ATTACK-MIB
AI MIB Summary
The ATTACK-MIB monitors network devices for protocol-level intrusion indicators, specifically tracking counters for malformed packets, spoofed addresses, and denial-of-service attack signatures across TCP, UDP, and ICMP traffic.
The Attack-MIB is used to monitor possible protocol attacks by hackers.
Main OID:
deviceAttackMIB.1.3.6.1.4.1.3417.2.3
12
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
12 total| Object Name |
|---|
deviceAttackMIBThe Attack-MIB is used to monitor possible protocol attacks by hackers. MODULE-IDENTITY .1.3.6.1.4.1.3417.2.3 |
deviceAttackMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.3417.2.3.1 |
deviceAttackValues OBJECT IDENTIFIER .1.3.6.1.4.1.3417.2.3.1.1 |
deviceAttackTableThis table lists the various attacks that are detected. SEQUENCE OF DeviceAttackEntry .1.3.6.1.4.1.3417.2.3.1.1.1 |
deviceAttackEntryA deviceAttack entry describes the present state of an attack. DeviceAttackEntry .1.3.6.1.4.1.3417.2.3.1.1.1.1 |
deviceAttackIndexAn arbitrary value which uniquely identifies an attack. INTEGER .1.3.6.1.4.1.3417.2.3.1.1.1.1.1 |
deviceAttackNameThe textual name of the attack i.e. SYN Flood.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.3417.2.3.1.1.1.1.2 |
deviceAttackStatusno-attack(1) not under attack, under-attack(2) attack in progress. The default start-up value is no-attack(1).ro AttackStatus .1.3.6.1.4.1.3417.2.3.1.1.1.1.3 |
deviceAttackTimevalue of 'sysUpTime.0' at the time of the attack.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.3417.2.3.1.1.1.1.4 |
deviceAttackMIBNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.3417.2.3.2 |
deviceAttackMIBNotificationsPrefix OBJECT IDENTIFIER .1.3.6.1.4.1.3417.2.3.2.0 |
deviceAttackTrapAt the start of an attack a notification is generated with 'deviceAttackStatus = under-attack(2)'. At the end of an attack a notification is generated with 'deviceAttackStatus = no-attack(1)'. NOTIFICATION-TYPE .1.3.6.1.4.1.3417.2.3.2.0.1 |