Showing:

Annotations
Diagrams
Facets
Source
Used by
Main schema ARP_Cache_Object.xsd
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.
Element ARPCacheObj:ARP_Cache
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARP_Cache object is intended to characterize an address resolution protocol (ARP) cache on a system.
Diagram
Diagram ARP_Cache_Object_xsd.tmp#ARPCacheObjectType_ARP_Cache_Entry ARP_Cache_Object_xsd.tmp#ARPCacheObjectType
Type ARPCacheObj:ARPCacheObjectType
Type hierarchy
Children ARPCacheObj:ARP_Cache_Entry
Source
<xs:element name="ARP_Cache" type="ARPCacheObj:ARPCacheObjectType">
  <xs:annotation>
    <xs:documentation>The ARP_Cache object is intended to characterize an address resolution protocol (ARP) cache on a system.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ARPCacheObj:ARPCacheObjectType / ARPCacheObj:ARP_Cache_Entry
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARP_Cache_Entry field is intended to characterize a single address resolution protocol (ARP) cache entry.
Diagram
Diagram ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_IP_Address ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_Physical_Address ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_Type ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_Network_Interface ARP_Cache_Object_xsd.tmp#ARPCacheEntryType
Type ARPCacheObj:ARPCacheEntryType
Children ARPCacheObj:IP_Address, ARPCacheObj:Network_Interface, ARPCacheObj:Physical_Address, ARPCacheObj:Type
Source
<xs:element name="ARP_Cache_Entry" type="ARPCacheObj:ARPCacheEntryType" maxOccurs="unbounded">
  <xs:annotation>
    <xs:documentation>The ARP_Cache_Entry field is intended to characterize a single address resolution protocol (ARP) cache entry.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ARPCacheObj:ARPCacheEntryType / ARPCacheObj:IP_Address
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry.
Diagram
Diagram
Type AddressObjectType
Source
<xs:element minOccurs="0" name="IP_Address" type="AddressObj:AddressObjectType">
  <xs:annotation>
    <xs:documentation>The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ARPCacheObj:ARPCacheEntryType / ARPCacheObj:Physical_Address
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets.
Diagram
Diagram
Type StringObjectPropertyType
Source
<xs:element minOccurs="0" name="Physical_Address" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ARPCacheObj:ARPCacheEntryType / ARPCacheObj:Type
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The Type field specifies the type of ARP cache entry, which typically refers to the way the entry was added to the cache.
Diagram
Diagram ARP_Cache_Object_xsd.tmp#ARPCacheEntryTypeType_datatype ARP_Cache_Object_xsd.tmp#ARPCacheEntryTypeType
Type ARPCacheObj:ARPCacheEntryTypeType
Type hierarchy
Source
<xs:element minOccurs="0" name="Type" type="ARPCacheObj:ARPCacheEntryTypeType">
  <xs:annotation>
    <xs:documentation>The Type field specifies the type of ARP cache entry, which typically refers to the way the entry was added to the cache.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ARPCacheObj:ARPCacheEntryType / ARPCacheObj:Network_Interface
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs.
Diagram
Diagram
Type NetworkInterfaceType
Source
<xs:element minOccurs="0" name="Network_Interface" type="SystemObj:NetworkInterfaceType">
  <xs:annotation>
    <xs:documentation>The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs.</xs:documentation>
  </xs:annotation>
</xs:element>
Complex Type ARPCacheObj:ARPCacheObjectType
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheObjectType type is intended to characterize entries in a system's address resolution protocol (ARP) cache.
Diagram
Diagram ARP_Cache_Object_xsd.tmp#ARPCacheObjectType_ARP_Cache_Entry
Type extension of ObjectPropertiesType
Type hierarchy
Used by
Children ARPCacheObj:ARP_Cache_Entry
Source
<xs:complexType name="ARPCacheObjectType" mixed="false">
  <xs:annotation>
    <xs:documentation>The ARPCacheObjectType type is intended to characterize entries in a system's address resolution protocol (ARP) cache.</xs:documentation>
  </xs:annotation>
  <xs:complexContent>
    <xs:extension base="cyboxCommon:ObjectPropertiesType">
      <xs:sequence>
        <xs:element name="ARP_Cache_Entry" type="ARPCacheObj:ARPCacheEntryType" maxOccurs="unbounded">
          <xs:annotation>
            <xs:documentation>The ARP_Cache_Entry field is intended to characterize a single address resolution protocol (ARP) cache entry.</xs:documentation>
          </xs:annotation>
        </xs:element>
      </xs:sequence>
    </xs:extension>
  </xs:complexContent>
</xs:complexType>
Complex Type ARPCacheObj:ARPCacheEntryType
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheEntryType type is intended to characterize a single entry in a system's ARP cache.
Diagram
Diagram ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_IP_Address ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_Physical_Address ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_Type ARP_Cache_Object_xsd.tmp#ARPCacheEntryType_Network_Interface
Used by
Children ARPCacheObj:IP_Address, ARPCacheObj:Network_Interface, ARPCacheObj:Physical_Address, ARPCacheObj:Type
Source
<xs:complexType name="ARPCacheEntryType">
  <xs:annotation>
    <xs:documentation>The ARPCacheEntryType type is intended to characterize a single entry in a system's ARP cache.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="IP_Address" type="AddressObj:AddressObjectType">
      <xs:annotation>
        <xs:documentation>The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Physical_Address" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Type" type="ARPCacheObj:ARPCacheEntryTypeType">
      <xs:annotation>
        <xs:documentation>The Type field specifies the type of ARP cache entry, which typically refers to the way the entry was added to the cache.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Network_Interface" type="SystemObj:NetworkInterfaceType">
      <xs:annotation>
        <xs:documentation>The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type ARPCacheObj:ARPCacheEntryTypeType
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheEntryTypeType specifies ARP cache entry types via a union of the ARPCacheEntryTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.
Diagram
Diagram ARP_Cache_Object_xsd.tmp#ARPCacheEntryTypeType_datatype
Type restriction of BaseObjectPropertyType
Type hierarchy
Used by
Source
<xs:complexType name="ARPCacheEntryTypeType">
  <xs:annotation>
    <xs:documentation>The ARPCacheEntryTypeType specifies ARP cache entry types via a union of the ARPCacheEntryTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
  </xs:annotation>
  <xs:simpleContent>
    <xs:restriction base="cyboxCommon:BaseObjectPropertyType">
      <xs:simpleType>
        <xs:union memberTypes="ARPCacheObj:ARPCacheEntryTypeEnum xs:string"/>
      </xs:simpleType>
      <xs:attribute fixed="string" name="datatype" type="cyboxCommon:DatatypeEnum">
        <xs:annotation>
          <xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
    </xs:restriction>
  </xs:simpleContent>
</xs:complexType>
Simple Type ARPCacheObj:ARPCacheEntryTypeEnum
Namespace http://cybox.mitre.org/objects#ARPCacheObject-1
Annotations
The ARPCacheEntryTypeEnum is an enumeration of arp cache entry types.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration static
The static value specifies an IP address/physical address pair that was manually added to the cache table for a device and is kept in the cache on a permanent basis.
enumeration dynamic
The dynamic value specifies an IP address/physical address pair added to the cache automatically as a result of successfully-completed past ARP resolutions.
Source
<xs:simpleType name="ARPCacheEntryTypeEnum">
  <xs:annotation>
    <xs:documentation>The ARPCacheEntryTypeEnum is an enumeration of arp cache entry types.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:string">
    <xs:enumeration value="static">
      <xs:annotation>
        <xs:documentation>The static value specifies an IP address/physical address pair that was manually added to the cache table for a device and is kept in the cache on a permanent basis.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="dynamic">
      <xs:annotation>
        <xs:documentation>The dynamic value specifies an IP address/physical address pair added to the cache automatically as a result of successfully-completed past ARP resolutions.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
  </xs:restriction>
</xs:simpleType>
Attribute ARPCacheObj:ARPCacheEntryTypeType / @datatype
Namespace No namespace
Annotations
This attribute is optional and specifies the expected type for the value of the specified property.
Type DatatypeEnum
Used by
Source
<xs:attribute fixed="string" name="datatype" type="cyboxCommon:DatatypeEnum">
  <xs:annotation>
    <xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
  </xs:annotation>
</xs:attribute>