This read-write value chooses whether matched DoS attack traffic for this row is 'drop'-ped outright or 'redirect'-ed elsewhere for inspection. An admin sets 'redirect' to forward suspicious traffic to a monitoring or scrubbing port instead of discarding it, but per the DESCRIPTION this only takes effect once a valid redirect port is also configured — otherwise the switch behaves as if 'drop' were set. For example, an admin wanting to capture attack traffic for analysis would set this to redirect(2) and then also configure dDoSPrevCtrlRedirectPort, rather than leaving it at the default of drop(1).