jnxJsScreenMonIcmpLarge
JUNIPER-JS-SCREENING-MIB ·
.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.25
Object
column SNMPv2-SMICounter64
ICMP packets contain very short messages, there is no legitimate
reason for ICMP packets to be fragmented.
If an ICMP packet is unusually large, something is wrong. For example,
the Loki program uses ICMP as a channel for transmitting covert
messages. The presence of large ICMP packets might expose a
compromised machine acting as a Loki agent. It might also indicate
some other kind of shifty activity.
When the the Large Size ICMP Packet Protection SCREEN option is enabled,
the device drops ICMP packets with a length greater than 1024 bytes.
This attribute records the detection of large ICMP packets.
Context
- MIB
- JUNIPER-JS-SCREENING-MIB
- OID
.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.25- Type
- column
- Access
- readonly
- Status
- current
- Parent
- jnxJsScreenMonEntry
Net-SNMP examples
How SNMP and these commands workWalk the column to discover its indexed instances, or supply every index to read one instance.
Walk the column
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'JUNIPER-JS-SCREENING-MIB' -M '/opt/observium/mibs/juniper:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'JUNIPER-JS-SCREENING-MIB::jnxJsScreenMonIcmpLarge'
More examples
Read one indexed instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'JUNIPER-JS-SCREENING-MIB' -M '/opt/observium/mibs/juniper:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'JUNIPER-JS-SCREENING-MIB::jnxJsScreenMonIcmpLarge.<jnxJsScreenZoneName>'
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'JUNIPER-JS-SCREENING-MIB' -M '/opt/observium/mibs/juniper:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'JUNIPER-JS-SCREENING-MIB::jnxJsScreenMonIcmpLarge'
Syntax
- Source
- SNMPv2-SMICounter64
- Base type
Unsigned64
Values & Constraints
Type Constraints
range: 0..18446744073709551615