All MIBs › AT-DOS-MIB › dosDefenseThreshold
dosDefenseThreshold
Module: AT-DOS-MIB
OID (symbolic): AT-DOS-MIB::dosDefenseThreshold
OID (numeric): 1.3.6.1.4.1.207.8.4.4.4.143.4.1.4
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: The threshold, in packets per second, at which an attack is deemed to be in progress.
If dosDefenseAttackType is SYNFlood(1), a value of 0 means no threshold has been set and the default thresholds apply. An attack is suspected when the SYN:ACK ratio exceeds 2:1 above 20 packets per second, in any one-second interval. An attack is in progress when the SYN:ACK ratio exceeds 3:1 above 20 packets per second, in any one-second interval, or an attack is suspected more than once within a dosDefenseBlockTime interval.
If dosDefenseAttackType is Smurf(3), a value of 0 means the filter will block all broadcast ICMP requests. A threshold greater than 0 will block after that number of ICMP requests are received in a 1 second interval.
What is dosDefenseThreshold?
This read-only integer sets the attack detection threshold in packets per second that triggers a response on this port. A value of 0 means default thresholds apply (e.g., SYN:ACK ratio exceeds 2:1 above 20 pps). A value of 50 means an attack is suspected when this port receives 50 suspect packets per second.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.207.8.4.4.4.143.4.1.4 snmpwalk -v2c -c public <target> AT-DOS-MIB::dosDefenseThreshold
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.207.8.4.4.4.143.4.1.4.1 snmpget -v2c -c public <target> AT-DOS-MIB::dosDefenseThreshold.1
Start monitoring Allied Telesis managed switches and routers with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the AT-DOS-MIB::dosDefenseThreshold OID value, configure state conditions and alerts, and monitor any Allied Telesis managed switches and routers from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.207 | alliedTelesyn | AT-RG600-MIB |
| 1.3.6.1.4.1.207.8 | mibObject | AT-RG600-MIB |
| 1.3.6.1.4.1.207.8.4 | brouterMib | AT-SMI-MIB |
| 1.3.6.1.4.1.207.8.4.4 | atRouter | AT-SMI-MIB |
| 1.3.6.1.4.1.207.8.4.4.4 | modules | AT-SMI-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.207.8.4.4.4.143 | dosDefense | AT-DOS-MIB |
| 1.3.6.1.4.1.207.8.4.4.4.143.4 | dosDefenseTable | AT-DOS-MIB |
| 1.3.6.1.4.1.207.8.4.4.4.143.4.1 | dosDefenseEntry | AT-DOS-MIB |
| 1.3.6.1.4.1.207.8.4.4.4.143.4.1.4 | dosDefenseThreshold | AT-DOS-MIB |