All MIBs › CORERO-CMS-MIB › excessiveTcpSetupRate
excessiveTcpSetupRate
Module: CORERO-CMS-MIB
OID (symbolic): CORERO-CMS-MIB::excessiveTcpSetupRate
OID (numeric): 1.3.6.1.4.1.41036.4.1.1.1.1.5
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-only
Description: Awareness indication for this type of threat.
What is excessiveTcpSetupRate?
This read-only TruthValue is a boolean flag for the threat condition of an excessive rate of new TCP connection setups. It indicates a likely SYN-flood or TCP connection-exhaustion attack targeting hosts behind the appliance. For example, an admin sees excessiveTcpSetupRate=true coinciding with a spike in tcpSetupRate, confirming an active SYN flood against a web server behind the appliance.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.41036.4.1.1.1.1.5 snmpwalk -v2c -c public <target> CORERO-CMS-MIB::excessiveTcpSetupRate
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.41036.4.1.1.1.1.5.1 snmpget -v2c -c public <target> CORERO-CMS-MIB::excessiveTcpSetupRate.1
Start monitoring Corero Network Security DDoS-mitigation appliance (Management Server) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CORERO-CMS-MIB::excessiveTcpSetupRate OID value, configure state conditions and alerts, and monitor any Corero Network Security DDoS-mitigation appliance (Management Server) from a single console.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.41036 | corero | CORERO-CMS-MIB |
| 1.3.6.1.4.1.41036.4 | coreroCMSMIB | CORERO-CMS-MIB |
| 1.3.6.1.4.1.41036.4.1 | coreroCMSMIBObjects | CORERO-CMS-MIB |
| 1.3.6.1.4.1.41036.4.1.1 | defense | CORERO-CMS-MIB |
| 1.3.6.1.4.1.41036.4.1.1.1 | defenseStatus | CORERO-CMS-MIB |
| 1.3.6.1.4.1.41036.4.1.1.1.1 | defenseStatusThreatAwareness | CORERO-CMS-MIB |
| 1.3.6.1.4.1.41036.4.1.1.1.1.5 | excessiveTcpSetupRate | CORERO-CMS-MIB |