This notification-carried Counter64 reports the total number of packets the switch dropped due to a DoS attack over the preceding 5-minute interval. An admin reads this value inside the associated trap to gauge the scale of the attack the switch just mitigated, distinguishing a minor probe from a sustained flood. For example, a trap reporting a count of 50,000 dropped frames in five minutes would signal a much more aggressive attack than one reporting only a handful.