All MIBs › A10-AX-MIB › axSwitchStatAnomSYNFragDrop
axSwitchStatAnomSYNFragDrop
Module: A10-AX-MIB
OID (symbolic): A10-AX-MIB::axSwitchStatAnomSYNFragDrop
OID (numeric): 1.3.6.1.4.1.22610.2.4.3.16.31.1.29
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description:
Number of packets dropped by a tcp-syn-frag filter.
What is axSwitchStatAnomSYNFragDrop?
This Counter32 counts fragmented TCP SYN packets that are dropped because normal TCP handshakes never arrive as fragments. Blocking these prevents attackers from evading deep packet inspection or exhausting connection resources. An increase from 0 to 100000 drops signals a SYN fragmentation attack attempt is underway and being stopped.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.22610.2.4.3.16.31.1.29 snmpwalk -v2c -c public <target> A10-AX-MIB::axSwitchStatAnomSYNFragDrop
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.22610.2.4.3.16.31.1.29.1 snmpget -v2c -c public <target> A10-AX-MIB::axSwitchStatAnomSYNFragDrop.1
OID Breakdown
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | BIANCA-BRICK-PPP-MIB |
| 1.3.6 | dod | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1 | internet | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1.4 | private | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1.4.1 | enterprises | ANIROOT-MIB |
| 1.3.6.1.4.1.22610 | a10 | A10-COMMON-MIB |
| 1.3.6.1.4.1.22610.2 | a10Mgmt | A10-COMMON-MIB |
| 1.3.6.1.4.1.22610.2.4 | axMgmt | A10-AX-MIB |
| 1.3.6.1.4.1.22610.2.4.3 | axApp | A10-AX-MIB |
| 1.3.6.1.4.1.22610.2.4.3.16 | axSwitchStats | A10-AX-MIB |
| 1.3.6.1.4.1.22610.2.4.3.16.31 | axSwitchStatTable | A10-AX-MIB |
| 1.3.6.1.4.1.22610.2.4.3.16.31.1 | axSwitchStatEntry | A10-AX-MIB |
| 1.3.6.1.4.1.22610.2.4.3.16.31.1.29 | axSwitchStatAnomSYNFragDrop | A10-AX-MIB |