2.19.10. drop_extraneous_frags_of_completed_packet (ID:
02000010)
Default Severity WARNING
Log Message Dropping extraneous fragments of completed packet. Frags:
<frags>. <srcip>-<destip> <ipproto> FragID: <fragid>, State:
<fragact>
Explanation A completed reassembled IP packet contains extraneous fragments,
which are dropped.
Gateway Action drop
Recommended Action None.
Revision 1
Parameters srcip
destip
ipproto
fragid
fragact
frags
Context Parameters Dropped Fragments
Rule Name
2.19.11. learn_state (ID: 02000011)
Default Severity ERROR
Log Message Internal Error: Invalid state <state>
Explanation Internal Error, the fragmented IP packet has an invalid state.
Gateway Action drop
Recommended Action None.
Revision 1
Parameters state
Context Parameters Dropped Fragments
Rule Name
2.19.12. drop_duplicate_frag_suspect_packet (ID: 02000012)
Default Severity WARNING
Log Message Dropping duplicate fragment of suspect packet
Explanation A duplicate fragment of an IP packet, which may contain illegal
Chapter 2: Log Message Reference
263
To Next Page
Loading...
