All MIBs › TOS-IDS › idsIcmpContent
idsIcmpContent
Module: TOS-IDS
OID (symbolic): TOS-IDS::idsIcmpContent
OID (numeric): 1.3.6.1.4.1.14331.5.5.1.11.7
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: icmp_content.
What is idsIcmpContent?
This counter tracks the total number of attacks the Topsec IDS has detected involving suspicious or malicious content embedded in ICMP packets. An admin monitors this to catch attempts to use ICMP payloads for covert data exfiltration or exploit delivery rather than normal diagnostic pings. For example, a rise in idsIcmpContent could indicate ICMP packets carrying unusually large or non-standard payload data being used to tunnel data or probe the network.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.7 snmpwalk -v2c -c public <target> TOS-IDS::idsIcmpContent
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.7.1 snmpget -v2c -c public <target> TOS-IDS::idsIcmpContent.1
Start monitoring TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the TOS-IDS::idsIcmpContent OID value, configure state conditions and alerts, and monitor any TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.14331 | topsec | TOS-SMI |
| 1.3.6.1.4.1.14331.5 | topsecMgmt | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5 | objects | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5.1 | tosMib | TOS-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.14331.5.5.1.11 | tosIDS | TOS-IDS |
| 1.3.6.1.4.1.14331.5.5.1.11.7 | idsIcmpContent | TOS-IDS |