All MIBs › RBN-SYS-SECURITY-MIB › rbnMaliciousPktsThresholdLow
rbnMaliciousPktsThresholdLow
Module: RBN-SYS-SECURITY-MIB
OID (symbolic): RBN-SYS-SECURITY-MIB::rbnMaliciousPktsThresholdLow
OID (numeric): 1.3.6.1.4.1.2352.5.54.1.1.4
Node type: OBJECT-TYPE
Type: RbnUnsigned64
Access: read-write
Description: When the current sampling interval delta value of the malicious packets counter is less than or equal to this threshold, and the delta value at the last sampling interval was greater than this threshold, a single low threshold exceeded event will be generated. In addition, a high threshold exceeded event must occur before a low threshold exceeded event can be generated.
What is rbnMaliciousPktsThresholdLow?
This object sets the low threshold, in packets, at which the malicious-packets delta value must fall to generate a low-threshold-exceeded event, and this can only occur after a high-threshold event has already fired. An admin uses it to define when an ongoing attack condition is considered to have subsided. For example, pairing a low threshold of 50 with a high threshold of 500 lets the router flag both the onset and the resolution of a malicious-traffic spike.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2352.5.54.1.1.4 snmpwalk -v2c -c public <target> RBN-SYS-SECURITY-MIB::rbnMaliciousPktsThresholdLow
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2352.5.54.1.1.4.1 snmpget -v2c -c public <target> RBN-SYS-SECURITY-MIB::rbnMaliciousPktsThresholdLow.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.2352.5.54.1.1.4.1 i <value>
Start monitoring Ericsson (Redback) SmartEdge BRAS/edge router (malicious-packet/security threshold alarms) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the RBN-SYS-SECURITY-MIB::rbnMaliciousPktsThresholdLow OID value, configure state conditions and alerts, and monitor any Ericsson (Redback) SmartEdge BRAS/edge router (malicious-packet/security threshold alarms) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2352 | redBackNetworks | RBN-SMI |
| 1.3.6.1.4.1.2352.5 | rbnModules | RBN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2352.5.54 | rbnSysSecurityMib | RBN-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.2352.5.54.1 | rbnSysSecObjects | RBN-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.2352.5.54.1.1 | rbnSysSecThresholdObjects | RBN-SYS-SECURITY-MIB |
| 1.3.6.1.4.1.2352.5.54.1.1.4 | rbnMaliciousPktsThresholdLow | RBN-SYS-SECURITY-MIB |