A10-AX-MIB :: axSwitchStatsAnomTCPSynFinDrop

MIB Reference — IPNetwork Monitor

All MIBsA10-AX-MIBaxSwitchStatsAnomTCPSynFinDrop

axSwitchStatsAnomTCPSynFinDrop

Module: A10-AX-MIB

OID (symbolic): A10-AX-MIB::axSwitchStatsAnomTCPSynFinDrop

OID (numeric): 1.3.6.1.4.1.22610.2.4.3.16.29

Node type: OBJECT-TYPE

Type: INTEGER

Access: read-only

Description:

Number of packets dropped by a tcp-syn-fin filter.

What is axSwitchStatsAnomTCPSynFinDrop?

This OID counts packets with both TCP SYN and FIN flags set, an impossible state during normal connection flow. These malformed packets are dropped to prevent stack fingerprinting and bypass attacks. A count of 100 per day indicates the anomaly filter is catching craftily formatted reconnaissance packets, protecting against evasion techniques.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.22610.2.4.3.16.29
snmpwalk -v2c -c public <target> A10-AX-MIB::axSwitchStatsAnomTCPSynFinDrop

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.22610.2.4.3.16.29.1
snmpget -v2c -c public <target> A10-AX-MIB::axSwitchStatsAnomTCPSynFinDrop.1

OID Breakdown

Numeric OIDNameModule
1isoLANART-AGENT
1.3orgBIANCA-BRICK-PPP-MIB
1.3.6dodBIANCA-BRICK-PPP-MIB
1.3.6.1internetBIANCA-BRICK-PPP-MIB
1.3.6.1.4privateBIANCA-BRICK-PPP-MIB
1.3.6.1.4.1enterprisesANIROOT-MIB
1.3.6.1.4.1.22610a10A10-COMMON-MIB
1.3.6.1.4.1.22610.2a10MgmtA10-COMMON-MIB
1.3.6.1.4.1.22610.2.4axMgmtA10-AX-MIB
1.3.6.1.4.1.22610.2.4.3axAppA10-AX-MIB
1.3.6.1.4.1.22610.2.4.3.16axSwitchStatsA10-AX-MIB
1.3.6.1.4.1.22610.2.4.3.16.29axSwitchStatsAnomTCPSynFinDropA10-AX-MIB