Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

ARPCacheObjectTypeARP Cache Object Schema

The ARPCacheObjectType type is intended to characterize entries in a system's address resolution protocol (ARP) cache.

Fields

Field Name Type Description
@object_referenceoptional QName

The object_reference field specifies a unique ID reference to an Object defined elsewhere. This construct allows for the re-use of the defined Properties of one Object within another, without the need to embed the full Object in the location from which it is being referenced. Thus, this ID reference is intended to resolve to the Properties of the Object that it points to.
Custom_Properties0..1 CustomPropertiesType

The Custom_Properties construct is optional and enables the specification of a set of custom Object Properties that may not be defined in existing Properties schemas.
ARP_Cache_Entry1..n ARPCacheEntryType

The ARP_Cache_Entry field is intended to characterize a single address resolution protocol (ARP) cache entry.