All MIBs › HILLSTONE-STATISTICS-MIB
Category: Hillstone
Description: Tracks session, connection, and traffic throughput statistics on Hillstone Networks firewalls.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HILLSTONE-STATISTICS-MIB?
HILLSTONE-STATISTICS-MIB is a Hillstone Networks enterprise MIB that tracks session, connection, IPSec VPN, and traffic throughput statistics on their firewall/security appliances. It exposes performance and security counters such as the number of online users, active IPSec tunnels and security associations, and detailed per-tunnel IPSec statistics including inbound octets, decompressed octets, packets, drops, replay drops, and authentication failures. Its monitoring value is centered on software/service health -- tracking VPN tunnel stability and throughput, detecting authentication failures or replay-attack drops that could signal a security issue, and gauging overall session load via online user counts -- functioning as a performance and security-event monitoring MIB rather than hardware sensor telemetry. No explicit dependency on external standard MIBs is indicated, though it likely coexists with standard IF-MIB interface counters on the same device. It is deployed on Hillstone Networks firewall/UTM appliances used for perimeter security and IPSec VPN termination. Network engineers evaluating or troubleshooting this functionality can download the HILLSTONE-STATISTICS-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HILLSTONE-STATISTICS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Hillstone Networks firewall/UTM appliance
Monitoring Examples
An operator would poll onlineUserNum alongside hillstoneIPSecGlobalActiveTunnels and hillstoneIPSecGlobalActiveSas to gauge current VPN load, then drill into hillstoneIPSecStatisticTable/hillstoneIPSecStatisticEntry keyed by hillstoneIpsecTunnelID to inspect per-tunnel hillstoneIPSecInOctets, hillstoneIPSecInDrops, and hillstoneIPSecInAuthFails. A tunnel showing a rising hillstoneIPSecInReplayDrops or hillstoneIPSecInAuthFails count would indicate a possible replay attack or misconfigured pre-shared key/certificate on that specific tunnel. A sudden drop in hillstoneIPSecGlobalActiveTunnels compared to the configured tunnel count would reveal VPN peers going down.
What Can Be Monitored
- online user count
- active IPSec tunnels/SAs
- per-tunnel inbound octets/packets
- per-tunnel drop counts
- authentication and replay failure counts
This MIB depends on
Imported Objects
From HILLSTONE-SMI
| hillstoneStatistics | OBJECT-IDENTITY |
From RFC-1212
| Counter | |
| Counter32 | |
| Counter64 | |
| Gauge | |
| OBJECT-TYPE |
How to Use in IPNetwork Monitor
Example using hillstoneEventHttpAtk OID:
Select a Hillstone Networks firewall/UTM appliance (session/IPsec VPN statistics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hillstoneEventHttpAtk into the Find box to locate it in the OID tree, then select it and click OK. The http attack occurs during the last statistcs period. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| hillstoneSystemStatistics | 1.3.6.1.4.1.28557.2.3.1 | |||
| INT onlineUserNum | 1.3.6.1.4.1.28557.2.3.1.1 | INTEGER | read-only | |
| hillstoneIPSecStatistic | 1.3.6.1.4.1.28557.2.3.2 | |||
| GAU hillstoneIPSecGlobalActiveTunnels | 1.3.6.1.4.1.28557.2.3.2.1 | Gauge | read-only | The total number of currently active IPSec Phase-2 Tunnels. |
| GAU hillstoneIPSecGlobalActiveSas | 1.3.6.1.4.1.28557.2.3.2.2 | Gauge | read-only | The total number of currently active or expiring IPSec Phase-2 SA. |
| hillstoneIPSecStatisticTable | 1.3.6.1.4.1.28557.2.3.2.3 | not-accessible | The table of the ipsec tunnel flow statistics | |
| hillstoneIPSecStatisticEntry | 1.3.6.1.4.1.28557.2.3.2.3.1 | not-accessible | The entry is used in ip address informatioin of this dns server | |
| CTR hillstoneIPsecTunnelID | 1.3.6.1.4.1.28557.2.3.2.3.1.1 | Counter | read-only | The IPSec tunnel ID |
| C64 hillstoneIPSecInOctets | 1.3.6.1.4.1.28557.2.3.2.3.1.2 | Counter64 | read-only | The total number of octets received by all current and previous IPSec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. |
| C64 hillstoneIPSecInDecompOctets | 1.3.6.1.4.1.28557.2.3.2.3.1.3 | Counter64 | read-only | The total number of decompressed octets received by all current and previous IPSec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. |
| C64 hillstoneIPSecInPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.4 | Counter64 | read-only | The total number of packets received by all current and previous IPSec Phase-2 Tunnels. |
| C64 hillstoneIPSecInDrops | 1.3.6.1.4.1.28557.2.3.2.3.1.5 | Counter64 | read-only | The total number of packets dropped during receiving process by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecInReplayDrops | 1.3.6.1.4.1.28557.2.3.2.3.1.6 | Counter32 | read-only | The total number of packets dropped during receiving process due to Anti-Replay process by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecInAuthFails | 1.3.6.1.4.1.28557.2.3.2.3.1.7 | Counter32 | read-only | The total number of inbound authentication's which ended in failure by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecInDecryptFails | 1.3.6.1.4.1.28557.2.3.2.3.1.8 | Counter32 | read-only | The total number of inbound decryption's which ended in failure by all current and previous IPSec Phase-2 Tunnels. |
| C64 hillstoneIPSecOutOctets | 1.3.6.1.4.1.28557.2.3.2.3.1.9 | Counter64 | read-only | The total number of octets sent by all current and previous IPSec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. |
| C64 hillstoneIPSecOutUncompOctets | 1.3.6.1.4.1.28557.2.3.2.3.1.10 | Counter64 | read-only | The total number of uncompressed octets sent by all current and previous IPSec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. |
| C64 hillstoneIPSecOutPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.11 | Counter64 | read-only | The total number of packets sent by all current and previous IPSec Phase-2 Tunnels. |
| C64 hillstoneIPSecOutDrops | 1.3.6.1.4.1.28557.2.3.2.3.1.12 | Counter64 | read-only | The total number of packets dropped during sending process by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecOutEncryptFails | 1.3.6.1.4.1.28557.2.3.2.3.1.13 | Counter32 | read-only | The total number of outbound encryption's which ended in failure by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecNoMemoryDropPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.14 | Counter32 | read-only | The total number of packets dropped due to no enough memory by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecNoFindSaDropPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.15 | Counter32 | read-only | The total number of packets dropped due to not find SA by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecQueueFullDropPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.16 | Counter32 | read-only | The total number of packets dropped due to queue full by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecInvalidLenDropPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.17 | Counter32 | read-only | The total number of packets dropped due to invalid packet length by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecTooLongDropPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.18 | Counter32 | read-only | The total number of packets dropped due to too long packet by all current and previous IPSec Phase-2 Tunnels. |
| C32 hillstoneIPSecInvalidSaDropPkts | 1.3.6.1.4.1.28557.2.3.2.3.1.19 | Counter32 | read-only | The total number of packets dropped due to invalid SA by all current and previous IPSec Phase-2 Tunnels. |
| hillstoneIpsEventStatistics | 1.3.6.1.4.1.28557.2.3.3 | |||
| C64 hillstoneEventHttpAtkEx | 1.3.6.1.4.1.28557.2.3.3.1 | Counter64 | read-only | The http attack occurs during the last statistcs period. |
| C64 hillstoneEventFtpAtk | 1.3.6.1.4.1.28557.2.3.3.2 | Counter64 | read-only | The ftp attack occurs during the last statistcs period. |
| C64 hillstoneEventSmtpAtk | 1.3.6.1.4.1.28557.2.3.3.3 | Counter64 | read-only | The Smtp attack occurs during the last statistcs period. |
| C64 hillstoneEventDnsAtk | 1.3.6.1.4.1.28557.2.3.3.4 | Counter64 | read-only | The dns attack occurs during the last statistcs period. |
| C64 hillstoneEventNetbiosAtk | 1.3.6.1.4.1.28557.2.3.3.5 | Counter64 | read-only | The Netbios attack occurs during the last statistcs period. |
| C64 hillstoneEventPop3Atk | 1.3.6.1.4.1.28557.2.3.3.6 | Counter64 | read-only | The pop3 attack occurs during the last statistcs period. |
| C64 hillstoneEventSipAtk | 1.3.6.1.4.1.28557.2.3.3.7 | Counter64 | read-only | The sip attack occurs during the last statistcs period. |
| C64 hillstoneEventH323Atk | 1.3.6.1.4.1.28557.2.3.3.8 | Counter64 | read-only | The h323 attack occurs during the last statistcs period. |
| C64 hillstoneEventImapAtk | 1.3.6.1.4.1.28557.2.3.3.9 | Counter64 | read-only | The imap attack occurs during the last statistcs period. |
| C64 hillstoneEventP2PAtk | 1.3.6.1.4.1.28557.2.3.3.10 | Counter64 | read-only | The P2P attack occurs during the last statistcs period. |
| C64 hillstoneEventImAtk | 1.3.6.1.4.1.28557.2.3.3.11 | Counter64 | read-only | The IM attack occurs during the last statistcs period. |
| C64 hillstoneEventSQLAtk | 1.3.6.1.4.1.28557.2.3.3.12 | Counter64 | read-only | The SQL inspection attack occurs during the last statistcs period. |
| C64 hillstoneEventIPSOthersAtk | 1.3.6.1.4.1.28557.2.3.3.13 | Counter64 | read-only | The others attack occurs during the last statistcs period. |
| hillstoneIpsFlowStatistics | 1.3.6.1.4.1.28557.2.3.4 | |||
| C64 hillstonePktsHttpAtk | 1.3.6.1.4.1.28557.2.3.4.1 | Counter64 | read-only | The http attack packets occurs during the last statistcs period. |
| C64 hillstonePktsFtpAtk | 1.3.6.1.4.1.28557.2.3.4.2 | Counter64 | read-only | The ftp attack packets occurs during the last statistcs period. |
| C64 hillstonePktsSmtpAtk | 1.3.6.1.4.1.28557.2.3.4.3 | Counter64 | read-only | The Smtp attack packets occurs during the last statistcs period. |
| C64 hillstonePktsDnsAtk | 1.3.6.1.4.1.28557.2.3.4.4 | Counter64 | read-only | The dns attack packets occurs during the last statistcs period. |
| C64 hillstonePktsNetbiosAtk | 1.3.6.1.4.1.28557.2.3.4.5 | Counter64 | read-only | The Netbios attack packets occurs during the last statistcs period. |
| C64 hillstonePktsPop3Atk | 1.3.6.1.4.1.28557.2.3.4.6 | Counter64 | read-only | The pop3 attack packets occurs during the last statistcs period. |
| C64 hillstonePktsSipAtk | 1.3.6.1.4.1.28557.2.3.4.7 | Counter64 | read-only | The sip attack packets occurs during the last statistcs period. |
| C64 hillstonePktsH323Atk | 1.3.6.1.4.1.28557.2.3.4.8 | Counter64 | read-only | The h323 attack packets occurs during the last statistcs period. |
| C64 hillstonePktsImapAtk | 1.3.6.1.4.1.28557.2.3.4.9 | Counter64 | read-only | The imap attack packets occurs during the last statistcs period. |
| C64 hillstonePktsP2PAtk | 1.3.6.1.4.1.28557.2.3.4.10 | Counter64 | read-only | The P2P attack packets occurs during the last statistcs period. |
| C64 hillstonePktsImAtk | 1.3.6.1.4.1.28557.2.3.4.11 | Counter64 | read-only | The IM attack packets occurs during the last statistcs period. |
| C64 hillstonePktsSQLAtk | 1.3.6.1.4.1.28557.2.3.4.12 | Counter64 | read-only | The SQL inspection attack packets occurs during the last statistcs period. |
| C64 hillstonePktsIPSOthersAtk | 1.3.6.1.4.1.28557.2.3.4.13 | Counter64 | read-only | The Others attack packets occurs during the last statistcs period. |
| hillstoneAtkEventStatistics | 1.3.6.1.4.1.28557.2.3.5 | |||
| C64 hillstoneEventIpSpoof | 1.3.6.1.4.1.28557.2.3.5.1 | Counter64 | read-only | The total number of ip spoof attack occurs during last statistcs period. |
| C64 hillstoneEventLandAtk | 1.3.6.1.4.1.28557.2.3.5.2 | Counter64 | read-only | The total number of land attack occurs during last statistcs period. |
| C64 hillstoneEventSmurfAtk | 1.3.6.1.4.1.28557.2.3.5.3 | Counter64 | read-only | The total number of smurf attack occurs during last statistcs period. |
| C64 hillstoneEventFraggleAtk | 1.3.6.1.4.1.28557.2.3.5.4 | Counter64 | read-only | The total number of fraggle attack occurs during last statistcs period. |
| C64 hillstoneEventWinnuke | 1.3.6.1.4.1.28557.2.3.5.5 | Counter64 | read-only | The total number of Winnuke attack occurs during last statistcs period. |
| C64 hillstoneEventDnsFlood | 1.3.6.1.4.1.28557.2.3.5.6 | Counter64 | read-only | The total number of DNS flood attack occurs during last statistcs period. |
| C64 hillstoneEventTcpFlood | 1.3.6.1.4.1.28557.2.3.5.7 | Counter64 | read-only | The total number of TCP flood attack occurs during last statistcs period. |
| C64 hillstoneEventSynFlood | 1.3.6.1.4.1.28557.2.3.5.8 | Counter64 | read-only | The total number of syn flood attack occurs during last statistcs period. |
| C64 hillstoneEventUdpFlood | 1.3.6.1.4.1.28557.2.3.5.9 | Counter64 | read-only | The total number of udp flood attack occurs during last statistcs period. |
| C64 hillstoneEventIcmpFlood | 1.3.6.1.4.1.28557.2.3.5.10 | Counter64 | read-only | The total number of icmp flood attack occurs during last statistcs period. |
| C64 hillstoneEventRedirect | 1.3.6.1.4.1.28557.2.3.5.11 | Counter64 | read-only | The total number of icmp Redirect attack occurs during last statistcs period. |
| C64 hillstoneEventUnreacheableAtk | 1.3.6.1.4.1.28557.2.3.5.12 | Counter64 | read-only | The total number of icmp Unreacheable attack occurs during last statistcs period. |
| C64 hillstoneEventIpSweep | 1.3.6.1.4.1.28557.2.3.5.13 | Counter64 | read-only | The total number of icmp Ip sweep attack occurs during last statistcs period. |
| C64 hillstoneEventPortScan | 1.3.6.1.4.1.28557.2.3.5.14 | Counter64 | read-only | The total number of Port scan attack occurs during last statistcs period. |
| C64 hillstoneEventIpOptAtk | 1.3.6.1.4.1.28557.2.3.5.15 | Counter64 | read-only | The total number of Ip Options attack occurs during last statistcs period. |
| C64 hillstoneEventIpOptSrcRoutAtk | 1.3.6.1.4.1.28557.2.3.5.16 | Counter64 | read-only | The total number of Ip option source route attack occurs during last statistcs period. |
| C64 hillstoneEventIpOptRoutRecord | 1.3.6.1.4.1.28557.2.3.5.17 | Counter64 | read-only | The total number of Ip options route record attack occurs during last statistcs period. |
| C64 hillstoneEventTraceRoutAtk | 1.3.6.1.4.1.28557.2.3.5.18 | Counter64 | read-only | The total number of trace route attack occurs during last statistcs period. |
| C64 hillstoneEventTimeStampAtk | 1.3.6.1.4.1.28557.2.3.5.19 | Counter64 | read-only | The total number of Time stamp attack occurs during last statistcs period. |
| C64 hillstoneEventPingOfDeathAtk | 1.3.6.1.4.1.28557.2.3.5.20 | Counter64 | read-only | The total number of Ping of death attack occurs during last statistcs period. |
| C64 hillstoneEventTearDropAtk | 1.3.6.1.4.1.28557.2.3.5.21 | Counter64 | read-only | The total number of Tear drop attack occurs during last statistcs period. |
| C64 hillstoneEventTcpFlagAtk | 1.3.6.1.4.1.28557.2.3.5.22 | Counter64 | read-only | The total number of Tcp flag attack occurs during last statistcs period. |
| C64 hillstoneEventIpFragAtk | 1.3.6.1.4.1.28557.2.3.5.23 | Counter64 | read-only | The total number of IP Fragment attack occurs during last statistcs period. |
| C64 hillstoneEventLargeIcmpAtk | 1.3.6.1.4.1.28557.2.3.5.24 | Counter64 | read-only | The total number of Large ICMP attack occurs during last statistcs period. |
| C64 hillstoneEventSweepAndScanAtk | 1.3.6.1.4.1.28557.2.3.5.25 | Counter64 | read-only | The total number of Both ip-sweep and port-scan attack occurs during last statistcs period. |
| C64 hillstoneEventHalfConnAtk | 1.3.6.1.4.1.28557.2.3.5.26 | Counter64 | read-only | The total number of Too much Half Con of SYN Flood attack occurs during last statistcs period. |
| C64 hillstoneEventFtpBounceAtk | 1.3.6.1.4.1.28557.2.3.5.27 | Counter64 | read-only | The total number of Ftp Bounce attack occurs during last statistcs period. |
| C64 hillstoneEventSynProxyAtk | 1.3.6.1.4.1.28557.2.3.5.28 | Counter64 | read-only | The total number of SynProxy attack occurs during last statistcs period. |
| C64 hillstoneEventSynCookieAtk | 1.3.6.1.4.1.28557.2.3.5.29 | Counter64 | read-only | The total number of SynCookie attack occurs during last statistcs period. |
| C64 hillstoneEventTCPAnomalyAtk | 1.3.6.1.4.1.28557.2.3.5.30 | Counter64 | read-only | The total number of TCPAnomaly attack occurs during last statistcs period. |
| C64 hillstoneEventIPDirectedAtk | 1.3.6.1.4.1.28557.2.3.5.31 | Counter64 | read-only | The total number of IPDirected attack occurs during last statistcs period. |
| C64 hillstoneEventAtkOthersAtk | 1.3.6.1.4.1.28557.2.3.5.32 | Counter64 | read-only | The total number of Others attack occurs during last statistcs period. |
| hillstoneAtkFlowStatistics | 1.3.6.1.4.1.28557.2.3.6 | |||
| C64 hillstonePktsIpSpoof | 1.3.6.1.4.1.28557.2.3.6.1 | Counter64 | read-only | The total packets of ip spoof attack occurs during last statistcs period. |
| C64 hillstonePktsLandAtk | 1.3.6.1.4.1.28557.2.3.6.2 | Counter64 | read-only | The total packets of land attack occurs during last statistcs period. |
| C64 hillstonePktsSmurfAtk | 1.3.6.1.4.1.28557.2.3.6.3 | Counter64 | read-only | The total packets of smurf attack occurs during last statistcs period. |
| C64 hillstonePktsFraggleAtk | 1.3.6.1.4.1.28557.2.3.6.4 | Counter64 | read-only | The total packets of fraggle attack occurs during last statistcs period. |
| C64 hillstonePktsWinnuke | 1.3.6.1.4.1.28557.2.3.6.5 | Counter64 | read-only | The total packets of Winnuke attack occurs during last statistcs period. |
| C64 hillstonePktsDnsFlood | 1.3.6.1.4.1.28557.2.3.6.6 | Counter64 | read-only | The total packets of DNS flood attack occurs during last statistcs period. |
| C64 hillstonePktsTcpFlood | 1.3.6.1.4.1.28557.2.3.6.7 | Counter64 | read-only | The total packets of TCP flood attack occurs during last statistcs period. |
| C64 hillstonePktsSynFlood | 1.3.6.1.4.1.28557.2.3.6.8 | Counter64 | read-only | The total packets of syn flood attack occurs during last statistcs period. |
| C64 hillstonePktsUdpFlood | 1.3.6.1.4.1.28557.2.3.6.9 | Counter64 | read-only | The total packets of udp flood attack occurs during last statistcs period. |
| C64 hillstonePktsIcmpFlood | 1.3.6.1.4.1.28557.2.3.6.10 | Counter64 | read-only | The total packets of icmp flood attack occurs during last statistcs period. |
| C64 hillstonePktsRedirect | 1.3.6.1.4.1.28557.2.3.6.11 | Counter64 | read-only | The total packets of icmp Redirect attack occurs during last statistcs period. |
| C64 hillstonePktsUnreacheableAtk | 1.3.6.1.4.1.28557.2.3.6.12 | Counter64 | read-only | The total packets of icmp Unreacheable attack occurs during last statistcs period. |
| C64 hillstonePktsIpSweep | 1.3.6.1.4.1.28557.2.3.6.13 | Counter64 | read-only | The total packets of icmp Ip sweep attack occurs during last statistcs period. |
| C64 hillstonePktsPortScan | 1.3.6.1.4.1.28557.2.3.6.14 | Counter64 | read-only | The total packets of Port scan attack occurs during last statistcs period. |
| C64 hillstonePktsIpOptAtk | 1.3.6.1.4.1.28557.2.3.6.15 | Counter64 | read-only | The total packets of Ip Options attack occurs during last statistcs period. |
| C64 hillstonePktsIpOptSrcRoutAtk | 1.3.6.1.4.1.28557.2.3.6.16 | Counter64 | read-only | The total packets of Ip option source route attack occurs during last statistcs period. |
| C64 hillstonePktsIpOptRoutRecord | 1.3.6.1.4.1.28557.2.3.6.17 | Counter64 | read-only | The total packets of Ip options route record attack occurs during last statistcs period. |
| C64 hillstonePktsTraceRoutAtk | 1.3.6.1.4.1.28557.2.3.6.18 | Counter64 | read-only | The total packets of trace route attack occurs during last statistcs period. |
| C64 hillstonePktsTimeStampAtk | 1.3.6.1.4.1.28557.2.3.6.19 | Counter64 | read-only | The total packets of Time stamp attack occurs during last statistcs period. |
| C64 hillstonePktsPingOfDeathAtk | 1.3.6.1.4.1.28557.2.3.6.20 | Counter64 | read-only | The total packets of Ping of death attack occurs during last statistcs period. |
| C64 hillstonePktsTearDropAtk | 1.3.6.1.4.1.28557.2.3.6.21 | Counter64 | read-only | The total packets of Tear drop attack occurs during last statistcs period. |
| C64 hillstonePktsTcpFlagAtk | 1.3.6.1.4.1.28557.2.3.6.22 | Counter64 | read-only | The total packets of Tcp flag attack occurs during last statistcs period. |
| C64 hillstonePktsIpFragAtk | 1.3.6.1.4.1.28557.2.3.6.23 | Counter64 | read-only | The total packets of IP Fragment attack occurs during last statistcs period. |
| C64 hillstonePktsLargeIcmpAtk | 1.3.6.1.4.1.28557.2.3.6.24 | Counter64 | read-only | The total packets of Large ICMP attack occurs during last statistcs period. |
| C64 hillstonePktsSweepAndScanAtk | 1.3.6.1.4.1.28557.2.3.6.25 | Counter64 | read-only | The total packets of Both ip-sweep and port-scan attack occurs during last statistcs period. |
| C64 hillstonePktsHalfConnAtk | 1.3.6.1.4.1.28557.2.3.6.26 | Counter64 | read-only | The total packets of Too much Half Con of SYN Flood attack occurs during last statistcs period. |
| C64 hillstonePktsFtpBounceAtk | 1.3.6.1.4.1.28557.2.3.6.27 | Counter64 | read-only | The total packets of Ftp Bounce attack occurs during last statistcs period. |
| C64 hillstonePktsAtkOthersAtk | 1.3.6.1.4.1.28557.2.3.6.28 | Counter64 | read-only | The total packets of others attack occurs during last statistcs period. |
| C64 hillstonePktsSynProxyAtk | 1.3.6.1.4.1.28557.2.3.6.29 | Counter64 | read-only | The total number of SynProxy attack occurs during last statistcs period. |
| C64 hillstonePktsSynCookieAtk | 1.3.6.1.4.1.28557.2.3.6.30 | Counter64 | read-only | The total number of SynCookie attack occurs during last statistcs period. |
| C64 hillstonePktsTCPAnomalyAtk | 1.3.6.1.4.1.28557.2.3.6.31 | Counter64 | read-only | The total number of TCPAnomaly attack occurs during last statistcs period. |
| C64 hillstonPktsIPDirectedAtk | 1.3.6.1.4.1.28557.2.3.6.32 | Counter64 | read-only | The total number of IPDirected attack occurs during last statistcs period. |
| hillstoneAVEventStatistics | 1.3.6.1.4.1.28557.2.3.7 | |||
| C64 hillstoneEventAVHttpClear | 1.3.6.1.4.1.28557.2.3.7.1 | Counter64 | read-only | The http protcol's virus which cleared by AV module during the last statistcs period. |
| C64 hillstoneEventAVFtpClear | 1.3.6.1.4.1.28557.2.3.7.2 | Counter64 | read-only | The ftp protcol's virus which cleared by AV module during the last statistcs period. |
| C64 hillstoneEventAVSmtpClear | 1.3.6.1.4.1.28557.2.3.7.3 | Counter64 | read-only | The smtp protcol's virus which cleared by AV module during the last statistcs period. |
| C64 hillstoneEventAVPopClear | 1.3.6.1.4.1.28557.2.3.7.4 | Counter64 | read-only | The pop3 protcol's virus which cleared by AV module during the last statistcs period. |
| C64 hillstoneEventAVImapClear | 1.3.6.1.4.1.28557.2.3.7.5 | Counter64 | read-only | The IMAP which cleared by AV module during the last statistcs period. |
| hillstoneContentFltStatistics | 1.3.6.1.4.1.28557.2.3.8 | |||
| C64 hillstoneUrlFlt | 1.3.6.1.4.1.28557.2.3.8.1 | Counter64 | read-only | The url filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneActiveXFlt | 1.3.6.1.4.1.28557.2.3.8.2 | Counter64 | read-only | The activeX filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneAppletFlt | 1.3.6.1.4.1.28557.2.3.8.2 | Counter64 | read-only | The applet filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneQQFlt | 1.3.6.1.4.1.28557.2.3.8.3 | Counter64 | read-only | The QQ filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneMSNFlt | 1.3.6.1.4.1.28557.2.3.8.4 | Counter64 | read-only | The MSN filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneOtherIMFlt | 1.3.6.1.4.1.28557.2.3.8.5 | Counter64 | read-only | The IM(except QQ and MSN) filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneP2PFlt | 1.3.6.1.4.1.28557.2.3.8.6 | Counter64 | read-only | The P2P filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneWebPostFlt | 1.3.6.1.4.1.28557.2.3.8.7 | Counter64 | read-only | The web post filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneNetGameFlt | 1.3.6.1.4.1.28557.2.3.8.8 | Counter64 | read-only | The Net Game filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneStockFlt | 1.3.6.1.4.1.28557.2.3.8.9 | Counter64 | read-only | The Stock filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneStreamingMediaFlt | 1.3.6.1.4.1.28557.2.3.8.10 | Counter64 | read-only | The Streaming Media filter which block by content filter module during the last statistcs period.. |
| C64 hillstoneOtherFlt | 1.3.6.1.4.1.28557.2.3.8.11 | Counter64 | read-only | The other filter which block by content filter module during the last statistcs period.. |
| hillstoneMailFltStatistics | 1.3.6.1.4.1.28557.2.3.9 | |||
| C64 hillstoneMFSmtpClear | 1.3.6.1.4.1.28557.2.3.9.1 | Counter64 | read-only | The smtp rubbish mail which block by Spam module during the last statistcs period.. |
| C64 hillstoneMFPopClear | 1.3.6.1.4.1.28557.2.3.9.2 | Counter64 | read-only | The pop3 rubbish mail which block by Spam module during the last statistcs period.. |
| C64 hillstoneMFByTitle | 1.3.6.1.4.1.28557.2.3.9.3 | Counter64 | read-only | The title based Spam which block by this module during the last statistcs period.. |
| C64 hillstoneMFBySender | 1.3.6.1.4.1.28557.2.3.9.4 | Counter64 | read-only | The title based Spam which block by this module during the last statistcs period.. |
| C64 hillstoneMFByReceiver | 1.3.6.1.4.1.28557.2.3.9.5 | Counter64 | read-only | The receiver based Spam which block by this module during the last statistcs period.. |
| C64 hillstoneMFByCopyTo | 1.3.6.1.4.1.28557.2.3.9.6 | Counter64 | read-only | The copyto based Spam which block by this module during the last statistcs period.. |
| C64 hillstoneMFByContext | 1.3.6.1.4.1.28557.2.3.9.7 | Counter64 | read-only | The Context based Spam which block by this module during the last statistcs period.. |
| C64 hillstoneMFByKeyWord | 1.3.6.1.4.1.28557.2.3.9.8 | Counter64 | read-only | The KeyWord based Spam which block by this module during the last statistcs period.. |
| hillstoneAtkEventStatisticsTable | 1.3.6.1.4.1.28557.2.3.10 | not-accessible | The table of the ad statistics | |
| hillstoneAtkEventStatisticsEntry | 1.3.6.1.4.1.28557.2.3.10.1 | not-accessible | The entry is used in ad event | |
| CTR hillstoneAtkEventZoneIdx | 1.3.6.1.4.1.28557.2.3.10.1.1 | Counter | read-only | An internal number to distinguish security zone. Different zone has different number. |
| OCT hillstoneAtkEventZoneName | 1.3.6.1.4.1.28557.2.3.10.1.2 | OCTET STRING | read-only | The name of security zone. Different zone has different name. |
| C64 hillstoneAtkEventIpSpoof | 1.3.6.1.4.1.28557.2.3.10.1.3 | Counter64 | read-only | The total number of ip spoof attack occurs during last statistcs period. |
| C64 hillstoneAtkEventLandAtk | 1.3.6.1.4.1.28557.2.3.10.1.4 | Counter64 | read-only | The total number of land attack occurs during last statistcs period. |
| C64 hillstoneAtkEventSmurfAtk | 1.3.6.1.4.1.28557.2.3.10.1.5 | Counter64 | read-only | The total number of smurf attack occurs during last statistcs period. |
| C64 hillstoneAtkEventFraggleAtk | 1.3.6.1.4.1.28557.2.3.10.1.6 | Counter64 | read-only | The total number of fraggle attack occurs during last statistcs period. |
| C64 hillstoneAtkEventWinnuke | 1.3.6.1.4.1.28557.2.3.10.1.7 | Counter64 | read-only | The total number of Winnuke attack occurs during last statistcs period. |
| C64 hillstoneAtkEventDnsFlood | 1.3.6.1.4.1.28557.2.3.10.1.8 | Counter64 | read-only | The total number of DNS flood attack occurs during last statistcs period. |
| C64 hillstoneAtkEventTcpFlood | 1.3.6.1.4.1.28557.2.3.10.1.9 | Counter64 | read-only | The total number of TCP flood attack occurs during last statistcs period. |
| C64 hillstoneAtkEventSynSourceFlood | 1.3.6.1.4.1.28557.2.3.10.1.10 | Counter64 | read-only | The total number of syn flood attack occurs during last statistcs period. |
| C64 hillstoneAtkEventSynDestFlood | 1.3.6.1.4.1.28557.2.3.10.1.11 | Counter64 | read-only | The total number of syn flood attack occurs during last statistcs period. |
| C64 hillstoneAtkEventUdpFlood | 1.3.6.1.4.1.28557.2.3.10.1.12 | Counter64 | read-only | The total number of udp flood attack occurs during last statistcs period. |
| C64 hillstoneAtkEventIcmpFlood | 1.3.6.1.4.1.28557.2.3.10.1.13 | Counter64 | read-only | The total number of icmp flood attack occurs during last statistcs period. |
| C64 hillstoneAtkEventRedirect | 1.3.6.1.4.1.28557.2.3.10.1.14 | Counter64 | read-only | The total number of icmp Redirect attack occurs during last statistcs period. |
| C64 hillstoneAtkEventUnreacheableAtk | 1.3.6.1.4.1.28557.2.3.10.1.15 | Counter64 | read-only | The total number of icmp Unreacheable attack occurs during last statistcs period. |
| C64 hillstoneAtkEventIpSweep | 1.3.6.1.4.1.28557.2.3.10.1.16 | Counter64 | read-only | The total number of icmp Ip sweep attack occurs during last statistcs period. |
| C64 hillstoneAtkEventPortScan | 1.3.6.1.4.1.28557.2.3.10.1.17 | Counter64 | read-only | The total number of Port scan attack occurs during last statistcs period. |
| C64 hillstoneAtkEventIpOptAtk | 1.3.6.1.4.1.28557.2.3.10.1.18 | Counter64 | read-only | The total number of Ip Options attack occurs during last statistcs period. |
| C64 hillstoneAtkEventIpOptSrcRoutAtk | 1.3.6.1.4.1.28557.2.3.10.1.19 | Counter64 | read-only | The total number of Ip option source route attack occurs during last statistcs period. |
| C64 hillstoneAtkEventIpOptRoutRecord | 1.3.6.1.4.1.28557.2.3.10.1.20 | Counter64 | read-only | The total number of Ip options route record attack occurs during last statistcs period. |
| C64 hillstoneAtkEventTraceRoutAtk | 1.3.6.1.4.1.28557.2.3.10.1.21 | Counter64 | read-only | The total number of trace route attack occurs during last statistcs period. |
| C64 hillstoneAtkEventTimeStampAtk | 1.3.6.1.4.1.28557.2.3.10.1.22 | Counter64 | read-only | The total number of Time stamp attack occurs during last statistcs period. |
| C64 hillstoneAtkEventPingOfDeathAtk | 1.3.6.1.4.1.28557.2.3.10.1.23 | Counter64 | read-only | The total number of Ping of death attack occurs during last statistcs period. |
| C64 hillstoneAtkEventTearDropAtk | 1.3.6.1.4.1.28557.2.3.10.1.24 | Counter64 | read-only | The total number of Tear drop attack occurs during last statistcs period. |
| C64 hillstoneAtkEventTcpFlagAtk | 1.3.6.1.4.1.28557.2.3.10.1.25 | Counter64 | read-only | The total number of Tcp flag attack occurs during last statistcs period. |
| C64 hillstoneAtkEventIpFragAtk | 1.3.6.1.4.1.28557.2.3.10.1.26 | Counter64 | read-only | The total number of IP Fragment attack occurs during last statistcs period. |
| C64 hillstoneAtkEventLargeIcmpAtk | 1.3.6.1.4.1.28557.2.3.10.1.27 | Counter64 | read-only | The total number of Large ICMP attack occurs during last statistcs period. |
| C64 hillstoneAtkEventSweepAndScanAtk | 1.3.6.1.4.1.28557.2.3.10.1.28 | Counter64 | read-only | The total number of Both ip-sweep and port-scan attack occurs during last statistcs period. |
| C64 hillstoneAtkEventHalfConnAtk | 1.3.6.1.4.1.28557.2.3.10.1.29 | Counter64 | read-only | The total number of Too much Half Con of SYN Flood attack occurs during last statistcs period. |
| C64 hillstoneAtkEventFtpBounceAtk | 1.3.6.1.4.1.28557.2.3.10.1.30 | Counter64 | read-only | The total number of Ftp Bounce attack occurs during last statistcs period. |
| C64 hillstoneAtkEventSynProxyAtk | 1.3.6.1.4.1.28557.2.3.10.1.31 | Counter64 | read-only | The total number of SynProxy attack occurs during last statistcs period. |
| C64 hillstoneAtkEventSynCookieAtk | 1.3.6.1.4.1.28557.2.3.10.1.32 | Counter64 | read-only | The total number of SynCookie attack occurs during last statistcs period. |
| C64 hillstoneAtkEventTCPAnomalyAtk | 1.3.6.1.4.1.28557.2.3.10.1.33 | Counter64 | read-only | The total number of TCPAnomaly attack occurs during last statistcs period. |
| C64 hillstoneAtkEventIPDirectedAtk | 1.3.6.1.4.1.28557.2.3.10.1.34 | Counter64 | read-only | The total number of IPDirected attack occurs during last statistcs period. |
| C64 hillstoneAtkEventAtkOthersAtk | 1.3.6.1.4.1.28557.2.3.10.1.35 | Counter64 | read-only | The total number of Others attack occurs during last statistcs period. |
| hillstoneAtkFlowStatisticsTable | 1.3.6.1.4.1.28557.2.3.11 | not-accessible | The table of the ad flow statistics | |
| hillstoneAtkFlowStatisticsEntry | 1.3.6.1.4.1.28557.2.3.11.1 | not-accessible | The entry is used in ad flow | |
| CTR hillstoneFlowPktsZoneIdx | 1.3.6.1.4.1.28557.2.3.11.1.1 | Counter | read-only | An internal number to distinguish security zone. Different zone has different number. |
| OCT hillstoneFlowPktsZoneName | 1.3.6.1.4.1.28557.2.3.11.1.2 | OCTET STRING | read-only | The name of security zone. Different zone has different name. |
| C64 hillstoneFlowPktsIpSpoof | 1.3.6.1.4.1.28557.2.3.11.1.3 | Counter64 | read-only | The total packets of ip spoof attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsLandAtk | 1.3.6.1.4.1.28557.2.3.11.1.4 | Counter64 | read-only | The total packets of land attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsSmurfAtk | 1.3.6.1.4.1.28557.2.3.11.1.5 | Counter64 | read-only | The total packets of smurf attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsFraggleAtk | 1.3.6.1.4.1.28557.2.3.11.1.6 | Counter64 | read-only | The total packets of fraggle attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsWinnuke | 1.3.6.1.4.1.28557.2.3.11.1.7 | Counter64 | read-only | The total packets of Winnuke attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsDnsFlood | 1.3.6.1.4.1.28557.2.3.11.1.8 | Counter64 | read-only | The total packets of DNS flood attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsTcpFlood | 1.3.6.1.4.1.28557.2.3.11.1.9 | Counter64 | read-only | The total packets of TCP flood attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsSynSourceFlood | 1.3.6.1.4.1.28557.2.3.11.1.10 | Counter64 | read-only | The total packets of syn flood attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsSynDestFlood | 1.3.6.1.4.1.28557.2.3.11.1.11 | Counter64 | read-only | The total packets of syn flood attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsUdpFlood | 1.3.6.1.4.1.28557.2.3.11.1.12 | Counter64 | read-only | The total packets of udp flood attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsIcmpFlood | 1.3.6.1.4.1.28557.2.3.11.1.13 | Counter64 | read-only | The total packets of icmp flood attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsRedirect | 1.3.6.1.4.1.28557.2.3.11.1.14 | Counter64 | read-only | The total packets of icmp Redirect attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsUnreacheableAtk | 1.3.6.1.4.1.28557.2.3.11.1.15 | Counter64 | read-only | The total packets of icmp Unreacheable attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsIpSweep | 1.3.6.1.4.1.28557.2.3.11.1.16 | Counter64 | read-only | The total packets of icmp Ip sweep attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsPortScan | 1.3.6.1.4.1.28557.2.3.11.1.17 | Counter64 | read-only | The total packets of Port scan attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsIpOptAtk | 1.3.6.1.4.1.28557.2.3.11.1.18 | Counter64 | read-only | The total packets of Ip Options attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsIpOptSrcRoutAtk | 1.3.6.1.4.1.28557.2.3.11.1.19 | Counter64 | read-only | The total packets of Ip option source route attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsIpOptRoutRecord | 1.3.6.1.4.1.28557.2.3.11.1.20 | Counter64 | read-only | The total packets of Ip options route record attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsTraceRoutAtk | 1.3.6.1.4.1.28557.2.3.11.1.21 | Counter64 | read-only | The total packets of trace route attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsTimeStampAtk | 1.3.6.1.4.1.28557.2.3.11.1.22 | Counter64 | read-only | The total packets of Time stamp attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsPingOfDeathAtk | 1.3.6.1.4.1.28557.2.3.11.1.23 | Counter64 | read-only | The total packets of Ping of death attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsTearDropAtk | 1.3.6.1.4.1.28557.2.3.11.1.24 | Counter64 | read-only | The total packets of Tear drop attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsTcpFlagAtk | 1.3.6.1.4.1.28557.2.3.11.1.25 | Counter64 | read-only | The total packets of Tcp flag attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsIpFragAtk | 1.3.6.1.4.1.28557.2.3.11.1.26 | Counter64 | read-only | The total packets of IP Fragment attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsLargeIcmpAtk | 1.3.6.1.4.1.28557.2.3.11.1.27 | Counter64 | read-only | The total packets of Large ICMP attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsSweepAndScanAtk | 1.3.6.1.4.1.28557.2.3.11.1.28 | Counter64 | read-only | The total packets of Both ip-sweep and port-scan attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsHalfConnAtk | 1.3.6.1.4.1.28557.2.3.11.1.29 | Counter64 | read-only | The total packets of Too much Half Con of SYN Flood attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsFtpBounceAtk | 1.3.6.1.4.1.28557.2.3.11.1.30 | Counter64 | read-only | The total packets of Ftp Bounce attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsAtkOthersAtk | 1.3.6.1.4.1.28557.2.3.11.1.31 | Counter64 | read-only | The total packets of others attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsSynProxyAtk | 1.3.6.1.4.1.28557.2.3.11.1.32 | Counter64 | read-only | The total number of SynProxy attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsSynCookieAtk | 1.3.6.1.4.1.28557.2.3.11.1.33 | Counter64 | read-only | The total number of SynCookie attack occurs during last statistcs period. |
| C64 hillstoneFlowPktsTCPAnomalyAtk | 1.3.6.1.4.1.28557.2.3.11.1.34 | Counter64 | read-only | The total number of TCPAnomaly attack occurs during last statistcs period. |
| C64 hillstonFlowPktsIPDirectedAtk | 1.3.6.1.4.1.28557.2.3.11.1.35 | Counter64 | read-only | The total number of IPDirected attack occurs during last statistcs period. |
RFC description
Hillstone Networks security appliance statistics MIB; provides traffic, attack detection, and performance metrics from Hillstone firewalls.
Start monitoring Hillstone Networks firewall/UTM appliance (session/IPsec VPN statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.