Indicator Settings

You are here:

Indicator Settings

From the indicator behavior under specific protocols, A10 Defend Orchestrator App can assess what are the attack types. Table 78 provides information on how attack types are determined. Attack type is provided only for zone services and is not available for protected destinations.

Attack type information is available on the Dashboard Overview, DDoS Incidents and Zone Mitigation Console pages.

Table 78 : Indicator Settings
Protocol/ Service	Indicators	Attack Types
DNS-TCP TCP SSL-L4	pkt-rate bit-rate pkt-drop-rate syn-rate syn-fin-ratio concurrent-conns conn-miss-rate small-payload-rate empty-ack-rate small-window-ack-rate fin-rate rst-rate bytes-to-bytes-from-ratio pkt-drop-ratio learnt-sources	SYN Flood, ACK Flood SYN Flood SYN Flood Zero Window, Random Payload (STOMP), ACK Flood Zero Window, Random Payload (STOMP) Random Payload (STOMP)
HTTP	pkt-rate bit-rate pkt-drop-rate syn-rate syn-fin-ratio concurrent-conns conn-miss-rate small-payload-rate empty-ack-rate small-window-ack-rate fin-rate rst-rate bytes-to-bytes-from-ratio pkt-drop-ratio learnt-sources	Request Flooding, Post Flood Request Flooding, Post Flood, SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack Request Flooding, Post Flood, SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack
UDP DNS-UDP OTHER	pkt-rate bit-rate pkt-drop-rate bytes-to-bytes-from-ratio concurrent-conns pkt-drop-ratio learnt-sources	UDP Flood UDP Flood UDP Flood
IPPROTO ICMPv4 IPPROTO ICMPv6	pkt-rate bit-rate pkt-drop-rate bytes-to-bytes-from-ratio frag-rate pkt-drop-ratio learnt-sources	Ping Flood, Smurf Attack Ping Flood, Smurf Attack Ping Flood, Smurf Attack Ping of Death
IPPROTO Other IPPROTO GRE IPPROTO IPv4-ENCAP IPPROTO IPv6-ENCAP	pkt-rate bit-rate pkt-drop-rate bytes-to-bytes-from-ratio frag-rate pkt-drop-ratio learnt-sources	Ping of Death
SIP UDP	bytes-to-bytes-from-ratio concurrent-conns conn-miss-rate pkt-rate bit-rate learnt-sources	Request Flood, SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack Request Flood, SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack Request Flood
SIP TCP	bytes-to-bytes-from-ratio concurrent-conns conn-miss-rate pkt-rate bit-rate learnt-sources	Request Flood, SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack Request Flood, SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack SlowLoris, SlowPost, SlowRead, Malformed Protocol Attack Request Flood