All MIBs › APSYSMGMT-MIB › apSysMgmtInetAddrWithReasonDOSTrap

apSysMgmtInetAddrWithReasonDOSTrap

OID (symbolic): APSYSMGMT-MIB::apSysMgmtInetAddrWithReasonDOSTrap

OID (numeric): 1.3.6.1.4.1.9148.3.2.8.0.4

Node type: NOTIFICATION-TYPE

Description: This trap is generated when an IP is placed on a deny list due to denial-of-service attempts, and provides the ip address that has been demoted, the realm-id of that IP, (if available) the URI portion of the SIP From header of the message that caused the demotion and the reason for demotion.

What is apSysMgmtInetAddrWithReasonDOSTrap?

This notification (trap) is generated when a system detects denial-of-service attacks and automatically blocks the offending IP address by adding it to a deny list. The trap provides the blocked IP, the affected realm/service context, the SIP message that triggered the block, and the specific reason for demotion. Security operators use this alert to respond to active attacks, review which traffic patterns are triggering DoS protections, and potentially whitelist legitimate traffic if false positives occur.

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' APSYSMGMT-MIB::apSysMgmtInetAddrWithReasonDOSTrap
snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.9148.3.2.8.0.4

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:58179->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (495104323) 57 days, 7:17:23.23
  SNMPv2-MIB::snmpTrapOID.0 = OID: APSYSMGMT-MIB::apSysMgmtInetAddrWithReasonDOSTrap

Start monitoring Acme Packet Session Border Controller (SBC) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the APSYSMGMT-MIB::apSysMgmtInetAddrWithReasonDOSTrap OID value, configure state conditions and alerts, and monitor any Acme Packet Session Border Controller (SBC) from a single console.

OID Breakdown

Upper-level ancestors (11 from the standard OID tree / other modules)

Numeric OID	Name	Module
1	iso	LANART-AGENT
1.3	org	AirPair-MIB
1.3.6	dod	AirPair-MIB
1.3.6.1	internet	AirPair-MIB
1.3.6.1.4	private	AirPair-MIB
1.3.6.1.4.1	enterprises	AirPair-MIB
1.3.6.1.4.1.9148	acmepacket	ACMEPACKET-SMI
1.3.6.1.4.1.9148.3	acmepacketMgmt	ACMEPACKET-SMI
1.3.6.1.4.1.9148.3.2	apSystemManagementModule	ACMEPACKET2-ENVMON-MIB
1.3.6.1.4.1.9148.3.2.8	apSysMgmtDOSNotificationPrefix	ACMEPACKET2-ENVMON-MIB
1.3.6.1.4.1.9148.3.2.8.0	apSysMgmtDOSNotifications	ACMEPACKET2-ENVMON-MIB

Numeric OID	Name	Module
1.3.6.1.4.1.9148.3.2.8.0.4	apSysMgmtInetAddrWithReasonDOSTrap	APSYSMGMT-MIB

APSYSMGMT-MIB :: apSysMgmtInetAddrWithReasonDOSTrap

apSysMgmtInetAddrWithReasonDOSTrap

Module

This MIB depends on