For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Adriano's avatar
Adriano
Icon for Nimbostratus rankNimbostratus
Jan 14, 2020

BIG IP LTM - Syn Cookie Monitor

Hello guys!

 

I'm making a study test and would like to know if it's possible to make a script, or something else, to show messages about the Syn Cookie... is that a way to put it in the user_alert.conf ? A message to show something like: if the syncookie is activated, a counter, show the server monitored... Is that a way to make it?

 

Thank you all!

application delivery
BIG-IP
LTM
Super-NetOps

4 Replies

    • Adriano's avatar
      Adriano
      Icon for Nimbostratus rankNimbostratus
      Jan 20, 2020

      In resume, I would like to create a graphic monitor to verify the Global Syn Check function, using the platform What's Up. Do you know if it's possible?

  • KeesvandenBos's avatar
    KeesvandenBos
    Icon for MVP rankMVP
    Jan 20, 2020

    Hi Adriano,

    There are a few snmp value's your what's up could query:

    sysStatHardSyncookieGen 1.3.6.1.4.1.3375.2.1.1.2.1.57

    sysStatHardSyncookieDet 1.3.6.1.4.1.3375.2.1.1.2.1.58

    sysStatHardSyncookieGen OBJECT-TYPE 
	SYNTAX Counter64
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
		"The number of hardware SYN cookies are generated on the system."
	::= { sysGlobalStat 57 } 
 
sysStatHardSyncookieDet OBJECT-TYPE 
	SYNTAX Counter64
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
		"The number of hardware SYN cookies are detected on the system."
	::= { sysGlobalStat 58 }

    Cheers,

    Kees

    • Adriano's avatar
      Adriano
      Icon for Nimbostratus rankNimbostratus
      Jan 20, 2020

      This is pretty good, I'll make this test. Thank you,Kees!!!