All MIBs › CISCO-IP-URPF-MIB › cipUrpfIfSuppressedDrops
cipUrpfIfSuppressedDrops
Module: CISCO-IP-URPF-MIB
OID (symbolic): CISCO-IP-URPF-MIB::cipUrpfIfSuppressedDrops
OID (numeric): 1.3.6.1.4.1.9.9.451.1.2.2.1.3
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: The number of IP packets of version cipUrpfIfIpVersion failing the URPF check but given a reprieve and not dropped by the managed device. Depending on the device configuration and capabilities, the following cases may cause incrementing of the counter: - if the managed device is configured to allow self-pings and the managed device pings itself. - if the managed device is configured for loose URPF (if any interface has a route to the source), and the strict case fails while the loose case passes. - DHCP Request packets (src 0.0.0.0 dst 255.255.255.255) will pass after initially being marked for drop. - RIP routing on unnumbered interfaces will pass after initially being marked for drop. - multicast packets will pass after initially being marked for drop - ACL's can be applied to permit packets after initially being marked for drop.
Discontinuities in the value of this variable can occur at re-initialization of the management system, and at other times as indicated by the values of cipUrpfIfDiscontinuityTime.
What is cipUrpfIfSuppressedDrops?
Counts IP packets on an interface that failed the URPF check but were not dropped due to configured exceptions (such as ACL permits or default-route allowances), useful for spotting borderline spoofing activity that was let through.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.451.1.2.2.1.3 snmpwalk -v2c -c public <target> CISCO-IP-URPF-MIB::cipUrpfIfSuppressedDrops
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.451.1.2.2.1.3.1 snmpget -v2c -c public <target> CISCO-IP-URPF-MIB::cipUrpfIfSuppressedDrops.1
Start monitoring Cisco edge/Internet-facing routers (uRPF) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IP-URPF-MIB::cipUrpfIfSuppressedDrops OID value, configure state conditions and alerts, and monitor any Cisco edge/Internet-facing routers (uRPF) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.451 | ciscoIpUrpfMIB | CISCO-IP-URPF-MIB |
| 1.3.6.1.4.1.9.9.451.1 | ciscoIpUrpfMIBObjects | CISCO-IP-URPF-MIB |
| 1.3.6.1.4.1.9.9.451.1.2 | cipUrpfStatistics | CISCO-IP-URPF-MIB |
| 1.3.6.1.4.1.9.9.451.1.2.2 | cipUrpfIfMonTable | CISCO-IP-URPF-MIB |
| 1.3.6.1.4.1.9.9.451.1.2.2.1 | cipUrpfIfMonEntry | CISCO-IP-URPF-MIB |
| 1.3.6.1.4.1.9.9.451.1.2.2.1.3 | cipUrpfIfSuppressedDrops | CISCO-IP-URPF-MIB |