This integer uniquely identifies a specific detected Peakflow anomaly and is carried as a varbind in DoS-related trap notifications. Admins use it to correlate multiple traps (start, update, stop) to the same underlying anomaly event, and to cross-reference against the Peakflow console. An admin seeing anomaly ID 12345 in both a bandwidth alert trap and its later resolution trap knows the two traps concern the same incident.