All MIBs › CHECKPOINT-MIB › smallPMTUNumberOfAttacks
smallPMTUNumberOfAttacks
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::smallPMTUNumberOfAttacks
OID (numeric): 1.3.6.1.4.1.2620.1.17.1.2.1.2.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: Small PMTU - Number of attacks
What is smallPMTUNumberOfAttacks?
This counts how many times the gateway detected a Small PMTU evasion attempt, where an attacker artificially shrinks the advertised path MTU to fragment traffic and slip past pattern-based content inspection. An admin cares about this counter specifically because it flags attempts to evade the inspection engine itself, not ordinary traffic anomalies, so a nonzero count warrants checking what payload the attacker was trying to sneak past inspection. For example, this counter incrementing during a targeted attack against a web server pairing a tiny advertised MTU with an exploit payload split across many small segments.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.2.1.2.1 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::smallPMTUNumberOfAttacks
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.2.1.2.1.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::smallPMTUNumberOfAttacks.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::smallPMTUNumberOfAttacks OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.17 | smartDefense | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1 | asmAttacks | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2 | asmLayer4 | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2.1 | asmTCP | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2.1.2 | asmSmallPmtu | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2.1.2.1 | smallPMTUNumberOfAttacks | CHECKPOINT-MIB |