D-Link NetDefend SOHO DFL-160 Bedienungsanleitung

Andere Handbücher für NetDefend SOHO DFL-160

3

Inhaltsverzeichnis

Andere D-Link Firewall Handbücher

D-Link

D-Link DFL-500 Bedienungsanleitung

D-Link

D-Link DFL-800 - Security Appliance Bedienungsanleitung

D-Link

D-Link NetDefend DFL-260E Bedienungsanleitung

D-Link

D-Link DFL-700 - Security Appliance Bedienungsanleitung

D-Link

D-Link NetDefend DFL-260E Bedienungsanleitung

D-Link

D-Link DFL-1100 - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-1000 Bedienungsanleitung

D-Link

D-Link NetDefend DFL-1660 Bedienungsanleitung

D-Link

D-Link DFL-200 - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-1100 - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-1600 - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-1600 - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-700 - Security Appliance Bedienungsanleitung

D-Link

D-Link NetDefend Firewall Series Bedienungsanleitung

D-Link

D-Link DFL-260 - NetDefend - Security Appliance Bedienungsanleitung

D-Link

D-Link NetDefend DFL-260E Bedienungsanleitung

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-300 - Security Appliance Bedienungsanleitung

D-Link

D-Link DFL-210 - NetDefend - Security Appliance Bedienungsanleitung

Beliebte Firewall Handbücher anderer Marken

Cisco

Cisco S190 Bedienungsanleitung

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung

Log Reference Guide

DFL-160

Ver 2.27.00

Network Security Solution http://www.dlink.com.tw

Security

Security

SOHO

UTM Firewall

Log Reference Guide

D-Link DFL-160 Firewall

NetDefendOS Version 2.27.00

D-Link Corporation

No. 289, Sinhu 3rd Rd, Neihu District, Taipei City 114, Taiwan R.O.C.

http://www.DLink.com

Published 2010-05-25

Copyright ©2010

Log Reference Guide

D-Link DFL-160 Firewall

NetDefendOS Version 2.27.00

Published 2010-05-25

Copyright © 2010

Copyright Notice

This publication, including all photographs, illustrations and software, is protected under

international copyright laws, with all rights reserved. Neither this manual, nor any of the material

contained herein, may be reproduced without the written consent of D-Link.

Disclaimer

The information in this document is subject to change without notice. D-Link makes no

representations or warranties with respect to the contents hereof and specifically disclaims any

implied warranties of merchantability or fitness for a particular purpose. D-Link reserves the right to

revise this publication and to make changes from time to time in the content hereof without any

obligation to notify any person or parties of such revision or changes.

Limitations of Liability

UNDER NO CIRCUMSTANCES SHALL D-LINK OR ITS SUPPLIERS BE LIABLE FOR

DAMAGES OF ANY CHARACTER (E.G. DAMAGES FOR LOSS OF PROFIT, SOFTWARE

RESTORATION, WORK STOPPAGE, LOSS OF SAVED DATA OR ANY OTHER

COMMERCIAL DAMAGES OR LOSSES) RESULTING FROM THE APPLICATION OR

IMPROPER USE OF THE D-LINK PRODUCT OR FAILURE OF THE PRODUCT, EVEN IF

D-LINK IS INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. FURTHERMORE,

D-LINK WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST CUSTOMER FOR

LOSSES OR DAMAGES. D-LINK WILL IN NO EVENT BE LIABLE FOR ANY DAMAGES IN

EXCESS OF THE AMOUNT D-LINK RECEIVED FROM THE END-USER FOR THE

PRODUCT.

Table of Contents

Preface ...............................................................................................................22

1. Introduction .....................................................................................................24

1.1. Log Message Structure ............................................................................24

1.2. Context Parameters .................................................................................26

1.3. Severity levels .......................................................................................30

2. Log Message Reference .....................................................................................32

2.1. ALG ....................................................................................................33

2.1.1. alg_session_open (ID: 00200001) ...................................................33

2.1.2. alg_session_closed (ID: 00200002) .................................................33

2.1.3. max_line_length_exceeded (ID: 00200003) ......................................33

2.1.4. alg_session_allocation_failure (ID: 00200009) ..................................34

2.1.5. invalid_client_http_header_received (ID: 00200100) ..........................34

2.1.6. invalid_url_format (ID: 00200101) .................................................34

2.1.7. unknown_client_data_received (ID: 00200105) .................................35

2.1.8. suspicious_data_received (ID: 00200106) .........................................35

2.1.9. invalid_chunked_encoding (ID: 00200107) .......................................36

2.1.10. invalid_server_http_header_received (ID: 00200108) ........................36

2.1.11. compressed_data_received (ID: 00200109) .....................................36

2.1.12. max_http_sessions_reached (ID: 00200110) ....................................37

2.1.13. failed_create_new_session (ID: 00200111) .....................................37

2.1.14. failure_connect_http_server (ID: 00200112) ....................................37

2.1.15. content_type_mismatch (ID: 00200113) .........................................38

2.1.16. wcf_override_full (ID: 00200114) .................................................38

2.1.17. content_filtering_disabled (ID: 00200115) ......................................38

2.1.18. max_download_size_reached (ID: 00200116) ..................................39

2.1.19. blocked_filetype (ID: 00200117) ...................................................39

2.1.20. out_of_memory (ID: 00200118) ....................................................40

2.1.21. wcf_servers_unreachable (ID: 00200119) .......................................40

2.1.22. wcf_srv_connection_error (ID: 00200120) ......................................40

2.1.23. wcf_server_unreachable (ID: 00200121) ........................................41

2.1.24. wcf_connecting (ID: 00200122) ....................................................41

2.1.25. wcf_server_connected (ID: 00200123) ...........................................41

2.1.26. wcf_primary_fallback (ID: 00200124) ...........................................42

2.1.27. request_url (ID: 00200125) ..........................................................42

2.1.28. request_url (ID: 00200126) ..........................................................42

2.1.29. wcf_server_auth_failed (ID: 00200127) ..........................................43

2.1.30. wcf_server_bad_reply (ID: 00200128) ...........................................43

2.1.31. request_url (ID: 00200129) ..........................................................43

2.1.32. out_of_memory (ID: 00200130) ....................................................44

2.1.33. wcf_bad_sync (ID: 00200131) ......................................................44

2.1.34. restricted_site_notice (ID: 00200132) ............................................44

2.1.35. url_reclassification_request (ID: 00200133) ....................................45

2.1.36. request_url (ID: 00200135) ..........................................................45

2.1.37. request_url (ID: 00200136) ..........................................................46

2.1.38. request_url (ID: 00200137) ..........................................................46

2.1.39. restricted_site_notice (ID: 00200138) ............................................47

2.1.40. url_reclassification_request (ID: 00200139) ....................................47

2.1.41. wcf_mem_optimized (ID: 00200140) .............................................48

2.1.42. max_smtp_sessions_reached (ID: 00200150) ..................................48

2.1.43. maximum_email_per_minute_reached (ID: 00200151) ......................48

2.1.44. failed_create_new_session (ID: 00200152) .....................................49

2.1.45. failed_connect_smtp_server (ID: 00200153) ...................................49

2.1.46. invalid_server_response (ID: 00200155) .........................................49

2.1.47. sender_email_id_mismatched (ID: 00200157) .................................50

2.1.48. sender_email_id_is_in_blacklist (ID: 00200158) ..............................50

2.1.49. recipient_email_id_in_blacklist (ID: 00200159) ...............................50

2.1.50. some_recipient_email_ids_are_in_blocklist (ID: 00200160) ...............51

4

2.1.51. base64_decode_failed (ID: 00200164) ...........................................51

2.1.52. base64_decode_failed (ID: 00200165) ...........................................51

2.1.53. blocked_filetype (ID: 00200166) ...................................................52

2.1.54. content_type_mismatch (ID: 00200167) .........................................52

2.1.55. max_email_size_reached (ID: 00200170) .......................................53

2.1.56. content_type_mismatch_mimecheck_disabled (ID: 00200171) ...........53

2.1.57. all_recipient_email_ids_are_in_blocklist (ID: 00200172) ...................54

2.1.58. out_of_memory (ID: 00200175) ....................................................54

2.1.59. invalid_end_of_mail (ID: 00200176) .............................................54

2.1.60. dnsbl_init_error (ID: 00200177) ....................................................55

2.1.61. cmd_too_long (ID: 00200179) ......................................................55

2.1.62. cmd_empty (ID: 00200180) .........................................................55

2.1.63. failed_send_reply_code (ID: 00200181) .........................................56

2.1.64. smtp_no_header (ID: 00200184) ...................................................56

2.1.65. unsupported_extension (ID: 00200185) ..........................................56

2.1.66. cmd_pipelined (ID: 00200186) .....................................................57

2.1.67. smtp_state_violation (ID: 00200190) .............................................57

2.1.68. sender_email_dnsbl_spam_mark_removed_by_whitelist (ID: 00200195)

..........................................................................................................57

2.1.69. illegal_data_direction (ID: 00200202) ............................................58

2.1.70. hybrid_data (ID: 00200206) .........................................................58

2.1.71. hybrid_data (ID: 00200209) .........................................................58

2.1.72. illegal_chars (ID: 00200210) ........................................................59

2.1.73. control_chars (ID: 00200211) .......................................................59

2.1.74. illegal_command (ID: 00200212) ..................................................59

2.1.75. illegal_command (ID: 00200213) ..................................................60

2.1.76. port_command_disabled (ID: 00200214) ........................................60

2.1.77. illegal_command (ID: 00200215) ..................................................61

2.1.78. illegal_ip_address (ID: 00200216) .................................................61

2.1.79. illegal_port_number (ID: 00200217) ..............................................62

2.1.80. failed_to_create_connection1 (ID: 00200218) ..................................62

2.1.81. illegal_command (ID: 00200219) ..................................................62

2.1.82. illegal_direction1 (ID: 00200220) .................................................63

2.1.83. illegal_direction2 (ID: 00200221) .................................................63

2.1.84. illegal_option (ID: 00200222) ......................................................64

2.1.85. illegal_option (ID: 00200223) ......................................................64

2.1.86. unknown_option (ID: 00200224) ..................................................64

2.1.87. illegal_command (ID: 00200225) ..................................................65

2.1.88. unknown_command (ID: 00200226) ..............................................65

2.1.89. illegal_reply (ID: 00200228) ........................................................66

2.1.90. illegal_reply (ID: 00200230) ........................................................66

2.1.91. illegal_reply (ID: 00200231) ........................................................66

2.1.92. illegal_reply (ID: 00200232) ........................................................67

2.1.93. bad_port (ID: 00200233) .............................................................67

2.1.94. bad_ip (ID: 00200234) ................................................................68

2.1.95. failed_to_create_connection2 (ID: 00200235) ..................................68

2.1.96. failed_to_create_server_data_connection (ID: 00200236) ..................68

2.1.97. failed_to_send_port (ID: 00200237) ..............................................69

2.1.98. failed_to_register_rawconn (ID: 00200238) ....................................69

2.1.99. failed_to_merge_conns (ID: 00200239) ..........................................69

2.1.100. max_ftp_sessions_reached (ID: 00200241) ....................................70

2.1.101. failed_create_new_session (ID: 00200242) ....................................70

2.1.102. failure_connect_ftp_server (ID: 00200243) ...................................70

2.1.103. content_type_mismatch (ID: 00200250) .......................................71

2.1.104. failed_to_send_command (ID: 00200251) .....................................71

2.1.105. resumed_compressed_file_transfer (ID: 00200252) .........................71

2.1.106. blocked_filetype (ID: 00200253) .................................................72

2.1.107. resumed_compressed_file_transfer (ID: 00200254) .........................72

2.1.108. failed_to_send_response_code (ID: 00200255) ..............................73

2.1.109. illegal_command (ID: 00200267) ................................................73

2.1.110. packet_failed_initial_test (ID: 00200350) ......................................73

2.1.111. packet_failed_traversal_test (ID: 00200351) ..................................74

2.1.112. command_not_allowed (ID: 00200353) ........................................74

Log Reference Guide

5

2.1.113. option_value_invalid (ID: 00200354) ...........................................74

2.1.114. option_value_invalid (ID: 00200355) ...........................................75

2.1.115. option_tsize_invalid (ID: 00200356) ............................................75

2.1.116. unknown_option_blocked (ID: 00200357) .....................................75

2.1.117. option_tsize_invalid (ID: 00200358) ............................................76

2.1.118. unknown_option_blocked (ID: 00200359) .....................................76

2.1.119. option_not_sent (ID: 00200360) ..................................................77

2.1.120. option_value_invalid (ID: 00200361) ...........................................77

2.1.121. option_value_invalid (ID: 00200362) ...........................................77

2.1.122. blksize_out_of_range (ID: 00200363) ..........................................78

2.1.123. max_tftp_sessions_reached (ID: 00200364) ...................................78

2.1.124. failed_create_new_session (ID: 00200365) ....................................78

2.1.125. invalid_packet_received (ID: 00200366) .......................................79

2.1.126. failed_create_connection (ID: 00200367) ......................................79

2.1.127. invalid_packet_received_reopen (ID: 00200368) ............................79

2.1.128. packet_out_of_sequence (ID: 00200369) ......................................80

2.1.129. transfer_size_exceeded (ID: 00200370) ........................................80

2.1.130. options_removed (ID: 00200371) ................................................81

2.1.131. failed_strip_option (ID: 00200372) ..............................................81

2.1.132. failed_create_connection (ID: 00200373) ......................................81

2.1.133. invalid_error_message_received (ID: 00200374) ............................82

2.1.134. max_pop3_sessions_reached (ID: 00200380) .................................82

2.1.135. failed_create_new_session (ID: 00200381) ....................................82

2.1.136. failed_connect_pop3_server (ID: 00200382) ..................................83

2.1.137. out_of_memory (ID: 00200383) ..................................................83

2.1.138. blocked_filetype (ID: 00200384) .................................................83

2.1.139. response_blocked_unknown (ID: 00200385) .................................84

2.1.140. base64_decode_failed (ID: 00200386) ..........................................84

2.1.141. possible_invalid_mail_end (ID: 00200387) ...................................84

2.1.142. command_blocked_invalid_len (ID: 00200388) .............................85

2.1.143. response_blocked_invalid_len (ID: 00200389) ...............................85

2.1.144. content_type_mismatch (ID: 00200390) .......................................86

2.1.145. content_type_mismatch_mimecheck_disabled (ID: 00200391) ..........86

2.1.146. command_blocked_invalid_argument (ID: 00200392) .....................86

2.1.147. command_blocked (ID: 00200393) ..............................................87

2.1.148. unknown_command_blocked (ID: 00200394) ................................87

2.1.149. unexpected_mail_end (ID: 00200396) ..........................................87

2.1.150. invalid_line_endings (ID: 00200397) ...........................................88

2.1.151. top_mail_end_blocked (ID: 00200398) .........................................88

2.1.152. max_tls_sessions_reached (ID: 00200450) ....................................88

2.1.153. failed_create_new_session (ID: 00200451) ....................................89

2.1.154. failure_connect_http_server (ID: 00200452) ..................................89

2.1.155. tls_alert_received (ID: 00200453) ................................................89

2.1.156. tls_renegotiation_attempted (ID: 00200454) ..................................90

2.1.157. tls_alert_sent (ID: 00200455) ......................................................90

2.1.158. tls_cipher_suite_certificate_mismatch (ID: 00200456) .....................91

2.1.159. ssl_renegotiation_attempted (ID: 00200457) ..................................91

2.1.160. tls_disallowed_key_exchange (ID: 00200458) ...............................91

2.1.161. tls_invalid_message (ID: 00200459) ............................................92

2.1.162. tls_bad_message_order (ID: 00200460) ........................................92

2.1.163. tls_no_shared_cipher_suites (ID: 00200461) ..................................92

2.1.164. tls_out_of_memory (ID: 00200462) .............................................93

2.1.165. tls_failed_to_verify_finished (ID: 00200463) .................................93

2.1.166. unknown_tls_error (ID: 00200464) ..............................................94

2.1.167. max_pptp_sessions_reached (ID: 00200601) .................................94

2.1.168. failed_create_new_session (ID: 00200602) ....................................94

2.1.169. failed_connect_pptp_server (ID: 00200603) ..................................95

2.1.170. pptp_tunnel_established_client (ID: 00200604) ..............................95

2.1.171. pptp_tunnel_removed_client (ID: 00200605) .................................95

2.1.172. pptp_tunnel_removed_server (ID: 00200606) ................................96

2.1.173. pptp_session_established (ID: 00200607) ......................................96

2.1.174. pptp_session_removed (ID: 00200608) .........................................96

2.1.175. pptp_malformed_packet (ID: 00200609) .......................................96

Log Reference Guide

6

2.1.176. pptp_tunnel_established_server (ID: 00200610) .............................97

2.2. ANTIVIRUS .........................................................................................98

2.2.1. virus_found (ID: 05800001) ...........................................................98

2.2.2. virus_found (ID: 05800002) ...........................................................98

2.2.3. excluded_file (ID: 05800003) .........................................................99

2.2.4. decompression_failed (ID: 05800004) .............................................99

2.2.5. decompression_failed (ID: 05800005) .............................................99

2.2.6. compression_ratio_violation (ID: 05800006) ...................................100

2.2.7. compression_ratio_violation (ID: 05800007) ...................................100

2.2.8. compression_ratio_violation (ID: 05800008) ...................................101

2.2.9. out_of_memory (ID: 05800009) ...................................................101

2.2.10. out_of_memory (ID: 05800010) ..................................................102

2.2.11. virus_scan_failure (ID: 05800011) ..............................................102

2.2.12. virus_scan_failure (ID: 05800012) ..............................................102

2.2.13. no_valid_license (ID: 05800015) ................................................103

2.2.14. no_signature_database (ID: 05800016) ......................................... 103

2.2.15. general_engine_error (ID: 05800017) ..........................................103

2.2.16. out_of_memory (ID: 05800018) ..................................................104

2.2.17. unknown_encoding (ID: 05800182) .............................................104

2.2.18. unknown_encoding (ID: 05800183) .............................................104

2.2.19. unknown_encoding (ID: 05800184) .............................................105

2.2.20. unknown_encoding (ID: 05800185) .............................................105

2.3. ARP ..................................................................................................107

2.3.1. already_exists (ID: 00300001) ......................................................107

2.3.2. no_sender_ip (ID: 00300002) .......................................................107

2.3.3. no_sender_ip (ID: 00300003) .......................................................107

2.3.4. arp_response_broadcast (ID: 00300004) ......................................... 108

2.3.5. arp_response_multicast (ID: 00300005) .........................................108

2.3.6. mismatching_hwaddrs (ID: 00300006) ..........................................108

2.3.7. mismatching_hwaddrs_drop (ID: 00300007) ...................................108

2.3.8. hwaddr_change (ID: 00300008) ....................................................109

2.3.9. arp_cache_size_limit_reached (ID: 00300030) ................................ 109

2.3.10. invalid_arp_sender_ip_address (ID: 00300049) ..............................110

2.3.11. arp_access_allowed_expect (ID: 00300050) ..................................110

2.3.12. impossible_hw_address (ID: 00300051) ....................................... 110

2.3.13. arp_response_broadcast_drop (ID: 00300052) ...............................110

2.3.14. arp_response_multicast_drop (ID: 00300053) ................................111

2.3.15. arp_collides_with_static (ID: 00300054) ...................................... 111

2.3.16. hwaddr_change_drop (ID: 00300055) ..........................................112

2.4. AVUPDATE .......................................................................................113

2.4.1. av_db_update_failure (ID: 05000001) ............................................ 113

2.4.2. av_database_downloaded (ID: 05000002) ...................................... 113

2.4.3. av_db_already_up_to_date (ID: 05000003) ..................................... 113

2.4.4. av_db_update_denied (ID: 05000004) ...........................................113

2.4.5. av_detects_invalid_system_time (ID: 05000005) ............................. 114

2.4.6. downloading_new_database (ID: 05000007) ................................... 114

2.4.7. unsynced_databases (ID: 05000008) ..............................................114

2.5. BUFFERS ..........................................................................................116

2.5.1. buffers_flooded (ID: 00500001) ...................................................116

2.5.2. buffers_profile (ID: 00500002) .....................................................116

2.6. CONN ...............................................................................................117

2.6.1. conn_open (ID: 00600001) ..........................................................117

2.6.2. conn_close (ID: 00600002) ..........................................................117

2.6.3. connection_table_full (ID: 00600003) ............................................117

2.6.4. conn_open_natsat (ID: 00600004) .................................................118

2.6.5. conn_close_natsat (ID: 00600005) ................................................118

2.6.6. out_of_connections (ID: 00600010) ..............................................118

2.6.7. out_of_connections (ID: 00600011) ..............................................119

2.6.8. no_new_conn_for_this_packet (ID: 00600012) ................................119

2.6.9. no_new_conn_for_this_packet (ID: 00600013) ................................119

2.6.10. no_return_route (ID: 00600014) ..................................................120

2.6.11. reverse_connect_attempt (ID: 00600015) ......................................120

2.6.12. port_0_illegal (ID: 00600020) ....................................................120

Log Reference Guide

7

2.6.13. udp_src_port_0_illegal (ID: 00600021) ........................................121

2.6.14. udp_src_port_0_forwarded (ID: 00600022) ...................................121

2.6.15. conn_usage (ID: 00600023) .......................................................121

2.6.16. active_data (ID: 00600100) ........................................................122

2.6.17. passive_data (ID: 00600101) ......................................................122

2.6.18. active_data (ID: 00600102) ........................................................122

2.6.19. passive_data (ID: 00600103) ......................................................123

2.7. DHCP ................................................................................................124

2.7.1. offered_ip_occupied (ID: 00700001) .............................................124

2.7.2. lease_changed (ID: 00700002) .....................................................124

2.7.3. lease_acquired (ID: 00700003) .....................................................124

2.7.4. renewed_lease (ID: 00700004) .....................................................125

2.7.5. lease_expired (ID: 00700005) ......................................................125

2.7.6. invalid_lease_time (ID: 00700007) ...............................................125

2.7.7. invalid_server_id (ID: 00700008) .................................................126

2.7.8. invalid_netmask (ID: 00700009) ...................................................126

2.7.9. invalid_broadcast (ID: 00700010) .................................................126

2.7.10. invalid_offered_ip (ID: 00700011) ..............................................127

2.7.11. invalid_gateway (ID: 00700012) .................................................127

2.7.12. offered_broadcast_equals_gateway (ID: 00700013) ........................127

2.7.13. ip_collision (ID: 00700014) .......................................................128

2.7.14. route_collision (ID: 00700015) ...................................................128

2.8. DHCPRELAY .....................................................................................130

2.8.1. unable_to_save_dhcp_relay_list (ID: 00800001) .............................. 130

2.8.2. dhcp_relay_list_saved (ID: 00800002) ........................................... 130

2.8.3. dhcp_pkt_too_small (ID: 00800003) .............................................130

2.8.4. incorrect_bootp_dhcp_cookie (ID: 00800004) ................................. 130

2.8.5. maximum_ppm_for_relayer_reached (ID: 00800005) ....................... 131

2.8.6. relayer_resuming (ID: 00800006) .................................................131

2.8.7. hop_limit_exceeded (ID: 00800007) ..............................................131

2.8.8. client_release (ID: 00800008) ......................................................132

2.8.9. got_reply_without_transaction_state (ID: 00800009) ........................132

2.8.10. maximum_dhcp_client_relay_routes_reached (ID: 00800010) .......... 132

2.8.11. unable_to_add_relay_route_since_out_of_memory (ID: 00800011) ... 133

2.8.12. ignored_relay_request (ID: 00800012) .........................................133

2.8.13. no_message_type (ID: 00800013) ...............................................133

2.8.14. bad_inform_pkt_with_mismatching_source_ip_and_client_ip (ID:

00800014) ........................................................................................134

2.8.15. received_relayed_inform_packet_without_client_ip (ID: 00800015) ..134

2.8.16. maximum_current_dhcp_relays_for_iface (ID: 00800016) ............... 134

2.8.17. dhcp_server_is_unroutable (ID: 00800017) ................................... 135

2.8.18. unable_to_get_free_transaction_state (ID: 00800018) .....................135

2.8.19. invalid_gateway (ID: 00800019) .................................................135

2.8.20. relayed_request (ID: 00800020) ..................................................136

2.8.21. relayed_request (ID: 00800021) ..................................................136

2.8.22. got_reply_on_a_non_security_equivalent_interface (ID: 00800022) .. 136

2.8.23. assigned_ip_not_allowed (ID: 00800023) .....................................137

2.8.24. illegal_client_ip_assignment (ID: 00800024) ................................. 137

2.8.25. ambiguous_host_route (ID: 00800025) .........................................137

2.8.26. relayed_dhcp_reply (ID: 00800026) .............................................138

2.8.27. relayed_bootp_reply (ID: 00800027) ...........................................138

2.8.28. relayed_dhcp_reply (ID: 00800028) .............................................139

2.8.29. relayed_bootp_reply (ID: 00800029) ...........................................139

2.9. DHCPSERVER ...................................................................................140

2.9.1. unable_to_send_response (ID: 00900001) ...................................... 140

2.9.2. option_section_is_too_big_unable_to_reply (ID: 00900002) ..............140

2.9.3. unable_to_save_lease_db (ID: 00900003) .......................................140

2.9.4. lease_db_successfully_saved (ID: 00900004) ..................................140

2.9.5. dhcp_packet_too_small (ID: 00900005) .........................................141

2.9.6. request_for_ip_from_non_bound_client_without_state (ID: 00900006) 141

2.9.7. request_for_ip_from_bound_client_without_state (ID: 00900007) ......141

2.9.8. request_for_ip_from_non_bound_client_without_state (ID: 00900008) 142

2.9.9. all_ip_pools_depleted (ID: 00900010) ...........................................142

Log Reference Guide

8

2.9.10. request_with_bad_udp_checksum (ID: 00900011) ..........................142

2.9.11. lease_timeout (ID: 00900012) ....................................................143

2.9.12. lease_timeout (ID: 00900013) ....................................................143

2.9.13. pool_depleted (ID: 00900014) ....................................................143

2.9.14. sending_offer (ID: 00900015) ....................................................144

2.9.15. pool_depleted (ID: 00900016) ....................................................144

2.9.16. request_for_non_offered_ip (ID: 00900017) .................................. 144

2.9.17. request_for_non_bound_ip (ID: 00900018) ................................... 145

2.9.18. client_bound (ID: 00900019) ......................................................145

2.9.19. client_renewed (ID: 00900020) ...................................................145

2.9.20. got_inform_request (ID: 00900021) .............................................146

2.9.21. decline_for_ip_on_wrong_iface (ID: 00900022) ............................146

2.9.22. decline_for_non_offered_ip (ID: 00900023) .................................. 146

2.9.23. declined_by_client (ID: 00900024) ..............................................147

2.9.24. request_for_ip_from_bound_client_without_state (ID: 00900025) .....147

2.9.25. release_for_ip_on_wrong_iface (ID: 00900026) .............................148

2.9.26. released_by_client (ID: 00900027) ..............................................148

2.10. FRAG ..............................................................................................149

2.10.1. individual_frag_timeout (ID: 02000001) ....................................... 149

2.10.2. fragact_contains_frags (ID: 02000002) ......................................... 149

2.10.3. fail_suspect_out_of_resources (ID: 02000003) ..............................149

2.10.4. fail_out_of_resources (ID: 02000004) ..........................................150

2.10.5. fail_suspect_timeout (ID: 02000005) ...........................................150

2.10.6. fail_timeout (ID: 02000006) .......................................................151

2.10.7. disallowed_suspect (ID: 02000007) .............................................151

2.10.8. drop_frags_of_disallowed_packet (ID: 02000008) ..........................151

2.10.9. drop_frags_of_illegal_packet (ID: 02000009) ................................152

2.10.10. drop_extraneous_frags_of_completed_packet (ID: 02000010) ........ 152

2.10.11. learn_state (ID: 02000011) .......................................................153

2.10.12. drop_duplicate_frag_suspect_packet (ID: 02000012) ....................153

2.10.13. drop_duplicate_frag (ID: 02000013) .......................................... 153

2.10.14. frag_offset_plus_length_not_in_range (ID: 02000014) ..................154

2.10.15. no_available_fragacts (ID: 02000015) ........................................154

2.10.16. bad_ipdatalen (ID: 02000016) ...................................................155

2.10.17. bad_ipdatalen (ID: 02000017) ...................................................155

2.10.18. overlapping_frag (ID: 02000018) ..............................................155

2.10.19. bad_offs (ID: 02000019) ..........................................................156

2.10.20. duplicate_frag_with_different_length (ID: 02000020) ................... 156

2.10.21. duplicate_frag_with_different_data (ID: 02000021) ......................156

2.10.22. partial_overlap (ID: 02000022) .................................................156

2.10.23. drop_frag_disallowed_suspect_packet (ID: 02000023) ..................157

2.10.24. drop_frag_disallowed_packet (ID: 02000024) .............................. 157

2.10.25. already_completed (ID: 02000025) ............................................157

2.10.26. drop_frag_failed_suspect_packet (ID: 02000026) .........................158

2.10.27. drop_frag_failed_packet (ID: 02000027) ..................................... 158

2.10.28. drop_frag_illegal_packet (ID: 02000028) .................................... 158

2.10.29. fragments_available_freeing (ID: 02000100) ...............................159

2.11. IDP ..................................................................................................160

2.11.1. scan_detected (ID: 01300001) ....................................................160

2.11.2. idp_notice (ID: 01300002) .........................................................160

2.11.3. intrusion_detected (ID: 01300003) ..............................................161

2.11.4. virus_detected (ID: 01300004) ....................................................161

2.11.5. scan_detected (ID: 01300005) ....................................................162

2.11.6. idp_notice (ID: 01300006) .........................................................162

2.11.7. intrusion_detected (ID: 01300007) ..............................................163

2.11.8. virus_detected (ID: 01300008) ....................................................163

2.11.9. invalid_url_format (ID: 01300009) ..............................................164

2.11.10. invalid_url_format (ID: 01300010) ............................................164

2.11.11. idp_evasion (ID: 01300011) .....................................................164

2.11.12. idp_evasion (ID: 01300012) .....................................................165

2.11.13. idp_outofmem (ID: 01300013) ..................................................165

2.11.14. idp_outofmem (ID: 01300014) ..................................................166

2.11.15. idp_failscan (ID: 01300015) .....................................................166

Log Reference Guide

9

2.11.16. idp_failscan (ID: 01300016) .....................................................167

2.12. IDPUPDATE .....................................................................................168

2.12.1. idp_db_update_failure (ID: 01400001) .........................................168

2.12.2. idp_database_downloaded (ID: 01400002) ....................................168

2.12.3. idp_db_already_up_to_date (ID: 01400003) ..................................168

2.12.4. idp_db_update_denied (ID: 01400004) .........................................168

2.12.5. idp_detects_invalid_system_time (ID: 01400005) ..........................169

2.12.6. downloading_new_database (ID: 01400007) ................................. 169

2.12.7. unsynced_databases (ID: 01400009) ............................................169

2.13. IGMP ...............................................................................................171

2.13.1. querier_election_won (ID: 04200001) ..........................................171

2.13.2. querier_election_lost (ID: 04200002) ........................................... 171

2.13.3. invalid_dest_ip_address (ID: 04200003) ....................................... 171

2.13.4. invalid_destination_ethernet_address (ID: 04200004) ..................... 172

2.13.5. failed_restarting_igmp_conn (ID: 04200006) ................................172

2.13.6. invalid_size_query_packet (ID: 04200007) ................................... 172

2.13.7. invalid_query_group_address (ID: 04200008) ............................... 173

2.13.8. igmp_query_dropped (ID: 04200009) .......................................... 173

2.13.9. igmp_query_received (ID: 04200010) ..........................................173

2.13.10. bad_src (ID: 04200011) ...........................................................174

2.13.11. igmp_report_received (ID: 04200012) ........................................174

2.13.12. packet_includes_aux_data (ID: 04200013) ..................................175

2.13.13. invalid_size_report_packet (ID: 04200014) ................................. 175

2.13.14. bad_grp (ID: 04200015) ..........................................................176

2.13.15. invalid_report_grp_record (ID: 04200016) ..................................176

2.13.16. igmp_report_dropped (ID: 04200017) ........................................176

2.13.17. igmp_ruleset_rejects_report (ID: 04200018) ................................177

2.13.18. bad_inet (ID: 04200019) ..........................................................177

2.13.19. max_global_requests_per_second_reached (ID: 04200020) ............177

2.13.20. max_if_requests_per_second_reached (ID: 04200021) .................. 178

2.13.21. disallowed_igmp_version (ID: 04200022) ................................... 178

2.13.22. received_unknown_igmp_type (ID: 04200023) ............................178

2.13.23. older_querier_present (ID: 04200024) ........................................179

2.13.24. older_querier_gone (ID: 04200025) ........................................... 179

2.14. IPSEC ..............................................................................................180

2.14.1. fatal_ipsec_event (ID: 01800100) ................................................180

2.14.2. warning_ipsec_event (ID: 01800101) ........................................... 180

2.14.3. audit_event (ID: 01800103) .......................................................180

2.14.4. audit_flood (ID: 01800104) ........................................................181

2.14.5. ike_delete_notification (ID: 01800105) ........................................181

2.14.6. ike_invalid_payload (ID: 01800106) ............................................181

2.14.7. ike_invalid_proposal (ID: 01800107) ........................................... 182

2.14.8. ike_retry_limit_reached (ID: 01800108) ....................................... 182

2.14.9. ike_quickmode_failed (ID: 01800109) .........................................182

2.14.10. packet_corrupt (ID: 01800110) .................................................183

2.14.11. icv_failure (ID: 01800111) .......................................................183

2.14.12. sequence_number_failure (ID: 01800112) ................................... 183

2.14.13. sa_lookup_failure (ID: 01800113) .............................................184

2.14.14. ip_fragment (ID: 01800114) .....................................................184

2.14.15. sequence_number_overflow (ID: 01800115) ................................184

2.14.16. bad_padding (ID: 01800116) ....................................................185

2.14.17. hardware_accelerator_congested (ID: 01800117) ..........................185

2.14.18. hardware_acceleration_failure (ID: 01800118) ............................. 186

2.14.19. commit_failed (ID: 01800200) ..................................................186

2.14.20. commit succeeded (ID: 01800201) .............................................186

2.14.21. IPsec_successfully_started (ID: 01800202) .................................. 187

2.14.22. x509_init_failed (ID: 01800203) ...............................................187

2.14.23. pm_create_failed (ID: 01800204) ..............................................187

2.14.24. failed_to_start_ipsec (ID: 01800206) ..........................................187

2.14.25. failed_create_audit_module (ID: 01800207) ................................188

2.14.26. failed_to_configure_IPsec (ID: 01800210) ..................................188

2.14.27. reconfig_IPsec (ID: 01800211) .................................................188

2.14.28. IPsec_init_failed (ID: 01800213) ...............................................188

Log Reference Guide

10