Context Parameters
Dropped Fragments
Rule Name
2.13.6. fail_timeout (ID: 02000006)
Default Severity
CRITICAL
Log Message
Time out reassembling. Frags: <frags>. <srcip>-<destip> <ipproto>
FragID: <fragid>, State: <fragact>
Explanation
Timed out when reassembling a fragmented IP packet. Dropping
packet.
Gateway Action
drop
Recommended Action
None.
Revision
1
Parameters
srcip
destip
ipproto
fragid
fragact
frags
Context Parameters
Dropped Fragments
Rule Name
2.13.7. disallowed_suspect (ID: 02000007)
Default Severity
WARNING
Log Message
Dropping stored fragments of disallowed suspect packet. Frags:
<frags>. <srcip>-<destip> <ipproto> FragID: <fragid>, State:
<fragact>
Explanation
The fragments of a disallowed IP packet, which may contain illegal
fragments, were dropped.
Gateway Action
drop
Recommended Action
None.
Revision
1
Parameters
srcip
destip
ipproto
fragid
fragact
frags
Context Parameters
Dropped Fragments
Rule Name
2.13.8. drop_frags_of_disallowed_packet (ID: 02000008)
2.13.6. fail_timeout (ID: 02000006) Chapter 2. Log Message Reference
199