Context Parameters Rule Name
Packet Buffer
2.5.7. mismatching_hwaddrs_drop (ID: 00300007)
Default Severity NOTICE
Log Message ARP hw sender does not match Ethernet hw sender. Dropping
Explanation The hardware sender address specified in the ARP data does not
match the Ethernet hardware sender address. Dropping packet.
Gateway Action drop
Recommended Action If this is not the desired behaviour, modify the configuration.
Revision 1
Context Parameters Rule Name
Packet Buffer
2.5.8. hwaddr_change (ID: 00300008)
Default Severity NOTICE
Log Message <knownip> has a different address <newhw> compared to the
known hardware address <knownhw>. Allow packet for further
processing.
Explanation A known dynamic ARP entry has a different hardware address than
the one in the ARP packet. Allowing packet for further processing.
Gateway Action allow_processing
Recommended Action If this is not the desired behaviour, modify the configuration.
Revision 1
Parameters knownip
knownhw
newhw
Context Parameters Rule Name
Packet Buffer
2.5.9. arp_resolution_failed (ID: 00300009)
Default Severity WARNING
Log Message ARP resolution failed
Explanation ARP query was not resolved before the ARP cache entry expired.
Gateway Action remove_entry
Chapter 2: Log Message Reference
191