HPTCP-MIB :: hpTcpOutRstsWithAck

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › HPTCP-MIB › hpTcpOutRstsWithAck

hpTcpOutRstsWithAck

Module: HPTCP-MIB

OID (symbolic): HPTCP-MIB::hpTcpOutRstsWithAck

OID (numeric): 1.3.6.1.4.1.11.2.14.11.5.1.79.1.1

Node type: OBJECT-TYPE

Type: Counter32

Access: read-only

Description: The number of TCP packets sent containing the RST and the ACK flags. This is useful to detect SYN packets sent to closed ports.

What is hpTcpOutRstsWithAck?

This counter tracks how many outgoing TCP packets the device has sent with both the RST and ACK flags set. Admins watch this counter because a burst of such packets typically means the device is actively rejecting connection attempts to closed ports, which is a useful signal for spotting port scans or misdirected connection attempts. A sudden jump from a steady baseline to thousands of RST+ACK packets in a short window could indicate someone scanning the device for open TCP ports.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.79.1.1
snmpwalk -v2c -c public <target> HPTCP-MIB::hpTcpOutRstsWithAck

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.79.1.1.1
snmpget -v2c -c public <target> HPTCP-MIB::hpTcpOutRstsWithAck.1

Start monitoring HP networking switch/router (extended TCP-layer diagnostics) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HPTCP-MIB::hpTcpOutRstsWithAck OID value, configure state conditions and alerts, and monitor any HP networking switch/router (extended TCP-layer diagnostics) from a single console.

How to Use in IPNetwork Monitor

Select an HP networking switch/router (extended TCP-layer diagnostics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpTcpOutRstsWithAck into the Find box to locate it in the OID tree, then select it and click OK. The number of TCP packets sent containing the RST and the ACK flags. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OID Breakdown

Upper-level ancestors (13 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.11hpCLJ8500-MIB
1.3.6.1.4.1.11.2nmCLJ8500-MIB
1.3.6.1.4.1.11.2.14icfCONFIG-MIB
1.3.6.1.4.1.11.2.14.11hpicfObjectsCONFIG-MIB
1.3.6.1.4.1.11.2.14.11.5hpicfSwitchCONFIG-MIB
1.3.6.1.4.1.11.2.14.11.5.1hpSwitchCONFIG-MIB
1.3.6.1.4.1.11.2.14.11.5.1.79hpicfTcpMibHP-ICF-OID
Numeric OIDNameModule
1.3.6.1.4.1.11.2.14.11.5.1.79.1hpTcpObjectsHPTCP-MIB
1.3.6.1.4.1.11.2.14.11.5.1.79.1.1hpTcpOutRstsWithAckHPTCP-MIB