jnxJsScreenMonAddrSpoof
One method to gain access to a restricted network is to insert a bogus source address in the packet header to make the packet appear to come from a trusted source. This technique is called IP spoofing. The mechanism to detect IP spoofing relies on route table entries. For example, if a packet with source IP address 10.1.1.6 arrives at port eth3, but the device has a route to 10.1.1.0/24 through port eth1. IP spoofing checking notes that this address arrived at an invalid interface as defined in the route table. A valid packet from 10.1.1.6 can only arrive via eth1, not eth3. The device concludes that the packet has a spoofed source IP address and discards it. This attribute records the address spoofing attack packets.
Table columns
64 objects| Oid | Name | Access | Type |
|---|---|---|---|
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.1 | jnxJsScreenZoneName | notifyonly | Unknown |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.2 | jnxJsScreenNumOfIf | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.3 | jnxJsScreenMonSynAttk | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.4 | jnxJsScreenMonTearDrop | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.5 | jnxJsScreenMonSrcRoute | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.6 | jnxJsScreenMonPingDeath | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.7 | jnxJsScreenMonAddrSpoof | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.8 | jnxJsScreenMonLand | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.9 | jnxJsScreenMonIcmpFlood | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.10 | jnxJsScreenMonUdpFlood | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.11 | jnxJsScreenMonWinnuke | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.12 | jnxJsScreenMonPortScan | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.13 | jnxJsScreenMonIpSweep | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.14 | jnxJsScreenMonSynFrag | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.15 | jnxJsScreenMonTcpNoFlag | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.16 | jnxJsScreenMonIpUnknownProt | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.17 | jnxJsScreenMonIpOptBad | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.18 | jnxJsScreenMonIpOptRecRt | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.19 | jnxJsScreenMonIpOptTimestamp | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.20 | jnxJsScreenMonIpOptSecurity | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.21 | jnxJsScreenMonIpOptLSR | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.22 | jnxJsScreenMonIpOptSSR | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.23 | jnxJsScreenMonIpOptStream | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.24 | jnxJsScreenMonIcmpFrag | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.25 | jnxJsScreenMonIcmpLarge | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.26 | jnxJsScreenMonTcpSynFin | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.27 | jnxJsScreenMonTcpFinNoAck | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.28 | jnxJsScreenMonLimitSessSrc | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.29 | jnxJsScreenMonLimitSessDest | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.30 | jnxJsScreenMonSynAckAck | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.31 | jnxJsScreenMonIpFrag | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.32 | jnxJsScreenSynAttackThresh | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.33 | jnxJsScreenSynAttackTimeout | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.34 | jnxJsScreenSynAttackAlmTh | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.35 | jnxJsScreenSynAttackQueSize | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.36 | jnxJsScreenSynAttackAgeTime | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.37 | jnxJsScreenIcmpFloodThresh | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.38 | jnxJsScreenUdpFloodThresh | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.39 | jnxJsScreenPortScanThresh | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.40 | jnxJsScreenIpSweepThresh | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.41 | jnxJsScreenSynAckAckThres | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.42 | jnxJsScreenMonIpv6ExtHdr | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.43 | jnxJsScreenMonIpv6HopOpt | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.44 | jnxJsScreenMonIpv6DstOpt | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.45 | jnxJsScreenMonIpv6ExtLimit | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.46 | jnxJsScreenMonIpMalIpv6 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.47 | jnxJsScreenMonIcmpMalIcmpv6 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.48 | jnxJsScreenIpv6ExtNumLim | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.49 | jnxJsScreenUdpPortScanThresh | readonly | Integer32 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.50 | jnxJsScreenMonUdpPortScan | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.51 | jnxJsScreenMonIpTunnelGre6in4 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.52 | jnxJsScreenMonIpTunnelGre4in6 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.53 | jnxJsScreenMonIpTunnelGre6in6 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.54 | jnxJsScreenMonIpTunnelGre4in4 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.55 | jnxJsScreenMonIpTunnelIpInUdpTeredo | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.56 | jnxJsScreenMonIpTunnelBadInnerHeader | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.57 | jnxJsScreenMonIpTunnelIpIp6to4relay | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.58 | jnxJsScreenMonIpTunnelIpIp6in4 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.59 | jnxJsScreenMonIpTunnelIpIp6over4 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.60 | jnxJsScreenMonIpTunnelIpIp4in6 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.61 | jnxJsScreenMonIpTunnelIpIp4in4 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.62 | jnxJsScreenMonIpTunnelIpIp6in6 | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.63 | jnxJsScreenMonIpTunnelIpIpIsatap | readonly | Counter64 |
| 1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.64 | jnxJsScreenMonIpTunnelIpIpDsLite | readonly | Counter64 |