All MIBs › ERICSSON-ROUTER-SYS-SECURITY-MIB › eriRouterMaliciousPktsThresholdHi
eriRouterMaliciousPktsThresholdHi
Module: ERICSSON-ROUTER-SYS-SECURITY-MIB
OID (symbolic): ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdHi
OID (numeric): 1.3.6.1.4.1.193.218.5.54.1.1.3
Node type: OBJECT-TYPE
Type: EriRouterUnsigned64
Access: read-write
Description: When the current sampling interval delta value of the malicious packets counter is greater than or equal to this threshold, and the delta value at the last sampling interval was less than this threshold, a single high threshold exceeded event will be generated. A single high threshold exceeded event will also be generated if the first sampling interval delta value of the malicious IP packets counter is greater than or equal to this threshold.
After a high threshold exceeded event is generated, another such event will not be generated until the delta value falls below this threshold and reaches the eriRouterMaliciousPktsThresholdLow, generating a low threshold exceeded event. In other words there cannot be successive high threshold events without an intervening low threshold event.
What is eriRouterMaliciousPktsThresholdHi?
This object sets the high threshold, in packets, for the delta value of the malicious-packets counter measured over eriRouterMeasurementInterval. When the delta crosses at or above this value from below, the router raises a single high-threshold-exceeded event, and it will not raise another until the delta first drops to or below eriRouterMaliciousPktsThresholdLow. For example, an admin might set this to 1000 packets per interval so a sudden spike of spoofed or malformed traffic triggers one alert rather than an alert on every sample.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.193.218.5.54.1.1.3 snmpwalk -v2c -c public <target> ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdHi
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.193.218.5.54.1.1.3.1 snmpget -v2c -c public <target> ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdHi.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.193.218.5.54.1.1.3.1 i <value>
Start monitoring Ericsson routers and metro Ethernet platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdHi OID value, configure state conditions and alerts, and monitor any Ericsson routers and metro Ethernet platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.193 | ericsson | ANS-COMMON-MIB |
| 1.3.6.1.4.1.193.218 | eriRouterSMI | ERICSSON-ROUTER-SMI |
| 1.3.6.1.4.1.193.218.5 | eriRouterModules | ERICSSON-ROUTER-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.193.218.5.54 | eriRouterSysSecurityMib | ERICSSON-ROUTER-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.193.218.5.54.1 | eriRouterSysSecObjects | ERICSSON-ROUTER-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.193.218.5.54.1.1 | eriRouterSysSecThresholdObjects | ERICSSON-ROUTER-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.193.218.5.54.1.1.3 | eriRouterMaliciousPktsThresholdHi | ERICSSON-ROUTER-SYS-SECURITY-MIB |