PIM-STD-MIB :: pimInvalidRegister

MIB Reference — IPNetwork Monitor

All MIBsPIM-STD-MIBpimInvalidRegister

pimInvalidRegister

Module: PIM-STD-MIB

OID (symbolic): PIM-STD-MIB::pimInvalidRegister

OID (numeric): 1.3.6.1.2.1.157.0.2

Node type: NOTIFICATION-TYPE

Description:

A pimInvalidRegister notification signifies that an invalid PIM Register message was received by this device.

This notification is generated whenever the counter pimInvalidRegisterMsgsRcvd is incremented, subject to the rate limit specified by pimInvalidRegisterNotificationPeriod.

What is pimInvalidRegister?

This notification is generated when the router receives a PIM Register message that violates routing policy, such as when the RP address in the message doesn't match the group-to-RP mapping the router knows about. Register messages are used in PIM-SM to send multicast data to the Rendezvous Point, and invalid registers indicate misconfiguration or attack attempts. An operator monitors this trap to detect multicast routing misconfigurations or suspicious traffic patterns requiring investigation.

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' PIM-STD-MIB::pimInvalidRegister
snmptrap -v2c -c public <manager> '' 1.3.6.1.2.1.157.0.2

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:60262->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (92352870) 10 days, 16:32:08.70
  SNMPv2-MIB::snmpTrapOID.0 = OID: PIM-STD-MIB::pimInvalidRegister

SNMPv3 example:

snmptrap -v3 -l authPriv -u snmpv3user -a SHA -A "AuthPass1" -x AES -X "PrivPass1" <manager> '' PIM-STD-MIB::pimInvalidRegister

OID Breakdown

Numeric OIDNameModule
1isoLANART-AGENT
1.3orgBIANCA-BRICK-PPP-MIB
1.3.6dodBIANCA-BRICK-PPP-MIB
1.3.6.1internetBIANCA-BRICK-PPP-MIB
1.3.6.1.2mgmtBKTEL-HFC862-BASE-MIB
1.3.6.1.2.1mib_2CHECKPOINT-MIB-2
1.3.6.1.2.1.157pimStdMIBPIM-STD-MIB
1.3.6.1.2.1.157.0pimNotificationsPIM-STD-MIB
1.3.6.1.2.1.157.0.2pimInvalidRegisterPIM-STD-MIB