2.4.4. arp_response_broadcast (ID: 00300004)
Default Severity
NOTICE
Log Message
ARP response is a broadcast address
Explanation
The ARP response has a sender address which is a broadcast address.
Allowing.
Gateway Action
allow
Recommended Action
If this is not the desired behaviour, modify the configuration.
Revision
1
Context Parameters
Rule Name
Packet Buffer
2.4.5. arp_response_multicast (ID: 00300005)
Default Severity
NOTICE
Log Message
ARP response is a multicast address
Explanation
The ARP response has a sender address which is a multicast address.
This might be the case if there are load balancing network equipment
in the network. Allowing.
Gateway Action
allow
Recommended Action
If this is not the desired behaviour, modify the configuration.
Revision
1
Context Parameters
Rule Name
Packet Buffer
2.4.6. mismatching_hwaddrs (ID: 00300006)
Default Severity
NOTICE
Log Message
ARP hw sender does not match Ethernet hw sender
Explanation
The hardware sender address specified in the ARP data does not match
the Ethernet hardware sender address. Allowing.
Gateway Action
allow
Recommended Action
If this is not the desired behaviour, modify the configuration.
Revision
1
Context Parameters
Rule Name
Packet Buffer
2.4.4. arp_response_broadcast (ID:
00300004)
Chapter 2. Log Message Reference
150
To Next Page
Loading...
