All MIBs › TOS-IDS › idsWinnuke
idsWinnuke
Module: TOS-IDS
OID (symbolic): TOS-IDS::idsWinnuke
OID (numeric): 1.3.6.1.4.1.14331.5.5.1.11.6
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: winnuke.
What is idsWinnuke?
This counter tracks the total number of WinNuke attacks the Topsec IDS has detected, a legacy denial-of-service exploit that sends malformed out-of-band TCP data to crash older Windows systems. An admin monitors this counter mainly as a legacy-threat indicator, since WinNuke targets very old Windows versions. For example, a nonzero idsWinnuke count on a modern network might indicate a scanning tool testing for old, unpatched vulnerabilities rather than a genuinely viable attack.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.6 snmpwalk -v2c -c public <target> TOS-IDS::idsWinnuke
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.6.1 snmpget -v2c -c public <target> TOS-IDS::idsWinnuke.1
Start monitoring TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the TOS-IDS::idsWinnuke OID value, configure state conditions and alerts, and monitor any TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.14331 | topsec | TOS-SMI |
| 1.3.6.1.4.1.14331.5 | topsecMgmt | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5 | objects | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5.1 | tosMib | TOS-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.14331.5.5.1.11 | tosIDS | TOS-IDS |
| 1.3.6.1.4.1.14331.5.5.1.11.6 | idsWinnuke | TOS-IDS |