This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org. ARP_Cache_Object 1.0 01/22/2014 The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included. The ARP_Cache object is intended to characterize an address resolution protocol (ARP) cache on a system. The ARPCacheObjectType type is intended to characterize entries in a system's address resolution protocol (ARP) cache. The ARP_Cache_Entry field is intended to characterize a single address resolution protocol (ARP) cache entry. The ARPCacheEntryType type is intended to characterize a single entry in a system's ARP cache. The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry. The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets. The Type field specifies the type of ARP cache entry, which typically refers to the way the entry was added to the cache. The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs. The ARPCacheEntryTypeType specifies ARP cache entry types via a union of the ARPCacheEntryTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications. This attribute is optional and specifies the expected type for the value of the specified property. The ARPCacheEntryTypeEnum is an enumeration of arp cache entry types. The static value specifies an IP address/physical address pair that was manually added to the cache table for a device and is kept in the cache on a permanent basis. The dynamic value specifies an IP address/physical address pair added to the cache automatically as a result of successfully-completed past ARP resolutions.