-
Notifications
You must be signed in to change notification settings - Fork 0
/
Event Mappings.txt
151 lines (133 loc) · 3.6 KB
/
Event Mappings.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
Event ID: block
Category: filterlog
Name: Firewall Deny
High Level Category: Access
Low Level Category: Firewall Deny
Severity: 4
Description: Firewall Session Denied
Event ID: pass
Category: filterlog
Name: Firewall Permit
High Level Category: Access
Low Level Category: Firewall Permit
Severity: 1
Description: Firewall Session Allowed
Event ID: DHCPDISCOVER
Category: dhcpd
Name: DHCP Discover
High Level Category: Application
Low Level Category: DHCP Session Opened
Severity: 1
Description: DHCP Discover
Event ID: DHCPACK
Category: dhcpd
Name: DHCP Acknowledgement
High Level Category: Application
Low Level Category: DHCP Success
Severity: 1
Description: DHCP Acknowledgement
Event ID: DHCPOFFER
Category: dhcpd
Name: DHCP Offer
High Level Category: Application
Low Level Category: DHCP Session In Progress
Severity: 1
Description: DHCP Offer
Event ID: DHCPREQUEST
Category: dhcpd
Name: DHCP Request
High Level Category: Application
Low Level Category: DHCP Session In Progress
Severity: 1
Description: DHCP Request
Event ID: DHCPRELEASE
Category: dhcpd
Name: DHCP Release
High Level Category: Application
Low Level Category: DHCP Session Closed
Severity: 1
Description: DHCP Release
Event ID: Wrote
Category: dhcpd
Name: DHCP Lease File Modification
High Level Category: Application
Low Level Category: Misc
Severity: 1
Description: Changes were performed to the DHCP lease file.
Event ID: reuse_lease
Category: dhcpd
Name: DHCP Reuse Existing Lease
High Level Category: Application
Low Level Category: DHCP Success
Severity: 1
Description: The DHCP server is replying to the client with the existing DHCP.
Event ID: DHCPREQUEST
Category: dhclient
Name: DHCP Request
High Level Category: Application
Low Level Category: DHCP Session In Progress
Severity: 1
Description: DHCP Request
Event ID: DHCPOFFER
Category: dhclient
Name: DHCP Offer
High Level Category: Application
Low Level Category: DHCP Session In Progress
Severity: 1
Description: DHCP Offer
Event ID: DHCPACK
Category: dhclient
Name: DHCP Acknowledgement
High Level Category: Application
Low Level Category: DHCP Success
Severity: 1
Description: DHCP Acknowledgement
Event ID: DHCPDISCOVER
Category: dhclient
Name: DHCP Discover
High Level Category: Application
Low Level Category: DHCP Session Opened
Severity: 1
Description: DHCP Discover
Event ID: bound to
Category: dhclient
Name: Bound IP Address
High Level Category: System
Low Level Category: System Status
Severity: 1
Description: The IP address which the system bound to.
Event ID: Creating resolv.conf
Category: dhclient
Name: Updating Resolve Config File
High Level Category: System
Low Level Category: System Informational
Severity: 1
Description: Updating Resolve.conf file with details provided by the DHCP lease.
Event ID: Starting delete_old_states
Category: dhclient
Name: Clearing old DHCP States
High Level Category: System
Low Level Category: System Informational
Severity: 1
Description: Deleting old DHCP states.
Event ID: connection closed
Category: dhclient
Name: DHCP Client Connection Closed
High Level Category: System
Low Level Category: System Status
Severity: 1
Description: The DHCP Client has closed the connection. Typically the process will exit after the connection is closed.
Event ID: exiting
Category: dhclient
Name: DHCP Client Exiting
High Level Category: System
Low Level Category: System Status
Severity: 1
Description: The DHCP Client will exit. This could be due to the process already running.
Event ID: Comparing IPs
Category: dhclient
Name: Comparing IP Addresses
High Level Category: System
Low Level Category: System Informational
Severity: 1
Description: Comparing IP addresses to look for any changes.