Context Parameters Rule Name
Packet Buffer
2.5.4. arp_response_broadcast (ID: 00300004)
Default Severity NOTICE
Log Message ARP response is a broadcast address
Explanation The ARP response has a sender address which is a broadcast
address. Allowing.
Gateway Action allow
Recommended Action If this is not the desired behaviour, modify the configuration.
Revision 1
Context Parameters Rule Name
Packet Buffer
2.5.5. arp_response_multicast (ID: 00300005)
Default Severity NOTICE
Log Message ARP response is a multicast address
Explanation The ARP response has a sender address which is a multicast address.
This might be the case if there are load balancing network
equipment in the network. Allowing.
Gateway Action allow
Recommended Action If this is not the desired behaviour, modify the configuration.
Revision 1
Context Parameters Rule Name
Packet Buffer
2.5.6. mismatching_hwaddrs (ID: 00300006)
Default Severity NOTICE
Log Message ARP hw sender does not match Ethernet hw sender
Explanation The hardware sender address specified in the ARP data does not
match the Ethernet hardware sender address. Allowing.
Gateway Action allow
Recommended Action If this is not the desired behaviour, modify the configuration.
Revision 1
Chapter 2: Log Message Reference
190