extremeIpSecurityAnomalyTcpFlagViolation

Description

For ports on which the protocol anomaly protection TCP flags features has been enabled, this trap will be generated when a TCP packet received on that port if:

  1. (TCP flag SYN is set) and (its TCP source port < 1024); or
  2. (TCP flag == 0) and (TCP seq # == 0); or
  3. (TCP flag FIN/URG/PSH bits sre set) and (TCP seq # == 0); or
  4. Both TCP iflag SYN and FIN are set.

Object ID

1.3.6.1.4.1.1916.1.34.2.0.3

Trap    : extremeIpSecurityAnomalyTcpFlagViolation
Objects : {  esAnomalyPortIfIndex, esAnomalyVlanIfIndex, esAnomalyVlanDescr, esAnomalySrcMacAddress, esAnomalyDestMacAddress, esAnomalyVlanTag, esAnomalySrcIpAddrType, esAnomalySrcIpAddr, esAnomalyDestIpAddrType, esAnomalyDestIpAddr, esAnomalySrcL4Port, esAnomalyDestL4Port, esAnomalyTcpFlagReason, esAnomalyTcpFlag, esAnomalyTcpSeq }
OID     : "1.3.6.1.4.1.1916.1.34.2.0.3"
object  : esAnomalyTcpSeq                  type : Integer32 
object  : esAnomalyTcpFlag                 type : HexOctet 
object  : esAnomalyTcpFlagReason           type : TcpFlagAnomalyReason 
object  : esAnomalyDestL4Port              type : InetPortNumber 
object  : esAnomalySrcL4Port               type : InetPortNumber 
object  : esAnomalyDestIpAddr              type : InetAddress 
object  : esAnomalyDestIpAddrType          type : InetAddressType 
object  : esAnomalySrcIpAddr               type : InetAddress 
object  : esAnomalySrcIpAddrType           type : InetAddressType 
object  : esAnomalyVlanTag                 type : VlanTag 
object  : esAnomalyDestMacAddress          type : MacAddress 
object  : esAnomalySrcMacAddress           type : MacAddress 
object  : esAnomalyVlanDescr               type : DisplayString 
object  : esAnomalyVlanIfIndex             type : Integer32 
object  : esAnomalyPortIfIndex             type : Integer32