVideo OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a video device." ::= { hrDeviceTypes 10 } hrDeviceAudio OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for an audio device." ::= { hrDeviceTypes 11 } hrDeviceCoprocessor OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a co-processor." ::= { hrDeviceTypes 12 } hrDeviceKeyboard OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a keyboard device." ::= { hrDeviceTypes 13 } hrDeviceModem OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a modem." ::= { hrDeviceTypes 14 } hrDeviceParallelPort OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a parallel port." ::= { hrDeviceTypes 15 } hrDevicePointing OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a pointing device (e.g., a mouse)." ::= { hrDeviceTypes 16 } hrDeviceSerialPort OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a serial port." ::= { hrDeviceTypes 17 } hrDeviceTape OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a tape storage device." ::= { hrDeviceTypes 18 } hrDeviceClock OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a clock device." ::= { hrDeviceTypes 19 } hrDeviceVolatileMemory OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a volatile memory storage device." ::= { hrDeviceTypes 20 } hrDeviceNonVolatileMemory OBJECT-IDENTITY STATUS current DESCRIPTION "The device type identifier used for a non-volatile memory storage device." ::= { hrDeviceTypes 21 } -- Registrations for some popular File System types, -- for use with hrFSType. hrFSTypes OBJECT IDENTIFIER ::= { hrDevice 9 } hrFSOther OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used when no other defined type is appropriate." ::= { hrFSTypes 1 } hrFSUnknown OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used when the type of file system is unknown." ::= { hrFSTypes 2 } hrFSBerkeleyFFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Berkeley Fast File System." ::= { hrFSTypes 3 } hrFSSys5FS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the System V File System." ::= { hrFSTypes 4 } hrFSFat OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for DOS's FAT file system." ::= { hrFSTypes 5 } hrFSHPFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for OS/2's High Performance File System." ::= { hrFSTypes 6 } hrFSHFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Macintosh Hierarchical File System." ::= { hrFSTypes 7 } hrFSMFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Macintosh File System." ::= { hrFSTypes 8 } hrFSNTFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Windows NT File System." ::= { hrFSTypes 9 } hrFSVNode OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the VNode File System." ::= { hrFSTypes 10 } hrFSJournaled OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Journaled File System." ::= { hrFSTypes 11 } hrFSiso9660 OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the ISO 9660 File System for CD's." ::= { hrFSTypes 12 } hrFSRockRidge OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the RockRidge File System for CD's." ::= { hrFSTypes 13 } hrFSNFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the NFS File System." ::= { hrFSTypes 14 } hrFSNetware OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Netware File System." ::= { hrFSTypes 15 } hrFSAFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Andrew File System." ::= { hrFSTypes 16 } hrFSDFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the OSF DCE Distributed File System." ::= { hrFSTypes 17 } hrFSAppleshare OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the AppleShare File System." ::= { hrFSTypes 18 } hrFSRFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the RFS File System." ::= { hrFSTypes 19 } hrFSDGCFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Data General DGCFS." ::= { hrFSTypes 20 } hrFSBFS OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the SVR4 Boot File System." ::= { hrFSTypes 21 } hrFSFAT32 OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Windows FAT32 File System." ::= { hrFSTypes 22 } hrFSLinuxExt2 OBJECT-IDENTITY STATUS current DESCRIPTION "The file system type identifier used for the Linux EXT2 File System." ::= { hrFSTypes 23 } END 6. Internationalization Considerations This MIB has many objects that identify file-system pathnames on the managed host. Many file systems allow pathnames to be encoded in a variety of character sets (other than ASCII), but do not support the encoding of the actual character set used with the pathname. The implementation strategy is that user interfaces (i.e. character-based shells or graphical applications) will have configuration options that control with which character set they will interpret and display all pathnames. This is often a per-user configuration (e.g. an environment variable), so that users using different languages and character sets on a multi-user system may each work effectively with their preferred character set. A human usually controls this configuration. If an application is not configured or is configured incorrectly, it will often have trouble displaying pathnames in the intended character set. This situation made it important for this MIB to handle two issues: 1) Pathname objects must be able to transfer a variety of character sets with potentially multi-byte encodings; and, 2) HostMIB agents will generally not be correctly configured for the appropriate character set to be used for all files on the system, particularly on a system with multiple users using different character sets. It was thus impossible to mandate that the agent tag pathnames with the character set in use. These issues were solved with the introduction of the InternationalDisplayString textual convention, which supports multi- byte encodings. Network management stations should use a local algorithm to determine which character set is in use and how it should be displayed. It is expected that network management station applications will rely on human configuration to choose which character set in which to interpret InternationalDisplayString objects, much like an application running locally on that host. 7. Security Considerations There are a number of management objects defined in this MIB that have a MAX-ACCESS clause of read-write. Such objects may be considered sensitive or vulnerable in some network environments. The support for SET operations in a non-secure environment without proper protection can have a negative effect on system operations. There are a number of managed objects in this MIB that may contain sensitive information. The objects in the Running Software Group list information about running software on the system (including the operating system software and version). Some may wish not to disclose to others what software they are running. Further, an inventory of the running software and versions may be helpful to an attacker who hopes to exploit software bugs in certain applications. The same issues exist for the objects in the Installed Software Group. It is thus important to control even GET access to these objects and possibly to even encrypt the values of these object when sending them over the network via SNMP. Not all versions of SNMP provide features for such a secure environment. SNMPv1 by itself is not a secure environment. Even if the network itself is secure (for example by using IPSec), even then, there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB. It is recommended that the implementers consider the security features as provided by the SNMPv3 framework. Specifically, the use of the User-based Security Model RFC2574 [RFC2574] and the View- based Access Control Model RFC2575 [RFC2575] is recommended. It is then a customer/user responsibility to ensure that the SNMP entity giving access to an instance of this MIB, is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them. 8. References [RFC2571] Harrington, D., Presuhn, R. and B. Wijnen, "An Architecture for Describing SNMP Management Frameworks", RFC2571, April 1999. [RFC1155] Rose, M. and K. McCloghrie, "Structure and Identification of Management Information for TCP/IP-based Internets", STD 16, RFC1155, May 1990. [RFC1212] Rose, M. and K. McCloghrie, "Concise MIB Definitions", STD 16, RFC1212, March 1991. [RFC1215] Rose, M., "A Convention for Defining Traps for use with the SNMP", RFC1215, March 1991. [RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC2578, April 1999. [RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Textual Conventions for SMIv2", STD 58, RFC2579, April 1999. [RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Conformance Statements for SMIv2", STD 58, RFC2580, April 1999. [RFC1157] Case, J., Fedor, M., Schoffstall, M. and J. Davin, "Simple Network Management Protocol", STD 15, RFC1157, May 1990. [RFC1901] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Introduction to Community-based SNMPv2", RFC1901, January 1996. [RFC1906] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Transport Mappings for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC1906, January 1996. [RFC2572] Case, J., Harrington D., Presuhn R. and B. Wijnen, "Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)", RFC2572, April 1999 [RFC2574] Blumenthal, U. and B. Wijnen, "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)", RFC2574, April 1999. [RFC1905] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Protocol Operations for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC1905, January 1996. [RFC2573] Levi, D., Meyer, P. and B. Stewart, "SNMPv3 Applications", RFC2573, April 1999. [RFC2575] Wijnen, B., Presuhn, R. and K. McCloghrie, "View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)", RFC2575, April 1999. [RFC2570] Case, J., Mundy, R., Partain, D. and B. Stewart, "Introduction to Version 3 of the Internet- standard Network Management Framework", RFC2570, April 1999. [RFC1907] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Management Information Base for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC1907, January 1996. [RFC2233] McCloghrie, K. and F. Kastenholz, "The Interfaces Group MIB", RFC2233, November 1997. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC2119, March 1997. 9. Acknowledgments This document was produced by the Host Resources MIB working group. Bobby Krupczak's efforts were particularly helpful in the creation of the draft standard version of this document. In addition, the authors gratefully acknowledge the comments of the following individuals: Amatzia Ben-Artzi NetManage Ron Bergman Hitachi, Inc. Steve Bostock Novell Stephen Bush GE Information Systems Jeff Case SNMP Research Chuck Davin Bellcore Ray Edgarton Bell Atlantic Mike Erlinger Aerospace Corporation Tim Farley Magee Enterprises Mark Kepke Hewlett Packard Bobby Krupczak Empire Technologies, Inc. Cheryl Krupczak Empire Technologies, Inc. Harry Lewis IBM Corp. Keith McCloghrie Cisco Systems Greg Minshall Novell Steve Moulton SNMP Research Dave Perkins Synoptics Ed Reeder Objective Systems Integrators Mike Ritter Apple Computer Marshall Rose Dover Beach Consulting Jon Saperia DEC Rodney Thayer Sable Technology Kaj Tesink Bellcore Dean Throop Data General Bert Wijnen Lucent Lloyd Young Lexmark International 10. Authors' Addresses Pete Grillo WeSync.com 1001 SW Fifth Ave, Fifth Floor Portland, OR 97204 Phone: 503-425-5051 Fax: 503-827-6718 email: pete@wesync.com Phone: +1 503 827 6717 Steven Waldbusser Lucent Technologies, Inc. 1213 Innsbruck Dr. Sunnyvale CA 94089 Phone: +1 650 318 1251 Fax: +1 650 318 1633 EMail: waldbusser@ins.com 11. Intellectual Property The IETF takes no position regarding the validity or scope of any intellectual property or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; neither does it represent that it has made any effort to identify any such rights. Information on the IETF's procedures with respect to rights in standards-track and standards-related documentation can be found in BCP-11. Copies of claims of rights made available for publication and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementors or users of this specification can be obtained from the IETF Secretariat. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights which may cover technology that may be required to practice this standard. Please address the information to the IETF Executive Director. 12. Full Copyright Statement Copyright (C) The Internet Society (2000). All Rights Reserved. This document and translations of it may be copied and furnished to others, and derivative works that comment on or otherwise explain it or assist in its implementation may be prepared, copied, published and distributed, in whole or in part, without restriction of any kind, provided that the above copyright notice and this paragraph are included on all such copies and derivative works. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as needed for the purpose of developing Internet standards in which case the procedures for copyrights defined in the Internet Standards process must be followed, or as required to translate it into languages other than English. The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assigns. This document and the information contained herein is provided on an "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Acknowledgement Funding for the RFCEditor function is currently provided by the Internet Society.