Home
  •  

LC:DLX - 00 - Address Book and Distribution List Expansion\DLX - 016 - Invalid input requests/sec\

LC_DLX___00___Address_Book_and_Distribution_List_Expansion_DLX___016___Invalid_input_requests_sec____WEB (Rule)

The per-second rate of invalid input requests

Knowledge Base article:

Summary

The per-second rate of invalid input requests

Causes

Too many invalid requests being received

Resolutions

This could indicate an attack from a rogue client

Element properties:

TargetMicrosoft_Office_Communications_Server_2007_R2_Web_Components_Server
CategoryPerformanceCollection
EnabledTrue
Instance NameLC:DLX - 00 - Address Book and Distribution List Expansion
Counter NameDLX - 016 - Invalid input requests/sec
Frequency900
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
CollectPerfCounter DataSource System.Performance.OptimizedDataProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectPerformanceData Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData Default

Source Code:

<Rule ID="LC_DLX___00___Address_Book_and_Distribution_List_Expansion_DLX___016___Invalid_input_requests_sec____WEB" Enabled="true" Target="Microsoft_Office_Communications_Server_2007_R2_Web_Components_Server" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>PerformanceCollection</Category>

  <DataSources>

    <DataSource ID="CollectPerfCounter" TypeID="SCPerformance!System.Performance.OptimizedDataProvider">

      <ComputerName>$Target/Host/Property[Type="SCWindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <CounterName>DLX - 016 - Invalid input requests/sec</CounterName>

      <ObjectName>LC:DLX - 00 - Address Book and Distribution List Expansion</ObjectName>

      <InstanceName/>

      <AllInstances>false</AllInstances>

      <Frequency>900</Frequency>

      <Tolerance>5</Tolerance>

      <ToleranceType>Absolute</ToleranceType>

      <MaximumSampleSeparation>4</MaximumSampleSeparation>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SCSystemLibrary!Microsoft.SystemCenter.CollectPerformanceData"/>

    <WriteAction ID="WriteToDW" TypeID="SCDataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>

  </WriteActions>

</Rule>