All MIBs › DOS-PREV-MIB › swDoSNotifyVarIpAddr
swDoSNotifyVarIpAddr
Module: DOS-PREV-MIB
OID (symbolic): DOS-PREV-MIB::swDoSNotifyVarIpAddr
OID (numeric): 1.3.6.1.4.1.171.12.59.4.1.1
Node type: OBJECT-TYPE
Type: IpAddress
Access: accessible-for-notify
Description: If the DoS packet is from the end station, represent the IP address of attacker; otherwise represent the router's IP
What is swDoSNotifyVarIpAddr?
This notification-only object carries the IP address associated with a detected DoS event: the attacker's address if the packet originated from an end station, or the router's address otherwise. It's included as a varbind in DoS-related traps so the receiving NMS can immediately identify which host to investigate or block. For example, a trap for a detected smurf-attack from a directly connected PC would carry that PC's IP address in swDoSNotifyVarIpAddr.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.171 | d_link | DE1500-MIB |
| 1.3.6.1.4.1.171.12 | dlink_common_mgmt | DLINK-ID-REC-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.171.12.59 | swDoSMgmtMIB | DOS-PREV-MIB |
| 1.3.6.1.4.1.171.12.59.4 | swDoSNotify | DOS-PREV-MIB |
| 1.3.6.1.4.1.171.12.59.4.1 | swDoSNotifyVarBindings | DOS-PREV-MIB |
| 1.3.6.1.4.1.171.12.59.4.1.1 | swDoSNotifyVarIpAddr | DOS-PREV-MIB |