All MIBs › EXTREME-IP-SECURITY-MIB › esAnomalyTcpFlagReason
esAnomalyTcpFlagReason
Module: EXTREME-IP-SECURITY-MIB
OID (symbolic): EXTREME-IP-SECURITY-MIB::esAnomalyTcpFlagReason
OID (numeric): 1.3.6.1.4.1.1916.1.34.2.16
Node type: OBJECT-TYPE
Type: TcpFlagAnomalyReason
Access: accessible-for-notify
Description: TCP flag anomaly reason code
What is esAnomalyTcpFlagReason?
A coded reason explaining why the TCP-flag anomaly check fired: SYN with a low source port, zero flags with zero sequence number, FIN/URG/PSH with zero sequence number, or SYN and FIN both set. Read this alongside esAnomalyTcpFlag and esAnomalyTcpSeq to understand the specific attack pattern detected.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1916 | extreme | A3COM51-SS9000SX |
| 1.3.6.1.4.1.1916.1 | extremeAgent | EXTREME-BASE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1916.1.34 | extremeIpSecurity | EXTREME-IP-SECURITY-MIB |
| 1.3.6.1.4.1.1916.1.34.2 | extremeIpSecurityAnomalyTraps | EXTREME-IP-SECURITY-MIB |
| 1.3.6.1.4.1.1916.1.34.2.16 | esAnomalyTcpFlagReason | EXTREME-IP-SECURITY-MIB |