All MIBs › ERICSSON-ROUTER-SYS-SECURITY-MIB › eriRouterMaliciousPktsThresholdLow
eriRouterMaliciousPktsThresholdLow
Module: ERICSSON-ROUTER-SYS-SECURITY-MIB
OID (symbolic): ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdLow
OID (numeric): 1.3.6.1.4.1.193.218.5.54.1.1.4
Node type: OBJECT-TYPE
Type: EriRouterUnsigned64
Access: read-write
Description: When the current sampling interval delta value of the malicious packets counter is less than or equal to this threshold, and the delta value at the last sampling interval was greater than this threshold, a single low threshold exceeded event will be generated. In addition, a high threshold exceeded event must occur before a low threshold exceeded event can be generated.
What is eriRouterMaliciousPktsThresholdLow?
This object sets the low threshold, in packets, for the delta value of the malicious-packets counter, used to re-arm alerting after a high-threshold event has fired. A low-threshold-exceeded event only fires after a high-threshold event has already occurred, so this value defines when the attack condition is considered to have subsided. For example, pairing a low threshold of 100 with a high threshold of 1000 lets the router report both the start and the end of a malicious-traffic burst.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.193.218.5.54.1.1.4 snmpwalk -v2c -c public <target> ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdLow
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.193.218.5.54.1.1.4.1 snmpget -v2c -c public <target> ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdLow.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.193.218.5.54.1.1.4.1 i <value>
Start monitoring Ericsson routers and metro Ethernet platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ERICSSON-ROUTER-SYS-SECURITY-MIB::eriRouterMaliciousPktsThresholdLow OID value, configure state conditions and alerts, and monitor any Ericsson routers and metro Ethernet platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.193 | ericsson | ANS-COMMON-MIB |
| 1.3.6.1.4.1.193.218 | eriRouterSMI | ERICSSON-ROUTER-SMI |
| 1.3.6.1.4.1.193.218.5 | eriRouterModules | ERICSSON-ROUTER-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.193.218.5.54 | eriRouterSysSecurityMib | ERICSSON-ROUTER-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.193.218.5.54.1 | eriRouterSysSecObjects | ERICSSON-ROUTER-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.193.218.5.54.1.1 | eriRouterSysSecThresholdObjects | ERICSSON-ROUTER-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.193.218.5.54.1.1.4 | eriRouterMaliciousPktsThresholdLow | ERICSSON-ROUTER-SYS-SECURITY-MIB |