Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

ARPCacheEntryTypeARP Cache Object Schema

The ARPCacheEntryType type is intended to characterize a single entry in a system's ARP cache.


Field Name Type Description
IP_Address0..1 AddressObjectType

The IP_Address field specifies the IP address that is mapped to the physical address in the ARP cache entry.

Physical_Address0..1 StringObjectPropertyType

The Physical_Address field specifies the physical (e.g. MAC-48) address that is mapped to the IP address in the ARP cache entry. Either a colon (':') or a dash ('-') may be used as a separator between the octets.

Type0..1 ARPCacheEntryTypeType

The Type field specifies the type of ARP cache entry, which typically refers to the way the entry was added to the cache.

Network_Interface0..1 NetworkInterfaceType

The Network_Interface field permits the specification of the network interface to which the ARP cache entry belongs.