CHECKPOINT-MIB :: smallPMTUNumberOfAttacks

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCHECKPOINT-MIBsmallPMTUNumberOfAttacks

smallPMTUNumberOfAttacks

Module: CHECKPOINT-MIB

OID (symbolic): CHECKPOINT-MIB::smallPMTUNumberOfAttacks

OID (numeric): 1.3.6.1.4.1.2620.1.17.1.2.1.2.1

Node type: OBJECT-TYPE

Type: INTEGER

Access: read-only

Description: Small PMTU - Number of attacks

What is smallPMTUNumberOfAttacks?

This counts how many times the gateway detected a Small PMTU evasion attempt, where an attacker artificially shrinks the advertised path MTU to fragment traffic and slip past pattern-based content inspection. An admin cares about this counter specifically because it flags attempts to evade the inspection engine itself, not ordinary traffic anomalies, so a nonzero count warrants checking what payload the attacker was trying to sneak past inspection. For example, this counter incrementing during a targeted attack against a web server pairing a tiny advertised MTU with an exploit payload split across many small segments.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.2.1.2.1
snmpwalk -v2c -c public <target> CHECKPOINT-MIB::smallPMTUNumberOfAttacks

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.2.1.2.1.1
snmpget -v2c -c public <target> CHECKPOINT-MIB::smallPMTUNumberOfAttacks.1

Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::smallPMTUNumberOfAttacks OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.2620checkpointCHECKPOINT-GAIA-TRAP-MIB
1.3.6.1.4.1.2620.1productsCHECKPOINT-GAIA-TRAP-MIB
Numeric OIDNameModule
1.3.6.1.4.1.2620.1.17smartDefenseCHECKPOINT-MIB
1.3.6.1.4.1.2620.1.17.1asmAttacksCHECKPOINT-MIB
1.3.6.1.4.1.2620.1.17.1.2asmLayer4CHECKPOINT-MIB
1.3.6.1.4.1.2620.1.17.1.2.1asmTCPCHECKPOINT-MIB
1.3.6.1.4.1.2620.1.17.1.2.1.2asmSmallPmtuCHECKPOINT-MIB
1.3.6.1.4.1.2620.1.17.1.2.1.2.1smallPMTUNumberOfAttacksCHECKPOINT-MIB