All MIBs › DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceTCPSynFinMode
agentSwitchDenialOfServiceTCPSynFinMode
Module: DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode
OID (numeric): 1.3.6.1.4.1.7244.2.31.1.15
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the TCP Syn and Fin Denial of Service protection feature.
What is agentSwitchDenialOfServiceTCPSynFinMode?
This read-write enumerated object enables or disables denial-of-service protection against TCP packets that have both the SYN and FIN flags set simultaneously, an invalid and commonly attack-associated combination. Admins enable this to block a classic port-scanning and stack-fingerprinting technique. For example, enabling this setting causes the switch to drop a crafted packet with SYN+FIN set, which legitimate TCP stacks never produce.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.7244.2.31.1.15 snmpwalk -v2c -c public <target> DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.7244.2.31.1.15.1 snmpget -v2c -c public <target> DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.7244.2.31.1.15.1 i <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> agentSwitchDenialOfServiceTCPSynFinMode.1
Start monitoring Quanta enterprise/data-center switch (DoS detection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode OID value, configure state conditions and alerts, and monitor any Quanta enterprise/data-center switch (DoS detection) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.7244 | quanta | QUANTA-SWITCH-MIB |
| 1.3.6.1.4.1.7244.2 | switch | QUANTA-SWITCH-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.7244.2.31 | denialOfService | DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.7244.2.31.1 | agentSwitchDenialOfServiceGroup | DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.7244.2.31.1.15 | agentSwitchDenialOfServiceTCPSynFinMode | DENIALOFSERVICE-PRIVATE-MIB |