All MIBs › CHECKPOINT-MIB › fwConnectionsStatConnectionsUdp
fwConnectionsStatConnectionsUdp
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::fwConnectionsStatConnectionsUdp
OID (numeric): 1.3.6.1.4.1.2620.1.1.26.11.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: udp connections passing through the FireWall-1 Module
What is fwConnectionsStatConnectionsUdp?
The desc explicitly states this is the number of UDP connections passing through the FireWall-1 Module right now. Because UDP has no explicit close handshake, this count depends heavily on connection-table timeout settings, so an unexpectedly high value often means DNS, VoIP, or a UDP-based flood is inflating the table rather than legitimate long-lived sessions. e.g. UDP connections jumping from 500 to 30,000 within minutes would be consistent with a UDP reflection or amplification attack hitting the gateway.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.1.26.11.2 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::fwConnectionsStatConnectionsUdp
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.1.26.11.2.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::fwConnectionsStatConnectionsUdp.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::fwConnectionsStatConnectionsUdp OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.1 | fw | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.1.26 | fwPerfStat | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.1.26.11 | fwConnectionsStat | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.1.26.11.2 | fwConnectionsStatConnectionsUdp | CHECKPOINT-MIB |