PEAKFLOW-DOS-MIB

Description: Monitors Arbor Networks Peakflow DoS anomaly detection, tracking detected attack events, traffic thresholds, and mitigation actions.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

PEAKFLOW-DOS-MIB is an Arbor Networks (Peakflow) MIB for the Peakflow DoS anomaly detection and mitigation system, part of the network security monitoring product family. It exposes objects describing detected anomalies, including the resource under attack, attack direction and protocol, affected traffic percentage of the link, and alert counts, along with heartbeat and internal error reporting objects. It is used to monitor the operational and software status of the Peakflow appliance itself, via heartbeat source and internal error location/reason objects, as well as the security-relevant state of detected DoS anomalies such as start time, duration, and severity. There is no strong dependency on other standard MIBs; it is a largely self-contained Arbor enterprise module built on the standard SNMPv2 SMI and NOTIFICATION-TYPE conventions. It is deployed on Arbor Peakflow DoS/SP appliances monitoring inline or out-of-band traffic for DDoS detection in service provider and enterprise networks, where PEAKFLOW-DOS-MIB SNMP monitoring gives visibility into both the detected anomalies and the appliance's own operational health.

A security operations team would monitor pdosAnomalyId, pdosAnomalyResource, and pdosAnomalyDirection to identify what is under attack and from which direction, while pdosAnomalyLinkPercent shows how much of link capacity the anomaly consumes. pdosAnomalyStart and pdosAnomalyDuration let an analyst gauge whether an attack is ongoing or has subsided. The peakflowDosTraps notifications, driven by objects like internalErrorLocation and internalErrorReason, would also flag internal appliance faults distinct from the DoS anomalies it detects.

Manages Peakflow DoS detection system providing data on denial-of-service anomalies and attack notifications.