All MIBs › FASTPATH-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceTCPSynFinMode
agentSwitchDenialOfServiceTCPSynFinMode
Module: FASTPATH-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode
OID (numeric): 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.15
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the TCP Syn and Fin Denial of Service protection feature.
What is agentSwitchDenialOfServiceTCPSynFinMode?
This setting enables or disables protection against TCP packets that have both the SYN and FIN flags set simultaneously, a combination that never occurs in legitimate traffic and is a known DoS/scanning signature. An admin enables it so the switch drops these malformed packets before they reach end hosts. For example, turning this on blocks a crafted packet designed to confuse a target's TCP state machine by requesting a new connection and a close at the same time.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.15 snmpwalk -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.15.1 snmpget -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.15.1 i <value>
Start monitoring Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPSynFinMode OID value, configure state conditions and alerts, and monitor any Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (15 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.674 | dell | ArrayManager-MIB |
| 1.3.6.1.4.1.674.10895 | dellLan | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000 | dellLanStandard | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2 | dellLanExtension | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132 | lvl7 | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1 | lvl7Products | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1 | fastPath | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31 | fastPathDenialOfService | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1 | agentSwitchDenialOfServiceGroup | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.15 | agentSwitchDenialOfServiceTCPSynFinMode | FASTPATH-DENIALOFSERVICE-PRIVATE-MIB |