FASTPATH-DENIALOFSERVICE-PRIVATE-MIB :: agentSwitchDenialOfServiceTCPHdrSize

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › FASTPATH-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceTCPHdrSize

agentSwitchDenialOfServiceTCPHdrSize

Module: FASTPATH-DENIALOFSERVICE-PRIVATE-MIB

OID (symbolic): FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPHdrSize

OID (numeric): 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.3

Node type: OBJECT-TYPE

Type: Integer32

Access: read-write

Description: Configures the Minimum allowed TCP Header size. This is active if the First Fragment Denial of Service protection feature is enabled.

What is agentSwitchDenialOfServiceTCPHdrSize?

This value sets the minimum TCP header size, in bytes, that the switch will accept once First Fragment Denial of Service protection is enabled. Packets whose TCP header falls below this threshold are treated as suspicious fragmentation-attack traffic and dropped. For example, with the default of 20 bytes (the minimum valid TCP header length), any first-fragment packet claiming a smaller header would be rejected.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.3
snmpwalk -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPHdrSize

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.3.1
snmpget -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPHdrSize.1

Set instance 1 (SNMPv2c):

snmpset -v2c -c private <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.3.1 i <value>

Start monitoring Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPHdrSize OID value, configure state conditions and alerts, and monitor any Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) from a single console.

OID Breakdown

Upper-level ancestors (15 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.674dellArrayManager-MIB
1.3.6.1.4.1.674.10895dellLanDell-Vendor-MIB
1.3.6.1.4.1.674.10895.5000dellLanStandardDell-Vendor-MIB
1.3.6.1.4.1.674.10895.5000.2dellLanExtensionDell-Vendor-MIB
1.3.6.1.4.1.674.10895.5000.2.6132lvl7BROADCOM-REF-MIB
1.3.6.1.4.1.674.10895.5000.2.6132.1lvl7ProductsBROADCOM-REF-MIB
1.3.6.1.4.1.674.10895.5000.2.6132.1.1fastPathBROADCOM-REF-MIB
1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31fastPathDenialOfServiceDNOS-DENIALOFSERVICE-PRIVATE-MIB
1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1agentSwitchDenialOfServiceGroupDNOS-DENIALOFSERVICE-PRIVATE-MIB
Numeric OIDNameModule
1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.3agentSwitchDenialOfServiceTCPHdrSizeFASTPATH-DENIALOFSERVICE-PRIVATE-MIB