OID reference

feTotalEmailHasBadUrlH

1.3.6.1.4.1.25597.13.1.38

Description

This is a count of all the emails containing at least one URL determined to be malicious. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasBadUrlH is the high order 32bit of the 64bit counter.

Full description and source information

Identification

Identifier and names

Parent: 1.3.6.1.4.1.25597.13.1 (feEMPSInfo)
Node code: 38
Node name: feTotalEmailHasBadUrlH
Category: SNMP management object
Numeric OID: 1.3.6.1.4.1.25597.13.1.38
URN notation: urn:oid:1.3.6.1.4.1.25597.13.1.38

ASN.1, OID-IRI and named path variants

ASN.1 notation

{1 3 6 1 4 1 25597 13 1 38}

{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprises(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprises(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) vendor-objects(1) fireeye(25597) feEMPS(13) feEMPSInfo(1) feTotalEmailHasBadUrlH(38)}

OID-IRI notation

/1/3/6/1/4/1/25597/13/1/38
/ISO/Identified-Organization/6/1/4/1/25597/13/1/38
/ISO/3/6/1/4/1/25597/13/1/38

Named path variants

/iso/identified-organization/dod/internet/private/enterprise/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/identified-organization/dod/internet/private/enterprise/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/identified-organization/dod/internet/private/enterprises/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/identified-organization/dod/internet/private/enterprises/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/identified-organization/dod/internet/private/ldap-enterprise/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/identified-organization/dod/internet/private/ldap-enterprise/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/identified-organization/dod/internet/private/vendor-objects/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/identified-organization/dod/internet/private/vendor-objects/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/enterprise/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/enterprise/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/enterprises/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/enterprises/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/ldap-enterprise/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/ldap-enterprise/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/vendor-objects/25597/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
/iso/org/dod/internet/private/vendor-objects/fireeye/feEMPS/feEMPSInfo/feTotalEmailHasBadUrlH
Additional combinations skipped.

SNMP properties

Value type: Counter32
Maximum access defined by MIB: read-only
Status in MIB: current

Interpreting this counter

A counter is cumulative. To estimate a rate, subtract two readings and divide by the elapsed time; use the units stated in the MIB.

Counter values can wrap or reset. A decrease alone does not distinguish a wrap from a reset, and multiple wraps between readings cannot be recovered reliably. Check the device's discontinuity indicators when available.

Published counter width: 32 bits. SMIv2: Counter32 · Counter64

Using this OID with SNMP

At least one MIB declaration places this object in a scalar group. A scalar instance uses the suffix .0.

snmpget [connection options] DEVICE .1.3.6.1.4.1.25597.13.1.38.0

Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

Published definition

The displayed source records contain one distinct definition. Compare its source records.

feTotalEmailHasBadUrlH OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "This is a count of all the emails containing at least one URL 
        determined to be malicious.  This value will be the cumulative and preserved 
        across appliance reboots.  feTotalEmailHasBadUrlH is the high order 
        32bit of the 64bit counter."
    ::= { feEMPSInfo 38 }

Meaning

Descriptions

1 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Sources for this description

Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)

See 1 matching source record

Evidence

Source records

1 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)1 record · 2 sources

Description 1

feTotalEmailHasBadUrlH · currentMultiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)2 sources

Status in source: current.

Names: feTotalEmailHasBadUrlH

Technical details

{
  "smi_kind": "OBJECT-TYPE",
  "definition": [
    "feTotalEmailHasBadUrlH",
    "OBJECT-TYPE",
    "SYNTAX",
    "Counter32",
    "MAX-ACCESS",
    "read-only",
    "STATUS",
    "current",
    "DESCRIPTION",
    "\"This is a count of all the emails containing at least one URL determined to be malicious. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasBadUrlH is the high order 32bit of the 64bit counter.\"",
    "::=",
    "{",
    "feEMPSInfo",
    "38",
    "}"
  ],
  "syntax_tree": [
    [
      "ApplicationSyntax",
      "Counter32"
    ],
    null,
    [
      "MaxAccessPart",
      "read-only"
    ],
    [
      "Status",
      "current"
    ],
    [
      "DESCRIPTION",
      "This is a count of all the emails containing at least one URL determined to be malicious. This value will be the cumulative and preserved across appliance reboots. feTotalEmailHasBadUrlH is the high order 32bit of the 64bit counter."
    ],
    null,
    null,
    null,
    null
  ]
}

Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community) · Publisher's source file: FE-FIREEYE-MIB
Vendor MIB copy from the LibreNMS archive.

Module: FE-FIREEYE-MIB

See published definition above
Module imports
```
{'HCNUM-TC': ['CounterBasedGauge64'], 'SNMPv2-TC': ['TruthValue'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'NOTIFICATION-TYPE', 'enterprises', 'Integer32', 'Unsigned32', 'Counter32', 'Counter64', 'IpAddress', 'Gauge32'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'OBJECT-GROUP', 'NOTIFICATION-GROUP'], 'INET-ADDRESS-MIB': ['InetAddressType', 'InetAddress']}
```
· Download FE-FIREEYE-MIB
Related source files and packages:
- LibreNMS original distribution archive
- Archive revision metadata: librenms/librenms (JSON)
Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community) · Publisher's source file: Source package: observium-community-latest.tar.gz
Vendor MIB copy from the Observium Community archive.

Module: FE-FIREEYE-MIB

Same published definition
Module imports
```
{'HCNUM-TC': ['CounterBasedGauge64'], 'SNMPv2-TC': ['TruthValue'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'NOTIFICATION-TYPE', 'enterprises', 'Integer32', 'Unsigned32', 'Counter32', 'Counter64', 'IpAddress', 'Gauge32'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'OBJECT-GROUP', 'NOTIFICATION-GROUP'], 'INET-ADDRESS-MIB': ['InetAddressType', 'InetAddress']}
```
· Download FE-FIREEYE-MIB
Related source files and packages:
- Observium Community original distribution archive

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.25597)

Jordan Blake

Siblings (45)

OID	Name	Direct children	Descendants	Description
1.3.6.1.4.1.25597.13.1.1	feTotalEmailCount	0	0
1.3.6.1.4.1.25597.13.1.2	feTotalEmailCountH	0	0
1.3.6.1.4.1.25597.13.1.3	feTotalEmailCountL	0	0
1.3.6.1.4.1.25597.13.1.4	feInfectedEmailCount	0	0
1.3.6.1.4.1.25597.13.1.5	feInfectedEmailCountH	0	0
1.3.6.1.4.1.25597.13.1.6	feInfectedEmailCountL	0	0
1.3.6.1.4.1.25597.13.1.7	feAnalyzedEmailCount	0	0
1.3.6.1.4.1.25597.13.1.8	feAnalyzedEmailCountH	0	0
1.3.6.1.4.1.25597.13.1.9	feAnalyzedEmailCountL	0	0
1.3.6.1.4.1.25597.13.1.10	feTotalUrlCount	0	0
1.3.6.1.4.1.25597.13.1.11	feTotalUrlCountH	0	0
1.3.6.1.4.1.25597.13.1.12	feTotalUrlCountL	0	0
1.3.6.1.4.1.25597.13.1.13	feInfectedUrlCount	0	0
1.3.6.1.4.1.25597.13.1.14	feInfectedUrlCountH	0	0
1.3.6.1.4.1.25597.13.1.15	feInfectedUrlCountL	0	0
1.3.6.1.4.1.25597.13.1.16	feAnalyzedUrlCount	0	0
1.3.6.1.4.1.25597.13.1.17	feAnalyzedUrlCountH	0	0
1.3.6.1.4.1.25597.13.1.18	feAnalyzedUrlCountL	0	0
1.3.6.1.4.1.25597.13.1.19	feTotalAttachmentCount	0	0
1.3.6.1.4.1.25597.13.1.20	feTotalAttachmentCountH	0	0
1.3.6.1.4.1.25597.13.1.21	feTotalAttachmentCountL	0	0
1.3.6.1.4.1.25597.13.1.22	feInfectedAttachmentCount	0	0
1.3.6.1.4.1.25597.13.1.23	feInfectedAttachmentCountH	0	0
1.3.6.1.4.1.25597.13.1.24	feInfectedAttachmentCountL	0	0
1.3.6.1.4.1.25597.13.1.25	feAnalyzedAttachmentCount	0	0
1.3.6.1.4.1.25597.13.1.26	feAnalyzedAttachmentCountH	0	0
1.3.6.1.4.1.25597.13.1.27	feAnalyzedAttachmentCountL	0	0
1.3.6.1.4.1.25597.13.1.28	feTotalEmailHasAttachment	0	0
1.3.6.1.4.1.25597.13.1.29	feTotalEmailHasAttachmentH	0	0
1.3.6.1.4.1.25597.13.1.30	feTotalEmailHasAttachmentL	0	0
1.3.6.1.4.1.25597.13.1.31	feTotalEmailHasUrl	0	0
1.3.6.1.4.1.25597.13.1.32	feTotalEmailHasUrlH	0	0
1.3.6.1.4.1.25597.13.1.33	feTotalEmailHasUrlL	0	0
1.3.6.1.4.1.25597.13.1.34	feTotalEmailHasBadAttachment	0	0
1.3.6.1.4.1.25597.13.1.35	feTotalEmailHasBadAttachmentH	0	0
1.3.6.1.4.1.25597.13.1.36	feTotalEmailHasBadAttachmentL	0	0
1.3.6.1.4.1.25597.13.1.37	feTotalEmailHasBadUrl	0	0
1.3.6.1.4.1.25597.13.1.39	feTotalEmailHasBadUrlL	0	0
1.3.6.1.4.1.25597.13.1.40	feeQuarantineUsage	0	0
1.3.6.1.4.1.25597.13.1.41	feBypassEmailCount	0	0
1.3.6.1.4.1.25597.13.1.42	feBypassEmailCountH	0	0
1.3.6.1.4.1.25597.13.1.43	feBypassEmailCountL	0	0
1.3.6.1.4.1.25597.13.1.44	feDeferredEmailCount	0	0
1.3.6.1.4.1.25597.13.1.45	feHoldQueueEmailCount	0	0
1.3.6.1.4.1.25597.13.1.46	feOpenSmtpConnections	0	0