Explanation Anti-virus has scanned a compressed file with a compression ratio
higher than the specified value. Action is set to continue scan.
Gateway Action abort_scan
Recommended Action Files with too high compression ratio can consume large amount of
resources. This can be a DOS attack.
Revision 1
Parameters filename
comp_ratio
[layer7_srcinfo]
[layer7_dstinfo]
Context Parameters ALG Module Name
ALG Session ID
Connection
2.3.8. compression_ratio_violation (ID: 05800008)
Default Severity WARNING
Log Message Compression ratio violation for file <filename>. Compression ratio
threshold: <comp_ratio>
Explanation Anti-virus has scanned a compressed file with a compression ratio
higher than the specified value. Action is set to continue scan.
Gateway Action block_data
Recommended Action Files with too high compression ratio can consume large amount of
resources. This can be a DOS attack.
Revision 1
Parameters filename
comp_ratio
[layer7_srcinfo]
[layer7_dstinfo]
Context Parameters ALG Module Name
ALG Session ID
Connection
2.3.9. out_of_memory (ID: 05800009)
Default Severity ERROR
Log Message Out of memory
Explanation Memory allocation failed. Since anti-virus is running in audit mode,
the data transfer will be allowed to continue.
Gateway Action allow_data
Chapter 2: Log Message Reference
174
To Next Page
