ddos dst entry src-port

DDOS Port & Protocol configuration

src-port Specification

Type

Collection

Object Key(s)

port-num, protocol

Collection Name

src-port-list

Collection URI

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port

Element Name

src-port

Element URI

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port/{port-num}+{protocol}

Element Attributes

src-port_attributes

Statistics Data URI

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port/{port-num}+{protocol}/stats

Operational Data URI

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port/{port-num}+{protocol}/oper

Schema

src-port schema

Operations Allowed:

OperationMethodURIPayload

Create Object

POST

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port

src-port attributes

Create List

POST

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port

src-port attributes

Get Object

GET

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port/{port-num}+{protocol}

src-port attributes

Get List

GET

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port

src-port-list

Modify Object

POST

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port/{port-num}+{protocol}

src-port attributes

Replace Object

PUT

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port/{port-num}+{protocol}

src-port attributes

Replace List

PUT

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port

src-port-list

Delete Object

DELETE

/axapi/v3/ddos/dst/entry/{dst-entry-name}/src-port/{port-num}+{protocol}

src-port attributes

src-port-list

src-port-list is JSON List of src-port attributes

src-port-list : [

src-port attributes

deny

Description Blacklist and Drop all incoming packets for protocol

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

glid

Description Global limit ID

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

Refernce Object: /axapi/v3/glid

outbound-src-tracking

Description ‘enable’: enable; ‘disable’: disable;

Type: string

Supported Values: enable, disable

Default: disable

port-num

Description Port Number

Type: number

Range: 0-65535

protocol

Description ‘dns-udp’: DNS-UDP Port; ‘dns-tcp’: DNS-TCP Port; ‘udp’: UDP Port; ‘tcp’: TCP Port;

Type: string

Supported Values: dns-udp, dns-tcp, udp, tcp

set-counter-base-val

Description Set T2 counter value of current context to specified value

Type: number

Range: 1-4294967295

template

Description: template is a JSON Block. Please see below for template

Type: Object

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

template

Specification

Type

object

src-dns

Description DDOS dns src template

Type: string

Format: string-rlx

Maximum Length: 128 characters

Maximum Length: 1 characters

src-tcp

Description DDOS tcp src template

Type: string

Format: string-rlx

Maximum Length: 128 characters

Maximum Length: 1 characters

src-udp

Description DDOS udp src template

Type: string

Format: string-rlx

Maximum Length: 128 characters

Maximum Length: 1 characters

stats dns-tcp-port

Counter

Size

Description

src_ack_auth_fail

8

Src ACK Retry Dropped

src_ack_retry_init

8

Src ACK Retry Init

tcp_rexmit_syn_limit_drop

8

TCP SYN Retransmit Exceeded Drop

outbound_port_bytes_sent

8

Outbound Bytes Forwarded

src_rate_limit_type0

8

Src Request Rate 1 Exceeded

fqdn_rate_by_label_count_check

8

FQDN Rate by Label Count Checked

query_type_srv

8

Query Type SRV

src_ack_retry_gap_drop

8

Src ACK Retry Retry-Gap Dropped

req_sent

8

DNS Requests Forwarded

src_create_conn_non_syn_dropped

8

Src Create Conn with non-SYN Packets Dropped

prog_first_req_time_exceed

8

Req-Resp: First Request Time Exceed

sess_aged

8

Sessions Aged Out

tcp_auth_resp

8

TCP Auth Responded

pattern_filter1_match

8

Extracted Filter1 Match

conn_close

8

Connections Closed

syn_auth_fail

8

SYN Auth Failed

pattern_filter2_match

8

Extracted Filter2 Match

syn_retry_init

8

SYN Retry Init

conn_zwindow_rate_excd

8

TCP Conn Zero-Window Rate Exceeded

src_dns_fqdn_label_len_exceed

8

Src FQDN Label Length Exceeded

pattern_filter5_match

8

Extracted Filter5 Match

wellknown_sport_drop

8

TCP SrcPort Wellknown

prog_conn_time_exceed

8

Connection: Time Exceed

query_type_cname

8

Query Type CNAME

src_filter_total_not_match

8

Src Filter Not Matched on Pkt

port_syn_rate_exceed

8

TCP SYN Rate Exceeded

src_ack_retry_reset

8

Src ACK Retry Timeout Reset

dg_rate_exceed

8

Domain Group Domain Query Rate Exceeded

non_query_opcode_pass_through

8

Non Query Opcode Pass Through

src_fqdn_label_count_exceed

8

Src FQDN Label Count Exceeded

dns_query_class_chaos

8

Query Class CHAOS

pattern_filter4_match

8

Extracted Filter4 Match

conn_rexmit_rate_excd

8

TCP Conn Retransmit Rate Exceeded

prog_win_rcvd_exceed

8

Time Window: Received Exceed

outbound_port_bytes

8

Outbound Bytes Received

syn_retry_reset

8

SYN Retry Timeout Reset

prog_resp_req_ratio_exceed

8

Req-Resp: Response to Request Ratio Exceed

out_of_seq_excd

8

Out-Of-Seq Exceeded

dg_action_default

8

Domain Group Action Default

sflow_external_packets_sent

8

Sflow External Packets Sent

dst_hw_drop

8

Dst Hardware Packets Dropped

filter_action_default_pass

8

Filter Action Default Pass

src_ack_retry_rto_progress

8

Src ACK Retry RTO Progress

fqdn_label_count_exceed

8

FQDN Label Count Exceeded

src_filter_action_blacklist

8

Src Filter Action Blacklist

prog_conn_sent_exceed

8

Connection: Sent Exceed

src_retransmit_excd

8

Src Retransmit Exceeded

pattern_filter3_match

8

Extracted Filter3 Match

tcp_rexmit_syn_limit_bl

8

TCP SYN Retransmit Exceeded Blacklist

prog_win_rcvd_sent_ratio_exceed

8

Time Window: Received to Sent Exceed

src_ack_retry_timeout

8

Src ACK Retry Timeout

conn_close_w_rst

8

RST Connections Closed

outbound_port_drop

8

Outbound Packets Dropped

src_syn_auth_fail

8

Src SYN Auth Failed

prog_exceed_drop

8

Req-Resp: Violation Exceed Dropped

filter5_match

8

Filter5 Match

prog_conn_rcvd_exceed

8

Connection: Received Exceed

prog_response_len_exceed

8

Req-Resp: Response Length Exceed

prog_conn_exceed_drop

8

Connection: Violation Exceed Dropped

port_bytes

8

Inbound Bytes Received

src_filter4_match

8

Src Filter4 Match

syn_retry_rto_pass

8

SYN Retry RTO Passed

src_filter_action_default_pass

8

Src Filter Action Default Pass

syn_cookie_fail

8

SYN Cookie Failed

query_type_any

8

Query Type ANY

src_filter_none_match

8

Src Filter No Match

src_well_known_port

8

Src TCP SrcPort Wellknown

prog_request_len_exceed

8

Req-Resp: Request Length Exceed

src_syn_retry_rto_fail

8

Src SYN Retry RTO Dropped

syn_retry_rto_progress

8

SYN Retry RTO Progress

src_conn_rexmit_rate_excd

8

Src TCP Conn Retransmit Rate Exceeded

prog_win_exceed_bl

8

Time Window: Violation Exceed Blacklisted

port_kbit_rate_exceed_pkt

8

KiBit Rate Exceeded Count

rst_cookie_fail

8

RST Cookie Failed

ack_retry_rto_fail

8

ACK Retry RTO Dropped

dg_action_permit

8

Domain Group Action Permit

sflow_internal_packets_sent

8

Sflow Internal Packets Sent

snat_fail

8

Source NAT Failure

frag_rcvd

8

Fragmented Packets Received

src_syn_retry_init

8

Src SYN Retry Init

outbound_port_bytes_drop

8

Outbound Bytes Dropped

query_type_aaaa

8

Query Type AAAA

exceed_action_tunnel

8

Exceed Action: Tunnel

bl

8

Dst Blacklisted

filter1_match

8

Filter1 Match

synack_reset_sent

8

SYNACK Reset Sent

sess_create_inbound

8

Inbound Sessions Created

filter_auth_fail

8

Filter Auth Failed

conn_create_from_syn

8

Connections Created From SYN

exceed_drop_brate_src_pkt

8

Src KiBit Rate Exceeded Count

src_filter1_match

8

Src Filter1 Match

req_incomplete

8

TCP Request Incomplete

rate_limit_type4

8

Dst Request Rate 5 Exceeded

rate_limit_type3

8

Dst Request Rate 4 Exceeded

rate_limit_type2

8

Dst Request Rate 3 Exceeded

rate_limit_type1

8

Dst Request Rate 2 Exceeded

rate_limit_type0

8

Dst Request Rate 1 Exceeded

rrtype_drop

8

Record Type Dropped

req_retrans

8

Request Retransmit

ack_auth_fail

8

ACK Retry Dropped

sflow_external_samples_packed

8

Sflow External Samples Packed

filter_total_not_match

8

Filter Not Matched on Pkt

src_drop

8

Src Packets Dropped

query_type_a

8

Query Type A

syn_retry_blacklist

8

SYN Retry Timeout Blacklisted

dg_action_deny

8

Domain Group Action Deny

pattern_recognition_pattern_changed

8

Pattern Recognition: Pattern Change Detected

query_type_mx

8

Query Type MX

syn_retry_gap_drop

8

SYN Retry-Gap Dropped

prog_resp_req_time_exceed

8

Req-Resp: Response to Request Time Exceed

conn_create_from_ack

8

Connections Created From ACK

filter_none_match

8

Filter No Match

src_filter3_match

8

Src Filter3 Match

src_syn_retry_gap_drop

8

Src SYN Retry-Gap Dropped

prog_exceed_bl

8

Req-Resp: Violation Exceed Blacklisted

syn_drop

8

SYN Dropped

src_syn_rate_exceed

8

Src TCP SYN Rate Exceeded

port_conn_rate_exceed

8

Conn Rate Exceeded

src_dns_malform

8

Src Malform Query

src_syn_retry_timeout

8

Src SYN Retry Timeout

prog_conn_exceed_bl

8

Connection: Violation Exceed Blacklisted

req_size_exceed

8

Request Size Exceeded

query_type_soa

8

Query Type SOA

syn_retry_pass

8

SYN Retry Passed

dns_malform_drop

8

Malform Query Dropped

unauth_drop

8

TCP Unauth Dropped

dns_query_class_in

8

Query Class INTERNET

src_syn_cookie_sent

8

Src SYN Cookie Sent

port_bytes_sent

8

Inbound Bytes Forwarded

exceed_drop_brate_src

8

Src KiBit Rate Exceeded

ack_retry_timeout

8

ACK Retry Timeout

src_frag_drop

8

Src Fragmented Packets Dropped

src_out_of_seq_excd

8

Src Out-Of-Seq Exceeded

syn_retry_timeout

8

SYN Retry Timeout

syn_tfo_rcv

8

SYN TFO Received

port_kbit_rate_exceed

8

KiBit Rate Exceeded

src_unauth_drop

8

Src TCP Unauth Dropped

filter_action_whitelist

8

Filter Action WL

src_conn_pkt_rate_excd

8

Src TCP Conn Pkt Rate Exceeded

port_src_bl

8

Src Blacklisted

frag_timeout

8

Fragmented Packets Timeout

dg_request_check_fail

8

Domain Group Request Check Fail

src_filter5_match

8

Src Filter5 Match

dns_fqdn_label_len_exceed

8

FQDN Label Length Exceeded

outbound_port_pkt_sent

8

Outbound Packets Forwarded

sess_create_outbound

8

Outbound Sessions Created

pattern_filter_drop

8

Extracted Filter Drop

conn_close_w_fin

8

FIN Connections Closed

src_syn_retry_blacklist

8

Src SYN Retry Timeout Blacklisted

src_zero_window_excd

8

Src Zero-Window Exceeded

src_conn_zwindow_rate_excd

8

Src TCP Conn Zero-Window Rate Exceeded

sess_create

8

Session Create

nxdomain_rate_exceed

8

NXDOMAIN Response Rate Exceeded

ack_retry_blacklist

8

ACK Retry Timeout Blacklisted

filter_action_blacklist

8

Filter Action Blacklist

dns_query_class_csnet

8

Query Class CSNET

port_pkt_sent

8

Inbound Packets Forwarded

syn_auth_pass

8

SYN Auth Passed

src_dns_malform_drop

8

Src Malform Query Dropped

query_type_opt

8

Query Type OPT

syn_retry_rto_fail

8

SYN Retry RTO Dropped

prog_req_resp_time_exceed

8

Req-Resp: Request to Response Time Exceed

syn_cookie_sent

8

SYN Cookie Sent

retransmit_excd

8

Retransmit Exceeded

filter4_match

8

Filter4 Match

src_filter_action_whitelist

8

Src Filter Action WL

zero_window_excd

8

Zero-Window Exceeded

src_query_type_any_drop

8

Src Query Type ANY Dropped

conn_ofo_rate_excd

8

TCP Conn Out-Of-Seq Rate Exceeded

force_tcp_auth_pass

8

Auth Force-TCP Passed

filter2_match

8

Filter2 Match

src_ack_retry_blacklist

8

Src ACK Retry Timeout Blacklisted

frag_drop

8

Fragmented Packets Dropped

pattern_not_found

8

Pattern Recognition: Pattern Not Found

dns_query_class_hs

8

Query Class HESIOD

dns_query_class_none

8

Query Class NONE

port_conn_limm_exceed

8

Conn Limit Exceeded

filter3_match

8

Filter3 Match

ack_retry_pass

8

ACK Retry Passed

src_policy_drop

8

Src Policy Dropped

conn_close_w_idle

8

Idle Connections Closed

src_filter2_match

8

Src Filter2 Match

is_nxdomain

8

NXDOMAIN Response

dns_malform

8

Malform Query

port_bytes_drop

8

Inbound Bytes Dropped

exceed_drop_prate_src

8

Src Pkt Rate Exceeded

src_rate_limit_type4

8

Src Request Rate 5 Exceeded

src_rate_limit_type2

8

Src Request Rate 3 Exceeded

src_rate_limit_type3

8

Src Request Rate 4 Exceeded

exceed_drop_climit_src

8

Src Conn Limit Exceeded

src_rate_limit_type1

8

Src Request Rate 2 Exceeded

pattern_recognition_generic_error

8

Pattern Recognition: Exceptions

query_type_any_drop

8

Query Type ANY Dropped

ack_retry_reset

8

ACK Retry Timeout Reset

tcp_auth_drop

8

TCP Auth Dropped

nxdomain_bl_drop

8

NXDOMAIN Response Blacklisted

src_syn_cookie_fail

8

Src SYN Cookie Failed

syn_retry_failed

8

SYN Retry Dropped

pattern_recognition_sampling_started

8

Pattern Recognition: Sampling Started

ack_retry_init

8

ACK Retry Init

prog_conn_rcvd_sent_ratio_exceed

8

Connection: Reveived to Sent Ratio Exceed

policy_drop

8

Policy Dropped

query_type_ns

8

Query Type NS

ack_retry_gap_drop

8

ACK Retry Retry-Gap Dropped

nxdomain_drop

8

NXDOMAIN Response Dropped

create_conn_non_syn_dropped

8

Create Conn with non-SYN Packets Dropped

src_syn_retry_failed

8

Src SYN Retry Dropped

filter_action_drop

8

Filter Action Drop

src_ack_retry_rto_fail

8

Src ACK Retry RTO Dropped

dns_fqdn_stage_2_rate_exceed

8

FQDN Rate Exceeded

src_conn_ofo_rate_excd

8

Src TCP Conn Out-Of-Seq Rate Exceeded

dns_query_class_whitelist_miss

8

Query Class Whitelist Miss

ack_retry_rto_progress

8

ACK Retry RTO Progress

port_pkt_rate_exceed

8

Packet Rate Exceeded

prog_win_exceed_drop

8

Time Window: Violation Exceed Dropped

pattern_recognition_proceeded

8

Pattern Recognition: Engine Started

port_drop

8

Inbound Packets Dropped

ack_retry_rto_pass

8

ACK Retry RTO Passed

outbound_port_rcvd

8

Outbound Packets Received

dns_query_class_any

8

Query Class ANY

src_filter_auth_fail

8

Src Filter Auth Failed

src_syn_retry_rto_pass

8

Src SYN Retry RTO Passed

src_syn_retry_reset

8

Src SYN Retry Timeout Reset

port_rcvd

8

Inbound Packets Received

conn_close_half_open

8

Half Open Connections Closed

prog_win_sent_exceed

8

Time Window: Sent Exceed

synack_multiple_attempts_per_ip_detected

8

SYNACK Multiple Attempts Per IP Detected

sflow_internal_samples_packed

8

Sflow Internal Samples Packed

src_syn_retry_rto_progress

8

Src SYN Retry RTO Progress

src_ack_retry_rto_pass

8

Src ACK Retry RTO Passed

conn_prate_excd

8

TCP Conn Pkt Rate Exceeded

exceed_drop_crate_src

8

Src Conn Rate Exceeded

src_rst_cookie_fail

8

Src RST Cookie Failed

src_auth_drop

8

Src TCP Auth Dropped

src_filter_action_drop

8

Src Filter Action Drop

fqdn_rate_by_label_count_exceed

8

FQDN Rate by Label Count Exceeded

stats dns-udp-port

Counter

Size

Description

nxdomain_rate_exceed

8

NXDOMAIN Response Rate Exceeded

pattern_filter5_match

8

Extracted Filter5 Match

token_authentication_prev_salt_matched

8

Token Authentication Previous Salt Matched

outbound_port_bytes_sent

8

Outbound Bytes Forwarded

fqdn_rate_by_label_count_check

8

FQDN Rate by Label Count Checked

query_type_srv

8

Query Type SRV

req_sent

8

DNS Requests Forwarded

spoof_detect_fail

8

UDP Retry Timeout

sess_aged

8

Sessions Aged Out

pattern_filter4_match

8

Extracted Filter4 Match

pattern_filter1_match

8

Extracted Filter1 Match

pattern_filter2_match

8

Extracted Filter2 Match

force_tcp_auth_timeout

8

Auth Force-TCP With UDP Timeout

udp_auth_pass

8

Auth UDP Passed

src_dns_fqdn_label_len_exceed

8

Src FQDN Label Length Exceeded

udp_auth

8

Auth UDP Init

token_authentication_curr_salt_matched

8

Token Authentication Current Salt Matched

wellknown_sport_drop

8

UDP SrcPort Wellknown

query_type_cname

8

Query Type CNAME

fqdn_stage_2_rate_exceed

8

FQDN Rate Exceeded

src_filter_total_not_match

8

Src Filter Not Matched on Pkt

src_udp_retry_init

8

Src UDP Retry Init

src_payload_too_small

8

Src UDP Payload Too Small

non_query_opcode_pass_through

8

Non Query Opcode Pass Through

src_fqdn_label_count_exceed

8

Src FQDN Label Count Exceeded

sflow_internal_samples_packed

8

Sflow Internal Samples Packed

src_udp_retry_pass

8

Src UDP Retry Passed

udp_retry_init

8

UDP Retry Init

outbound_port_bytes

8

Outbound Bytes Received

dg_action_default

8

Domain Group Action Default

sflow_external_packets_sent

8

Sflow External Packets Sent

dst_hw_drop

8

Dst Hardware Packets Dropped

port_bytes

8

Inbound Bytes Received

fqdn_label_count_exceed

8

FQDN Label Count Exceeded

dns_auth_drop

8

DNS Auth Dropped

pattern_filter3_match

8

Extracted Filter3 Match

src_filter5_match

8

Src Filter5 Match

outbound_port_drop

8

Outbound Packets Dropped

pattern_recognition_pattern_changed

8

Pattern Recognition: Pattern Change Detected

filter5_match

8

Filter5 Match

src_udp_auth_fail

8

Src Auth UDP Failed

token_authentication_session_created

8

Token Authentication Session Created

src_udp_retry_gap_drop

8

Src UDP Retry-Gap Dropped

src_filter4_match

8

Src Filter4 Match

src_filter_action_default_pass

8

Src Filter Action Default Pass

query_type_any

8

Query Type ANY

src_filter_none_match

8

Src Filter No Match

filter4_match

8

Filter4 Match

bl

8

Dst Blacklisted

dg_action_permit

8

Domain Group Action Permit

src_filter_action_blacklist

8

Src Filter Action Blacklist

snat_fail

8

Source NAT Failure

payload_too_small

8

UDP Payload Too Small

frag_rcvd

8

Fragmented Packets Received

outbound_port_bytes_drop

8

Outbound Bytes Dropped

query_type_aaaa

8

Query Type AAAA

exceed_action_tunnel

8

Exceed Action: Tunnel

fqdn_label_len_exceed

8

FQDN Label Length Exceeded

filter1_match

8

Filter1 Match

ntp_monlist_resp

8

NTP Monlist Response

sess_create_inbound

8

Inbound Sessions Created

filter_auth_fail

8

Filter Auth Failed

exceed_drop_brate_src_pkt

8

Src KiBit Rate Exceeded Count

dns_auth_resp

8

DNS Auth Responded

src_filter1_match

8

Src Filter1 Match

rate_limit_type4

8

Dst Request Rate 5 Exceeded

rate_limit_type3

8

Dst Request Rate 4 Exceeded

rate_limit_type2

8

Dst Request Rate 3 Exceeded

rate_limit_type1

8

Dst Request Rate 2 Exceeded

rate_limit_type0

8

Dst Request Rate 1 Exceeded

rrtype_drop

8

Record Type Dropped

req_retrans

8

Request Retransmit

udp_auth_retry_gap_drop

8

Auth UDP Retry-Gap Dropped

src_udp_auth_drop

8

Src UDP Auth Dropped

sflow_external_samples_packed

8

Sflow External Samples Packed

filter_total_not_match

8

Filter Not Matched on Pkt

src_drop

8

Src Packets Dropped

query_type_a

8

Query Type A

sflow_internal_packets_sent

8

Sflow Internal Packets Sent

dg_action_deny

8

Domain Group Action Deny

udp_auth_retry_fail

8

Auth UDP Retry Failed

query_type_mx

8

Query Type MX

port_drop

8

Inbound Packets Dropped

filter_none_match

8

Filter No Match

src_filter3_match

8

Src Filter3 Match

ntp_monlist_req

8

NTP Monlist Request

payload_too_big

8

UDP Payload Too Large

token_authentication_session_created_fail

8

Token Authentication Session Created Fail

port_conn_rate_exceed

8

Conn Rate Exceeded

src_dns_malform

8

Src Malform Query

req_size_exceed

8

Request Size Exceeded

query_type_soa

8

Query Type SOA

port_kbit_rate_exceed_pkt

8

KiBit Rate Exceeded Count

dns_malform_drop

8

Malform Query Dropped

dns_query_class_in

8

Query Class INTERNET

port_bytes_sent

8

Inbound Bytes Forwarded

exceed_drop_brate_src

8

Src KiBit Rate Exceeded

udp_retry_pass

8

UDP Retry Passed

src_frag_drop

8

Src Fragmented Packets Dropped

port_kbit_rate_exceed

8

KiBit Rate Exceeded

udp_retry_gap_drop

8

UDP Retry-Gap Dropped

filter_action_whitelist

8

Filter Action Whitelist

src_conn_pkt_rate_excd

8

Src UDP Conn Pkt Rate Exceeded

port_src_bl

8

Src Blacklisted

frag_timeout

8

Fragmented Packets Timeout

dg_request_check_fail

8

Domain Group Request Check Fail

src_udp_auth

8

Src Auth UDP Init

outbound_port_pkt_sent

8

Outbound Packets Forwarded

sess_create_outbound

8

Outbound Sessions Created

pattern_filter_drop

8

Extracted Filter Drop

pattern_recognition_proceeded

8

Pattern Recognition: Engine Started

sess_create

8

Session Create

src_well_known_port

8

Src UDP SrcPort Wellknown

filter_action_blacklist

8

Filter Action Blacklist

dns_query_class_csnet

8

Query Class CSNET

port_pkt_sent

8

Inbound Packets Forwarded

src_dns_malform_drop

8

Src Malform Query Dropped

query_type_opt

8

Query Type OPT

src_filter_auth_fail

8

Src Filter Auth Failed

src_filter_action_whitelist

8

Src Filter Action Whitelist

src_query_type_any_drop

8

Src Query Type ANY Dropped

src_payload_too_big

8

Src UDP Payload Too Large

filter2_match

8

Filter2 Match

frag_drop

8

Fragmented Packets Dropped

pattern_not_found

8

Pattern Recognition: Pattern Not Found

dns_query_class_hs

8

Query Class HESIOD

dns_query_class_none

8

Query Class NONE

port_conn_limm_exceed

8

Conn Limit Exceeded

filter3_match

8

Filter3 Match

src_ntp_monlist_resp

8

Src NTP Monlist Response

src_rate_limit_type0

8

Src Request Rate 1 Exceeded

src_rate_limit_type1

8

Src Request Rate 2 Exceeded

src_filter2_match

8

Src Filter2 Match

is_nxdomain

8

NXDOMAIN Response

dns_malform

8

Malform Query

port_bytes_drop

8

Inbound Bytes Dropped

exceed_drop_prate_src

8

Src Pkt Rate Exceeded

src_rate_limit_type4

8

Src Request Rate 5 Exceeded

src_rate_limit_type2

8

Src Request Rate 3 Exceeded

src_rate_limit_type3

8

Src Request Rate 4 Exceeded

exceed_drop_climit_src

8

Src Conn Limit Exceeded

udp_auth_drop

8

UDP Auth Dropped

pattern_recognition_generic_error

8

Pattern Recognition: Exceptions

query_type_any_drop

8

Query Type ANY Dropped

src_ntp_monlist_req

8

Src NTP Monlist Request

nxdomain_bl_drop

8

NXDOMAIN Response Blacklisted

token_authentication_mismatched

8

Token Authentication Mismatched Packets

pattern_recognition_sampling_started

8

Pattern Recognition: Sampling Started

dns_query_class_chaos

8

Query Class CHAOS

query_type_ns

8

Query Type NS

filter_action_default_pass

8

Filter Action Default Pass

nxdomain_drop

8

NXDOMAIN Response Dropped

filter_action_drop

8

Filter Action Drop

src_dns_auth_drop

8

Src DNS Auth Dropped

dns_query_class_whitelist_miss

8

Query Class Whitelist Miss

token_authentication_invalid

8

Token Authentication Invalid Packets

port_pkt_rate_exceed

8

Packet Rate Exceeded

outbound_port_rcvd

8

Outbound Packets Received

dns_query_class_any

8

Query Class ANY

dg_rate_exceed

8

Domain Group Domain Query Rate Exceeded

port_rcvd

8

Inbound Packets Received

src_force_tcp_auth

8

Src Auth Force-TCP

force_tcp_auth

8

Auth Force-TCP

conn_prate_excd

8

UDP Conn Pkt Rate Exceeded

exceed_drop_crate_src

8

Src Conn Rate Exceeded

src_udp_auth_timeout

8

Src UDP Retry Timeout

udp_auth_fail

8

Auth UDP Failed

src_filter_action_drop

8

Src Filter Action Drop

fqdn_rate_by_label_count_exceed

8

FQDN Rate by Label Count Exceeded

stats tcp-port

Counter

Size

Description

src_ack_auth_fail

8

Src ACK Retry Dropped

src_well_known_port

8

Src TCP SrcPort Wellknown

tcp_rexmit_syn_limit_drop

8

TCP SYN Retransmit Exceeded Drop

outbound_port_bytes_sent

8

Outbound Bytes Forwarded

filter_total_not_match

8

Filter Not Matched on Pkt

src_ack_retry_gap_drop

8

Src ACK Retry Retry-Gap Dropped

filter4_match

8

Filter4 Match

src_create_conn_non_syn_dropped

8

Src Create Conn with non-SYN Packets Dropped

prog_first_req_time_exceed

8

Req-Resp: First Request Time Exceed

sess_aged

8

Sessions Aged Out

tcp_auth_resp

8

TCP Auth Responded

pattern_filter1_match

8

Extracted Filter1 Match

conn_close

8

Connections Closed

syn_auth_fail

8

SYN Auth Failed

pattern_filter2_match

8

Extracted Filter2 Match

syn_retry_init

8

SYN Retry Init

pattern_filter5_match

8

Extracted Filter5 Match

wellknown_sport_drop

8

TCP SrcPort Wellknown

prog_conn_time_exceed

8

Connection: Time Exceed

src_filter_total_not_match

8

Src Filter Not Matched on Pkt

port_syn_rate_exceed

8

TCP SYN Rate Exceeded

conn_rexmit_rate_excd

8

TCP Conn Retransmit Rate Exceeded

outbound_port_bytes

8

Outbound Bytes Received

prog_resp_req_ratio_exceed

8

Req-Resp: Response to Request Ratio Exceed

out_of_seq_excd

8

Out-Of-Seq Exceeded

conn_close_w_rst

8

RST Connections Closed

sflow_external_packets_sent

8

Sflow External Packets Sent

dst_hw_drop

8

Dst Hardware Packets Dropped

filter_action_default_pass

8

Filter Action Default Pass

src_ack_retry_rto_progress

8

Src ACK Retry RTO Progress

src_filter_action_blacklist

8

Src Filter Action Blacklist

src_retransmit_excd

8

Src Retransmit Exceeded

pattern_filter3_match

8

Extracted Filter3 Match

tcp_rexmit_syn_limit_bl

8

TCP SYN Retransmit Exceeded Blacklist

prog_win_rcvd_sent_ratio_exceed

8

Time Window: Received to Sent Exceed

src_ack_retry_timeout

8

Src ACK Retry Timeout

src_filter5_match

8

Src Filter5 Match

outbound_port_drop

8

Outbound Packets Dropped

prog_exceed_drop

8

Req-Resp: Violation Exceed Dropped

filter5_match

8

Filter5 Match

prog_conn_rcvd_exceed

8

Connection: Received Exceed

prog_response_len_exceed

8

Req-Resp: Response Length Exceed

prog_conn_exceed_drop

8

Connection: Violation Exceed Dropped

tcp_auth_drop

8

TCP Auth Dropped

src_filter4_match

8

Src Filter4 Match

src_filter_action_default_pass

8

Src Filter Action Default Pass

syn_cookie_fail

8

SYN Cookie Failed

prog_request_len_exceed

8

Req-Resp: Request Length Exceed

src_syn_retry_rto_fail

8

Src SYN Retry RTO Dropped

syn_retry_rto_progress

8

SYN Retry RTO Progress

src_conn_rexmit_rate_excd

8

Src TCP Conn Retransmit Rate Exceeded

prog_win_exceed_bl

8

Time Window: Violation Exceed Blacklisted

src_out_of_seq_excd

8

Src Out-Of-Seq Exceeded

rst_cookie_fail

8

RST Cookie Failed

ack_retry_rto_fail

8

ACK Retry RTO Dropped

sflow_internal_packets_sent

8

Sflow Internal Packets Sent

snat_fail

8

Source NAT Failure

frag_rcvd

8

Fragmented Packets Received

src_syn_retry_init

8

Src SYN Retry Init

outbound_port_bytes_drop

8

Outbound Bytes Dropped

syn_retry_rto_pass

8

SYN Retry RTO Passed

exceed_action_tunnel

8

Exceed Action: Tunnel

bl

8

Dst Blacklisted

filter1_match

8

Filter1 Match

port_bytes

8

Inbound Bytes Received

sess_create_inbound

8

Inbound Sessions Created

filter_auth_fail

8

Filter Auth Failed

conn_create_from_syn

8

Connections Created From SYN

exceed_drop_brate_src_pkt

8

Src KiBit Rate Exceeded Count

src_filter1_match

8

Src Filter1 Match

prog_conn_sent_exceed

8

Connection: Sent Exceed

src_zero_window_excd

8

Src Zero-Window Exceeded

pattern_filter4_match

8

Extracted Filter4 Match

ack_auth_fail

8

ACK Retry Dropped

sflow_external_samples_packed

8

Sflow External Samples Packed

src_drop

8

Src Packets Dropped

syn_retry_blacklist

8

SYN Retry Timeout Blacklisted

synack_reset_sent

8

SYNACK Reset Sent

pattern_recognition_pattern_changed

8

Pattern Recognition: Pattern Change Detected

src_conn_ofo_rate_excd

8

Src TCP Conn Out-Of-Seq Rate Exceeded

syn_retry_gap_drop

8

SYN Retry-Gap Dropped

prog_resp_req_time_exceed

8

Req-Resp: Response to Request Time Exceed

conn_create_from_ack

8

Connections Created From ACK

filter_none_match

8

Filter No Match

src_filter3_match

8

Src Filter3 Match

src_syn_retry_gap_drop

8

Src SYN Retry-Gap Dropped

prog_exceed_bl

8

Req-Resp: Violation Exceed Blacklisted

syn_drop

8

SYN Dropped

src_syn_rate_exceed

8

Src TCP SYN Rate Exceeded

port_conn_rate_exceed

8

Conn Rate Exceeded

prog_win_rcvd_exceed

8

Time Window: Received Exceed

src_syn_retry_timeout

8

Src SYN Retry Timeout

prog_conn_exceed_bl

8

Connection: Violation Exceed Blacklisted

src_filter_none_match

8

Src Filter No Match

port_kbit_rate_exceed_pkt

8

KiBit Rate Exceeded Count

unauth_drop

8

TCP Unauth Dropped

src_syn_cookie_sent

8

Src SYN Cookie Sent

port_bytes_sent

8

Inbound Bytes Forwarded

exceed_drop_brate_src

8

Src KiBit Rate Exceeded

ack_retry_timeout

8

ACK Retry Timeout

src_frag_drop

8

Src Fragmented Packets Dropped

syn_retry_timeout

8

SYN Retry Timeout

syn_tfo_rcv

8

SYN TFO Received

port_kbit_rate_exceed

8

KiBit Rate Exceeded

src_unauth_drop

8

Src TCP Unauth Dropped

filter_action_whitelist

8

Filter Action WL

src_conn_pkt_rate_excd

8

Src TCP Conn Pkt Rate Exceeded

port_src_bl

8

Src Blacklisted

frag_timeout

8

Fragmented Packets Timeout

outbound_port_pkt_sent

8

Outbound Packets Forwarded

sess_create_outbound

8

Outbound Sessions Created

pattern_filter_drop

8

Extracted Filter Drop

conn_close_w_fin

8

FIN Connections Closed

src_syn_retry_blacklist

8

Src SYN Retry Timeout Blacklisted

src_ack_retry_rto_pass

8

Src ACK Retry RTO Passed

src_conn_zwindow_rate_excd

8

Src TCP Conn Zero-Window Rate Exceeded

src_ack_retry_init

8

Src ACK Retry Init

ack_retry_blacklist

8

ACK Retry Timeout Blacklisted

filter_action_blacklist

8

Filter Action Blacklist

port_pkt_sent

8

Inbound Packets Forwarded

syn_auth_pass

8

SYN Auth Passed

syn_retry_rto_fail

8

SYN Retry RTO Dropped

prog_req_resp_time_exceed

8

Req-Resp: Request to Response Time Exceed

syn_cookie_sent

8

SYN Cookie Sent

retransmit_excd

8

Retransmit Exceeded

src_syn_auth_fail

8

Src SYN Auth Failed

src_filter_action_whitelist

8

Src Filter Action WL

zero_window_excd

8

Zero-Window Exceeded

src_ack_retry_reset

8

Src ACK Retry Timeout Reset

conn_ofo_rate_excd

8

TCP Conn Out-Of-Seq Rate Exceeded

filter2_match

8

Filter2 Match

src_ack_retry_blacklist

8

Src ACK Retry Timeout Blacklisted

frag_drop

8

Fragmented Packets Dropped

pattern_not_found

8

Pattern Recognition: Pattern Not Found

syn_retry_reset

8

SYN Retry Timeout Reset

port_conn_limm_exceed

8

Conn Limit Exceeded

filter3_match

8

Filter3 Match

exceed_drop_climit_src

8

Src Conn Limit Exceeded

conn_close_w_idle

8

Idle Connections Closed

src_filter2_match

8

Src Filter2 Match

sess_create

8

Session Create

port_bytes_drop

8

Inbound Bytes Dropped

exceed_drop_prate_src

8

Src Pkt Rate Exceeded

ack_retry_pass

8

ACK Retry Passed

pattern_recognition_generic_error

8

Pattern Recognition: Exceptions

ack_retry_reset

8

ACK Retry Timeout Reset

src_syn_cookie_fail

8

Src SYN Cookie Failed

syn_retry_failed

8

SYN Retry Dropped

pattern_recognition_sampling_started

8

Pattern Recognition: Sampling Started

ack_retry_init

8

ACK Retry Init

prog_conn_rcvd_sent_ratio_exceed

8

Connection: Reveived to Sent Ratio Exceed

sflow_internal_samples_packed

8

Sflow Internal Samples Packed

ack_retry_gap_drop

8

ACK Retry Retry-Gap Dropped

create_conn_non_syn_dropped

8

Create Conn with non-SYN Packets Dropped

syn_retry_pass

8

SYN Retry Passed

src_syn_retry_failed

8

Src SYN Retry Dropped

filter_action_drop

8

Filter Action Drop

src_ack_retry_rto_fail

8

Src ACK Retry RTO Dropped

conn_zwindow_rate_excd

8

TCP Conn Zero-Window Rate Exceeded

ack_retry_rto_progress

8

ACK Retry RTO Progress

port_pkt_rate_exceed

8

Packet Rate Exceeded

prog_win_exceed_drop

8

Time Window: Violation Exceed Dropped

pattern_recognition_proceeded

8

Pattern Recognition: Engine Started

port_drop

8

Inbound Packets Dropped

ack_retry_rto_pass

8

ACK Retry RTO Passed

outbound_port_rcvd

8

Outbound Packets Received

src_filter_auth_fail

8

Src Filter Auth Failed

src_syn_retry_rto_pass

8

Src SYN Retry RTO Passed

src_syn_retry_reset

8

Src SYN Retry Timeout Reset

port_rcvd

8

Inbound Packets Received

conn_close_half_open

8

Half Open Connections Closed

prog_win_sent_exceed

8

Time Window: Sent Exceed

synack_multiple_attempts_per_ip_detected

8

SYNACK Multiple Attempts Per IP Detected

src_syn_retry_rto_progress

8

Src SYN Retry RTO Progress

conn_prate_excd

8

TCP Conn Pkt Rate Exceeded

exceed_drop_crate_src

8

Src Conn Rate Exceeded

src_rst_cookie_fail

8

Src RST Cookie Failed

src_auth_drop

8

Src TCP Auth Dropped

src_filter_action_drop

8

Src Filter Action Drop

stats udp-port

Counter

Size

Description

snat_fail

8

Source NAT Failure

pattern_filter5_match

8

Extracted Filter5 Match

token_authentication_prev_salt_matched

8

Token Authentication Previous Salt Matched

outbound_port_bytes_sent

8

Outbound Bytes Forwarded

src_udp_retry_gap_drop

8

Src UDP Retry-Gap Dropped

filter4_match

8

Filter4 Match

spoof_detect_fail

8

UDP Retry Timeout

sess_aged

8

Sessions Aged Out

pattern_filter4_match

8

Extracted Filter4 Match

pattern_filter1_match

8

Extracted Filter1 Match

pattern_filter2_match

8

Extracted Filter2 Match

token_authentication_curr_salt_matched

8

Token Authentication Current Salt Matched

wellknown_sport_drop

8

UDP SrcPort Wellknown

src_filter_total_not_match

8

Src Filter Not Matched on Pkt

src_udp_retry_init

8

Src UDP Retry Init

src_payload_too_small

8

Src UDP Payload Too Small

src_udp_retry_pass

8

Src UDP Retry Passed

udp_retry_init

8

UDP Retry Init

outbound_port_bytes

8

Outbound Bytes Received

src_filter5_match

8

Src Filter5 Match

sflow_external_packets_sent

8

Sflow External Packets Sent

dst_hw_drop

8

Dst Hardware Packets Dropped

port_bytes

8

Inbound Bytes Received

frag_rcvd

8

Fragmented Packets Received

src_filter_action_blacklist

8

Src Filter Action Blacklist

pattern_filter3_match

8

Extracted Filter3 Match

outbound_port_drop

8

Outbound Packets Dropped

filter5_match

8

Filter5 Match

token_authentication_session_created

8

Token Authentication Session Created

src_filter4_match

8

Src Filter4 Match

src_filter_action_default_pass

8

Src Filter Action Default Pass

filter_total_not_match

8

Filter Not Matched on Pkt

sflow_internal_packets_sent

8

Sflow Internal Packets Sent

payload_too_small

8

UDP Payload Too Small

src_payload_too_big

8

Src UDP Payload Too Large

outbound_port_bytes_drop

8

Outbound Bytes Dropped

exceed_action_tunnel

8

Exceed Action: Tunnel

bl

8

Dst Blacklisted

filter1_match

8

Filter1 Match

ntp_monlist_resp

8

NTP Monlist Response

sess_create_inbound

8

Inbound Sessions Created

filter_auth_fail

8

Filter Auth Failed

exceed_drop_brate_src_pkt

8

Src KiBit Rate Exceeded Count

src_filter1_match

8

Src Filter1 Match

udp_retry_pass

8

UDP Retry Passed

src_udp_auth_drop

8

Src UDP Auth Dropped

sflow_external_samples_packed

8

Sflow External Samples Packed

src_drop

8

Src Packets Dropped

pattern_recognition_pattern_changed

8

Pattern Recognition: Pattern Change Detected

port_drop

8

Inbound Packets Dropped

filter_none_match

8

Filter No Match

src_filter3_match

8

Src Filter3 Match

ntp_monlist_req

8

NTP Monlist Request

payload_too_big

8

UDP Payload Too Large

token_authentication_session_created_fail

8

Token Authentication Session Created Fail

port_conn_rate_exceed

8

Conn Rate Exceeded

src_filter_none_match

8

Src Filter No Match

port_kbit_rate_exceed_pkt

8

KiBit Rate Exceeded Count

port_bytes_sent

8

Inbound Bytes Forwarded

exceed_drop_brate_src

8

Src KiBit Rate Exceeded

src_frag_drop

8

Src Fragmented Packets Dropped

port_kbit_rate_exceed

8

KiBit Rate Exceeded

udp_retry_gap_drop

8

UDP Retry-Gap Dropped

filter_action_whitelist

8

Filter Action Whitelist

src_conn_pkt_rate_excd

8

Src UDP Conn Pkt Rate Exceeded

port_src_bl

8

Src Blacklisted

outbound_port_rcvd

8

Outbound Packets Received

outbound_port_pkt_sent

8

Outbound Packets Forwarded

sess_create_outbound

8

Outbound Sessions Created

pattern_filter_drop

8

Extracted Filter Drop

pattern_recognition_proceeded

8

Pattern Recognition: Engine Started

src_well_known_port

8

Src UDP SrcPort Wellknown

filter_action_blacklist

8

Filter Action Blacklist

port_pkt_sent

8

Inbound Packets Forwarded

src_filter_action_whitelist

8

Src Filter Action Whitelist

filter2_match

8

Filter2 Match

frag_drop

8

Fragmented Packets Dropped

pattern_not_found

8

Pattern Recognition: Pattern Not Found

port_conn_limm_exceed

8

Conn Limit Exceeded

filter3_match

8

Filter3 Match

src_ntp_monlist_resp

8

Src NTP Monlist Response

src_filter2_match

8

Src Filter2 Match

sess_create

8

Session Create

port_bytes_drop

8

Inbound Bytes Dropped

exceed_drop_prate_src

8

Src Pkt Rate Exceeded

exceed_drop_climit_src

8

Src Conn Limit Exceeded

udp_auth_drop

8

UDP Auth Dropped

pattern_recognition_generic_error

8

Pattern Recognition: Exceptions

src_ntp_monlist_req

8

Src NTP Monlist Request

token_authentication_mismatched

8

Token Authentication Mismatched Packets

pattern_recognition_sampling_started

8

Pattern Recognition: Sampling Started

sflow_internal_samples_packed

8

Sflow Internal Samples Packed

filter_action_default_pass

8

Filter Action Default Pass

filter_action_drop

8

Filter Action Drop

token_authentication_invalid

8

Token Authentication Invalid Packets

port_pkt_rate_exceed

8

Packet Rate Exceeded

frag_timeout

8

Fragmented Packets Timeout

src_filter_auth_fail

8

Src Filter Auth Failed

port_rcvd

8

Inbound Packets Received

conn_prate_excd

8

UDP Conn Pkt Rate Exceeded

exceed_drop_crate_src

8

Src Conn Rate Exceeded

src_filter_action_drop

8

Src Filter Action Drop

src_udp_auth_timeout

8

Src UDP Retry Timeout

operational data

Counter

Size

Description

app-stat

flag

app-stat

hw-blacklisted

string

hw-blacklisted

all-src-ports

flag

all-src-ports

all-ip-protos

flag

all-ip-protos

entry-displayed-count

number

entry-displayed-count

ddos_entry_list

ddos_entry_list

service-displayed-count

number

service-displayed-count

all-ports

flag

all-ports

domain-name

string

domain-name

sflow-source-id

flag

sflow-source-id

port-protocol

string

port-protocol

suffix-request-rate

flag

suffix-request-rate