ZyXEL Communications Prestige 652 Series, User Manual

Page: 507 / 523

Prestige 652 Series User’s Guide
Log Descriptions J-3
Chart J-4 Attack Logs
LOG MESSAGE DESCRIPTION
attack (Protocol) The firewall detected an attack. The log may also display the protocol
(for example TCP or UDP).
land Protocol) The firewall detected a land attack. The log may also display the
protocol (for example TCP or UDP).
icmp echo ICMP
(type:%d, code:%d)
The firewall detected an ICMP echo attack. See the section on ICMP
messages for type and code details.
syn flood TCP The firewall detected a TCP syn flood attack.
ports scan TCP The firewall detected a TCP port scan attack.
teardrop (Protocol) The firewall detected a teardrop attack.
illegal command TCP The firewall detected a TCP SMTP illegal command attack.
NetBIOS TCP The firewall detected a TCP NetBIOS attack.
ip spoofing - no
routing entry
(Protocol)
The firewall detected an IP spoofing attack while the Prestige did not
have a default route. The log may also display the protocol (for
example TCP or UDP).
vulnerability ICMP
(type:%d, code:%d)
The firewall detected an ICMP vulnerability attack; see the section on
ICMP messages for type and code details.
traceroute ICMP
(type:%d, code:%d)
The firewall detected an ICMP traceroute attack; see the section on
ICMP messages for type and code details.
Access logs may include the following information:
(Protocol) is the protocol of the packet (for example TCP or UDP) that triggered the log.
(Direction) is the direction in which the packet was traveling (for example LAN to WAN or WAN
to LAN)
(Rule) is the number of the firewall rule which caused the log.