Nortel SMC 2450, Implementation Manual

Page: 256 / 262

Page 256 of 260 Appendix E: SMC packet filter log messages
553-3001-225 Standard 1.00 May 2006
General attacks
LAND This log message is generated when the SMC detects a land
attack.
Apr 29 17:46:16 172.16.7.225 id=firewall
time="2004-04-29 12:29:15" fw= a10-10-10-10 pri=1
proto=6(tcp) src=172.16.7.224 dst=172.16.7.224
count=1 mid=2000 mtp=2048 msg="Possible Land
Attack detected. Src 23 Dst 23 from ext n/w"
agent=Firewall
Unable to Determine
Route This log message is generated when the SMC is unable to
determine a route to the source.
Apr 29 21:36:10 172.16.7.225 id=firewall
time="2004-04-29 16:19:10" fw= a10-10-10-10 pri=1
proto=197 src=89.128.155.52 dst=172.16.7.224
mid=2031 mtp=2048 msg="Unable to find route for
source, from ext n/w" agent=Firewall
IP-Reassembly This log message is generated when the SMC detects possible
IP-Reassembly attack.
Apr 15 03:58:38 172.16.1.249 id=firewall
time="2002-04-15 15:40:09" fw= a10-10-10-10 pri=1
proto=1(icmp) src=172.16.2.244 dst=172.16.1.5
msg=IpReasmbly Fragment count exceeds max limit
from EXT network agent=Firewall
IP-Source Route Options This log message is generated when source routing option is set
in IP Datagram.
May 6 17:20:17 172.16.1.151 id=firewall
time="2002-05-06 17:13:27" fw= a10-10-10-10 pri=1
proto=17(udp) src=172.16.2.150 dst=172.16.1.150
msg=Source routing option set in IP packet from
EXT n/w agent=Firewall
Table 27
Log messages