-- This module defines enterprise MIBs DI Setting.
--
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
-- All rights reserved.
NETSCREEN-IDS-MIB DEFINITIONS ::= BEGIN
IMPORTS
netscreenIDS
FROM NETSCREEN-SMI
Counter32, Integer32, MODULE-IDENTITY, OBJECT-TYPE
FROM SNMPv2-SMI
;
nsIdsProtect MODULE-IDENTITY
LAST-UPDATED "200405032022Z" -- May 03, 2004
ORGANIZATION
"Juniper Networks, Inc."
CONTACT-INFO
"Customer Support
1194 North Mathilda Avenue
Sunnyvale, California 94089-1206
USA
Tel: 1-800-638-8296
E-mail: customerservice@juniper.net
HTTP://www.juniper.net"
DESCRIPTION
"This module defines NetScreen private MIBs DI Setting."
REVISION "200405030000Z" -- May 03, 2004
DESCRIPTION
"Modified copyright and contact information"
REVISION "200403030000Z" -- March 03, 2004
DESCRIPTION
"Converted to SMIv2 by Longview Software"
REVISION "200204260000Z" -- April 26, 2002
DESCRIPTION
"Screen option on zone setting, add new screen option (Zhong
Wang)"
REVISION "200109280000Z" -- September 28, 2001
DESCRIPTION
"No Comment"
REVISION "200101080000Z" -- January 08, 2001
DESCRIPTION
"Creation Date"
::= { netscreenIDS 1 }
NsIdsAttkMonEntry ::= SEQUENCE
{
nsIdsAttkMonIfIdx Integer32,
nsIdsAttkMonVsys Integer32,
nsIdsAttkMonSynAttk Counter32,
nsIdsAttkMonTearDrop Counter32,
nsIdsAttkMonSrcRoute Counter32,
nsIdsAttkMonPingDeath Counter32,
nsIdsAttkMonAddrSpoof Counter32,
nsIdsAttkMonLand Counter32,
nsIdsAttkMonIcmpFlood Counter32,
nsIdsAttkMonUdpFlood Counter32,
nsIdsAttkMonWinnuke Counter32,
nsIdsAttkMonPortScan Counter32,
nsIdsAttkMonIpSweep Counter32,
nsAttkMonSynFrag Counter32,
nsAttkMonTcpNoFlag Counter32,
nsAttkMonIpUnknownProt Counter32,
nsAttkMonIpOptBad Counter32,
nsAttkMonIpOptRecord Counter32,
nsAttkMonIpOptTimestamp Counter32,
nsAttkMonIpOptSCHT Counter32,
nsAttkMonIpOptLSR Counter32,
nsAttkMonIpOptSSR Counter32,
nsAttkMonIpOptStream Counter32,
nsAttkMonIcmpFrag Counter32,
nsAttkMonIcmpLarge Counter32,
nsAttkMonTcpSynFin Counter32,
nsAttkMonTcpFinNoAck Counter32,
nsAttkMonHttpMalUrl Counter32,
nsAttkMonSessMalNum Counter32,
nsAttkMonSynAckAck Counter32,
nsAttkMonIpFrag Counter32,
nsIdsAttkMonIfInfo Integer32
}
NsIdsProtectSetEntry ::= SEQUENCE
{
nsIdsProtectZoneIdx Integer32,
nsIdsDetectPingOfDeath INTEGER,
nsIdsDetectTearDrop INTEGER,
nsIdsDetectWinNuke INTEGER,
nsIdsFilterIpSrcRoute INTEGER,
nsIdsDetectPortScan INTEGER,
nsIdsDetectAddrSweep INTEGER,
nsIdsDetectLand INTEGER,
nsIdsBlockComponent INTEGER,
nsIdsDetectIpSpoof INTEGER,
nsIdsDetectSyn INTEGER,
nsIdsDetectIcmpFlood INTEGER,
nsIdsDetectUdpFlood INTEGER,
nsIdsDetectSynFrag INTEGER,
nsIdsDetectTcpNoFlag INTEGER,
nsIdsDetectIpUnknownProt INTEGER,
nsIdsDetectIpOptBad INTEGER,
nsIdsDetectIpOptRecord INTEGER,
nsIdsDetectIpOptTimestamp INTEGER,
nsIdsDetectIpOptSCHT INTEGER,
nsIdsDetectIpOptLSR INTEGER,
nsIdsDetectIpOptSSR INTEGER,
nsIdsDetectIpOptStream INTEGER,
nsIdsDetectIcmpFrag INTEGER,
nsIdsDetectIcmpLarge INTEGER,
nsIdsDetectTcpSynFin INTEGER,
nsIdsDetectTcpFinNoAck INTEGER,
nsIdsHttpMalUrl INTEGER,
nsIdsSessMalNum INTEGER,
nsIdsDetectSynAckAck INTEGER,
nsIdsDetectIpFrag INTEGER
}
NsIdsProtectThreshEntry ::= SEQUENCE
{
nsIdsProtectThreshZoneIdx Integer32,
nsIdsSynAttackThresh Integer32,
nsIdsSynAttackTimeout Integer32,
nsIdsSynAttackAlmTh Integer32,
nsIdsSynAttackQueSize Integer32,
nsIdsSynAttackAgeTime Integer32,
nsIdsIcmpFloodThresh Integer32,
nsIdsUdpFloodThresh Integer32,
nsIdsPortScanThresh Integer32,
nsIdsIpSweepThresh Integer32,
nsIdsSynAckAckThres Integer32
}
nsIdsProtectSetTable OBJECT-TYPE
SYNTAX SEQUENCE OF NsIdsProtectSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"NetScreen ScreenOS can allow DI protection on each of
NetScreen device's physical interface. This table collects the
DI protection configuration on each physical interface."
::= { nsIdsProtect 1 }
nsIdsProtectSetEntry OBJECT-TYPE
SYNTAX NsIdsProtectSetEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Hold the DI setting attribute."
INDEX
{ nsIdsProtectZoneIdx }
::= { nsIdsProtectSetTable 1 }
nsIdsProtectZoneIdx OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"unique zone id."
::= { nsIdsProtectSetEntry 1 }
nsIdsDetectPingOfDeath OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Ping of Death."
::= { nsIdsProtectSetEntry 2 }
nsIdsDetectTearDrop OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Tear Drop Attack."
::= { nsIdsProtectSetEntry 3 }
nsIdsDetectWinNuke OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Win Nuke Attack."
::= { nsIdsProtectSetEntry 4 }
nsIdsFilterIpSrcRoute OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Filter IP Source Route Option attack."
::= { nsIdsProtectSetEntry 5 }
nsIdsDetectPortScan OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Port Scan Death attack."
::= { nsIdsProtectSetEntry 6 }
nsIdsDetectAddrSweep OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Address Sweep Attack."
::= { nsIdsProtectSetEntry 7 }
nsIdsDetectLand OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Land Attack."
::= { nsIdsProtectSetEntry 8 }
nsIdsBlockComponent OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Block Java/ActiveX/ZIP/EXE Component."
::= { nsIdsProtectSetEntry 9 }
nsIdsDetectIpSpoof OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP Spoofing attack."
::= { nsIdsProtectSetEntry 10 }
nsIdsDetectSyn OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect SYN attack."
::= { nsIdsProtectSetEntry 11 }
nsIdsDetectIcmpFlood OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect ICMP Flood attack."
::= { nsIdsProtectSetEntry 12 }
nsIdsDetectUdpFlood OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect UDP Flood attack."
::= { nsIdsProtectSetEntry 13 }
nsIdsDetectSynFrag OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect SYN fragment"
::= { nsIdsProtectSetEntry 14 }
nsIdsDetectTcpNoFlag OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect TCP without flag set."
::= { nsIdsProtectSetEntry 15 }
nsIdsDetectIpUnknownProt OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Unknown protocol IP packet."
::= { nsIdsProtectSetEntry 16 }
nsIdsDetectIpOptBad OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP bad option."
::= { nsIdsProtectSetEntry 17 }
nsIdsDetectIpOptRecord OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP record option."
::= { nsIdsProtectSetEntry 18 }
nsIdsDetectIpOptTimestamp OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP timestamp option."
::= { nsIdsProtectSetEntry 19 }
nsIdsDetectIpOptSCHT OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP security option."
::= { nsIdsProtectSetEntry 20 }
nsIdsDetectIpOptLSR OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Loose source route."
::= { nsIdsProtectSetEntry 21 }
nsIdsDetectIpOptSSR OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect strict source route."
::= { nsIdsProtectSetEntry 22 }
nsIdsDetectIpOptStream OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP stream option."
::= { nsIdsProtectSetEntry 23 }
nsIdsDetectIcmpFrag OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect ICMP fragment."
::= { nsIdsProtectSetEntry 24 }
nsIdsDetectIcmpLarge OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect large ICMP packet."
::= { nsIdsProtectSetEntry 25 }
nsIdsDetectTcpSynFin OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect TCP syn fin both set."
::= { nsIdsProtectSetEntry 26 }
nsIdsDetectTcpFinNoAck OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect TCP fin set without ack bit set."
::= { nsIdsProtectSetEntry 27 }
nsIdsHttpMalUrl OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect malicious URL."
::= { nsIdsProtectSetEntry 28 }
nsIdsSessMalNum OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect malicious session connection."
::= { nsIdsProtectSetEntry 29 }
nsIdsDetectSynAckAck OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect SYN ACK ACK DoS."
::= { nsIdsProtectSetEntry 30 }
nsIdsDetectIpFrag OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Block IP fragment packet."
::= { nsIdsProtectSetEntry 31 }
nsIdsProtectThreshTable OBJECT-TYPE
SYNTAX SEQUENCE OF NsIdsProtectThreshEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"NetScreen ScreenOS can allow DI protection on each of
NetScreen device's physical interface. This table collects the
DI protection configuration on each physical interface."
::= { nsIdsProtect 2 }
nsIdsProtectThreshEntry OBJECT-TYPE
SYNTAX NsIdsProtectThreshEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Hold the DI setting attribute."
INDEX
{ nsIdsProtectThreshZoneIdx }
::= { nsIdsProtectThreshTable 1 }
nsIdsProtectThreshZoneIdx OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"unique zone id."
::= { nsIdsProtectThreshEntry 1 }
nsIdsSynAttackThresh OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SYN attack threshold."
::= { nsIdsProtectThreshEntry 2 }
nsIdsSynAttackTimeout OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SYN attack timeout."
::= { nsIdsProtectThreshEntry 3 }
nsIdsSynAttackAlmTh OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SYN attack alarm threshold."
::= { nsIdsProtectThreshEntry 4 }
nsIdsSynAttackQueSize OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SYN attack queue size."
::= { nsIdsProtectThreshEntry 5 }
nsIdsSynAttackAgeTime OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SYN flood age time."
::= { nsIdsProtectThreshEntry 6 }
nsIdsIcmpFloodThresh OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ICMP attack alarm threshold."
::= { nsIdsProtectThreshEntry 7 }
nsIdsUdpFloodThresh OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"UDP attack alarm threshold."
::= { nsIdsProtectThreshEntry 8 }
nsIdsPortScanThresh OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ICMP attack alarm threshold."
::= { nsIdsProtectThreshEntry 9 }
nsIdsIpSweepThresh OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"UDP attack alarm threshold."
::= { nsIdsProtectThreshEntry 10 }
nsIdsSynAckAckThres OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SYN ack ack alarm threshold."
::= { nsIdsProtectThreshEntry 11 }
nsIdsAttkMonTable OBJECT-TYPE
SYNTAX SEQUENCE OF NsIdsAttkMonEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The table monitors the intrusion attack attemps amount to
NetScreen Device."
::= { netscreenIDS 2 }
nsIdsAttkMonEntry OBJECT-TYPE
SYNTAX NsIdsAttkMonEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry containing intrusion attack couters."
INDEX
{ nsIdsAttkMonIfIdx }
::= { nsIdsAttkMonTable 1 }
nsIdsAttkMonIfIdx OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"unique interface id."
::= { nsIdsAttkMonEntry 1 }
nsIdsAttkMonVsys OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"according NetScreen's concepts. each interface belongs to one
virtual system. This attribute displays the virtual system name
an interface belongs to."
::= { nsIdsAttkMonEntry 2 }
nsIdsAttkMonSynAttk OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"sync attack packet counter."
::= { nsIdsAttkMonEntry 3 }
nsIdsAttkMonTearDrop OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"tear drop attack packet counter."
::= { nsIdsAttkMonEntry 4 }
nsIdsAttkMonSrcRoute OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"source route option attack packet counter."
::= { nsIdsAttkMonEntry 5 }
nsIdsAttkMonPingDeath OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ping of death attack packet counter."
::= { nsIdsAttkMonEntry 6 }
nsIdsAttkMonAddrSpoof OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"address spoofing attack packet counter."
::= { nsIdsAttkMonEntry 7 }
nsIdsAttkMonLand OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"land attack packet counter."
::= { nsIdsAttkMonEntry 8 }
nsIdsAttkMonIcmpFlood OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ICMP flood attack packet counter."
::= { nsIdsAttkMonEntry 9 }
nsIdsAttkMonUdpFlood OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"udp flood attack packet counter."
::= { nsIdsAttkMonEntry 10 }
nsIdsAttkMonWinnuke OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"weired netbios attack packet counter."
::= { nsIdsAttkMonEntry 11 }
nsIdsAttkMonPortScan OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"port scan attempt attack packet counter."
::= { nsIdsAttkMonEntry 12 }
nsIdsAttkMonIpSweep OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"address sweep attemp attack packet counter."
::= { nsIdsAttkMonEntry 13 }
nsAttkMonSynFrag OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect SYN fragment"
::= { nsIdsAttkMonEntry 14 }
nsAttkMonTcpNoFlag OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect TCP without flag set."
::= { nsIdsAttkMonEntry 15 }
nsAttkMonIpUnknownProt OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Unknown protocol IP packet."
::= { nsIdsAttkMonEntry 16 }
nsAttkMonIpOptBad OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP bad option."
::= { nsIdsAttkMonEntry 17 }
nsAttkMonIpOptRecord OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP record option."
::= { nsIdsAttkMonEntry 18 }
nsAttkMonIpOptTimestamp OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP timestamp option."
::= { nsIdsAttkMonEntry 19 }
nsAttkMonIpOptSCHT OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP security option."
::= { nsIdsAttkMonEntry 20 }
nsAttkMonIpOptLSR OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect Loose source route."
::= { nsIdsAttkMonEntry 21 }
nsAttkMonIpOptSSR OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect strict source route."
::= { nsIdsAttkMonEntry 22 }
nsAttkMonIpOptStream OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect IP stream option."
::= { nsIdsAttkMonEntry 23 }
nsAttkMonIcmpFrag OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect ICMP fragment."
::= { nsIdsAttkMonEntry 24 }
nsAttkMonIcmpLarge OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect large ICMP packet."
::= { nsIdsAttkMonEntry 25 }
nsAttkMonTcpSynFin OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect TCP syn fin both set."
::= { nsIdsAttkMonEntry 26 }
nsAttkMonTcpFinNoAck OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect TCP fin set without ack bit set."
::= { nsIdsAttkMonEntry 27 }
nsAttkMonHttpMalUrl OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect malicious URL."
::= { nsIdsAttkMonEntry 28 }
nsAttkMonSessMalNum OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect malicious session connection."
::= { nsIdsAttkMonEntry 29 }
nsAttkMonSynAckAck OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Detect SYN ACK ACK attack."
::= { nsIdsAttkMonEntry 30 }
nsAttkMonIpFrag OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Block IP fragment packet."
::= { nsIdsAttkMonEntry 31 }
nsIdsAttkMonIfInfo OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Internal id assigned to this interface. Stays persistent across resets."
::= { nsIdsAttkMonEntry 32 }
END