This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.
Element ARPCacheObj:ARP_Cache
Namespace
http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARP_Cache object is intended to characterize an address resolution protocol (ARP) cache on a system.
<xs:element name="ARP_Cache" type="ARPCacheObj:ARPCacheObjectType"><xs:annotation><xs:documentation>The ARP_Cache object is intended to characterize an address resolution protocol (ARP) cache on a system.</xs:documentation></xs:annotation></xs:element>
<xs:element name="ARP_Cache_Entry" type="ARPCacheObj:ARPCacheEntryType" maxOccurs="unbounded"><xs:annotation><xs:documentation>The ARP_Cache_Entry field is intended to characterize a single address resolution protocol (ARP) cache entry.</xs:documentation></xs:annotation></xs:element>
The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry.
Diagram
Type
AddressObjectType
Source
<xs:element minOccurs="0" name="IP_Address" type="AddressObj:AddressObjectType"><xs:annotation><xs:documentation>The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry.</xs:documentation></xs:annotation></xs:element>
The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets.
Diagram
Type
StringObjectPropertyType
Source
<xs:element minOccurs="0" name="Physical_Address" type="cyboxCommon:StringObjectPropertyType"><xs:annotation><xs:documentation>The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets.</xs:documentation></xs:annotation></xs:element>
<xs:element minOccurs="0" name="Type" type="ARPCacheObj:ARPCacheEntryTypeType"><xs:annotation><xs:documentation>The Type field specifies the type of ARP cache entry, which typically refers to the way the entry was added to the cache.</xs:documentation></xs:annotation></xs:element>
The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs.
Diagram
Type
NetworkInterfaceType
Source
<xs:element minOccurs="0" name="Network_Interface" type="SystemObj:NetworkInterfaceType"><xs:annotation><xs:documentation>The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs.</xs:documentation></xs:annotation></xs:element>
Complex Type ARPCacheObj:ARPCacheObjectType
Namespace
http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheObjectType type is intended to characterize entries in a system's address resolution protocol (ARP) cache.
<xs:complexType name="ARPCacheObjectType" mixed="false"><xs:annotation><xs:documentation>The ARPCacheObjectType type is intended to characterize entries in a system's address resolution protocol (ARP) cache.</xs:documentation></xs:annotation><xs:complexContent><xs:extension base="cyboxCommon:ObjectPropertiesType"><xs:sequence><xs:element name="ARP_Cache_Entry" type="ARPCacheObj:ARPCacheEntryType" maxOccurs="unbounded"><xs:annotation><xs:documentation>The ARP_Cache_Entry field is intended to characterize a single address resolution protocol (ARP) cache entry.</xs:documentation></xs:annotation></xs:element></xs:sequence></xs:extension></xs:complexContent></xs:complexType>
Complex Type ARPCacheObj:ARPCacheEntryType
Namespace
http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheEntryType type is intended to characterize a single entry in a system's ARP cache.
<xs:complexType name="ARPCacheEntryType"><xs:annotation><xs:documentation>The ARPCacheEntryType type is intended to characterize a single entry in a system's ARP cache.</xs:documentation></xs:annotation><xs:sequence><xs:element minOccurs="0" name="IP_Address" type="AddressObj:AddressObjectType"><xs:annotation><xs:documentation>The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry.</xs:documentation></xs:annotation></xs:element><xs:element minOccurs="0" name="Physical_Address" type="cyboxCommon:StringObjectPropertyType"><xs:annotation><xs:documentation>The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets.</xs:documentation></xs:annotation></xs:element><xs:element minOccurs="0" name="Type" type="ARPCacheObj:ARPCacheEntryTypeType"><xs:annotation><xs:documentation>The Type field specifies the type of ARP cache entry, which typically refers to the way the entry was added to the cache.</xs:documentation></xs:annotation></xs:element><xs:element minOccurs="0" name="Network_Interface" type="SystemObj:NetworkInterfaceType"><xs:annotation><xs:documentation>The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs.</xs:documentation></xs:annotation></xs:element></xs:sequence></xs:complexType>
Complex Type ARPCacheObj:ARPCacheEntryTypeType
Namespace
http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheEntryTypeType specifies ARP cache entry types via a union of the ARPCacheEntryTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.
<xs:complexType name="ARPCacheEntryTypeType"><xs:annotation><xs:documentation>The ARPCacheEntryTypeType specifies ARP cache entry types via a union of the ARPCacheEntryTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation></xs:annotation><xs:simpleContent><xs:restriction base="cyboxCommon:BaseObjectPropertyType"><xs:simpleType><xs:union memberTypes="ARPCacheObj:ARPCacheEntryTypeEnum xs:string"/></xs:simpleType><xs:attribute fixed="string" name="datatype" type="cyboxCommon:DatatypeEnum"><xs:annotation><xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation></xs:annotation></xs:attribute></xs:restriction></xs:simpleContent></xs:complexType>
Simple Type ARPCacheObj:ARPCacheEntryTypeEnum
Namespace
http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheEntryTypeEnum is an enumeration of arp cache entry types.
Diagram
Type
restriction of xs:string
Facets
enumeration
static
The static value specifies an IP address/physical address pair that was manually added to the cache table for a device and is kept in the cache on a permanent basis.
enumeration
dynamic
The dynamic value specifies an IP address/physical address pair added to the cache automatically as a result of successfully-completed past ARP resolutions.
Source
<xs:simpleType name="ARPCacheEntryTypeEnum"><xs:annotation><xs:documentation>The ARPCacheEntryTypeEnum is an enumeration of arp cache entry types.</xs:documentation></xs:annotation><xs:restriction base="xs:string"><xs:enumeration value="static"><xs:annotation><xs:documentation>The static value specifies an IP address/physical address pair that was manually added to the cache table for a device and is kept in the cache on a permanent basis.</xs:documentation></xs:annotation></xs:enumeration><xs:enumeration value="dynamic"><xs:annotation><xs:documentation>The dynamic value specifies an IP address/physical address pair added to the cache automatically as a result of successfully-completed past ARP resolutions.</xs:documentation></xs:annotation></xs:enumeration></xs:restriction></xs:simpleType>
<xs:attribute fixed="string" name="datatype" type="cyboxCommon:DatatypeEnum"><xs:annotation><xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation></xs:annotation></xs:attribute>