VIPTELA-POLICY :: zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsVIPTELA-POLICYzoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld

zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld

Module: VIPTELA-POLICY

OID (symbolic): VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld

OID (numeric): 1.3.6.1.4.1.41916.8.7.2.32

Node type: OBJECT-TYPE

Type: Integer32

Access: read-only

What is zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld?

A running count of TCP segments dropped for being older (lower sequence number) than the firewall's tracking window allows. Admins treat these as stale retransmissions or replayed packets being filtered out.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.41916.8.7.2.32
snmpwalk -v2c -c public <target> VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.41916.8.7.2.32.1
snmpget -v2c -c public <target> VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld.1

SNMPv3 example:

snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld.1

Start monitoring Viptela (Cisco SD-WAN) edge routers (policer/firewall-filter drop/permit counter status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOld OID value, configure state conditions and alerts, and monitor any Viptela (Cisco SD-WAN) edge routers (policer/firewall-filter drop/permit counter status) from a single console.

OID Breakdown

Upper-level ancestors (7 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.41916viptelaVIPTELA-GLOBAL
Numeric OIDNameModule
1.3.6.1.4.1.41916.8viptela_policyVIPTELA-POLICY
1.3.6.1.4.1.41916.8.7zbfwVIPTELA-POLICY
1.3.6.1.4.1.41916.8.7.2zoneBasedFirewallStatisticsVIPTELA-POLICY
1.3.6.1.4.1.41916.8.7.2.32zoneBasedFirewallStatisticsTcpDropInvalidSegPktTooOldVIPTELA-POLICY