All MIBs › F5-BIGIP-COMMON-MIB › bigipUnsolicitedRepliesExceededThreshold
bigipUnsolicitedRepliesExceededThreshold
Module: F5-BIGIP-COMMON-MIB
OID (symbolic): F5-BIGIP-COMMON-MIB::bigipUnsolicitedRepliesExceededThreshold
OID (numeric): 1.3.6.1.4.1.3375.2.4.0.122
Node type: NOTIFICATION-TYPE
Description:
The DNS cache object received unsolicited query replies exceeding a configured threshold.
What is bigipUnsolicitedRepliesExceededThreshold?
This notification is generated when the DNS cache object receives an excessive number of unsolicited query replies, exceeding a configured threshold. This can indicate DNS spoofing attempts, cache poisoning, or network misconfiguration. An operator uses this alert to detect potential security threats or unusual DNS behavior and take corrective action.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' F5-BIGIP-COMMON-MIB::bigipUnsolicitedRepliesExceededThreshold snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.3375.2.4.0.122
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:60291->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (488248707) 56 days, 12:14:47.07 SNMPv2-MIB::snmpTrapOID.0 = OID: F5-BIGIP-COMMON-MIB::bigipUnsolicitedRepliesExceededThreshold
OID Breakdown
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | BIANCA-BRICK-PPP-MIB |
| 1.3.6 | dod | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1 | internet | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1.4 | private | BIANCA-BRICK-PPP-MIB |
| 1.3.6.1.4.1 | enterprises | ANIROOT-MIB |
| 1.3.6.1.4.1.3375 | f5 | F5-BIGIP-COMMON-MIB |
| 1.3.6.1.4.1.3375.2 | bigipTrafficMgmt | F5-BIGIP-COMMON-MIB |
| 1.3.6.1.4.1.3375.2.4 | bigipNotification | F5-BIGIP-COMMON-MIB |
| 1.3.6.1.4.1.3375.2.4.0 | bigipNotifications | F5-BIGIP-COMMON-MIB |
| 1.3.6.1.4.1.3375.2.4.0.122 | bigipUnsolicitedRepliesExceededThreshold | F5-BIGIP-COMMON-MIB |