.. _ddos_anomaly:

ddos anomaly
============

anomaly counters


anomaly Specification
---------------------

	===================================== =====================================================
	===================================== =====================================================
	 **Type**                              *Configuration Resource*

	 **Element Name**                      anomaly

	 **Element URI**                       /axapi/v3/ddos/anomaly

	 **Element Attributes**                anomaly_attributes

	 **Statistics Data URI**               /axapi/v3/ddos/anomaly/stats

	 **Schema**                             :download:`anomaly schema <ddos-anomaly/ddos-anomaly.txt>`
	===================================== =====================================================





	**Operations Allowed:**




.. raw:: html

   <script type="text/javascript">
 function showExample(a,b) { document.getElementById(a+'_div').style.display = 'block'; document.getElementById(a+'_cl').style.display = 'block'; document.getElementById(a+'_eg').style.display = 'none';}
   function closeExample(a,b) { document.getElementById(a+'_div').style.display = 'none'; document.getElementById(a+'_cl').style.display = 'none'; document.getElementById(a+'_eg').style.display = 'block';}
 </script>
   <table width='90%' style='margin-left:5%'>



.. raw:: html

   <tr style='border-bottom: thin solid; border-top: thin solid'><th width=15%>Operation</th><th width=10%>Method</th><th>URI</th><th width=15%>Payload</th><th width=10%></th></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/anomaly



.. raw:: html

   </td><td valign = 'top'>


:ref:`1344_anomaly_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get Object



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/anomaly



.. raw:: html

   </td><td valign = 'top'>


:ref:`1344_anomaly_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Modify Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/anomaly



.. raw:: html

   </td><td valign = 'top'>


:ref:`1344_anomaly_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace Object



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/anomaly



.. raw:: html

   </td><td valign = 'top'>


:ref:`1344_anomaly_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Delete Object



.. raw:: html

   </td><td valign = 'top'>


DELETE



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/anomaly



.. raw:: html

   </td><td valign = 'top'>


:ref:`1344_anomaly_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   </table>

.. _1344_anomaly_attributes:

anomaly attributes
------------------

    **sampling-enable**

        **Type:** List

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _1344_sampling-enable:

sampling-enable
^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **counters1**

        **Description** 'all': all; 'land_attack': IP Land Attack; 'empty_frag': IPv4 Empty Fragment; 'micro_frag': IPv4 Micro Fragment; 'ipv4_opt': IPv4 Option; 'ip_frag': IP Fragment; 'bad_ip_hdr_len': IPv4 Invalid Header Length; 'bad_ip_flags': IPv4 Invalid Flags; 'bad_ip_ttl': IP Invalid TTL; 'no_ip_payload': IP Payload None; 'oversize_ip_pl': IP Payload Too Large; 'bad_ip_pl_len': IP Invalid Payload Length; 'bad_ip_frag_off': IPv4 Invalid Fragment Offset; 'bad_ip_csum': IPv4 Invalid Checksum; 'icmp_pod': ICMP Ping Of Death; 'tcp_bad_urg_off': TCP Invalid Urgent Offset; 'tcp_short_hdr': TCP Short Header; 'tcp_bad_ip_len': TCP Invalid IPv4 Length; 'tcp_null_flags': TCP Null Flags; 'tcp_null_scan': TCP Null Scan; 'tcp_syn_fin': TCP SYN&FIN; 'tcp_xmas_flags': TCP XMAS Flags; 'tcp_xmas_scan': TCP XMAS Scan; 'tcp_syn_frag': TCP SYN Fragment; 'tcp_frag_header': TCP Fragment Header; 'tcp_bad_csum': TCP Invalid Checksum; 'udp_short_hdr': UDP Short Header; 'udp_short_leng': UDP Invalid Length; 'udp_kb_frag': UDP KB Fragment; 'udp_port_lb': UDP Port LB; 'udp_bad_csum': UDP Invalid Checksum; 'runt_ip_hdr': IP Runt Header; 'runt_tcpudp_hdr': TCPUDP Runt Header; 'tun_mismatch': IP Tunnel Mismatch; 'tcp_opt_overflow': TCP Option Error; 

        **Type:** string

        **Supported Values:** all, land_attack, empty_frag, micro_frag, ipv4_opt, ip_frag, bad_ip_hdr_len, bad_ip_flags, bad_ip_ttl, no_ip_payload, oversize_ip_pl, bad_ip_pl_len, bad_ip_frag_off, bad_ip_csum, icmp_pod, tcp_bad_urg_off, tcp_short_hdr, tcp_bad_ip_len, tcp_null_flags, tcp_null_scan, tcp_syn_fin, tcp_xmas_flags, tcp_xmas_scan, tcp_syn_frag, tcp_frag_header, tcp_bad_csum, udp_short_hdr, udp_short_leng, udp_kb_frag, udp_port_lb, udp_bad_csum, runt_ip_hdr, runt_tcpudp_hdr, tun_mismatch, tcp_opt_overflow

.. _1344_stats_data:

stats data
----------
.. list-table::
   :widths: 10 20 30 80
   :header-rows: 2
   :stub-columns: 1

   *  - 
      - Counter
      - Size
      - Description

   *  - 
      - 
      - 
      - 

   *  - 
      - tcp_bad_ip_len
      - 8
      - TCP Invalid IPv4 Length

   *  - 
      - udp_bad_csum
      - 8
      - UDP Invalid Checksum

   *  - 
      - tcp_syn_fin
      - 8
      - TCP SYN&FIN

   *  - 
      - udp_port_lb
      - 8
      - UDP Port LB

   *  - 
      - bad_ip_hdr_len
      - 8
      - IPv4 Invalid Header Length

   *  - 
      - tcp_frag_header
      - 8
      - TCP Fragment Header

   *  - 
      - tcp_bad_csum
      - 8
      - TCP Invalid Checksum

   *  - 
      - bad_ip_pl_len
      - 8
      - IP Invalid Payload Length

   *  - 
      - tcp_null_scan
      - 8
      - TCP Null Scan

   *  - 
      - bad_ip_ttl
      - 8
      - IP Invalid TTL

   *  - 
      - bad_ip_flags
      - 8
      - IPv4 Invalid Flags

   *  - 
      - runt_tcpudp_hdr
      - 8
      - TCPUDP Runt Header

   *  - 
      - tcp_xmas_flags
      - 8
      - TCP XMAS Flags

   *  - 
      - micro_frag
      - 8
      - IPv4 Micro Fragment

   *  - 
      - tcp_xmas_scan
      - 8
      - TCP XMAS Scan

   *  - 
      - tcp_null_flags
      - 8
      - TCP Null Flags

   *  - 
      - udp_short_hdr
      - 8
      - UDP Short Header

   *  - 
      - icmp_pod
      - 8
      - ICMP Ping Of Death

   *  - 
      - runt_ip_hdr
      - 8
      - IP Runt Header

   *  - 
      - tcp_bad_urg_off
      - 8
      - TCP Invalid Urgent Offset

   *  - 
      - ipv4_opt
      - 8
      - IPv4 Option

   *  - 
      - oversize_ip_pl
      - 8
      - IP Payload Too Large

   *  - 
      - ip_frag
      - 8
      - IP Fragment

   *  - 
      - udp_short_leng
      - 8
      - UDP Invalid Length

   *  - 
      - bad_ip_csum
      - 8
      - IPv4 Invalid Checksum

   *  - 
      - empty_frag
      - 8
      - IPv4 Empty Fragment

   *  - 
      - udp_kb_frag
      - 8
      - UDP KB Fragment

   *  - 
      - tcp_syn_frag
      - 8
      - TCP SYN Fragment

   *  - 
      - no_ip_payload
      - 8
      - IP Payload None

   *  - 
      - tcp_opt_overflow
      - 8
      - TCP Option Error

   *  - 
      - tun_mismatch
      - 8
      - IP Tunnel Mismatch

   *  - 
      - land_attack
      - 8
      - IP Land Attack

   *  - 
      - tcp_short_hdr
      - 8
      - TCP Short Header

   *  - 
      - bad_ip_frag_off
      - 8
      - IPv4 Invalid Fragment Offset