{ "id":"/axapi/v3/ddos/dns-tcp-zone-port/{sampling-enable}", "type":"object", "node-type":"list", "title":"dns-tcp-zone-port", "description":"ddos dst dns-tcp zone port counters", "properties":{ "sampling-enable":{ "type":"array", "minItems":1, "items":{ "type":"object" }, "uniqueItems":true, "array":[ { "properties":{ "counters1":{ "type":"string", "format":"enum", "description":"'all': all; 'rate_limit_type0': Dst Request Rate 1 Exceeded; 'rate_limit_type1': Dst Request Rate 2 Exceeded; 'rate_limit_type2': Dst Request Rate 3 Exceeded; 'rate_limit_type3': Dst Request Rate 4 Exceeded; 'rate_limit_type4': Dst Request Rate 5 Exceeded; 'nxdomain_rate_exceed': NXDOMAIN Response Rate Exceeded; 'is_nxdomain': NXDOMAIN Response; 'nxdomain_bl_drop': NXDOMAIN Response Blacklisted; 'fqdn_label_len_exceed': FQDN Label Length Exceeded; 'malform_drop': Malform Query Dropped; 'fqdn_stage_2_rate_exceed': FQDN Rate Exceeded; 'req_sent': DNS Requests Forwarded; 'tcp_req_incomplete': TCP Request Incomplete; 'req_size_exceed': Request Size Exceeded; 'req_retrans': Request Retransmit; 'query_type_a': Query Type A; 'query_type_aaaa': Query Type AAAA; 'query_type_ns': Query Type NS; 'query_type_cname': Query Type CNAME; 'query_type_any': Query Type ANY; 'query_type_srv': Query Type SRV; 'query_type_mx': Query Type MX; 'query_type_soa': Query Type SOA; 'query_type_opt': Query Type OPT; 'port_rcvd': Inbound Packets Received; 'port_drop': Inbound Packets Dropped; 'port_pkt_sent': Inbound Packets Forwarded; 'port_pkt_rate_exceed': Packet Rate Exceeded; 'port_kbit_rate_exceed': KiBit Rate Exceeded; 'port_conn_rate_exceed': Conn Rate Exceeded; 'port_conn_limm_exceed': Conn Limit Exceeded; 'dg_action_permit': Domain Group Action Permit; 'dg_action_deny': Domain Group Action Deny; 'dg_action_default': Domain Group Action Default; 'port_bytes': Inbound Bytes Received; 'outbound_port_bytes': Outbound Bytes Received; 'outbound_port_rcvd': Outbound Packets Received; 'outbound_port_pkt_sent': Outbound Packets Forwarded; 'port_bytes_sent': Inbound Bytes Forwarded; 'port_bytes_drop': Inbound Bytes Dropped; 'port_src_bl': Src Blacklisted; 'port_src_escalation': Src Escalation; 'current_es_level': Current Escalation Level; 'filter_auth_fail': Filter Auth Failed; 'syn_auth_fail': SYN Auth Failed; 'ack_auth_fail': ACK Retry Dropped; 'syn_cookie_fail': SYN Cookie Failed; 'sess_create': Session Create; 'filter_action_blacklist': Filter Action Blacklist; 'filter_action_drop': Filter Action Drop; 'filter_action_default_pass': Filter Action Default Pass; 'filter_action_whitelist': Filter Action WL; 'exceed_drop_prate_src': Src Pkt Rate Exceeded; 'exceed_drop_crate_src': Src Conn Rate Exceeded; 'exceed_drop_climit_src': Src Conn Limit Exceeded; 'exceed_drop_brate_src': Src KiBit Rate Exceeded; 'outbound_port_bytes_sent': Outbound Bytes Forwarded; 'outbound_port_drop': Outbound Packets Dropped; 'outbound_port_bytes_drop': Outbound Bytes Dropped; 'src_rate_limit_type0': Src Request Rate 1 Exceeded; 'src_rate_limit_type1': Src Request Rate 2 Exceeded; 'src_rate_limit_type2': Src Request Rate 3 Exceeded; 'src_rate_limit_type3': Src Request Rate 4 Exceeded; 'src_rate_limit_type4': Src Request Rate 5 Exceeded; 'exceed_drop_brate_src_pkt': Src KiBit Rate Exceeded Count; 'port_kbit_rate_exceed_pkt': KiBit Rate Exceeded Count; 'syn_cookie_sent': SYN Cookie Sent; 'ack_retry_init': ACK Retry Init; 'ack_retry_gap_drop': ACK Retry Retry-Gap Dropped; 'conn_prate_excd': TCP Conn Pkt Rate Exceeded; 'out_of_seq_excd': Out-Of-Seq Exceeded; 'retransmit_excd': Retransmit Exceeded; 'zero_window_excd': Zero-Window Exceeded; 'syn_retry_init': SYN Retry Init; 'syn_retry_gap_drop': SYN Retry-Gap Dropped; 'ack_retry_pass': ACK Retry Passed; 'syn_retry_pass': SYN Retry Passed; 'fqdn_rate_by_label_count_check': FQDN Rate by Label Count Checked; 'fqdn_rate_by_label_count_exceed': FQDN Rate by Label Count Exceeded; 'policy_drop': Policy Dropped; 'fqdn_label_count_exceed': FQDN Label Count Exceeded; 'rrtype_drop': Record Type Dropped; 'src_policy_drop': Src Policy Dropped; 'src_dns_fqdn_label_len_exceed': Src FQDN Label Length Exceeded; 'src_fqdn_label_count_exceed': Src FQDN Label Count Exceeded; 'src_dns_malform_drop': Src Malform Query Dropped; 'tcp_auth_drop': TCP Auth Dropped; 'tcp_auth_resp': TCP Auth Responded; 'dns_query_class_in': Query Class INTERNET; 'dns_query_class_csnet': Query Class CSNET; 'dns_query_class_chaos': Query Class CHAOS; 'dns_query_class_hs': Query Class HESIOD; 'dns_query_class_none': Query Class NONE; 'dns_query_class_any': Query Class ANY; 'dns_query_class_whitelist_miss': Query Class Whitelist Miss; 'bl': Dst Blacklisted; 'src_drop': Src Packets Dropped; 'frag_rcvd': Fragmented Packets Received; 'frag_drop': Fragmented Packets Dropped; 'sess_create_inbound': Inbound Sessions Created; 'sess_create_outbound': Outbound Sessions Created; 'conn_create_from_syn': Connections Created From SYN; 'conn_create_from_ack': Connections Created From ACK; 'conn_close': Connections Closed; 'conn_close_w_rst': RST Connections Closed; 'conn_close_w_fin': FIN Connections Closed; 'conn_close_w_idle': Idle Connections Closed; 'conn_close_half_open': Half Open Connections Closed; 'sess_aged': Sessions Aged Out; 'syn_drop': SYN Dropped; 'syn_auth_pass': SYN Auth Passed; 'unauth_drop': TCP Unauth Dropped; 'rst_cookie_fail': RST Cookie Failed; 'syn_retry_failed': SYN Retry Dropped; 'filter1_match': Filter1 Match; 'filter2_match': Filter2 Match; 'filter3_match': Filter3 Match; 'filter4_match': Filter4 Match; 'filter5_match': Filter5 Match; 'filter_none_match': Filter No Match; 'filter_total_not_match': Filter Not Matched on Pkt; 'src_syn_auth_fail': Src SYN Auth Failed; 'src_syn_cookie_sent': Src SYN Cookie Sent; 'src_syn_cookie_fail': Src SYN Cookie Failed; 'src_unauth_drop': Src TCP Unauth Dropped; 'src_rst_cookie_fail': Src RST Cookie Failed; 'src_syn_retry_init': Src SYN Retry Init; 'src_syn_retry_gap_drop': Src SYN Retry-Gap Dropped; 'src_syn_retry_failed': Src SYN Retry Dropped; 'src_ack_retry_init': Src ACK Retry Init; 'src_ack_retry_gap_drop': Src ACK Retry Retry-Gap Dropped; 'src_ack_auth_fail': Src ACK Retry Dropped; 'src_out_of_seq_excd': Src Out-Of-Seq Exceeded; 'src_retransmit_excd': Src Retransmit Exceeded; 'src_zero_window_excd': Src Zero-Window Exceeded; 'src_conn_pkt_rate_excd': Src TCP Conn Pkt Rate Exceeded; 'src_filter_action_blacklist': Src Filter Action Blacklist; 'src_filter_action_drop': Src Filter Action Drop; 'src_filter_action_default_pass': Src Filter Action Default Pass; 'src_filter_action_whitelist': Src Filter Action WL; 'force_tcp_auth_pass': Auth Force-TCP Passed; 'nxdomain_drop': NXDOMAIN Response Dropped; 'dns_malform': Malform Query; 'src_dns_malform': Src Malform Query; 'tcp_rexmit_syn_limit_drop': TCP SYN Retransmit Exceed Drop; 'tcp_rexmit_syn_limit_bl': TCP SYN Retransmit Exceed Blacklist; 'conn_ofo_rate_excd': TCP Conn Out-Of-Seq Rate Exceeded; 'conn_rexmit_rate_excd': TCP Conn Retransmit Rate Exceeded; 'conn_zwindow_rate_excd': TCP Conn Zero-Window Rate Exceeded; 'src_conn_ofo_rate_excd': Src TCP Conn Out-Of-Seq Rate Exceeded; 'src_conn_rexmit_rate_excd': Src TCP Conn Retransmit Rate Exceeded; 'src_conn_zwindow_rate_excd': Src TCP Conn Zero-Window Rate Exceeded; 'ack_retry_rto_pass': ACK Retry RTO Passed; 'ack_retry_rto_fail': ACK Retry RTO Dropped; 'ack_retry_rto_progress': ACK Retry RTO Progress; 'syn_retry_rto_pass': SYN Retry RTO Passed; 'syn_retry_rto_fail': SYN Retry RTO Dropped; 'syn_retry_rto_progress': SYN Retry RTO Progress; 'src_syn_retry_rto_pass': Src SYN Retry RTO Passed; 'src_syn_retry_rto_fail': Src SYN Retry RTO Dropped; 'src_syn_retry_rto_progress': Src SYN Retry RTO Progress; 'src_ack_retry_rto_pass': Src ACK Retry RTO Passed; 'src_ack_retry_rto_fail': Src ACK Retry RTO Dropped; ", "enum":[ "all", "rate_limit_type0", "rate_limit_type1", "rate_limit_type2", "rate_limit_type3", "rate_limit_type4", "nxdomain_rate_exceed", "is_nxdomain", "nxdomain_bl_drop", "fqdn_label_len_exceed", "malform_drop", "fqdn_stage_2_rate_exceed", "req_sent", "tcp_req_incomplete", "req_size_exceed", "req_retrans", "query_type_a", "query_type_aaaa", "query_type_ns", "query_type_cname", "query_type_any", "query_type_srv", "query_type_mx", "query_type_soa", "query_type_opt", "port_rcvd", "port_drop", "port_pkt_sent", "port_pkt_rate_exceed", "port_kbit_rate_exceed", "port_conn_rate_exceed", "port_conn_limm_exceed", "dg_action_permit", "dg_action_deny", "dg_action_default", "port_bytes", "outbound_port_bytes", "outbound_port_rcvd", "outbound_port_pkt_sent", "port_bytes_sent", "port_bytes_drop", "port_src_bl", "port_src_escalation", "current_es_level", "filter_auth_fail", "syn_auth_fail", "ack_auth_fail", "syn_cookie_fail", "sess_create", "filter_action_blacklist", "filter_action_drop", "filter_action_default_pass", "filter_action_whitelist", "exceed_drop_prate_src", "exceed_drop_crate_src", "exceed_drop_climit_src", "exceed_drop_brate_src", "outbound_port_bytes_sent", "outbound_port_drop", "outbound_port_bytes_drop", "src_rate_limit_type0", "src_rate_limit_type1", "src_rate_limit_type2", "src_rate_limit_type3", "src_rate_limit_type4", "exceed_drop_brate_src_pkt", "port_kbit_rate_exceed_pkt", "syn_cookie_sent", "ack_retry_init", "ack_retry_gap_drop", "conn_prate_excd", "out_of_seq_excd", "retransmit_excd", "zero_window_excd", "syn_retry_init", "syn_retry_gap_drop", "ack_retry_pass", "syn_retry_pass", "fqdn_rate_by_label_count_check", "fqdn_rate_by_label_count_exceed", "policy_drop", "fqdn_label_count_exceed", "rrtype_drop", "src_policy_drop", "src_dns_fqdn_label_len_exceed", "src_fqdn_label_count_exceed", "src_dns_malform_drop", "tcp_auth_drop", "tcp_auth_resp", "dns_query_class_in", "dns_query_class_csnet", "dns_query_class_chaos", "dns_query_class_hs", "dns_query_class_none", "dns_query_class_any", "dns_query_class_whitelist_miss", "bl", "src_drop", "frag_rcvd", "frag_drop", "sess_create_inbound", "sess_create_outbound", "conn_create_from_syn", "conn_create_from_ack", "conn_close", "conn_close_w_rst", "conn_close_w_fin", "conn_close_w_idle", "conn_close_half_open", "sess_aged", "syn_drop", "syn_auth_pass", "unauth_drop", "rst_cookie_fail", "syn_retry_failed", "filter1_match", "filter2_match", "filter3_match", "filter4_match", "filter5_match", "filter_none_match", "filter_total_not_match", "src_syn_auth_fail", "src_syn_cookie_sent", "src_syn_cookie_fail", "src_unauth_drop", "src_rst_cookie_fail", "src_syn_retry_init", "src_syn_retry_gap_drop", "src_syn_retry_failed", "src_ack_retry_init", "src_ack_retry_gap_drop", "src_ack_auth_fail", "src_out_of_seq_excd", "src_retransmit_excd", "src_zero_window_excd", "src_conn_pkt_rate_excd", "src_filter_action_blacklist", "src_filter_action_drop", "src_filter_action_default_pass", "src_filter_action_whitelist", "force_tcp_auth_pass", "nxdomain_drop", "dns_malform", "src_dns_malform", "tcp_rexmit_syn_limit_drop", "tcp_rexmit_syn_limit_bl", "conn_ofo_rate_excd", "conn_rexmit_rate_excd", "conn_zwindow_rate_excd", "src_conn_ofo_rate_excd", "src_conn_rexmit_rate_excd", "src_conn_zwindow_rate_excd", "ack_retry_rto_pass", "ack_retry_rto_fail", "ack_retry_rto_progress", "syn_retry_rto_pass", "syn_retry_rto_fail", "syn_retry_rto_progress", "src_syn_retry_rto_pass", "src_syn_retry_rto_fail", "src_syn_retry_rto_progress", "src_ack_retry_rto_pass", "src_ack_retry_rto_fail" ] }, "counters2":{ "type":"string", "format":"enum", "description":"'src_ack_retry_rto_progress': Src ACK Retry RTO Progress; 'wellknown_sport_drop': TCP SrcPort Wellknown; 'src_well_known_port': Src TCP SrcPort Wellknown; 'dg_request_check_fail': Domain Group Request Check Fail; 'secondary_port_pkt_rate_exceed': Per Addr-Port Packet Rate Exceeded; 'secondary_port_kbit_rate_exceed': Per Addr-Port KiBit Rate Exceeded; 'secondary_port_kbit_rate_exceed_pkt': Per Addr-Port KiBit Rate Exceeded Count; 'secondary_port_conn_rate_exceed': Per Addr-Port Conn Rate Exceeded; 'secondary_port_conn_limm_exceed': Per Addr-Port Conn Limit Exceeded; 'query_type_any_drop': Query Type ANY Dropped; 'src_query_type_any_drop': Src Query Type ANY Dropped; 'src_auth_drop': Src TCP Auth Dropped; 'src_frag_drop': Src Fragmented Packets Dropped; 'no_policy_class_list_match': No Policy Class-list Match; 'frag_timeout': Fragmented Packets Timeout; 'create_conn_non_syn_dropped': Create Conn with non-SYN Packets Dropped; 'src_create_conn_non_syn_dropped': Src Create Conn with non-SYN Packets Dropped; 'dg_rate_exceed': Domain Group Domain Query Rate Exceeded; 'port_syn_rate_exceed': TCP SYN Rate Exceeded; 'pattern_recognition_proceeded': Pattern Recognition: Engine Started; 'pattern_not_found': Pattern Recognition: Pattern Not Found; 'pattern_recognition_generic_error': Pattern Recognition: Exceptions; 'pattern_filter1_match': Extracted Filter1 Match; 'pattern_filter2_match': Extracted Filter2 Match; 'pattern_filter3_match': Extracted Filter3 Match; 'pattern_filter4_match': Extracted Filter4 Match; 'pattern_filter5_match': Extracted Filter5 Match; 'pattern_filter_drop': Extracted Filter Drop; 'src_filter1_match': Src Filter1 Match; 'src_filter2_match': Src Filter2 Match; 'src_filter3_match': Src Filter3 Match; 'src_filter4_match': Src Filter4 Match; 'src_filter5_match': Src Filter5 Match; 'src_filter_none_match': Src Filter No Match; 'src_filter_total_not_match': Src Filter Not Matched on Pkt; 'src_filter_auth_fail': Src Filter Auth Failed; 'syn_tfo_rcv': SYN TFO Received; 'ack_retry_timeout': ACK Retry Timeout; 'ack_retry_reset': ACK Retry Timeout Reset; 'ack_retry_blacklist': ACK Retry Timeout Blacklisted; 'src_ack_retry_timeout': Src ACK Retry Timeout; 'src_ack_retry_reset': Src ACK Retry Timeout Reset; 'src_ack_retry_blacklist': Src ACK Retry Timeout Blacklisted; 'syn_retry_timeout': SYN Retry Timeout; 'syn_retry_reset': SYN Retry Timeout Reset; 'syn_retry_blacklist': SYN Retry Timeout Blacklisted; 'src_syn_retry_timeout': Src SYN Retry Timeout; 'src_syn_retry_reset': Src SYN Retry Timeout Reset; 'src_syn_retry_blacklist': Src SYN Retry Timeout Blacklisted; 'src_syn_rate_exceed': Src TCP SYN Rate Exceeded; 'non_query_opcode_pass_through': Non Query Opcode Pass Through; 'sflow_internal_samples_packed': Sflow Internal Samples Packed; 'sflow_external_samples_packed': Sflow External Samples Packed; 'sflow_internal_packets_sent': Sflow Internal Packets Sent; 'sflow_external_packets_sent': Sflow External Packets Sent; 'pattern_recognition_sampling_started': Pattern Recognition: Sampling Started; 'pattern_recognition_pattern_changed': Pattern Recognition: Pattern Change Detected; 'exceed_action_tunnel': Exceed Action: Tunnel; 'dst_hw_drop': Dst Hardware Packets Dropped; 'secondary_port_hit': Per Addr-Port Hit; ", "enum":[ "src_ack_retry_rto_progress", "wellknown_sport_drop", "src_well_known_port", "dg_request_check_fail", "secondary_port_pkt_rate_exceed", "secondary_port_kbit_rate_exceed", "secondary_port_kbit_rate_exceed_pkt", "secondary_port_conn_rate_exceed", "secondary_port_conn_limm_exceed", "query_type_any_drop", "src_query_type_any_drop", "src_auth_drop", "src_frag_drop", "no_policy_class_list_match", "frag_timeout", "create_conn_non_syn_dropped", "src_create_conn_non_syn_dropped", "dg_rate_exceed", "port_syn_rate_exceed", "pattern_recognition_proceeded", "pattern_not_found", "pattern_recognition_generic_error", "pattern_filter1_match", "pattern_filter2_match", "pattern_filter3_match", "pattern_filter4_match", "pattern_filter5_match", "pattern_filter_drop", "src_filter1_match", "src_filter2_match", "src_filter3_match", "src_filter4_match", "src_filter5_match", "src_filter_none_match", "src_filter_total_not_match", "src_filter_auth_fail", "syn_tfo_rcv", "ack_retry_timeout", "ack_retry_reset", "ack_retry_blacklist", "src_ack_retry_timeout", "src_ack_retry_reset", "src_ack_retry_blacklist", "syn_retry_timeout", "syn_retry_reset", "syn_retry_blacklist", "src_syn_retry_timeout", "src_syn_retry_reset", "src_syn_retry_blacklist", "src_syn_rate_exceed", "non_query_opcode_pass_through", "sflow_internal_samples_packed", "sflow_external_samples_packed", "sflow_internal_packets_sent", "sflow_external_packets_sent", "pattern_recognition_sampling_started", "pattern_recognition_pattern_changed", "exceed_action_tunnel", "dst_hw_drop", "secondary_port_hit" ] }, "optional":true } } ] } }, "object-keys":[ "sampling-enable" ], "required":[ "sampling-enable" ] }