{ "id":"/axapi/v3/visibility/packet-capture/global-templates/template/{name}/trigger-sys-obj-stats-change/ip-anomaly-drop", "type":"object", "node-type":"scalar", "title":"ip-anomaly-drop", "partition-visibility":"shared", "auto-created-object":1, "description":"Configure triggers for ip.anomaly-drop object", "properties":{ "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "partition-visibility":"shared", "modify-not-allowed":1, "description":"uuid of the object", "optional":true }, "trigger-stats-inc":{ "type":"object", "$ref":"/axapi/v3/visibility/packet-capture/global-templates/template/{name}/trigger-sys-obj-stats-change/ip-anomaly-drop/trigger-stats-inc", "properties":{ "land":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Land Attack Drop" }, "emp_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Empty Fragment Drop" }, "emp_mic_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Micro Fragment Drop" }, "opt":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv4 Options Drop" }, "frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv4 Fragment Drop" }, "bad_ip_hdrlen":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Header Len Drop" }, "bad_ip_flg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Flags Drop" }, "bad_ip_ttl":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP TTL Drop" }, "no_ip_payload":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for No IP Payload drop" }, "over_ip_payload":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Oversize IP Payload Drop" }, "bad_ip_payload_len":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Payload Len Drop" }, "bad_ip_frg_offset":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Fragment Offset Drop" }, "csum":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Checksum Drop" }, "pod":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for ICMP Ping of Death Drop" }, "bad_tcp_urg_offset":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Bad Urgent Offset Drop" }, "tcp_sht_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Short Header Drop" }, "tcp_bad_iplen":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Bad IP Length Drop" }, "tcp_null_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Null Flags Drop" }, "tcp_null_scan":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Null Scan Drop" }, "tcp_syn_fin":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Syn and Fin Drop" }, "tcp_xmas":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP XMAS Flags Drop" }, "tcp_xmas_scan":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP XMAS Scan Drop" }, "tcp_syn_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Syn Fragment Drop" }, "tcp_frg_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Fragmented Header Drop" }, "tcp_bad_csum":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Bad Checksum Drop" }, "udp_srt_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Short Header Drop" }, "udp_bad_len":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Bad Length Drop" }, "udp_kerb_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Kerberos Fragment Drop" }, "udp_port_lb":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Port Loopback Drop" }, "udp_bad_csum":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Bad Checksum Drop" }, "runt_ip_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Runt IP Header Drop" }, "runt_tcp_udp_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Runt TCP/UDP Header Drop" }, "ipip_tnl_msmtch":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IP-over-IP Tunnel Mismatch Drop" }, "tcp_opt_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Option Error Drop" }, "ipip_tnl_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IP-over-IP Tunnel Error Drop" }, "vxlan_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for VXLAN Tunnel Error Drop" }, "nvgre_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for GRE Tunnel Error Drop" }, "gre_pptp_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for GRE PPTP Error Drop" }, "ipv6_eh_hbh":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Hop by Hop Header Drop" }, "ipv6_eh_dest":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Destination Header Drop" }, "ipv6_eh_routing":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Routing Header Drop" }, "ipv6_eh_frag":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Fragmentation Header Drop" }, "ipv6_eh_ah":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Authentication Header Drop" }, "ipv6_eh_esp":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 ESP Header Drop" }, "ipv6_eh_mobility":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Mobility Header Drop" }, "ipv6_eh_none":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 No Next Header Drop" }, "ipv6_eh_other":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Unknown Extension Header Drop" }, "ipv6_eh_malformed":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Malformed Extension Header Drop" }, "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "partition-visibility":"shared", "modify-not-allowed":1, "description":"uuid of the object" } } }, "trigger-stats-rate":{ "type":"object", "$ref":"/axapi/v3/visibility/packet-capture/global-templates/template/{name}/trigger-sys-obj-stats-change/ip-anomaly-drop/trigger-stats-rate", "properties":{ "threshold-exceeded-by":{ "type":"number", "format":"number", "minimum":0, "maximum":100, "default":5, "partition-visibility":"shared", "description":"Set the threshold to the number of times greater than the previous duration to start the capture, default is 5" }, "duration":{ "type":"number", "format":"number", "minimum":1, "maximum":250, "default":60, "partition-visibility":"shared", "description":"Time in seconds to look for the anomaly, default is 60" }, "land":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Land Attack Drop" }, "emp_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Empty Fragment Drop" }, "emp_mic_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Micro Fragment Drop" }, "opt":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv4 Options Drop" }, "frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv4 Fragment Drop" }, "bad_ip_hdrlen":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Header Len Drop" }, "bad_ip_flg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Flags Drop" }, "bad_ip_ttl":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP TTL Drop" }, "no_ip_payload":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for No IP Payload drop" }, "over_ip_payload":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Oversize IP Payload Drop" }, "bad_ip_payload_len":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Payload Len Drop" }, "bad_ip_frg_offset":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Fragment Offset Drop" }, "csum":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Bad IP Checksum Drop" }, "pod":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for ICMP Ping of Death Drop" }, "bad_tcp_urg_offset":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Bad Urgent Offset Drop" }, "tcp_sht_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Short Header Drop" }, "tcp_bad_iplen":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Bad IP Length Drop" }, "tcp_null_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Null Flags Drop" }, "tcp_null_scan":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Null Scan Drop" }, "tcp_syn_fin":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Syn and Fin Drop" }, "tcp_xmas":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP XMAS Flags Drop" }, "tcp_xmas_scan":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP XMAS Scan Drop" }, "tcp_syn_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Syn Fragment Drop" }, "tcp_frg_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Fragmented Header Drop" }, "tcp_bad_csum":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Bad Checksum Drop" }, "udp_srt_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Short Header Drop" }, "udp_bad_len":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Bad Length Drop" }, "udp_kerb_frg":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Kerberos Fragment Drop" }, "udp_port_lb":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Port Loopback Drop" }, "udp_bad_csum":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for UDP Bad Checksum Drop" }, "runt_ip_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Runt IP Header Drop" }, "runt_tcp_udp_hdr":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for Runt TCP/UDP Header Drop" }, "ipip_tnl_msmtch":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IP-over-IP Tunnel Mismatch Drop" }, "tcp_opt_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for TCP Option Error Drop" }, "ipip_tnl_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IP-over-IP Tunnel Error Drop" }, "vxlan_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for VXLAN Tunnel Error Drop" }, "nvgre_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for GRE Tunnel Error Drop" }, "gre_pptp_err":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for GRE PPTP Error Drop" }, "ipv6_eh_hbh":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Hop by Hop Header Drop" }, "ipv6_eh_dest":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Destination Header Drop" }, "ipv6_eh_routing":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Routing Header Drop" }, "ipv6_eh_frag":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Fragmentation Header Drop" }, "ipv6_eh_ah":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Authentication Header Drop" }, "ipv6_eh_esp":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 ESP Header Drop" }, "ipv6_eh_mobility":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Mobility Header Drop" }, "ipv6_eh_none":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 No Next Header Drop" }, "ipv6_eh_other":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Unknown Extension Header Drop" }, "ipv6_eh_malformed":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable automatic packet-capture for IPv6 Malformed Extension Header Drop" }, "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "partition-visibility":"shared", "modify-not-allowed":1, "description":"uuid of the object" } } } } }