All MIBs › HP-ICF-ARP-PROTECT › hpicfArpProtectVlanStatBadSrcMacs
hpicfArpProtectVlanStatBadSrcMacs
Module: HP-ICF-ARP-PROTECT
OID (symbolic): HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadSrcMacs
OID (numeric): 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.5
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: The number of ARP packets received on untrusted ports that were dropped because the source MAC address in the Ethernet header did not match the sender MAC address in the body of the ARP packet. This count does not increment when source MAC validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
What is hpicfArpProtectVlanStatBadSrcMacs?
This read-only Counter32 counts, per its source description, ARP packets from untrusted ports dropped because the Ethernet header's source MAC address didn't match the sender MAC in the ARP packet body, and it only increments when source MAC validation (the srcMac bit of hpicfArpProtectValidation) is enabled and Dynamic ARP Protection is on for the VLAN. Admins use a rising BadSrcMacs count to catch ARP spoofing tools that forge the ARP payload's MAC address separately from the actual Ethernet frame header. For example, this counter incrementing on a specific VLAN would point an admin toward enabling per-port tracking to find the spoofing source.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.5 snmpwalk -v2c -c public <target> HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadSrcMacs
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.5.1 snmpget -v2c -c public <target> HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadSrcMacs.1
Start monitoring HP Networking managed switch (Dynamic ARP Protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadSrcMacs OID value, configure state conditions and alerts, and monitor any HP Networking managed switch (Dynamic ARP Protection) from a single console.
OID Breakdown
Upper-level ancestors (12 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.11 | hp | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2 | nm | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2.14 | icf | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11 | hpicfObjects | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5 | hpicfSwitch | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1 | hpSwitch | CONFIG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.11.2.14.11.5.1.37 | hpicfArpProtect | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1 | hpicfArpProtectObjects | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2 | hpicfArpProtectStatus | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1 | hpicfArpProtectVlanStatTable | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1 | hpicfArpProtectVlanStatEntry | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.5 | hpicfArpProtectVlanStatBadSrcMacs | HP-ICF-ARP-PROTECT |