All MIBs › CISCO-UNIFIED-FIREWALL-MIB › cufwAaicIntrusionEvtRate
cufwAaicIntrusionEvtRate
Module: CISCO-UNIFIED-FIREWALL-MIB
OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwAaicIntrusionEvtRate
OID (numeric): 1.3.6.1.4.1.9.9.491.1.5.3.2.1
Node type: OBJECT-TYPE
Type: Gauge32
Access: read-only
Description: The rate at which intrusion events were recorded by Snort on this firewall averaged over the last 300 seconds.
What is cufwAaicIntrusionEvtRate?
This Gauge32, in Events per second, reports the rate at which Snort recorded intrusion events on this firewall, averaged over the last 300 seconds. An admin watches this as a real-time indicator of how actively the intrusion detection engine is flagging suspicious activity. A sudden sustained rise in this rate would be a strong signal to an admin that an active attack or scan is underway against the network.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.2.1 snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicIntrusionEvtRate
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.2.1.1 snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicIntrusionEvtRate.1
Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwAaicIntrusionEvtRate OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.491 | ciscoUnifiedFirewallMIB | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1 | ciscoUnifiedFirewallMIBObjects | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5 | cuFwAaicGrp | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3 | cufwAaicEngineStats | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3.2 | cufwAaicSnortEvRates | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3.2.1 | cufwAaicIntrusionEvtRate | CISCO-UNIFIED-FIREWALL-MIB |