HH3C-SAVA-MIB :: hh3cSavaCountFilterPkt

MIB Reference — IPNetwork Monitor · Updated October 02, 2026

All MIBs › HH3C-SAVA-MIB › hh3cSavaCountFilterPkt

hh3cSavaCountFilterPkt

Module: HH3C-SAVA-MIB

OID (symbolic): HH3C-SAVA-MIB::hh3cSavaCountFilterPkt

OID (numeric): 1.3.6.1.4.1.25506.2.191.1.4.1.3

Node type: OBJECT-TYPE

Type: Counter64

Access: read-only

Description: The count of packets dropped.

What is hh3cSavaCountFilterPkt?

This read-only 64-bit counter tracks the number of packets dropped on an interface because they failed SAVA source-address validation. Admins monitor this counter to detect ongoing spoofing attempts or misconfigurations being blocked at the interface. For example, a rapidly climbing value on a customer-facing interface could indicate an active source-address spoofing attack being filtered.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.25506.2.191.1.4.1.3
snmpwalk -v2c -c public <target> HH3C-SAVA-MIB::hh3cSavaCountFilterPkt

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.25506.2.191.1.4.1.3.1
snmpget -v2c -c public <target> HH3C-SAVA-MIB::hh3cSavaCountFilterPkt.1

Start monitoring H3C edge router/access switch (Source Address Validation Architecture) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HH3C-SAVA-MIB::hh3cSavaCountFilterPkt OID value, configure state conditions and alerts, and monitor any H3C edge router/access switch (Source Address Validation Architecture) from a single console.

How to Use in IPNetwork Monitor

Select an H3C edge router/access switch (Source Address Validation Architecture) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cSavaCountFilterPkt into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The count of packets dropped. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.25506hh3cHH3C-OID-MIB
1.3.6.1.4.1.25506.2hh3cCommonHH3C-OID-MIB
Numeric OIDNameModule
1.3.6.1.4.1.25506.2.191hh3cSavaHH3C-SAVA-MIB
1.3.6.1.4.1.25506.2.191.1hh3cSavaObjectsHH3C-SAVA-MIB
1.3.6.1.4.1.25506.2.191.1.4hh3cSavaCountTableHH3C-SAVA-MIB
1.3.6.1.4.1.25506.2.191.1.4.1hh3cSavaCountEntryHH3C-SAVA-MIB
1.3.6.1.4.1.25506.2.191.1.4.1.3hh3cSavaCountFilterPktHH3C-SAVA-MIB