All MIBs › HM2-DOS-MITIGATION-MIB › hm2DosMitigationTcpXmasScan
hm2DosMitigationTcpXmasScan
Module: HM2-DOS-MITIGATION-MIB
OID (symbolic): HM2-DOS-MITIGATION-MIB::hm2DosMitigationTcpXmasScan
OID (numeric): 1.3.6.1.4.1.248.11.82.1.1.1.4
Node type: OBJECT-TYPE
Type: HmEnabledStatus
Access: read-write
Description: When enabled TCP Xmas scans (TCP flags FIN, URG and PSH all set to 1 and a TCP sequence number = 0) are filtered by the device.
What is hm2DosMitigationTcpXmasScan?
Enables filtering of TCP Xmas scan packets, which have the FIN, URG, and PSH flags all set together with a sequence number of zero, a known port-scanning fingerprinting technique. Disabled by default, an admin turns this on so the device drops these malformed scan packets at the boundary instead of forwarding them.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.248.11.82.1.1.1.4 snmpwalk -v2c -c public <target> HM2-DOS-MITIGATION-MIB::hm2DosMitigationTcpXmasScan
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.248.11.82.1.1.1.4.1 snmpget -v2c -c public <target> HM2-DOS-MITIGATION-MIB::hm2DosMitigationTcpXmasScan.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.248.11.82.1.1.1.4.1 s <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> hm2DosMitigationTcpXmasScan.1
Start monitoring Hirschmann industrial Ethernet switches with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HM2-DOS-MITIGATION-MIB::hm2DosMitigationTcpXmasScan OID value, configure state conditions and alerts, and monitor any Hirschmann industrial Ethernet switches from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.248 | hirschmann | HIRSCHMANN-GENERIC-ERROR-MIB |
| 1.3.6.1.4.1.248.11 | hm2ConfigurationMibs | HM2-TC-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.248.11.82 | hm2DosMitigationMib | HM2-DOS-MITIGATION-MIB |
| 1.3.6.1.4.1.248.11.82.1 | hm2DosMitigationObjects | HM2-DOS-MITIGATION-MIB |
| 1.3.6.1.4.1.248.11.82.1.1 | hm2DosMitigationGeneralSettings | HM2-DOS-MITIGATION-MIB |
| 1.3.6.1.4.1.248.11.82.1.1.1 | hm2DosMitigationTcpHdrChecks | HM2-DOS-MITIGATION-MIB |
| 1.3.6.1.4.1.248.11.82.1.1.1.4 | hm2DosMitigationTcpXmasScan | HM2-DOS-MITIGATION-MIB |