Monitor and troubleshoot
Documents under this category provide information about monitoring the 7705 SAR routers and diagnosing and troubleshooting router issues.
- OAM Guide
  This guide describes how to use the Operations, Administration and Management (OAM) and diagnostic tools provided by the 7705 SAR, including how to configure mirroring.
- Log Events Guide
  This guide provides information about the log events for the 7705 SAR.

LI

cli_config_io

Table 1. cli_config_io properties
Property name	Value
Application name	LI
Event ID	2115
Event name	cli_config_io
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User from $srcAddr$: $prompt$ $message$
Cause	A valid CLI command was entered in the configuration node.
Effect	Configuration was changed by CLI command.
Recovery	No recovery is required.

cli_unauth_config_io

Table 2. cli_unauth_config_io properties
Property name	Value
Application name	LI
Event ID	2117
Event name	cli_unauth_config_io
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User from $srcAddr$. $message$: $prompt$ $command$
Cause	User has entered configuration command for which he is not authorized.
Effect	The CLI command was not processed.
Recovery	No recovery is required.

cli_unauth_user_io

Table 3. cli_unauth_user_io properties
Property name	Value
Application name	LI
Event ID	2116
Event name	cli_unauth_user_io
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User from $srcAddr$. $message$: $prompt$ $command$
Cause	User has entered command for which he is not authorized.
Effect	The CLI command was not processed.
Recovery	No recovery is required.

cli_user_io

Table 4. cli_user_io properties
Property name	Value
Application name	LI
Event ID	2113
Event name	cli_user_io
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User from $srcAddr$: $prompt$ $message$
Cause	A CLI command was entered.
Effect	A CLI command was processed.
Recovery	No recovery is required.

cli_user_login

Table 5. cli_user_login properties
Property name	Value
Application name	LI
Event ID	2101
Event name	cli_user_login
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ logged in
Cause	The user was successfully authenticated for login.
Effect	A user access session was started.
Recovery	No recovery is required.

cli_user_login_failed

Table 6. cli_user_login_failed properties
Property name	Value
Application name	LI
Event ID	2103
Event name	cli_user_login_failed
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ failed authentication
Cause	The user failed authentication.
Effect	The user access session was not started. The user is given another opportunity to authenticate himself.
Recovery	No recovery is required.

cli_user_login_max_attempts

Table 7. cli_user_login_max_attempts properties
Property name	Value
Application name	LI
Event ID	2104
Event name	cli_user_login_max_attempts
SNMP notification prefix and OID	TIMETRA-SECURITY-MIB.tmnxSecurityNotifications.51
Default severity	minor
Message format string	User $tmnxSecNotifyUserName$ from $tmnxSecNotifyAddr$ attempted more than $tmnxPasswordAttemptsCount$ times to log in, user locked out for $tmnxPasswordAttemptsLockoutPeriod$ min
Cause	A tmnxUserCliLoginMaxAttempts notification is generated when a user attempting to open a CLI sesssion failed to authenticate for more than a maximum allowed number of times in a period of tmnxPasswordAttemptsTime minutes. The value of the object tmnxPasswordAttemptsCount indicates the maximum number of unsuccessful login attempts allowed. The value of the object tmnxPasswordAttemptsLockoutPeriod indicates the number of minutes the user is locked out if the threshold of unsuccessful login attempts has been exceeded. The value of the object tmnxSecNotifyUserName indicates the name of the user attempting to open a CLI session. The value of the object tmnxSecNotifyAddrType indicates the type of the IP address stored in the object tmnxSecNotifyAddr. The value of the object tmnxSecNotifyAddr indicates the IP address of the user attempting to open a CLI session.
Effect	The user is locked out for a period of tmnxPasswordAttemptsLockoutPeriod minutes. A remote access session is terminated.
Recovery	No recovery action is required.

cli_user_logout

Table 8. cli_user_logout properties
Property name	Value
Application name	LI
Event ID	2102
Event name	cli_user_logout
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ logged out
Cause	A user logged out.
Effect	A user access session was stopped.
Recovery	No recovery is required.

destinationDisabled

Table 9. destinationDisabled properties
Property name	Value
Application name	LI
Event ID	2014
Event name	destinationDisabled
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.4
Default severity	minor
Message format string	Mirror destination $tMirrorDestinationIndex$ is administratively disabled ('shutdown')
Cause	The operator disabled the mirror destination.
Effect	No mirror traffic will egress. Applications using the mirror traffic will not receive any traffic from this destination.
Recovery	The operator intentionally disabled the mirror destination, so no recovery is necessary. Enable the mirror destination to restart mirroring.

destinationEnabled

Table 10. destinationEnabled properties
Property name	Value
Application name	LI
Event ID	2013
Event name	destinationEnabled
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.3
Default severity	minor
Message format string	Mirror destination $tMirrorDestinationIndex$ is administratively enabled ('no shutdown')
Cause	The operator enabled the mirror destination.
Effect	The mirror traffic will egress. Applications using the mirror traffic will receive traffic from this destination.
Recovery	The operator intentionally enabled the mirror destination, so no recovery is necessary.

ftp_user_login

Table 11. ftp_user_login properties
Property name	Value
Application name	LI
Event ID	2105
Event name	ftp_user_login
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ logged in
Cause	The user was successfully authenticated for login.
Effect	A user access session begins.
Recovery	No recovery is required

ftp_user_login_failed

Table 12. ftp_user_login_failed properties
Property name	Value
Application name	LI
Event ID	2107
Event name	ftp_user_login_failed
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ failed authentication
Cause	A user failed authentication.
Effect	The user access session does not begin. The user is given another opportunity to authenticate himself.
Recovery	No recovery is required.

ftp_user_login_max_attempts

Table 13. ftp_user_login_max_attempts properties
Property name	Value
Application name	LI
Event ID	2108
Event name	ftp_user_login_max_attempts
SNMP notification prefix and OID	TIMETRA-SECURITY-MIB.tmnxSecurityNotifications.53
Default severity	minor
Message format string	User $tmnxSecNotifyUserName$ from $tmnxSecNotifyAddr$ attempted more than $tmnxPasswordAttemptsCount$ times to log in, user locked out for $tmnxPasswordAttemptsLockoutPeriod$ min
Cause	A tmnxLiUserFtpLoginMaxAttempts notification is generated when a Lawful Interception user attempting to connect via FTP failed to authenticate for more than a maximum allowed number of times in a period of tmnxPasswordAttemptsTime minutes. The value of the object tmnxPasswordAttemptsCount indicates the maximum number of unsuccessful login attempts allowed. The value of the object tmnxPasswordAttemptsLockoutPeriod indicates the number of minutes the user is locked out if the threshold of unsuccessful login attempts has been exceeded. The value of the object tmnxSecNotifyUserName indicates the name of the user attempting to connect via FTP. The value of the object tmnxSecNotifyAddrType indicates the type of the IP address stored in the object tmnxSecNotifyAddr. The value of the object tmnxSecNotifyAddr indicates the IP address of the user attempting to connect via FTP.
Effect	The user is locked out for a period of tmnxPasswordAttemptsLockoutPeriod minutes. An FTP session is terminated.
Recovery	No recovery action is required.

ftp_user_logout

Table 14. ftp_user_logout properties
Property name	Value
Application name	LI
Event ID	2106
Event name	ftp_user_logout
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ logged out
Cause	A user logged out.
Effect	The user access session ends.
Recovery	No recovery is required

host_snmp_attempts

Table 15. host_snmp_attempts properties
Property name	Value
Application name	LI
Event ID	2123
Event name	host_snmp_attempts
SNMP notification prefix and OID	N/A
Default severity	warning
Message format string	Host $hostAddress$ is locked out for $lockoutTime$ minutes since it exceeded the configured threshold of unsuccessful SNMP connection attempts.
Cause	A host (manager IP address) exceded the configured number of access attempts.
Effect	The host is locked out and the router will not respond to the SNMP requests from the host.
Recovery	N/A

radiusFailed

Table 16. radiusFailed properties
Property name	Value
Application name	LI
Event ID	2124
Event name	radiusFailed
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	LI for host failed: $reason$
Cause	N/A
Effect	N/A
Recovery	N/A

sbiBootLiConfig

Table 17. sbiBootLiConfig properties
Property name	Value
Application name	LI
Event ID	2001
Event name	sbiBootLiConfig
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.40
Default severity	major
Message format string	Lawful Intercept (LI) bootup configuration status: $sliConfigStatus$. LI separate: $sbiLiSeparate$. LI local save: $sbiLiLocalSave$. System last booted time: $sysUpTime$.
Cause	The bootup LI configuration phase is finished.
Effect	LI configuration will be missing or incomplete if LI configuration phase was not completed successfully.
Recovery	Determine failure cause and restore LI configuration manually or reboot.

snmp_user_set

Table 18. snmp_user_set properties
Property name	Value
Application name	LI
Event ID	2114
Event name	snmp_user_set
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	SNMP user from $srcAddr$> $vbList$
Cause	A valid SNMP SET reqest was received.
Effect	The configuration was changed by an SNMP SET operation.
Recovery	No recovery is required.

sourceDisabled

Table 19. sourceDisabled properties
Property name	Value
Application name	LI
Event ID	2012
Event name	sourceDisabled
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.2
Default severity	minor
Message format string	LI Mirror source $tMirrorSourceIndex$ is administratively disabled ('shutdown')
Cause	The operator disabled the LI mirror source
Effect	No traffic from this source will be mirrored. Applications using the mirror traffic will not receive any traffic from this source.
Recovery	The operator intentionally disabled the LI mirror source, so no recovery is required. Enable the LI mirror source to restart mirroring.

sourceEnabled

Table 20. sourceEnabled properties
Property name	Value
Application name	LI
Event ID	2011
Event name	sourceEnabled
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.1
Default severity	minor
Message format string	LI Mirror source $tMirrorSourceIndex$ is administratively enabled ('no shutdown')
Cause	Operator enabled the LI mirror source
Effect	Traffic from this source will be mirrored. Applications using the mirror traffic will receive traffic from this source.
Recovery	The Operator intentionally enabled the LI mirror source, so no recovery is required. Disable the LI mirror source to stop LI mirroring.

sourceSapChange

Table 21. sourceSapChange properties
Property name	Value
Application name	LI
Event ID	2018
Event name	sourceSapChange
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.8
Default severity	minor
Message format string	Lawful Intercept Mirror source $tMirrorSourceIndex$ associated SAP $tMirrorSourceSapEncapValue$ has been $tMirrorSourceChangeType$
Cause	A SAP associated with the LI mirror source has been modified or deleted.
Effect	Mirrored traffic from this source may be affected in an undesired manner.
Recovery	Modify the configuration of the associated SAP to restore the desired mirrored traffic.

sourceSubscriberChange

Table 22. sourceSubscriberChange properties
Property name	Value
Application name	LI
Event ID	2019
Event name	sourceSubscriberChange
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.9
Default severity	minor
Message format string	Mirroring for Lawful Intercept mirror source $tMirrorSourceIndex$ subscriber "$tMirrorSourceSubIdent$" has been $tMirrorSourceChangeType$
Cause	A subscriber associated with the LI mirror source has been activated, deactivated, modified, or deleted.
Effect	Mirrored traffic from this source may be affected in an undesired manner.
Recovery	Modify the configuration of the associated subscriber to restore the desired mirrored traffic.

ssh_user_login

Table 23. ssh_user_login properties
Property name	Value
Application name	LI
Event ID	2109
Event name	ssh_user_login
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ logged in
Cause	The user was successfully authenticated for login.
Effect	A user access session begins.
Recovery	No recovery is required

ssh_user_login_failed

Table 24. ssh_user_login_failed properties
Property name	Value
Application name	LI
Event ID	2111
Event name	ssh_user_login_failed
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ failed authentication
Cause	A user failed authentication.
Effect	The user access session does not begin. The user is given another opportunity to authenticate himself.
Recovery	No recovery is required.

ssh_user_login_max_attempts

Table 25. ssh_user_login_max_attempts properties
Property name	Value
Application name	LI
Event ID	2112
Event name	ssh_user_login_max_attempts
SNMP notification prefix and OID	TIMETRA-SECURITY-MIB.tmnxSecurityNotifications.52
Default severity	minor
Message format string	User $tmnxSecNotifyUserName$ from $tmnxSecNotifyAddr$ attempted more than $tmnxPasswordAttemptsCount$ times to log in, user locked out for $tmnxPasswordAttemptsLockoutPeriod$ min
Cause	A tmnxLiUserSshLoginMaxAttempts notification is generated when a Lawful Interception user attempting to connect via SSH failed to authenticate for more than a maximum allowed number of times in a period of tmnxPasswordAttemptsTime minutes. The value of the object tmnxPasswordAttemptsCount indicates the maximum number of unsuccessful login attempts allowed. The value of the object tmnxPasswordAttemptsLockoutPeriod indicates the number of minutes the user is locked out if the threshold of unsuccessful login attempts has been exceeded. The value of the object tmnxSecNotifyUserName indicates the name of the user attempting to connect via SSH. The value of the object tmnxSecNotifyAddrType indicates the type of the IP address stored in the object tmnxSecNotifyAddr. The value of the object tmnxSecNotifyAddr indicates the IP address of the user attempting to connect via SSH.
Effect	The user is locked out for a period of tmnxPasswordAttemptsLockoutPeriod minutes. An SSH session is terminated.
Recovery	No recovery action is required.

ssh_user_logout

Table 26. ssh_user_logout properties
Property name	Value
Application name	LI
Event ID	2110
Event name	ssh_user_logout
SNMP notification prefix and OID	N/A
Default severity	minor
Message format string	User $userName$ from $srcAddr$ logged out
Cause	A user logged out.
Effect	The user access session ends.
Recovery	No recovery is required

ssiSaveConfigFailed

Table 27. ssiSaveConfigFailed properties
Property name	Value
Application name	LI
Event ID	2203
Event name	ssiSaveConfigFailed
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.3
Default severity	critical
Message format string	Lawful Intercept configuration file write failed: $fileName$ $reason$
Cause	The save config failed event is generated when the saving of configuration is stopped due to errors.
Effect	Configuration file could not be saved.
Recovery	No recovery is necessary.

ssiSaveConfigSucceeded

Table 28. ssiSaveConfigSucceeded properties
Property name	Value
Application name	LI
Event ID	2202
Event name	ssiSaveConfigSucceeded
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.2
Default severity	major
Message format string	Lawful Intercept Configuration file saved to: $fileName$
Cause	The save config succeeded event is generated when the saving of configuration finishes without errors.
Effect	Configuration file was saved.
Recovery	No recovery is necessary.

ssiSyncConfigFailed

Table 29. ssiSyncConfigFailed properties
Property name	Value
Application name	LI
Event ID	2213
Event name	ssiSyncConfigFailed
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.15
Default severity	major
Message format string	Synchronization of Lawful Intercept configuration files failed
Cause	The sync config failed event is generated when the synchronization of configuration files is stopped due to errors.
Effect	Configuration files are not synchronized.
Recovery	No recovery is necessary.

ssiSyncConfigOK

Table 30. ssiSyncConfigOK properties
Property name	Value
Application name	LI
Event ID	2212
Event name	ssiSyncConfigOK
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.14
Default severity	warning
Message format string	Lawful Intercept configuration files have been successfully synchronized
Cause	The synchronize config succeeded event is generated when the synchronization of configuration files finishes without errors.
Effect	Configuration files synchronized.
Recovery	No recovery is necessary.

tMirrorDestinationChangeReject

Table 31. tMirrorDestinationChangeReject properties
Property name	Value
Application name	LI
Event ID	2023
Event name	tMirrorDestinationChangeReject
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.14
Default severity	minor
Message format string	An attempt was blocked to modify mirror destination $tMirrorDestinationIndex$ that is being referenced by Lawful Intercept
Cause	An operator is trying to modify mirror destination that cannot currently be changed because the destination is being used for mirroring.
Effect	The change is not allowed.
Recovery	The mirror destination can only be modified after LI actions are cleared.

tMirrorFilterAssignToItfWarn

Table 32. tMirrorFilterAssignToItfWarn properties
Property name	Value
Application name	LI
Event ID	2030
Event name	tMirrorFilterAssignToItfWarn
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.19
Default severity	minor
Message format string	$tMirrorFilterType$ filter $tMirrorFilterId$ , which is referred to by Lawful Intercept has been applied on $tMirrorFilterDirection$ to interface $tMirrorFilterIfName$ (IfIndex $tMirrorFilterIfIndex$)
Cause	A filter that is being used for mirroring has been applied to a SDP. This assignment was allowed, but might cause traffic from this SDP to show up in the mirror destination.
Effect	N/A
Recovery	No recovery required.

tMirrorFilterAssignToSapWarn

Table 33. tMirrorFilterAssignToSapWarn properties
Property name	Value
Application name	LI
Event ID	2028
Event name	tMirrorFilterAssignToSapWarn
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.17
Default severity	minor
Message format string	$tMirrorFilterType$ filter $tMirrorFilterId$ , which is referred to by Lawful Intercept has been applied on $tMirrorFilterDirection$ to SAP $tMirrorFilterSapEncapValue$ in service $tMirrorFilterSvcId$
Cause	A filter that is being used for mirroring has been applied to a SAP. This assignment was allowed, but might cause traffic from this SAP to show up in the mirror destination.
Effect	N/A
Recovery	No recovery required.

tMirrorFilterAssignToSdpWarn

Table 34. tMirrorFilterAssignToSdpWarn properties
Property name	Value
Application name	LI
Event ID	2029
Event name	tMirrorFilterAssignToSdpWarn
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.18
Default severity	minor
Message format string	$tMirrorFilterType$ filter $tMirrorFilterId$ , which is referred to by Lawful Intercept has been applied on $tMirrorFilterDirection$ to SDP $tMirrorFilterSdpBindId$ in service $tMirrorFilterSvcId$
Cause	A filter that is being used for mirroring has been applied to a SDP. This assignment was allowed, but might cause traffic from this SDP to show up in the mirror destination.
Effect	N/A
Recovery	No recovery required.

tMirrorLiNat64SubOperStateCh

Table 35. tMirrorLiNat64SubOperStateCh properties
Property name	Value
Application name	LI
Event ID	2036
Event name	tMirrorLiNat64SubOperStateCh
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.26
Default severity	minor
Message format string	The state of LI mirror source $tMirrorSourceIndex$ LSN NAT64 subscriber ($vRtrID$, $tMirrorLiNatLsnSubAddr$/ $tMirrorLiNatLsnSubPrefixLength$) changed to $tMirrorLiNat64SubOperState$
Cause	The tMirrorLiNatLsnSubOperStateCh notification is sent when the value of the object tMirrorLiNat64SubOperState changes. This is related to the state of the ISA MDA where the forwarding entry is located, or the availability of resources on that MDA.
Effect	The corresponding inward bound packets are dropped while the operational status is 'down'.
Recovery	If the ISA MDA reboots successfully, or another ISA MDA takes over, no recovery is required. If more resources become available on the ISA MDA, no recovery is required.

tMirrorLiNatL2awSubOperStateCh

Table 36. tMirrorLiNatL2awSubOperStateCh properties
Property name	Value
Application name	LI
Event ID	2035
Event name	tMirrorLiNatL2awSubOperStateCh
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.25
Default severity	minor
Message format string	The state of LI mirror source $tMirrorSourceIndex$ l2-aware subscriber $tMirrorLiNatL2awSubIdent$ changed to $tMirrorLiNatL2awSubOperState$
Cause	The tMirrorLiNatL2awSubOperStateCh notification is sent when the value of the object tMirrorLiNatL2awSubOperState changes. This is related to the state of the ISA MDA where the forwarding entry is located, the availability of resources on that MDA, or the instantiation of the subscriber.
Effect	The corresponding inward bound packets are dropped while the operational status is 'down'.
Recovery	If the ISA MDA reboots successfully, or another ISA MDA takes over, no recovery is required. If more resources become available on the ISA MDA, no recovery is required.

tMirrorLiNatLsnSubOperStateCh

Table 37. tMirrorLiNatLsnSubOperStateCh properties
Property name	Value
Application name	LI
Event ID	2034
Event name	tMirrorLiNatLsnSubOperStateCh
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.24
Default severity	minor
Message format string	The state of LI mirror source $tMirrorSourceIndex$ LSN subscriber ($vRtrID$, $tMirrorLiNatLsnSubAddr$/ $tMirrorLiNatLsnSubPrefixLength$) changed to $tMirrorLiNatLsnSubOperState$
Cause	The tMirrorLiNatLsnSubOperStateCh notification is sent when the value of the object tMirrorLiNatLsnSubOperState changes. This is related to the state of the ISA MDA where the forwarding entry is located, or the availability of resources on that MDA.
Effect	The corresponding inward bound packets are dropped while the operational status is 'down'.
Recovery	If the ISA MDA reboots successfully, or another ISA MDA takes over, no recovery is required. If more resources become available on the ISA MDA, no recovery is required.

tMirrorSourceFilterAssignReject

Table 38. tMirrorSourceFilterAssignReject properties
Property name	Value
Application name	LI
Event ID	2022
Event name	tMirrorSourceFilterAssignReject
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.13
Default severity	minor
Message format string	An attempt was blocked to modify a filter-assignment of a filter that is being referred by Lawful Intercept. $tMirrorSourceFilterDescr$
Cause	An operator is trying to modify a filter assignment of a filter that cannot currently be changed because the filter is being used for mirroring.
Effect	The change is disallowed
Recovery	The filter can only be replaced after LI actions are cleared.

tMirrorSourceFilterAssignWarn

Table 39. tMirrorSourceFilterAssignWarn properties
Property name	Value
Application name	LI
Event ID	2027
Event name	tMirrorSourceFilterAssignWarn
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.16
Default severity	minor
Message format string	A filter referred to by Lawful Intercept has been assigned in a context where it may be overruled. $tMirrorSourceFilterDescr$
Cause	A filter that is being used for mirroring was assigned in a context where it maybe overruled. Filter assignments scheduled by a Time-Of-Day (TOD) Suite take precedence over statically configured filter assignments. There is currently no such overruling filter assignment scheduled, but it may be created in the future.
Effect	None, as long as no overruling filter assignment is created, and is activated.
Recovery	No recovery required. The risk can be eliminated either by creating an identical assignment in the TOD Suite, with the highest priority, or by removing the TOD Suite assignment from the SAP altogether.

tMirrorSourceFilterOverruled

Table 40. tMirrorSourceFilterOverruled properties
Property name	Value
Application name	LI
Event ID	2026
Event name	tMirrorSourceFilterOverruled
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.15
Default severity	minor
Message format string	A filter-assignment of a filter that is being referred by Lawful Intercept was overruled. $tMirrorSourceFilterDescr$
Cause	An assignment of a filter that is being used for mirroring was overruled. Filter assignments scheduled by a Time-Of-Day (TOD) Suite take precedence over statically configured filter assignments.
Effect	If the overruling filter assignment refers to a filter that is not used for mirroring, mirror data will be lost.
Recovery	Either the overruling filter assignments can be changed to participate in the intended mirroring, or the TOD suite or the SAP configuration can be modified to prevent this situation.

tMirrorSourceIPFltrChangeReject

Table 41. tMirrorSourceIPFltrChangeReject properties
Property name	Value
Application name	LI
Event ID	2020
Event name	tMirrorSourceIPFltrChangeReject
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.10
Default severity	minor
Message format string	An attempt was blocked to modify filter-entry $tMirrorSourceFilterEntryId$ of IP filter $tMirrorSourceFilterId$ which is being referred to by Lawful Intercept (mirror-source $tMirrorSourceIndex$)
Cause	An operator tried to modify a filter or a filter-entry of a filter that cannot currently be changed because the filter is being used for mirroring.
Effect	The change was blocked.
Recovery	Modifying the filter is only allowed when it is not being referred by any LI action.

tMirrorSourceIPv6FltrChangeRej

Table 42. tMirrorSourceIPv6FltrChangeRej properties
Property name	Value
Application name	LI
Event ID	2033
Event name	tMirrorSourceIPv6FltrChangeRej
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.23
Default severity	minor
Message format string	An attempt was blocked to modify filter-entry $tMirrorSourceFilterEntryId$ of IPv6 filter $tMirrorSourceFilterId$ which is being referred to by Lawful Intercept (mirror-source $tMirrorSourceIndex$)
Cause	The tMirrorSourceIPv6FltrChangeRej event is generated when an operator is trying to modify a filter or a filter-entry of a filter that cannot currently be changed because the filter is being used for mirrorring.
Effect	The change was blocked.
Recovery	Modifying the filter is only allowed when it is not being referred by any LI action.

tMirrorSourceLiFilterChanged

Table 43. tMirrorSourceLiFilterChanged properties
Property name	Value
Application name	LI
Event ID	2031
Event name	tMirrorSourceLiFilterChanged
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.20
Default severity	minor
Message format string	A filter which is being referenced by Lawful Intercept has been modified. $tMirrorSourceFilterDescr$
Cause	This notification may be triggered only if LI filter lock has been overruled, and one of the following actions has been done: 1) a filter referenced by LI has been deleted. 2) one of the parameters (default-action, scope) of a filter which is referenced by LI has been changed. 3) a filter which is referenced by LI has been overwritten. 4) new entry has been created for a filter which is referenced by LI. 5) an entry of a filter which is referenced by LI has been activated. 6) an entry has been removed from a filter which is referenced by LI. 7) an entry of a filter which is referenced by LI has been renumbered. 8) one of the parameters of an entry in a filter which is referenced by LI has been changed.
Effect	Since a filter which is referenced by LI (or its parameter) has been modified, the mirrored traffic may be changed.
Recovery	N/A

tMirrorSourceLiSubProblem

Table 44. tMirrorSourceLiSubProblem properties
Property name	Value
Application name	LI
Event ID	2032
Event name	tMirrorSourceLiSubProblem
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.21
Default severity	minor
Message format string	Traffic for for Lawful Intercept mirror source $tMirrorSourceIndex$ subscriber $tMirrorSourceSubIdent$ on SAP $tMirrorNotifyLiSapEncapValue$ in service $tMirrorNotifyLiSvcId$ could not be intercepted -- $tMirrorNotifyLiDescription$
Cause	Detailed information about the exact cause of the notification is available in the object tMirrorNotifyLiDescription. [EFFECT] Traffic of a subscriber subject to Lawful Intercept is not intercepted.
Effect	N/A
Recovery	N/A

tMirrorSourceMacFltrChangeReject

Table 45. tMirrorSourceMacFltrChangeReject properties
Property name	Value
Application name	LI
Event ID	2021
Event name	tMirrorSourceMacFltrChangeReject
SNMP notification prefix and OID	TIMETRA-MIRROR-MIB.tMirrorNotifications.12
Default severity	minor
Message format string	An attempt was blocked to modify filter-entry $tMirrorSourceFilterEntryId$ of Mac filter $tMirrorSourceFilterId$ which is being referred to by Lawful Intercept (mirror-source $tMirrorSourceIndex$)
Cause	An operator tried to modify a filter or a filter-entry of a filter that cannot currently be changed because the filter is being used for mirroring.
Effect	The change was blocked.
Recovery	Modifying the filter is only allowed when it is not being referred by any LI action.

tmnxClear

Table 46. tmnxClear properties
Property name	Value
Application name	LI
Event ID	2300
Event name	tmnxClear
SNMP notification prefix and OID	TIMETRA-CLEAR-MIB.tmnxClearNotifications.1
Default severity	indeterminate
Message format string	Clear function $tmnxClearName$ has been run with parameters: $tmnxClearParams$. The completion result is: $tmnxClearResult$. Additional error text, if any, is: $tmnxClearErrorText$
Cause	The tmnxClear notification is generated to report the results of the clear function that was run as a result of setting tmnxClearAction to 'doAction'.
Effect	If successful, a managed object has been cleared.
Recovery	If the clear action was not successful, make sure the object to be cleared exists and the clear function parameters are correct.

tmnxConfigCreate

Table 47. tmnxConfigCreate properties
Property name	Value
Application name	LI
Event ID	2207
Event name	tmnxConfigCreate
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.9
Default severity	warning
Message format string	$tmnxNotifyObjectName$ managed object created
Cause	A tmnxConfigCreate notification is generated when a new row entry is created in one of the MIB tables. It can be used by the NMS to trigger maintenance polls of the configuration information.
Effect	N/A
Recovery	No recovery is necessary.

tmnxConfigDelete

Table 48. tmnxConfigDelete properties
Property name	Value
Application name	LI
Event ID	2208
Event name	tmnxConfigDelete
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.10
Default severity	warning
Message format string	$tmnxNotifyObjectName$ managed object deleted
Cause	A tmnxConfigDelete notification is generated when an existing row entry in one of the MIB tables is deleted. It can be used by the NMS to trigger maintenance polls of the configuration information.
Effect	N/A
Recovery	No recovery is necessary.

tmnxConfigModify

Table 49. tmnxConfigModify properties
Property name	Value
Application name	LI
Event ID	2206
Event name	tmnxConfigModify
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.8
Default severity	warning
Message format string	$tmnxNotifyObjectName$ configuration modified
Cause	A tmnxConfigModify notification is generated when a configuration attribute associated with a row entry in a MIB table is modified. It can be used by the NMS to trigger maintenance polls of the configuration information.
Effect	N/A
Recovery	No recovery is necessary.

tmnxStateChange

Table 50. tmnxStateChange properties
Property name	Value
Application name	LI
Event ID	2209
Event name	tmnxStateChange
SNMP notification prefix and OID	TIMETRA-SYSTEM-MIB.tmnxSysNotifications.11
Default severity	warning
Message format string	Status of $tmnxNotifyObjectName$ changed administrative state: $tmnxNotifyRowAdminState$, operational state: $tmnxNotifyRowOperState$
Cause	A tmnxStateChange notification is generated when there is a change in either the adminstrative or operational state of a MIB table entry.
Effect	N/A
Recovery	No recovery is necessary.

October 25, 2023