Table 5-3 Field Descriptions For The Show Dos Command - Cisco 11503 - CSS Content Services Switch Administration Manual

Chapter 5 Configuring Simple Network Management Protocol (SNMP)
Table 5-3
Field
Total Attacks
First Attack Detected
Last Attack Detected
OL-5647-02
Field Descriptions for the show dos Command
Description
The total number of DoS attacks detected since the
CSS was booted. The type of attacks that are listed
along with their number of occurrences are:
SYN Attacks - TCP connections that are initiated
•
by a source but are not followed with an ACK
frame to complete the three way TCP handshake
LAND Attacks - Packets that have identical
•
source and destination addresses
Zero Port Attacks - Frames that contain source
•
or destination TCP or UDP ports equal to zero
Older SmartBits software may send frames
Note
containing source or destination ports equal to
zero. The CSS logs them as DoS attacks and
drops these frames.
Illegal Src Attacks - Illegal source addresses
•
Illegal Dst Attacks - Illegal destination addresses
•
Smurf Attacks - Pings with a broadcast
•
destination address
The first time a DoS attack was detected.
The last time a DoS attack was detected.
Cisco Content Services Switch Administration Guide
Configuring Denial of Service (DoS)
5-27