ADTRAN AOS Version R10.1.0 Command Reference Manual page 475

Command Reference Guide
show dos-id
Use the show dos-id command to list all denial of service (DoS) attacks the DoS protection feature
provides protection against, along with their corresponding threat IDs.
Syntax Description
No subcommands.
Default Values
By default, DoS protection in AOS is disabled.
Command History
Release 17.7
Functional Notes
The IDs obtained with the show dos-id command are used in the dos-protection <id> command to add
or remove threat protection for specific threats.
Usage Examples
The following is sample output for this command:
>enable
#show dos-id
DOS L4 Header Error
TCP pkts w/ control flags and seq# equal to 0
TCP pkts w/ SYN and FIN bits set
TCP pkts w/ FIN,URG,PSH bits set with ACK bit & seq# equal to 0
TCP pkts w/ source port equal to destination port
UDP pkts w/ source port equal to destination port
TCP SYN pkts w/source port 0-1023 for the first fragment
DOS L3 Header Error
Source IP equal to Destination IP
DOS ICMP Error
Fragmented ICMP pkts
ICMPV4 ping pkts w/payload greater than specified
ICMPV6 ping pkts w/payload greater than specified
DOS Fragment Error
TCP fragments w/ offset value set to 1
First TCP fragments w/ TCP header smaller than specified
#
60000CRG0-35E
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Enable Mode Command Set
[1]
[2]
[3]
[4]
[5]
[6]
[20]
[40]
[41]
[42]
[60]
[61]
475