All MIBs › CHECKPOINT-MIB › voipDOSSipRateLimitingTableNumNonTrustedRequests
voipDOSSipRateLimitingTableNumNonTrustedRequests
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::voipDOSSipRateLimitingTableNumNonTrustedRequests
OID (numeric): 1.3.6.1.4.1.2620.1.31.6.1.2.1.7
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: Rate Limiting Defense for Internal SIP Servers: Number of SIP Requests from Non-Trusted Users
What is voipDOSSipRateLimitingTableNumNonTrustedRequests?
This is the subset of requests to this internal SIP server that came from sources not on the trusted list, i.e. unauthenticated or external-facing traffic. A rising ratio of non-trusted to trusted requests in this same row, more than the raw total, is the actual early signal of a brute-force or flood attempt against this particular PBX. For example, 40 non-trusted requests out of 280 total is worth watching if that ratio climbs over successive polls.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.31.6.1.2.1.7 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::voipDOSSipRateLimitingTableNumNonTrustedRequests
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.31.6.1.2.1.7.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::voipDOSSipRateLimitingTableNumNonTrustedRequests.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::voipDOSSipRateLimitingTableNumNonTrustedRequests OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.31 | voip | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.31.6 | voipDOS | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.31.6.1 | voipDOSSip | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.31.6.1.2 | voipDOSSipRateLimitingTable | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.31.6.1.2.1 | voipDOSSipRateLimitingEntry | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.31.6.1.2.1.7 | voipDOSSipRateLimitingTableNumNonTrustedRequests | CHECKPOINT-MIB |