All MIBs › TOS-IDS › idsTcpscan
idsTcpscan
Module: TOS-IDS
OID (symbolic): TOS-IDS::idsTcpscan
OID (numeric): 1.3.6.1.4.1.14331.5.5.1.11.5
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: tcpscan.
What is idsTcpscan?
This counter tracks the total number of TCP scan attacks the Topsec IDS has detected, such as probes attempting to enumerate open TCP ports. An admin watches this counter to detect reconnaissance activity that often precedes a more targeted attack. For example, a sudden jump in idsTcpscan from a single external address would suggest that host is actively scanning the network for open TCP services.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.5 snmpwalk -v2c -c public <target> TOS-IDS::idsTcpscan
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.5.1 snmpget -v2c -c public <target> TOS-IDS::idsTcpscan.1
Start monitoring TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the TOS-IDS::idsTcpscan OID value, configure state conditions and alerts, and monitor any TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.14331 | topsec | TOS-SMI |
| 1.3.6.1.4.1.14331.5 | topsecMgmt | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5 | objects | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5.1 | tosMib | TOS-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.14331.5.5.1.11 | tosIDS | TOS-IDS |
| 1.3.6.1.4.1.14331.5.5.1.11.5 | idsTcpscan | TOS-IDS |