All MIBs › AT-DOS-MIB › dosDefenseAttackState
dosDefenseAttackState
Module: AT-DOS-MIB
OID (symbolic): AT-DOS-MIB::dosDefenseAttackState
OID (numeric): 1.3.6.1.4.1.207.8.4.4.4.143.4.1.10
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: Whether or not an attack is currently in progress on the port.
None(0) means no attack is in progress.
If dosDefenseAttackType is SYNFlood(1), Suspected(1) means a SYN Flood attack is suspected. A threshold has not been set, and the default threshold of a SYN:ACK ratio of 2:1 above 20 packets per second has been reached.
If dosDefenseAttackType is PingOfDeath(2), Teardrop(5) or Land(6), Suspected means that some suspect packets have been received but have not yet been analysed to determine if an attack exists.
InProgress(2) means an attack is in progress.
What is dosDefenseAttackState?
This read-only object shows the current attack status on this port. 'None' (0) means no attack; 'suspected' (1) means some malicious packets arrived but not enough to declare an active attack; 'inProgress' (2) means a confirmed attack is underway. These states drive the port's blocking behavior.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.207.8.4.4.4.143.4.1.10 snmpwalk -v2c -c public <target> AT-DOS-MIB::dosDefenseAttackState
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.207.8.4.4.4.143.4.1.10.1 snmpget -v2c -c public <target> AT-DOS-MIB::dosDefenseAttackState.1
Start monitoring Allied Telesis managed switches and routers with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the AT-DOS-MIB::dosDefenseAttackState OID value, configure state conditions and alerts, and monitor any Allied Telesis managed switches and routers from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.207 | alliedTelesyn | AT-RG600-MIB |
| 1.3.6.1.4.1.207.8 | mibObject | AT-RG600-MIB |
| 1.3.6.1.4.1.207.8.4 | brouterMib | AT-SMI-MIB |
| 1.3.6.1.4.1.207.8.4.4 | atRouter | AT-SMI-MIB |
| 1.3.6.1.4.1.207.8.4.4.4 | modules | AT-SMI-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.207.8.4.4.4.143 | dosDefense | AT-DOS-MIB |
| 1.3.6.1.4.1.207.8.4.4.4.143.4 | dosDefenseTable | AT-DOS-MIB |
| 1.3.6.1.4.1.207.8.4.4.4.143.4.1 | dosDefenseEntry | AT-DOS-MIB |
| 1.3.6.1.4.1.207.8.4.4.4.143.4.1.10 | dosDefenseAttackState | AT-DOS-MIB |