All MIBs › VIPTELA-POLICY › zoneBasedFirewallStatisticsTcpDropInvalidAckNum
zoneBasedFirewallStatisticsTcpDropInvalidAckNum
Module: VIPTELA-POLICY
OID (symbolic): VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckNum
OID (numeric): 1.3.6.1.4.1.41916.8.7.2.23
Node type: OBJECT-TYPE
Type: Integer32
Access: read-only
What is zoneBasedFirewallStatisticsTcpDropInvalidAckNum?
A running count of TCP segments dropped for carrying an acknowledgment number outside the valid range for the tracked session. Admins treat this as evidence of malformed segments or an attempted session-hijack style attack being blocked.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.41916.8.7.2.23 snmpwalk -v2c -c public <target> VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckNum
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.41916.8.7.2.23.1 snmpget -v2c -c public <target> VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckNum.1
Start monitoring Viptela (Cisco SD-WAN) edge routers (policer/firewall-filter drop/permit counter status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckNum OID value, configure state conditions and alerts, and monitor any Viptela (Cisco SD-WAN) edge routers (policer/firewall-filter drop/permit counter status) from a single console.
OID Breakdown
Upper-level ancestors (7 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.41916 | viptela | VIPTELA-GLOBAL |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.41916.8 | viptela_policy | VIPTELA-POLICY |
| 1.3.6.1.4.1.41916.8.7 | zbfw | VIPTELA-POLICY |
| 1.3.6.1.4.1.41916.8.7.2 | zoneBasedFirewallStatistics | VIPTELA-POLICY |
| 1.3.6.1.4.1.41916.8.7.2.23 | zoneBasedFirewallStatisticsTcpDropInvalidAckNum | VIPTELA-POLICY |