dosDefenseThreshold

The threshold, in packets per second, at which an
attack is deemed to be in progress.
              
If dosDefenseAttackType is SYNFlood(1), a value of 0 means
no threshold has been set and the default thresholds apply.
An attack is suspected when the SYN:ACK ratio exceeds 2:1
above 20 packets per second, in any one-second interval.
An attack is in progress when the SYN:ACK ratio exceeds 3:1
above 20 packets per second, in any one-second interval, or
an attack is suspected more than once within a 
dosDefenseBlockTime interval.
              
If dosDefenseAttackType is Smurf(3), a value of 0 means
the filter will block all broadcast ICMP requests.
A threshold greater than 0 will block after that number of
ICMP requests are received in a 1 second interval.

MIB

AT-DOS-MIB

OID

.1.3.6.1.4.1.207.8.4.4.4.143.4.1.4

Type

column

Access

readonly

Status

current

Parent

dosDefenseEntry