Nortel SMC 2450, Implementation Manual

Page: 255 / 262

Appendix E: SMC packet filter log messages Page 255 of 260
Secure Multimedia Controller
Allow Policies
Allow Policy Matched This log message is generated when the respective traffic is
permitted to traverse the SMC.
Apr 29 20:07:13 172.16.7.225 id=firewall
time="2004-04-29 14:50:13" fw= a10-10-10-10 pri=6
proto=6(tcp) src=172.16.8.226 dst=172.16.8.225
mid=2030 mtp=256 msg="Service access request
successful Src 45122 Dst 80 from ext n/w"
ruleid=3 agent=Firewall
Unavailable Policies
Access Policy Not Found This log message is generated when there is no policy configured
for the packet to traverse the SMC.
Apr 29 20:14:11 172.16.7.225 id=firewall
time="2004-04-29 14:57:11" fw= a10-10-10-10 pri=4
proto=6(tcp) src=172.16.8.226 dst=172.16.8.225
mid=2076 mtp=4096 msg="Access Policy not found,
dropping packet Src 45134 Dst 21 from ext n/w"
agent=Firewall
SynFlood Attack
Flooding This log message is generated when the association table grows
beyond 80 percent of its limit, and SMC activates TCP SYN
Flooding protection.
Apr 29 20:30:04 172.16.7.225 id=firewall
time="2004-04-29 15:13:03" fw= a10-10-10-10 pri=1
proto=6(tcp) src=172.16.7.224 dst=172.16.8.226
mid=2066 mtp=1 msg="Crossed 80% of resource.
Possible flooding(TCP) Src 1048 Dst 23 from corp
n/w" agent=Firewall
Table 27
Log messages