Alcatel-Lucent 060321-10, Rev. B Cli Reference Manual page 557

IP Commands
output definitions
DoS trap generation
DoS port scan threshold
DoS port scan decay
DoS port scan close port pen-
alty
DoS port scan TCP open port
penalty
DoS port scan UDP open port
penalty
Release History
Release 7.1.1; command introduced
Related Commands
show ip dos statistics
MIB Objects
alaDosTable
alaDoSType
OmniSwitch CLI Reference Guide
Displays the status of DoS trap generation. It is either ENABLED or
DISABLED. This is set using the
The penalty threshold setting. When enough packets have increased the
penalty number to this setting, a trap is generated to warn the adminis-
trator that a DoS attack is in progress. This is set using the
threshold command.
The decay value for the switch. The penalty value of the switch is
decreased by this number every minute. This is set using the
scan decay command.
The penalty value for packets received on closed UDP and TCP ports.
The penalty number for the switch is increased by this amount every
time a packet is received on a closed UDP or TCP port. This is set using
the ip dos scan close-port-penalty
The penalty value for packets received on open TCP ports. The penalty
number for the switch is increased by this amount every time a packet
is received on an open TCP port. This is set using the
open-port-penalty
The penalty value for packets received on open UDP ports. The penalty
number for the switch is increased by this amount every time a packet
is received on an open UDP port. This is set using the
open-port-penalty
Displays the statistics on detected DoS attacks for the switch.
March 2011
ip dos trap
command.
command.
command.
show ip dos config
command.
ip dos scan
ip dos
ip dos scan tcp
ip dos scan udp
page 10-139