All MIBs › TPT-DDOS-MIB
Organization: Trend Micro, Inc.
Last Updated: 2016-05-25
Category: Firewall and Intrusion Prevention
Description: Manages TippingPoint IPS distributed denial-of-service attack detection, mitigation, and threshold settings.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is TPT-DDOS-MIB?
TPT-DDOS-MIB is a Trend Micro (TippingPoint) proprietary MIB (registered under tpt-tpa-objs as tpt-ddos) that exposes historical DDoS-mitigation statistics from a TippingPoint intrusion prevention system's SYN-proxy filtering subsystem. It defines time-bucketed sampled-data tables — rejectSynHistSecondsTable for the most recent 60 seconds and rejectSynHistMinutesTable for the most recent 60 minutes — each indexed by a rejectSynHistSecondsGlobalID/rejectSynHistMinutesGlobalID identifying the specific DDoS filter group plus a 0-59 rejectSynHistSecondsIndex/rejectSynHistMinutesIndex slot, with a Counter64 rejectSynHistSecondsUnitCount/rejectSynHistMinutesUnitCount recording how many SYNs that filter rejected in that sample and a rejectSynHistSecondsTimestamp/rejectSynHistMinutesTimestamp marking when the sample was taken; rows in these tables cannot be created or deleted since they represent a fixed rolling window. Because the objects are read-only sampled history rather than live cumulative counters, the MIB's monitoring value is in graphing the recent trend of rejected SYN-flood traffic per filter group to spot an active or building DoS attack. It depends on the parent TPT-TPAMIBS-MIB for its enterprise OID root. It is deployed on TippingPoint IPS appliances performing DDoS detection and mitigation, and security teams load the TPT-DDOS-MIB MIB Browser view of these tables to chart rejected-SYN trends per filter group.
IPNetwork Monitor allows you to monitor SNMP objects defined in TPT-DDOS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- TippingPoint (Trend Micro) IPS appliances with DDoS/SYN-proxy filtering
Monitoring Examples
An operator polls rejectSynHistSecondsTable for a given rejectSynHistSecondsGlobalID and graphs rejectSynHistSecondsUnitCount across the 60 one-second samples; a sharp, sustained climb in rejected SYNs per second for that filter group, versus its usual near-zero baseline, would indicate an active SYN-flood attack the device is actively filtering.
What Can Be Monitored
- per-second rejected-SYN sample history (last 60 seconds)
- per-minute rejected-SYN sample history (last 60 minutes)
- DDoS filter group identifier per sample
- sample timestamp per bucket
This MIB depends on
Related MIBs
Imported Objects
From SNMPv2-SMI
| Counter64 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From TPT-TPAMIBS-MIB
| tpt-tpa-objs |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| tpt_ddos | 1.3.6.1.4.1.10734.3.3.2.9 | DDoS management (statistics). Copyright (C) 2016 Trend Micro Incorporated. All Rights Reserved. Trend Micro makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Trend Micro shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Trend Micro. The information is provided 'as is' without warranty of any kind and is subject to change without notice. The only warranties for Trend Micro products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Trend Micro shall not be liable for technical or editorial errors or omissions contained herein. TippingPoint(R), the TippingPoint logo, and Digital Vaccine(R) are registered trademarks of Trend Micro. All other company and product names may be trademarks of their respective holders. All rights reserved. This document contains confidential information, trade secrets or both, which are the property of Trend Micro. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from Trend Micro or one of its subsidiaries. All other company and product names may be trademarks of their respective holders. | ||
| rejectSynHistSecondsTable | 1.3.6.1.4.1.10734.3.3.2.9.5 | not-accessible | Historical (sampled) data every second for a minute. | |
| rejectSynHistSecondsEntry | 1.3.6.1.4.1.10734.3.3.2.9.5.1 | not-accessible | An entry in the rejected SYNs per second history seconds table. Rows cannot be created or deleted. | |
| OCT rejectSynHistSecondsGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.5.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectSynHistSecondsIndex | 1.3.6.1.4.1.10734.3.3.2.9.5.1.2 | Unsigned32 | not-accessible | The index (0-59) of the second. |
| C64 rejectSynHistSecondsUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.5.1.3 | Counter64 | read-only | The count of filter-specific units matching the criteria for this filter in the specified second. |
| U32 rejectSynHistSecondsTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.5.1.4 | Unsigned32 | read-only | The time SecondsUnitCount was updated (in seconds since January 1, 1970). |
| rejectSynHistMinutesTable | 1.3.6.1.4.1.10734.3.3.2.9.6 | not-accessible | Historical (sampled) data every minute for an hour. | |
| rejectSynHistMinutesEntry | 1.3.6.1.4.1.10734.3.3.2.9.6.1 | not-accessible | An entry in the rejected SYNs per second history minutes table. Rows cannot be created or deleted. | |
| OCT rejectSynHistMinutesGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.6.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectSynHistMinutesIndex | 1.3.6.1.4.1.10734.3.3.2.9.6.1.2 | Unsigned32 | not-accessible | The index (0-59) of the minute. |
| C64 rejectSynHistMinutesUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.6.1.3 | Counter64 | read-only | The average of the SecondsUnitCount values corresponding to this minute. |
| U32 rejectSynHistMinutesTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.6.1.4 | Unsigned32 | read-only | The time MinutesUnitCount was updated (in seconds since January 1, 1970). |
| rejectSynHistHoursTable | 1.3.6.1.4.1.10734.3.3.2.9.7 | not-accessible | Historical (sampled) data every hour for a day. | |
| rejectSynHistHoursEntry | 1.3.6.1.4.1.10734.3.3.2.9.7.1 | not-accessible | An entry in the rejected SYNs per second history hours table. Rows cannot be created or deleted. | |
| OCT rejectSynHistHoursGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.7.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectSynHistHoursIndex | 1.3.6.1.4.1.10734.3.3.2.9.7.1.2 | Unsigned32 | not-accessible | The index (0-23) of the hour. |
| C64 rejectSynHistHoursUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.7.1.3 | Counter64 | read-only | The average of the MinutesUnitCount values corresponding to this hour. |
| U32 rejectSynHistHoursTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.7.1.4 | Unsigned32 | read-only | The time HoursUnitCount was updated (in seconds since January 1, 1970). |
| rejectSynHistDaysTable | 1.3.6.1.4.1.10734.3.3.2.9.8 | not-accessible | Historical (sampled) data every day for 35 days. | |
| rejectSynHistDaysEntry | 1.3.6.1.4.1.10734.3.3.2.9.8.1 | not-accessible | An entry in the rejected SYNs per second history days table. Rows cannot be created or deleted. | |
| OCT rejectSynHistDaysGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.8.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectSynHistDaysIndex | 1.3.6.1.4.1.10734.3.3.2.9.8.1.2 | Unsigned32 | not-accessible | The index (0-34) of the day. |
| C64 rejectSynHistDaysUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.8.1.3 | Counter64 | read-only | The average of the HoursUnitCount values corresponding to this day. |
| U32 rejectSynHistDaysTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.8.1.4 | Unsigned32 | read-only | The time DaysUnitCount was updated (in seconds since January 1, 1970). |
| proxyConnHistSecondsTable | 1.3.6.1.4.1.10734.3.3.2.9.9 | not-accessible | Historical (sampled) data every second for a minute. | |
| proxyConnHistSecondsEntry | 1.3.6.1.4.1.10734.3.3.2.9.9.1 | not-accessible | An entry in the proxied connections per second history seconds table. Rows cannot be created or deleted. | |
| OCT proxyConnHistSecondsGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.9.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 proxyConnHistSecondsIndex | 1.3.6.1.4.1.10734.3.3.2.9.9.1.2 | Unsigned32 | not-accessible | The index (0-59) of the second. |
| C64 proxyConnHistSecondsUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.9.1.3 | Counter64 | read-only | The count of filter-specific units matching the traffic criteria for this filter in the specified second. |
| U32 proxyConnHistSecondsTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.9.1.4 | Unsigned32 | read-only | The time SecondsUnitCount was updated (in seconds since January 1, 1970). |
| proxyConnHistMinutesTable | 1.3.6.1.4.1.10734.3.3.2.9.10 | not-accessible | Historical (sampled) data every minute for an hour. | |
| proxyConnHistMinutesEntry | 1.3.6.1.4.1.10734.3.3.2.9.10.1 | not-accessible | An entry in the proxied connections per second history minutes table. Rows cannot be created or deleted. | |
| OCT proxyConnHistMinutesGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.10.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 proxyConnHistMinutesIndex | 1.3.6.1.4.1.10734.3.3.2.9.10.1.2 | Unsigned32 | not-accessible | The index (0-59) of the minute. |
| C64 proxyConnHistMinutesUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.10.1.3 | Counter64 | read-only | The average of the SecondsUnitCount values corresponding to this minute. |
| U32 proxyConnHistMinutesTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.10.1.4 | Unsigned32 | read-only | The time MinutesUnitCount was updated (in seconds since January 1, 1970). |
| proxyConnHistHoursTable | 1.3.6.1.4.1.10734.3.3.2.9.11 | not-accessible | Historical (sampled) data every hour for a day. | |
| proxyConnHistHoursEntry | 1.3.6.1.4.1.10734.3.3.2.9.11.1 | not-accessible | An entry in the proxied connections per second history hours table. Rows cannot be created or deleted. | |
| OCT proxyConnHistHoursGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.11.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 proxyConnHistHoursIndex | 1.3.6.1.4.1.10734.3.3.2.9.11.1.2 | Unsigned32 | not-accessible | The index (0-23) of the hour. |
| C64 proxyConnHistHoursUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.11.1.3 | Counter64 | read-only | The average of the MinutesUnitCount values corresponding to this hour. |
| U32 proxyConnHistHoursTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.11.1.4 | Unsigned32 | read-only | The time HoursUnitCount was updated (in seconds since January 1, 1970). |
| proxyConnHistDaysTable | 1.3.6.1.4.1.10734.3.3.2.9.12 | not-accessible | Historical (sampled) data every day for 35 days. | |
| proxyConnHistDaysEntry | 1.3.6.1.4.1.10734.3.3.2.9.12.1 | not-accessible | An entry in the proxied connections per second history days table. Rows cannot be created or deleted. | |
| OCT proxyConnHistDaysGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.12.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 proxyConnHistDaysIndex | 1.3.6.1.4.1.10734.3.3.2.9.12.1.2 | Unsigned32 | not-accessible | The index (0-34) of the day. |
| C64 proxyConnHistDaysUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.12.1.3 | Counter64 | read-only | The average of the HoursUnitCount values corresponding to this day. |
| U32 proxyConnHistDaysTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.12.1.4 | Unsigned32 | read-only | The time DaysUnitCount was updated (in seconds since January 1, 1970). |
| rejectCpsHistSecondsTable | 1.3.6.1.4.1.10734.3.3.2.9.15 | not-accessible | Historical (sampled) data every second for a minute. | |
| rejectCpsHistSecondsEntry | 1.3.6.1.4.1.10734.3.3.2.9.15.1 | not-accessible | An entry in the rejected connections per sec (CPS) history seconds table. Rows cannot be created or deleted. | |
| OCT rejectCpsHistSecondsGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.15.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectCpsHistSecondsIndex | 1.3.6.1.4.1.10734.3.3.2.9.15.1.2 | Unsigned32 | not-accessible | The index (0-59) of the second. |
| C64 rejectCpsHistSecondsUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.15.1.3 | Counter64 | read-only | The count of filter-specific units matching the criteria for this filter in the specified second. |
| U32 rejectCpsHistSecondsTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.15.1.4 | Unsigned32 | read-only | The time SecondsUnitCount was updated (in seconds since January 1, 1970). |
| rejectCpsHistMinutesTable | 1.3.6.1.4.1.10734.3.3.2.9.16 | not-accessible | Historical (sampled) data every minute for an hour. | |
| rejectCpsHistMinutesEntry | 1.3.6.1.4.1.10734.3.3.2.9.16.1 | not-accessible | An entry in the rejected connections per sec (CPS) history minutes table. Rows cannot be created or deleted. | |
| OCT rejectCpsHistMinutesGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.16.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectCpsHistMinutesIndex | 1.3.6.1.4.1.10734.3.3.2.9.16.1.2 | Unsigned32 | not-accessible | The index (0-59) of the minute. |
| C64 rejectCpsHistMinutesUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.16.1.3 | Counter64 | read-only | The average of the SecondsUnitCount values corresponding to this minute. |
| U32 rejectCpsHistMinutesTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.16.1.4 | Unsigned32 | read-only | The time MinutesUnitCount was updated (in seconds since January 1, 1970). |
| rejectCpsHistHoursTable | 1.3.6.1.4.1.10734.3.3.2.9.17 | not-accessible | Historical (sampled) data every hour for a day. | |
| rejectCpsHistHoursEntry | 1.3.6.1.4.1.10734.3.3.2.9.17.1 | not-accessible | An entry in the rejected connections per sec (CPS) history hours table. Rows cannot be created or deleted. | |
| OCT rejectCpsHistHoursGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.17.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectCpsHistHoursIndex | 1.3.6.1.4.1.10734.3.3.2.9.17.1.2 | Unsigned32 | not-accessible | The index (0-23) of the hour. |
| C64 rejectCpsHistHoursUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.17.1.3 | Counter64 | read-only | The average of the MinutesUnitCount values corresponding to this hour. |
| U32 rejectCpsHistHoursTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.17.1.4 | Unsigned32 | read-only | The time HoursUnitCount was updated (in seconds since January 1, 1970). |
| rejectCpsHistDaysTable | 1.3.6.1.4.1.10734.3.3.2.9.18 | not-accessible | Historical (sampled) data every day for 35 days. | |
| rejectCpsHistDaysEntry | 1.3.6.1.4.1.10734.3.3.2.9.18.1 | not-accessible | An entry in the rejected connections per sec (CPS) history days table. Rows cannot be created or deleted. | |
| OCT rejectCpsHistDaysGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.18.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectCpsHistDaysIndex | 1.3.6.1.4.1.10734.3.3.2.9.18.1.2 | Unsigned32 | not-accessible | The index (0-34) of the day. |
| C64 rejectCpsHistDaysUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.18.1.3 | Counter64 | read-only | The average of the HoursUnitCount values corresponding to this day. |
| U32 rejectCpsHistDaysTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.18.1.4 | Unsigned32 | read-only | The time DaysUnitCount was updated (in seconds since January 1, 1970). |
| acceptCpsHistSecondsTable | 1.3.6.1.4.1.10734.3.3.2.9.19 | not-accessible | Historical (sampled) data every second for a minute. | |
| acceptCpsHistSecondsEntry | 1.3.6.1.4.1.10734.3.3.2.9.19.1 | not-accessible | An entry in the accepted connections per sec (CPS) history seconds table. Rows cannot be created or deleted. | |
| OCT acceptCpsHistSecondsGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.19.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptCpsHistSecondsIndex | 1.3.6.1.4.1.10734.3.3.2.9.19.1.2 | Unsigned32 | not-accessible | The index (0-59) of the second. |
| C64 acceptCpsHistSecondsUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.19.1.3 | Counter64 | read-only | The count of filter-specific units matching the criteria for this filter in the specified second. |
| U32 acceptCpsHistSecondsTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.19.1.4 | Unsigned32 | read-only | The time SecondsUnitCount was updated (in seconds since January 1, 1970). |
| acceptCpsHistMinutesTable | 1.3.6.1.4.1.10734.3.3.2.9.20 | not-accessible | Historical (sampled) data every minute for an hour. | |
| acceptCpsHistMinutesEntry | 1.3.6.1.4.1.10734.3.3.2.9.20.1 | not-accessible | An entry in the accepted connections per sec (CPS) history minutes table. Rows cannot be created or deleted. | |
| OCT acceptCpsHistMinutesGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.20.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptCpsHistMinutesIndex | 1.3.6.1.4.1.10734.3.3.2.9.20.1.2 | Unsigned32 | not-accessible | The index (0-59) of the minute. |
| C64 acceptCpsHistMinutesUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.20.1.3 | Counter64 | read-only | The average of the SecondsUnitCount values corresponding to this minute. |
| U32 acceptCpsHistMinutesTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.20.1.4 | Unsigned32 | read-only | The time MinutesUnitCount was updated (in seconds since January 1, 1970). |
| acceptCpsHistHoursTable | 1.3.6.1.4.1.10734.3.3.2.9.21 | not-accessible | Historical (sampled) data every hour for a day. | |
| acceptCpsHistHoursEntry | 1.3.6.1.4.1.10734.3.3.2.9.21.1 | not-accessible | An entry in the accepted connections per sec (CPS) history hours table. Rows cannot be created or deleted. | |
| OCT acceptCpsHistHoursGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.21.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptCpsHistHoursIndex | 1.3.6.1.4.1.10734.3.3.2.9.21.1.2 | Unsigned32 | not-accessible | The index (0-23) of the hour. |
| C64 acceptCpsHistHoursUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.21.1.3 | Counter64 | read-only | The average of the MinutesUnitCount values corresponding to this hour. |
| U32 acceptCpsHistHoursTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.21.1.4 | Unsigned32 | read-only | The time HoursUnitCount was updated (in seconds since January 1, 1970). |
| acceptCpsHistDaysTable | 1.3.6.1.4.1.10734.3.3.2.9.22 | not-accessible | Historical (sampled) data every day for 35 days. | |
| acceptCpsHistDaysEntry | 1.3.6.1.4.1.10734.3.3.2.9.22.1 | not-accessible | An entry in the accepted connections per sec (CPS) history days table. Rows cannot be created or deleted. | |
| OCT acceptCpsHistDaysGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.22.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptCpsHistDaysIndex | 1.3.6.1.4.1.10734.3.3.2.9.22.1.2 | Unsigned32 | not-accessible | The index (0-34) of the day. |
| C64 acceptCpsHistDaysUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.22.1.3 | Counter64 | read-only | The average of the HoursUnitCount values corresponding to this day. |
| U32 acceptCpsHistDaysTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.22.1.4 | Unsigned32 | read-only | The time DaysUnitCount was updated (in seconds since January 1, 1970). |
| rejectEstHistSecondsTable | 1.3.6.1.4.1.10734.3.3.2.9.25 | not-accessible | Historical (sampled) data every second for a minute. | |
| rejectEstHistSecondsEntry | 1.3.6.1.4.1.10734.3.3.2.9.25.1 | not-accessible | An entry in the rejected connections per sec (EST) history seconds table. Rows cannot be created or deleted. | |
| OCT rejectEstHistSecondsGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.25.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectEstHistSecondsIndex | 1.3.6.1.4.1.10734.3.3.2.9.25.1.2 | Unsigned32 | not-accessible | The index (0-59) of the second. |
| C64 rejectEstHistSecondsUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.25.1.3 | Counter64 | read-only | The count of filter-specific units matching the criteria for this filter in the specified second. |
| U32 rejectEstHistSecondsTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.25.1.4 | Unsigned32 | read-only | The time SecondsUnitCount was updated (in seconds since January 1, 1970). |
| rejectEstHistMinutesTable | 1.3.6.1.4.1.10734.3.3.2.9.26 | not-accessible | Historical (sampled) data every minute for an hour. | |
| rejectEstHistMinutesEntry | 1.3.6.1.4.1.10734.3.3.2.9.26.1 | not-accessible | An entry in the rejected connections per sec (EST) history minutes table. Rows cannot be created or deleted. | |
| OCT rejectEstHistMinutesGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.26.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectEstHistMinutesIndex | 1.3.6.1.4.1.10734.3.3.2.9.26.1.2 | Unsigned32 | not-accessible | The index (0-59) of the minute. |
| C64 rejectEstHistMinutesUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.26.1.3 | Counter64 | read-only | The average of the SecondsUnitCount values corresponding to this minute. |
| U32 rejectEstHistMinutesTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.26.1.4 | Unsigned32 | read-only | The time MinutesUnitCount was updated (in seconds since January 1, 1970). |
| rejectEstHistHoursTable | 1.3.6.1.4.1.10734.3.3.2.9.27 | not-accessible | Historical (sampled) data every hour for a day. | |
| rejectEstHistHoursEntry | 1.3.6.1.4.1.10734.3.3.2.9.27.1 | not-accessible | An entry in the rejected connections per sec (EST) history hours table. Rows cannot be created or deleted. | |
| OCT rejectEstHistHoursGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.27.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectEstHistHoursIndex | 1.3.6.1.4.1.10734.3.3.2.9.27.1.2 | Unsigned32 | not-accessible | The index (0-23) of the hour. |
| C64 rejectEstHistHoursUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.27.1.3 | Counter64 | read-only | The average of the MinutesUnitCount values corresponding to this hour. |
| U32 rejectEstHistHoursTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.27.1.4 | Unsigned32 | read-only | The time HoursUnitCount was updated (in seconds since January 1, 1970). |
| rejectEstHistDaysTable | 1.3.6.1.4.1.10734.3.3.2.9.28 | not-accessible | Historical (sampled) data every day for 35 days. | |
| rejectEstHistDaysEntry | 1.3.6.1.4.1.10734.3.3.2.9.28.1 | not-accessible | An entry in the rejected connections per sec (EST) history days table. Rows cannot be created or deleted. | |
| OCT rejectEstHistDaysGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.28.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 rejectEstHistDaysIndex | 1.3.6.1.4.1.10734.3.3.2.9.28.1.2 | Unsigned32 | not-accessible | The index (0-34) of the day. |
| C64 rejectEstHistDaysUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.28.1.3 | Counter64 | read-only | The average of the HoursUnitCount values corresponding to this day. |
| U32 rejectEstHistDaysTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.28.1.4 | Unsigned32 | read-only | The time DaysUnitCount was updated (in seconds since January 1, 1970). |
| acceptEstHistSecondsTable | 1.3.6.1.4.1.10734.3.3.2.9.29 | not-accessible | Historical (sampled) data every second for a minute. | |
| acceptEstHistSecondsEntry | 1.3.6.1.4.1.10734.3.3.2.9.29.1 | not-accessible | An entry in the accepted connections per sec (EST) history seconds table. Rows cannot be created or deleted. | |
| OCT acceptEstHistSecondsGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.29.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptEstHistSecondsIndex | 1.3.6.1.4.1.10734.3.3.2.9.29.1.2 | Unsigned32 | not-accessible | The index (0-59) of the second. |
| C64 acceptEstHistSecondsUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.29.1.3 | Counter64 | read-only | The count of filter-specific units matching the criteria for this filter in the specified second. |
| U32 acceptEstHistSecondsTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.29.1.4 | Unsigned32 | read-only | The time SecondsUnitCount was updated (in seconds since January 1, 1970). |
| acceptEstHistMinutesTable | 1.3.6.1.4.1.10734.3.3.2.9.30 | not-accessible | Historical (sampled) data every minute for an hour. | |
| acceptEstHistMinutesEntry | 1.3.6.1.4.1.10734.3.3.2.9.30.1 | not-accessible | An entry in the accepted connections per sec (EST) history minutes table. Rows cannot be created or deleted. | |
| OCT acceptEstHistMinutesGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.30.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptEstHistMinutesIndex | 1.3.6.1.4.1.10734.3.3.2.9.30.1.2 | Unsigned32 | not-accessible | The index (0-59) of the minute. |
| C64 acceptEstHistMinutesUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.30.1.3 | Counter64 | read-only | The average of the SecondsUnitCount values corresponding to this minute. |
| U32 acceptEstHistMinutesTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.30.1.4 | Unsigned32 | read-only | The time MinutesUnitCount was updated (in seconds since January 1, 1970). |
| acceptEstHistHoursTable | 1.3.6.1.4.1.10734.3.3.2.9.31 | not-accessible | Historical (sampled) data every hour for a day. | |
| acceptEstHistHoursEntry | 1.3.6.1.4.1.10734.3.3.2.9.31.1 | not-accessible | An entry in the accepted connections per sec (EST) history hours table. Rows cannot be created or deleted. | |
| OCT acceptEstHistHoursGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.31.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptEstHistHoursIndex | 1.3.6.1.4.1.10734.3.3.2.9.31.1.2 | Unsigned32 | not-accessible | The index (0-23) of the hour. |
| C64 acceptEstHistHoursUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.31.1.3 | Counter64 | read-only | The average of the MinutesUnitCount values corresponding to this hour. |
| U32 acceptEstHistHoursTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.31.1.4 | Unsigned32 | read-only | The time HoursUnitCount was updated (in seconds since January 1, 1970). |
| acceptEstHistDaysTable | 1.3.6.1.4.1.10734.3.3.2.9.32 | not-accessible | Historical (sampled) data every day for 35 days. | |
| acceptEstHistDaysEntry | 1.3.6.1.4.1.10734.3.3.2.9.32.1 | not-accessible | An entry in the accepted connections per sec (EST) history days table. Rows cannot be created or deleted. | |
| OCT acceptEstHistDaysGlobalID | 1.3.6.1.4.1.10734.3.3.2.9.32.1.1 | OCTET STRING | not-accessible | The global identifier of a DDoS filter group. |
| U32 acceptEstHistDaysIndex | 1.3.6.1.4.1.10734.3.3.2.9.32.1.2 | Unsigned32 | not-accessible | The index (0-34) of the day. |
| C64 acceptEstHistDaysUnitCount | 1.3.6.1.4.1.10734.3.3.2.9.32.1.3 | Counter64 | read-only | The average of the HoursUnitCount values corresponding to this day. |
| U32 acceptEstHistDaysTimestamp | 1.3.6.1.4.1.10734.3.3.2.9.32.1.4 | Unsigned32 | read-only | The time DaysUnitCount was updated (in seconds since January 1, 1970). |
RFC description
DDoS attack statistics and management for Trend Micro TippingPoint network security devices.
Start monitoring TippingPoint (Trend Micro) IPS appliances with DDoS/SYN-proxy filtering (rejected-SYN historical trend status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.