INS_RL1000GW_REV– 15 Jul 2016 PAGE 54
INSTALLATION AND OPERATION MANUAL
RL1000GW
TECH SUPPORT: 1.888.678.9427
Message fields description
The following will further describe the syslog message fields
Command
Description
VLAN_ID
The VLAN number
SRC_IP_ADDR
The pointed string source IP address.
SRC_IP_PORT
The source IP port number
DEST_IP_ADDR
The pointed string destination IP address.
DEST_IP_PORT
The destination IP port number
DATA_MSG_LEN
The total data message length
TTL|
The ttl value of the IP header
PRTOCOL_NAME
The protocol name field. The following values are available:
“any”
“icmp”
“tcp”
“udp”
“ipencap”
“gre”
“modbus_tcp”
“modbus_rtu”
“iec104”
“iec101”
“dnp3”
VIOLATION_DESCR
The FW violation description string. The following format is used:
[Major Protocol Id,Minor Protocol Id]:Violation description string
Major Protocol Id: Major protocol id value,
for ModBus – Function Code
for IEC101/104 - Type Id
for DNP3 - Function Code
Minor Protocol Id: Minor protocol id value,
for ModBus – Sub-Function Code
for IEC101/104 - non used
for DNP3 - non used
Violation description string:
The following values are available for general violations:
“Flow is not allowed”
“FW PROTOCOL no violation”
“FW internal error (no drop)”
“FW PROTOCOL SW problem”
“FW PROTOCOL no free memory”
“FW PROTOCOL illegal message length”
“FW PROTOCOL illegal data length”
“FW PROTOCOL illegal value”,
“FW PROTOCOL Timeout problem”
“FW PROTOCOL message flow inconsistancy”
“FW PROTOCOL invalid creation”
“FW PROTOCOL general flow error”
“FW PROTOCOL illeagl message”
“FW PROTOCOL general session problem”
“FW PROTOCOL illegal identifier”
“FW PROTOCOL illegal address”
“FW PROTOCOL protcol type missmatch”
“FW RULE - illegal flow”
“FW RULE - illegal message”
“FW RULE - illegal identifier”
“FW RULE - illegal address”
“FW RULE - no rule configured”
