All MIBs › XYLOGICS-TRAP-MIB › suspectAttackTrap
suspectAttackTrap
Module: XYLOGICS-TRAP-MIB
OID (symbolic): XYLOGICS-TRAP-MIB::suspectAttackTrap
OID (numeric): 1.3.6.1.4.1.15.0.1
Node type: NOTIFICATION-TYPE
Description: This trap is sent to the trap host under two conditions indicated by anxpTrapAttackErrcode :- 1. UserName has exceeded the threshold for consecutive number of attempts to log-in. 2. UserName has exceeded the threshold for number of attempts to log-in over a defined period of time. The error message is : WARNING: User account disabled due to suspected attack. Note: The time stamp that this trap reports indicates the amount of time that the process generating the trap has been running.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' XYLOGICS-TRAP-MIB::suspectAttackTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.15.0.1
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:60363->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (240484811) 27 days, 20:00:48.11 SNMPv2-MIB::snmpTrapOID.0 = OID: XYLOGICS-TRAP-MIB::suspectAttackTrap
Start monitoring Xylogics/Bay Networks Remote Annex terminal server (security-attack/modem-failure/WAN-alarm trap-notification status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the XYLOGICS-TRAP-MIB::suspectAttackTrap OID value, configure state conditions and alerts, and monitor any Xylogics/Bay Networks Remote Annex terminal server (security-attack/modem-failure/WAN-alarm trap-notification status) from a single console.
OID Breakdown
Upper-level ancestors (7 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.15 | xylogics | ANNEX-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.15.0.1 | suspectAttackTrap | XYLOGICS-TRAP-MIB |