All MIBs › CHECKPOINT-MIB-2 › icmpInAddrMasks
icmpInAddrMasks
Module: CHECKPOINT-MIB-2
OID (symbolic): CHECKPOINT-MIB-2::icmpInAddrMasks
OID (numeric): 1.3.6.1.2.1.5.12
Node type: OBJECT-TYPE
Type: Counter
Access: read-only
Description: The number of ICMP Address Mask Request messages received.
What is icmpInAddrMasks?
Counts ICMP Address Mask Request messages received, an old mechanism by which a host asks a router for the subnet mask of its network. This is a largely obsolete request type, so seeing this counter increment on an external-facing interface is a useful indicator the gateway is being probed by reconnaissance tooling using older ICMP techniques, since modern hosts get their mask via DHCP. Example: a spike in icmpInAddrMasks from an unfamiliar external IP right before a broader port scan begins is consistent with automated recon tooling running through a checklist of ICMP probe types.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.2.1.5.12 snmpwalk -v2c -c public <target> CHECKPOINT-MIB-2::icmpInAddrMasks
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.2.1.5.12.1 snmpget -v2c -c public <target> CHECKPOINT-MIB-2::icmpInAddrMasks.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB-2::icmpInAddrMasks OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.2 | mgmt | AXON-MIB |
| 1.3.6.1.2.1 | mib_2 | AXON-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.2.1.5 | icmp | CHECKPOINT-MIB-2 |
| 1.3.6.1.2.1.5.12 | icmpInAddrMasks | CHECKPOINT-MIB-2 |