D-Link DFL-210 - NetDefend - Security Appliance User manual

Network Security Solution http://www.dlink.com
Security
Security
DFL-210/ 800/1600/ 2500
DFL-260/ 860/1660/ 2560(G)
Ver 2.27.01
Network Security Firewall
Log Reference Guide

Log Reference Guide
DFL-210/260/800/860/1600/1660/2500/2560/2560G
NetDefendOS Version 2.27.01
D-Link Corporation
No. 289, Sinhu 3rd Rd, Neihu District, Taipei City 114, Taiwan R.O.C.
http://www.DLink.com
Published 2010-06-22
Copyright ©2010

Log Reference Guide
DFL-210/260/800/860/1600/1660/2500/2560/2560G
NetDefendOS Version 2.27.01
Published 2010-06-22
Copyright © 2010
Copyright Notice
This publication, including all photographs, illustrations and software, is protected under
international copyright laws, with all rights reserved. Neither this manual, nor any of the material
contained herein, may be reproduced without the written consent of D-Link.
Disclaimer
The information in this document is subject to change without notice. D-Link makes no
representations or warranties with respect to the contents hereof and specifically disclaims any
implied warranties of merchantability or fitness for a particular purpose. D-Link reserves the right to
revise this publication and to make changes from time to time in the content hereof without any
obligation to notify any person or parties of such revision or changes.
Limitations of Liability
UNDER NO CIRCUMSTANCES SHALL D-LINK OR ITS SUPPLIERS BE LIABLE FOR
DAMAGES OF ANY CHARACTER (E.G. DAMAGES FOR LOSS OF PROFIT, SOFTWARE
RESTORATION, WORK STOPPAGE, LOSS OF SAVED DATA OR ANY OTHER
COMMERCIAL DAMAGES OR LOSSES) RESULTING FROM THE APPLICATION OR
IMPROPER USE OF THE D-LINK PRODUCT OR FAILURE OF THE PRODUCT, EVEN IF
D-LINK IS INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. FURTHERMORE,
D-LINK WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST CUSTOMER FOR
LOSSES OR DAMAGES. D-LINK WILL IN NO EVENT BE LIABLE FOR ANY DAMAGES IN
EXCESS OF THE AMOUNT D-LINK RECEIVED FROM THE END-USER FOR THE
PRODUCT.

Table of Contents
Preface ...............................................................................................................27
1. Introduction .....................................................................................................29
1.1. Log Message Structure ............................................................................29
1.2. Context Parameters .................................................................................31
1.3. Severity levels .......................................................................................35
2. Log Message Reference .....................................................................................37
2.1. ALG ....................................................................................................38
2.1.1. alg_session_open (ID: 00200001) ...................................................38
2.1.2. alg_session_closed (ID: 00200002) .................................................39
2.1.3. max_line_length_exceeded (ID: 00200003) ......................................39
2.1.4. alg_session_allocation_failure (ID: 00200009) ..................................39
2.1.5. invalid_client_http_header_received (ID: 00200100) ..........................40
2.1.6. invalid_url_format (ID: 00200101) .................................................40
2.1.7. unknown_client_data_received (ID: 00200105) .................................40
2.1.8. suspicious_data_received (ID: 00200106) .........................................41
2.1.9. invalid_chunked_encoding (ID: 00200107) .......................................41
2.1.10. invalid_server_http_header_received (ID: 00200108) ........................41
2.1.11. compressed_data_received (ID: 00200109) .....................................42
2.1.12. max_http_sessions_reached (ID: 00200110) ....................................42
2.1.13. failed_create_new_session (ID: 00200111) .....................................43
2.1.14. failure_connect_http_server (ID: 00200112) ....................................43
2.1.15. content_type_mismatch (ID: 00200113) .........................................43
2.1.16. wcf_override_full (ID: 00200114) .................................................44
2.1.17. content_filtering_disabled (ID: 00200115) ......................................44
2.1.18. max_download_size_reached (ID: 00200116) ..................................44
2.1.19. blocked_filetype (ID: 00200117) ...................................................45
2.1.20. out_of_memory (ID: 00200118) ....................................................45
2.1.21. wcf_servers_unreachable (ID: 00200119) .......................................45
2.1.22. wcf_srv_connection_error (ID: 00200120) ......................................46
2.1.23. wcf_server_unreachable (ID: 00200121) ........................................46
2.1.24. wcf_connecting (ID: 00200122) ....................................................46
2.1.25. wcf_server_connected (ID: 00200123) ...........................................47
2.1.26. wcf_primary_fallback (ID: 00200124) ...........................................47
2.1.27. request_url (ID: 00200125) ..........................................................47
2.1.28. request_url (ID: 00200126) ..........................................................48
2.1.29. wcf_server_auth_failed (ID: 00200127) ..........................................48
2.1.30. wcf_server_bad_reply (ID: 00200128) ...........................................48
2.1.31. request_url (ID: 00200129) ..........................................................49
2.1.32. out_of_memory (ID: 00200130) ....................................................49
2.1.33. wcf_bad_sync (ID: 00200131) ......................................................50
2.1.34. restricted_site_notice (ID: 00200132) ............................................50
2.1.35. url_reclassification_request (ID: 00200133) ....................................50
2.1.36. request_url (ID: 00200135) ..........................................................51
2.1.37. request_url (ID: 00200136) ..........................................................51
2.1.38. request_url (ID: 00200137) ..........................................................52
2.1.39. restricted_site_notice (ID: 00200138) ............................................52
2.1.40. url_reclassification_request (ID: 00200139) ....................................53
2.1.41. wcf_mem_optimized (ID: 00200140) .............................................53
2.1.42. max_smtp_sessions_reached (ID: 00200150) ..................................53
2.1.43. maximum_email_per_minute_reached (ID: 00200151) ......................54
2.1.44. failed_create_new_session (ID: 00200152) .....................................54
2.1.45. failed_connect_smtp_server (ID: 00200153) ...................................54
2.1.46. invalid_server_response (ID: 00200155) .........................................55
2.1.47. sender_email_id_mismatched (ID: 00200157) .................................55
2.1.48. sender_email_id_is_in_blacklist (ID: 00200158) ..............................56
2.1.49. recipient_email_id_in_blacklist (ID: 00200159) ...............................56
2.1.50. some_recipient_email_ids_are_in_blocklist (ID: 00200160) ...............56
4

2.1.51. base64_decode_failed (ID: 00200164) ...........................................57
2.1.52. base64_decode_failed (ID: 00200165) ...........................................57
2.1.53. blocked_filetype (ID: 00200166) ...................................................57
2.1.54. content_type_mismatch (ID: 00200167) .........................................58
2.1.55. max_email_size_reached (ID: 00200170) .......................................58
2.1.56. content_type_mismatch_mimecheck_disabled (ID: 00200171) ...........59
2.1.57. all_recipient_email_ids_are_in_blocklist (ID: 00200172) ...................59
2.1.58. out_of_memory (ID: 00200175) ....................................................59
2.1.59. invalid_end_of_mail (ID: 00200176) .............................................60
2.1.60. dnsbl_init_error (ID: 00200177) ....................................................60
2.1.61. cmd_too_long (ID: 00200179) ......................................................60
2.1.62. cmd_empty (ID: 00200180) .........................................................61
2.1.63. failed_send_reply_code (ID: 00200181) .........................................61
2.1.64. smtp_no_header (ID: 00200184) ...................................................61
2.1.65. unsupported_extension (ID: 00200185) ..........................................62
2.1.66. cmd_pipelined (ID: 00200186) .....................................................62
2.1.67. smtp_state_violation (ID: 00200190) .............................................62
2.1.68. sender_email_dnsbl_spam_mark_removed_by_whitelist (ID: 00200195)
..........................................................................................................63
2.1.69. illegal_data_direction (ID: 00200202) ............................................63
2.1.70. hybrid_data (ID: 00200206) .........................................................63
2.1.71. hybrid_data (ID: 00200209) .........................................................64
2.1.72. illegal_chars (ID: 00200210) ........................................................64
2.1.73. control_chars (ID: 00200211) .......................................................65
2.1.74. illegal_command (ID: 00200212) ..................................................65
2.1.75. illegal_command (ID: 00200213) ..................................................65
2.1.76. port_command_disabled (ID: 00200214) ........................................66
2.1.77. illegal_command (ID: 00200215) ..................................................66
2.1.78. illegal_ip_address (ID: 00200216) .................................................67
2.1.79. illegal_port_number (ID: 00200217) ..............................................67
2.1.80. failed_to_create_connection1 (ID: 00200218) ..................................67
2.1.81. illegal_command (ID: 00200219) ..................................................68
2.1.82. illegal_direction1 (ID: 00200220) .................................................68
2.1.83. illegal_direction2 (ID: 00200221) .................................................69
2.1.84. illegal_option (ID: 00200222) ......................................................69
2.1.85. illegal_option (ID: 00200223) ......................................................69
2.1.86. unknown_option (ID: 00200224) ..................................................70
2.1.87. illegal_command (ID: 00200225) ..................................................70
2.1.88. unknown_command (ID: 00200226) ..............................................71
2.1.89. illegal_reply (ID: 00200228) ........................................................71
2.1.90. illegal_reply (ID: 00200230) ........................................................71
2.1.91. illegal_reply (ID: 00200231) ........................................................72
2.1.92. illegal_reply (ID: 00200232) ........................................................72
2.1.93. bad_port (ID: 00200233) .............................................................73
2.1.94. bad_ip (ID: 00200234) ................................................................73
2.1.95. failed_to_create_connection2 (ID: 00200235) ..................................74
2.1.96. failed_to_create_server_data_connection (ID: 00200236) ..................74
2.1.97. failed_to_send_port (ID: 00200237) ..............................................74
2.1.98. failed_to_register_rawconn (ID: 00200238) ....................................75
2.1.99. failed_to_merge_conns (ID: 00200239) ..........................................75
2.1.100. max_ftp_sessions_reached (ID: 00200241) ....................................75
2.1.101. failed_create_new_session (ID: 00200242) ....................................76
2.1.102. failure_connect_ftp_server (ID: 00200243) ...................................76
2.1.103. content_type_mismatch (ID: 00200250) .......................................76
2.1.104. failed_to_send_command (ID: 00200251) .....................................77
2.1.105. resumed_compressed_file_transfer (ID: 00200252) .........................77
2.1.106. blocked_filetype (ID: 00200253) .................................................77
2.1.107. resumed_compressed_file_transfer (ID: 00200254) .........................78
2.1.108. failed_to_send_response_code (ID: 00200255) ..............................78
2.1.109. illegal_command (ID: 00200267) ................................................78
2.1.110. unknown_state (ID: 00200300) ...................................................79
2.1.111. invalid_message (ID: 00200301) .................................................79
2.1.112. decode_failed (ID: 00200302) .....................................................80
Log Reference Guide
5

2.1.113. encode_failed (ID: 00200303) .....................................................80
2.1.114. encode_failed (ID: 00200304) .....................................................80
2.1.115. encode_failed (ID: 00200305) .....................................................81
2.1.116. decode_failed (ID: 00200306) .....................................................81
2.1.117. encode_failed (ID: 00200307) .....................................................81
2.1.118. max_tcp_data_connections_exceeded (ID: 00200308) .....................82
2.1.119. max_connections_per_call_exceeded (ID: 00200309) ......................82
2.1.120. ignoring_channel (ID: 00200310) ................................................83
2.1.121. com_mode_response_message_not_translated (ID: 00200311) ..........83
2.1.122. max_h323_session_reached (ID: 00200312) ..................................83
2.1.123. failed_create_new_session (ID: 00200313) ....................................84
2.1.124. max_h323_gk_sessions_reached (ID: 00200314) ............................84
2.1.125. failed_create_new_session (ID: 00200315) ....................................84
2.1.126. failure_connect_h323_server (ID: 00200316) ................................85
2.1.127. com_mode_command_message_not_translated (ID: 00200317) ........85
2.1.128. packet_failed_initial_test (ID: 00200350) ......................................85
2.1.129. packet_failed_traversal_test (ID: 00200351) ..................................86
2.1.130. command_not_allowed (ID: 00200353) ........................................86
2.1.131. option_value_invalid (ID: 00200354) ...........................................87
2.1.132. option_value_invalid (ID: 00200355) ...........................................87
2.1.133. option_tsize_invalid (ID: 00200356) ............................................87
2.1.134. unknown_option_blocked (ID: 00200357) .....................................88
2.1.135. option_tsize_invalid (ID: 00200358) ............................................88
2.1.136. unknown_option_blocked (ID: 00200359) .....................................88
2.1.137. option_not_sent (ID: 00200360) ..................................................89
2.1.138. option_value_invalid (ID: 00200361) ...........................................89
2.1.139. option_value_invalid (ID: 00200362) ...........................................89
2.1.140. blksize_out_of_range (ID: 00200363) ..........................................90
2.1.141. max_tftp_sessions_reached (ID: 00200364) ...................................90
2.1.142. failed_create_new_session (ID: 00200365) ....................................91
2.1.143. invalid_packet_received (ID: 00200366) .......................................91
2.1.144. failed_create_connection (ID: 00200367) ......................................91
2.1.145. invalid_packet_received_reopen (ID: 00200368) ............................92
2.1.146. packet_out_of_sequence (ID: 00200369) ......................................92
2.1.147. transfer_size_exceeded (ID: 00200370) ........................................92
2.1.148. options_removed (ID: 00200371) ................................................93
2.1.149. failed_strip_option (ID: 00200372) ..............................................93
2.1.150. failed_create_connection (ID: 00200373) ......................................93
2.1.151. invalid_error_message_received (ID: 00200374) ............................94
2.1.152. max_pop3_sessions_reached (ID: 00200380) .................................94
2.1.153. failed_create_new_session (ID: 00200381) ....................................94
2.1.154. failed_connect_pop3_server (ID: 00200382) ..................................95
2.1.155. out_of_memory (ID: 00200383) ..................................................95
2.1.156. blocked_filetype (ID: 00200384) .................................................95
2.1.157. response_blocked_unknown (ID: 00200385) .................................96
2.1.158. base64_decode_failed (ID: 00200386) ..........................................96
2.1.159. possible_invalid_mail_end (ID: 00200387) ...................................97
2.1.160. command_blocked_invalid_len (ID: 00200388) .............................97
2.1.161. response_blocked_invalid_len (ID: 00200389) ...............................97
2.1.162. content_type_mismatch (ID: 00200390) .......................................98
2.1.163. content_type_mismatch_mimecheck_disabled (ID: 00200391) ..........98
2.1.164. command_blocked_invalid_argument (ID: 00200392) .....................98
2.1.165. command_blocked (ID: 00200393) ..............................................99
2.1.166. unknown_command_blocked (ID: 00200394) ................................99
2.1.167. unexpected_mail_end (ID: 00200396) ........................................ 100
2.1.168. invalid_line_endings (ID: 00200397) ......................................... 100
2.1.169. top_mail_end_blocked (ID: 00200398) .......................................100
2.1.170. max_tls_sessions_reached (ID: 00200450) .................................. 101
2.1.171. failed_create_new_session (ID: 00200451) ..................................101
2.1.172. failure_connect_http_server (ID: 00200452) ................................ 101
2.1.173. tls_alert_received (ID: 00200453) ..............................................102
2.1.174. tls_renegotiation_attempted (ID: 00200454) ................................ 102
2.1.175. tls_alert_sent (ID: 00200455) ....................................................102
Log Reference Guide
6

2.1.176. tls_cipher_suite_certificate_mismatch (ID: 00200456) ...................103
2.1.177. ssl_renegotiation_attempted (ID: 00200457) ................................103
2.1.178. tls_disallowed_key_exchange (ID: 00200458) .............................104
2.1.179. tls_invalid_message (ID: 00200459) .......................................... 104
2.1.180. tls_bad_message_order (ID: 00200460) ......................................104
2.1.181. tls_no_shared_cipher_suites (ID: 00200461) ................................105
2.1.182. tls_out_of_memory (ID: 00200462) ........................................... 105
2.1.183. tls_failed_to_verify_finished (ID: 00200463) ............................... 105
2.1.184. unknown_tls_error (ID: 00200464) ............................................106
2.1.185. sdp_message_parsing_failed (ID: 00200501) ............................... 106
2.1.186. sdp_message_validation_failed (ID: 00200502) ........................... 107
2.1.187. sip_message_parsing_failed (ID: 00200503) ................................107
2.1.188. sip_message_validation_failed (ID: 00200504) ............................107
2.1.189. max_sessions_per_uri_reached (ID: 00200505) ............................ 108
2.1.190. registration_hijack_detected (ID: 00200506) ................................108
2.1.191. sip_signal_timeout (ID: 00200507) ............................................109
2.1.192. sip_request_response_timeout (ID: 00200508) ............................. 109
2.1.193. registration_time_modified (ID: 00200509) ................................. 110
2.1.194. unsuccessful_registration (ID: 00200510) ...................................110
2.1.195. unsuccessful_unregistration (ID: 00200511) ................................110
2.1.196. unsuccessful_search_in_registration_table (ID: 00200512) ............. 111
2.1.197. sipalg_session_created (ID: 00200513) .......................................111
2.1.198. failed_to_create_session (ID: 00200514) .....................................112
2.1.199. failed_to_find_session (ID: 00200515) ....................................... 112
2.1.200. sipalg_session_deleted (ID: 00200516) .......................................113
2.1.201. sipalg_session_state_updated (ID: 00200517) .............................. 113
2.1.202. sipalg_transaction_created (ID: 00200520) .................................. 113
2.1.203. failed_to_create_new_transaction (ID: 00200521) ........................114
2.1.204. failed_to_find_transaction (ID: 00200522) .................................. 114
2.1.205. sipalg_transaction_deleted (ID: 00200523) .................................. 115
2.1.206. sipalg_transaction_state_updated (ID: 00200524) ......................... 115
2.1.207. no_route_found (ID: 00200526) ................................................115
2.1.208. failed_to_get_free_port (ID: 00200527) ......................................116
2.1.209. failed_to_find_role (ID: 00200528) ............................................ 116
2.1.210. failed_to_update_port (ID: 00200529) ........................................117
2.1.211. failed_to_update_contact (ID: 00200530) ....................................117
2.1.212. failed_to_modify_sdp_message (ID: 00200531) ........................... 118
2.1.213. failed_to_modify_via (ID: 00200532) ........................................ 118
2.1.214. failed_to_modify_from (ID: 00200533) ......................................118
2.1.215. failed_to_modify_request_uri (ID: 00200534) .............................. 119
2.1.216. failed_to_modify_request (ID: 00200535) ................................... 119
2.1.217. method_not_supported (ID: 00200536) .......................................120
2.1.218. general_error (ID: 00200537) ...................................................120
2.1.219. third_party_call_control (ID: 00200538) ..................................... 120
2.1.220. out_of_memory (ID: 00200539) ................................................121
2.1.221. null_sip_message_received (ID: 00200540) .................................121
2.1.222. user_registered (ID: 00200541) .................................................121
2.1.223. user_unregistered (ID: 00200542) ..............................................122
2.1.224. dns_resolution_failed (ID: 00200545) ........................................ 122
2.1.225. failed_to_modify_contact (ID: 00200547) ................................... 122
2.1.226. invalid_udp_packet (ID: 00200548) ........................................... 123
2.1.227. failed_to_parse_media (ID: 00200549) .......................................123
2.1.228. max_session_per_service_reached (ID: 00200550) .......................123
2.1.229. max_tsxn_per_session_reached (ID: 00200551) ........................... 124
2.1.230. invalid_transaction_state (ID: 00200552) ....................................124
2.1.231. invalid_session_state (ID: 00200553) .........................................125
2.1.232. sipalg_callleg_created (ID: 00200554) ........................................ 125
2.1.233. failed_to_create_new_callleg (ID: 00200555) .............................. 126
2.1.234. failed_to_find_callleg (ID: 00200556) ........................................126
2.1.235. failed_to_update_callleg (ID: 00200557) .................................... 126
2.1.236. sipalg_callleg_deleted (ID: 00200558) ........................................ 127
2.1.237. failed_to_modify_response (ID: 00200559) ................................. 127
2.1.238. sipalg_callleg_state_updated (ID: 00200560) ............................... 128
Log Reference Guide
7

2.1.239. failed_to_modify_sat_request (ID: 00200561) .............................. 128
2.1.240. max_pptp_sessions_reached (ID: 00200601) ...............................129
2.1.241. failed_create_new_session (ID: 00200602) ..................................129
2.1.242. failed_connect_pptp_server (ID: 00200603) ................................129
2.1.243. pptp_tunnel_established_client (ID: 00200604) ............................ 130
2.1.244. pptp_tunnel_removed_client (ID: 00200605) ............................... 130
2.1.245. pptp_tunnel_removed_server (ID: 00200606) .............................. 130
2.1.246. pptp_session_established (ID: 00200607) ....................................130
2.1.247. pptp_session_removed (ID: 00200608) .......................................131
2.1.248. pptp_malformed_packet (ID: 00200609) .....................................131
2.1.249. pptp_tunnel_established_server (ID: 00200610) ........................... 131
2.2. ANTISPAM ........................................................................................133
2.2.1. recipient_email_changed_to_drop_address (ID: 05900196) ...............133
2.2.2. dnsbl_allocate_error (ID: 05900800) .............................................133
2.2.3. dnsbl_ipcache_add (ID: 05900810) ...............................................133
2.2.4. dnsbl_ipcache_remove (ID: 05900811) ..........................................134
2.2.5. dnsbl_session_add (ID: 05900812) ................................................134
2.2.6. dnsbl_session_error (ID: 05900813) ..............................................134
2.2.7. dnsbl_ipcache_add (ID: 05900814) ...............................................135
2.2.8. dnsbl_disabled (ID: 05900815) .....................................................135
2.2.9. dnsbl_active (ID: 05900816) ........................................................135
2.2.10. dnsbl_query_add (ID: 05900817) ................................................135
2.2.11. dnsbl_blacklist_disable (ID: 05900818) ........................................136
2.2.12. dnsbl_txtrecord_truncated (ID: 05900819) ....................................136
2.2.13. dnsbl_record_truncated (ID: 05900820) ........................................ 136
2.3. ANTIVIRUS .......................................................................................138
2.3.1. virus_found (ID: 05800001) .........................................................138
2.3.2. virus_found (ID: 05800002) .........................................................138
2.3.3. excluded_file (ID: 05800003) .......................................................139
2.3.4. decompression_failed (ID: 05800004) ........................................... 139
2.3.5. decompression_failed (ID: 05800005) ........................................... 139
2.3.6. compression_ratio_violation (ID: 05800006) ...................................140
2.3.7. compression_ratio_violation (ID: 05800007) ...................................140
2.3.8. compression_ratio_violation (ID: 05800008) ...................................141
2.3.9. out_of_memory (ID: 05800009) ...................................................141
2.3.10. out_of_memory (ID: 05800010) ..................................................142
2.3.11. virus_scan_failure (ID: 05800011) ..............................................142
2.3.12. virus_scan_failure (ID: 05800012) ..............................................142
2.3.13. no_valid_license (ID: 05800015) ................................................143
2.3.14. no_signature_database (ID: 05800016) ......................................... 143
2.3.15. general_engine_error (ID: 05800017) .......................................... 143
2.3.16. out_of_memory (ID: 05800018) ..................................................144
2.3.17. decompression_failed_encrypted_file (ID: 05800024) .....................144
2.3.18. decompression_failed_encrypted_file (ID: 05800025) .....................145
2.3.19. unknown_encoding (ID: 05800182) .............................................145
2.3.20. unknown_encoding (ID: 05800183) .............................................145
2.3.21. unknown_encoding (ID: 05800184) .............................................146
2.3.22. unknown_encoding (ID: 05800185) .............................................146
2.4. ARP ..................................................................................................148
2.4.1. already_exists (ID: 00300001) ......................................................148
2.4.2. no_sender_ip (ID: 00300002) .......................................................148
2.4.3. no_sender_ip (ID: 00300003) .......................................................148
2.4.4. arp_response_broadcast (ID: 00300004) ......................................... 149
2.4.5. arp_response_multicast (ID: 00300005) .........................................149
2.4.6. mismatching_hwaddrs (ID: 00300006) .......................................... 149
2.4.7. mismatching_hwaddrs_drop (ID: 00300007) ...................................149
2.4.8. hwaddr_change (ID: 00300008) ....................................................150
2.4.9. arp_cache_size_limit_reached (ID: 00300030) ................................ 150
2.4.10. invalid_arp_sender_ip_address (ID: 00300049) ..............................151
2.4.11. arp_access_allowed_expect (ID: 00300050) .................................. 151
2.4.12. impossible_hw_address (ID: 00300051) ....................................... 151
2.4.13. arp_response_broadcast_drop (ID: 00300052) ............................... 151
2.4.14. arp_response_multicast_drop (ID: 00300053) ................................152
Log Reference Guide
8

2.4.15. arp_collides_with_static (ID: 00300054) ......................................152
2.4.16. hwaddr_change_drop (ID: 00300055) .......................................... 153
2.5. AVUPDATE .......................................................................................154
2.5.1. av_db_update_failure (ID: 05000001) ............................................ 154
2.5.2. av_database_downloaded (ID: 05000002) ...................................... 154
2.5.3. av_db_already_up_to_date (ID: 05000003) .....................................154
2.5.4. av_db_update_denied (ID: 05000004) ........................................... 154
2.5.5. av_detects_invalid_system_time (ID: 05000005) .............................155
2.5.6. downloading_new_database (ID: 05000007) ................................... 155
2.5.7. unsynced_databases (ID: 05000008) ..............................................155
2.6. BLACKLIST .......................................................................................157
2.6.1. failed_to_write_list_of_blocked_hosts_to_media (ID: 04600001) .......157
2.6.2. unable_to_allocate_static_entry (ID: 04600002) .............................. 157
2.6.3. unable_to_allocate_host_entry (ID: 04600003) ................................157
2.6.4. connection_blacklisted (ID: 04600004) ..........................................157
2.6.5. packet_blacklisted (ID: 04600005) ................................................158
2.6.6. packet_blacklisted (ID: 04600006) ................................................158
2.7. BUFFERS ..........................................................................................160
2.7.1. buffers_flooded (ID: 00500001) ...................................................160
2.7.2. buffers_profile (ID: 00500002) .....................................................160
2.8. CONN ...............................................................................................161
2.8.1. conn_open (ID: 00600001) ..........................................................161
2.8.2. conn_close (ID: 00600002) ..........................................................161
2.8.3. connection_table_full (ID: 00600003) ............................................ 161
2.8.4. conn_open_natsat (ID: 00600004) .................................................162
2.8.5. conn_close_natsat (ID: 00600005) ................................................162
2.8.6. out_of_connections (ID: 00600010) ..............................................162
2.8.7. out_of_connections (ID: 00600011) ..............................................163
2.8.8. no_new_conn_for_this_packet (ID: 00600012) ................................163
2.8.9. no_new_conn_for_this_packet (ID: 00600013) ................................163
2.8.10. no_return_route (ID: 00600014) ..................................................164
2.8.11. reverse_connect_attempt (ID: 00600015) ......................................164
2.8.12. port_0_illegal (ID: 00600020) ....................................................164
2.8.13. udp_src_port_0_illegal (ID: 00600021) ........................................165
2.8.14. udp_src_port_0_forwarded (ID: 00600022) ...................................165
2.8.15. conn_usage (ID: 00600023) .......................................................165
2.8.16. active_data (ID: 00600100) ........................................................166
2.8.17. passive_data (ID: 00600101) ......................................................166
2.8.18. active_data (ID: 00600102) ........................................................166
2.8.19. passive_data (ID: 00600103) ......................................................167
2.9. DHCP ................................................................................................168
2.9.1. offered_ip_occupied (ID: 00700001) .............................................168
2.9.2. lease_changed (ID: 00700002) .....................................................168
2.9.3. lease_acquired (ID: 00700003) .....................................................168
2.9.4. renewed_lease (ID: 00700004) .....................................................169
2.9.5. lease_expired (ID: 00700005) ......................................................169
2.9.6. invalid_lease_time (ID: 00700007) ...............................................169
2.9.7. invalid_server_id (ID: 00700008) .................................................170
2.9.8. invalid_netmask (ID: 00700009) ...................................................170
2.9.9. invalid_broadcast (ID: 00700010) .................................................170
2.9.10. invalid_offered_ip (ID: 00700011) ..............................................171
2.9.11. invalid_gateway (ID: 00700012) .................................................171
2.9.12. offered_broadcast_equals_gateway (ID: 00700013) ........................ 171
2.9.13. ip_collision (ID: 00700014) .......................................................172
2.9.14. route_collision (ID: 00700015) ...................................................172
2.10. DHCPRELAY ...................................................................................174
2.10.1. unable_to_save_dhcp_relay_list (ID: 00800001) ............................ 174
2.10.2. dhcp_relay_list_saved (ID: 00800002) .........................................174
2.10.3. dhcp_pkt_too_small (ID: 00800003) ............................................174
2.10.4. incorrect_bootp_dhcp_cookie (ID: 00800004) ............................... 174
2.10.5. maximum_ppm_for_relayer_reached (ID: 00800005) ..................... 175
2.10.6. relayer_resuming (ID: 00800006) ................................................175
2.10.7. hop_limit_exceeded (ID: 00800007) ............................................175
Log Reference Guide
9

2.10.8. client_release (ID: 00800008) .....................................................176
2.10.9. got_reply_without_transaction_state (ID: 00800009) ...................... 176
2.10.10. maximum_dhcp_client_relay_routes_reached (ID: 00800010) ........ 176
2.10.11. unable_to_add_relay_route_since_out_of_memory (ID: 00800011) .177
2.10.12. ignored_relay_request (ID: 00800012) ........................................ 177
2.10.13. no_message_type (ID: 00800013) ..............................................177
2.10.14. bad_inform_pkt_with_mismatching_source_ip_and_client_ip (ID:
00800014) ........................................................................................178
2.10.15. received_relayed_inform_packet_without_client_ip (ID: 00800015) 178
2.10.16. maximum_current_dhcp_relays_for_iface (ID: 00800016) ............. 178
2.10.17. dhcp_server_is_unroutable (ID: 00800017) ................................. 179
2.10.18. unable_to_get_free_transaction_state (ID: 00800018) .................... 179
2.10.19. invalid_gateway (ID: 00800019) ...............................................179
2.10.20. relayed_request (ID: 00800020) ................................................180
2.10.21. relayed_request (ID: 00800021) ................................................180
2.10.22. got_reply_on_a_non_security_equivalent_interface (ID: 00800022) .180
2.10.23. assigned_ip_not_allowed (ID: 00800023) ...................................181
2.10.24. illegal_client_ip_assignment (ID: 00800024) ............................... 181
2.10.25. ambiguous_host_route (ID: 00800025) .......................................181
2.10.26. relayed_dhcp_reply (ID: 00800026) ...........................................182
2.10.27. relayed_bootp_reply (ID: 00800027) .......................................... 182
2.10.28. relayed_dhcp_reply (ID: 00800028) ...........................................183
2.10.29. relayed_bootp_reply (ID: 00800029) .......................................... 183
2.11. DHCPSERVER .................................................................................184
2.11.1. unable_to_send_response (ID: 00900001) .....................................184
2.11.2. option_section_is_too_big_unable_to_reply (ID: 00900002) ............184
2.11.3. unable_to_save_lease_db (ID: 00900003) ..................................... 184
2.11.4. lease_db_successfully_saved (ID: 00900004) ................................184
2.11.5. dhcp_packet_too_small (ID: 00900005) ....................................... 185
2.11.6. request_for_ip_from_non_bound_client_without_state (ID: 00900006) 185
2.11.7. request_for_ip_from_bound_client_without_state (ID: 00900007) ..... 185
2.11.8. request_for_ip_from_non_bound_client_without_state (ID: 00900008) 186
2.11.9. all_ip_pools_depleted (ID: 00900010) .......................................... 186
2.11.10. request_with_bad_udp_checksum (ID: 00900011) ........................186
2.11.11. lease_timeout (ID: 00900012) ...................................................187
2.11.12. lease_timeout (ID: 00900013) ...................................................187
2.11.13. pool_depleted (ID: 00900014) ..................................................187
2.11.14. sending_offer (ID: 00900015) ...................................................188
2.11.15. pool_depleted (ID: 00900016) ..................................................188
2.11.16. request_for_non_offered_ip (ID: 00900017) ................................ 188
2.11.17. request_for_non_bound_ip (ID: 00900018) ................................. 189
2.11.18. client_bound (ID: 00900019) ....................................................189
2.11.19. client_renewed (ID: 00900020) .................................................189
2.11.20. got_inform_request (ID: 00900021) ........................................... 190
2.11.21. decline_for_ip_on_wrong_iface (ID: 00900022) ........................... 190
2.11.22. decline_for_non_offered_ip (ID: 00900023) ................................ 190
2.11.23. declined_by_client (ID: 00900024) ............................................191
2.11.24. request_for_ip_from_bound_client_without_state (ID: 00900025) ... 191
2.11.25. release_for_ip_on_wrong_iface (ID: 00900026) ........................... 192
2.11.26. released_by_client (ID: 00900027) ............................................ 192
2.12. DYNROUTING .................................................................................193
2.12.1. failed_to_export_route_to_ospf_process_failed_to_alloc (ID: 01100001)
........................................................................................................193
2.12.2. route_exported_to_ospf_as (ID: 01100002) ...................................193
2.12.3. route_unexported_from_ospf_as (ID: 01100003) ........................... 193
2.12.4. failed_to_add_route_unable_to_alloc (ID: 01100004) .....................194
2.12.5. route_added (ID: 01100005) .......................................................194
2.12.6. route_removed (ID: 01100006) ...................................................194
2.13. FRAG ..............................................................................................196
2.13.1. individual_frag_timeout (ID: 02000001) .......................................196
2.13.2. fragact_contains_frags (ID: 02000002) ......................................... 196
2.13.3. fail_suspect_out_of_resources (ID: 02000003) ..............................196
2.13.4. fail_out_of_resources (ID: 02000004) ..........................................197
Log Reference Guide
10

2.13.5. fail_suspect_timeout (ID: 02000005) ...........................................197
2.13.6. fail_timeout (ID: 02000006) .......................................................198
2.13.7. disallowed_suspect (ID: 02000007) .............................................198
2.13.8. drop_frags_of_disallowed_packet (ID: 02000008) .......................... 198
2.13.9. drop_frags_of_illegal_packet (ID: 02000009) ................................199
2.13.10. drop_extraneous_frags_of_completed_packet (ID: 02000010) ........ 199
2.13.11. learn_state (ID: 02000011) .......................................................200
2.13.12. drop_duplicate_frag_suspect_packet (ID: 02000012) .................... 200
2.13.13. drop_duplicate_frag (ID: 02000013) .......................................... 200
2.13.14. frag_offset_plus_length_not_in_range (ID: 02000014) .................. 201
2.13.15. no_available_fragacts (ID: 02000015) ........................................ 201
2.13.16. bad_ipdatalen (ID: 02000016) ...................................................202
2.13.17. bad_ipdatalen (ID: 02000017) ...................................................202
2.13.18. overlapping_frag (ID: 02000018) ..............................................202
2.13.19. bad_offs (ID: 02000019) ..........................................................203
2.13.20. duplicate_frag_with_different_length (ID: 02000020) ................... 203
2.13.21. duplicate_frag_with_different_data (ID: 02000021) ...................... 203
2.13.22. partial_overlap (ID: 02000022) .................................................203
2.13.23. drop_frag_disallowed_suspect_packet (ID: 02000023) .................. 204
2.13.24. drop_frag_disallowed_packet (ID: 02000024) ..............................204
2.13.25. already_completed (ID: 02000025) ............................................204
2.13.26. drop_frag_failed_suspect_packet (ID: 02000026) ......................... 205
2.13.27. drop_frag_failed_packet (ID: 02000027) ..................................... 205
2.13.28. drop_frag_illegal_packet (ID: 02000028) .................................... 205
2.13.29. fragments_available_freeing (ID: 02000100) ............................... 206
2.14. GRE .................................................................................................207
2.14.1. failed_to_setup_gre_tunnel (ID: 02200001) ...................................207
2.14.2. gre_bad_flags (ID: 02200002) ....................................................207
2.14.3. gre_bad_version (ID: 02200003) .................................................207
2.14.4. gre_checksum_error (ID: 02200004) ............................................207
2.14.5. gre_length_error (ID: 02200005) .................................................208
2.14.6. gre_send_routing_loop_detected (ID: 02200006) ...........................208
2.14.7. unmatched_session_key (ID: 02200007) .......................................208
2.14.8. gre_routing_flag_set (ID: 02200008) ...........................................209
2.15. HA ..................................................................................................210
2.15.1. peer_gone (ID: 01200001) .........................................................210
2.15.2. peer_gone (ID: 01200002) .........................................................210
2.15.3. conflict_both_peers_active (ID: 01200003) ................................... 210
2.15.4. peer_has_higher_local_load (ID: 01200004) .................................210
2.15.5. peer_has_lower_local_load (ID: 01200005) .................................. 211
2.15.6. peer_has_more_connections (ID: 01200006) .................................211
2.15.7. peer_has_fewer_connections (ID: 01200007) ................................ 211
2.15.8. conflict_both_peers_inactive (ID: 01200008) ................................211
2.15.9. peer_has_more_connections (ID: 01200009) .................................212
2.15.10. peer_has_fewer_connections (ID: 01200010) ...............................212
2.15.11. peer_alive (ID: 01200011) .......................................................212
2.15.12. heartbeat_from_unknown (ID: 01200043) ................................... 213
2.15.13. should_have_arrived_on_sync_iface (ID: 01200044) .................... 213
2.15.14. activate_failed (ID: 01200050) ..................................................213
2.15.15. merge_failed (ID: 01200051) ....................................................213
2.15.16. ha_commit_error (ID: 01200052) ..............................................214
2.15.17. ha_write_failed (ID: 01200053) ................................................214
2.15.18. ha_commit_unknown_error (ID: 01200054) ................................214
2.15.19. linkmon_triggered_failover (ID: 01200055) ................................215
2.15.20. resync_conns_to_peer (ID: 01200100) ........................................ 215
2.15.21. hasync_connection_established (ID: 01200200) ...........................215
2.15.22. hasync_connection_disconnected_lifetime_expired (ID: 01200201) .215
2.15.23. hasync_connection_failed_timeout (ID: 01200202) ....................... 216
2.15.24. resync_conns_to_peer_complete (ID: 01200300) .......................... 216
2.15.25. disallowed_on_sync_iface (ID: 01200400) .................................. 216
2.15.26. sync_packet_on_nonsync_iface (ID: 01200410) ........................... 217
2.15.27. ttl_too_low (ID: 01200411) ......................................................217
2.15.28. heartbeat_from_myself (ID: 01200412) ...................................... 217
Log Reference Guide
11

2.15.29. config_sync_failure (ID: 01200500) ........................................... 218
2.15.30. action=deactivate reason=requested (ID: 01200616) ......................218
2.15.31. action=activate reason=requested (ID: 01200617) .........................218
2.15.32. action=going_online (ID: 01200618) ..........................................218
2.16. HWM ...............................................................................................220
2.16.1. temperature_alarm (ID: 04000011) ..............................................220
2.16.2. temperature_normal (ID: 04000012) ............................................220
2.16.3. voltage_alarm (ID: 04000021) ....................................................220
2.16.4. voltage_normal (ID: 04000022) ..................................................221
2.16.5. fanrpm_alarm (ID: 04000031) ....................................................221
2.16.6. fanrpm_normal (ID: 04000032) ..................................................222
2.16.7. gpio_alarm (ID: 04000041) ........................................................222
2.16.8. gpio_normal (ID: 04000042) ......................................................222
2.16.9. free_memory_warning_level (ID: 04000101) ................................223
2.16.10. free_memory_warning_level (ID: 04000102) ...............................223
2.16.11. free_memory_normal_level (ID: 04000103) ................................224
2.17. IDP ..................................................................................................225
2.17.1. scan_detected (ID: 01300001) ....................................................225
2.17.2. idp_notice (ID: 01300002) .........................................................225
2.17.3. intrusion_detected (ID: 01300003) ..............................................226
2.17.4. virus_detected (ID: 01300004) ....................................................226
2.17.5. scan_detected (ID: 01300005) ....................................................227
2.17.6. idp_notice (ID: 01300006) .........................................................227
2.17.7. intrusion_detected (ID: 01300007) ..............................................228
2.17.8. virus_detected (ID: 01300008) ....................................................228
2.17.9. invalid_url_format (ID: 01300009) ..............................................229
2.17.10. invalid_url_format (ID: 01300010) ............................................229
2.17.11. idp_evasion (ID: 01300011) .....................................................229
2.17.12. idp_evasion (ID: 01300012) .....................................................230
2.17.13. idp_outofmem (ID: 01300013) ..................................................230
2.17.14. idp_outofmem (ID: 01300014) ..................................................231
2.17.15. idp_failscan (ID: 01300015) .....................................................231
2.17.16. idp_failscan (ID: 01300016) .....................................................232
2.18. IDPPIPES .........................................................................................233
2.18.1. conn_idp_piped (ID: 06100001) ..................................................233
2.18.2. host_idp_piped (ID: 06100002) ..................................................233
2.18.3. out_of_memory (ID: 06100003) ..................................................233
2.18.4. idp_piped_state_replaced (ID: 06100004) ..................................... 234
2.18.5. idp_piped_state_expire (ID: 06100005) ........................................234
2.18.6. conn_idp_unpiped (ID: 06100006) ..............................................234
2.18.7. conn_idp_piped (ID: 06100007) ..................................................235
2.19. IDPUPDATE .....................................................................................236
2.19.1. idp_db_update_failure (ID: 01400001) .........................................236
2.19.2. idp_database_downloaded (ID: 01400002) ....................................236
2.19.3. idp_db_already_up_to_date (ID: 01400003) .................................. 236
2.19.4. idp_db_update_denied (ID: 01400004) ......................................... 236
2.19.5. idp_detects_invalid_system_time (ID: 01400005) .......................... 237
2.19.6. downloading_new_database (ID: 01400007) ................................. 237
2.19.7. unsynced_databases (ID: 01400009) ............................................237
2.20. IFACEMON ......................................................................................239
2.20.1. ifacemon_status_bad_rereport (ID: 03900001) ...............................239
2.20.2. ifacemon_status_bad (ID: 03900003) ...........................................239
2.20.3. ifacemon_status_bad (ID: 03900004) ...........................................239
2.21. IPPOOL ............................................................................................241
2.21.1. no_offer_received (ID: 01900001) ...............................................241
2.21.2. no_valid_dhcp_offer_received (ID: 01900002) .............................. 241
2.21.3. too_many_dhcp_offers_received (ID: 01900003) ........................... 241
2.21.4. lease_disallowed_by_lease_filter (ID: 01900004) ........................... 241
2.21.5. lease_disallowed_by_server_filter (ID: 01900005) .........................242
2.21.6. lease_have_bad_dhcp_server (ID: 01900006) ................................ 242
2.21.7. lease_have_bad_netmask (ID: 01900007) .....................................242
2.21.8. lease_have_bad_offered_broadcast (ID: 01900008) ........................243
2.21.9. lease_have_bad_offered_ip (ID: 01900009) .................................. 243
Log Reference Guide
12

2.21.10. lease_have_bad_gateway_ip (ID: 01900010) ............................... 243
2.21.11. lease_ip_is_already_occupied (ID: 01900011) .............................244
2.21.12. lease_rejected_by_server (ID: 01900012) ....................................244
2.21.13. ip_offer_already_exist_in_the_pool (ID: 01900013) ...................... 244
2.21.14. pool_reached_max_dhcp_clients (ID: 01900014) ......................... 245
2.21.15. macrange_depleted (ID: 01900015) ........................................... 245
2.21.16. ip_fetched_pool (ID: 01900016) ................................................245
2.21.17. ip_returned_to_pool (ID: 01900017) .......................................... 246
2.22. IPSEC ..............................................................................................247
2.22.1. fatal_ipsec_event (ID: 01800100) ................................................247
2.22.2. warning_ipsec_event (ID: 01800101) ........................................... 247
2.22.3. audit_event (ID: 01800103) .......................................................247
2.22.4. audit_flood (ID: 01800104) ........................................................248
2.22.5. ike_delete_notification (ID: 01800105) ........................................ 248
2.22.6. ike_invalid_payload (ID: 01800106) ............................................248
2.22.7. ike_invalid_proposal (ID: 01800107) ...........................................249
2.22.8. ike_retry_limit_reached (ID: 01800108) .......................................249
2.22.9. ike_quickmode_failed (ID: 01800109) .........................................249
2.22.10. packet_corrupt (ID: 01800110) .................................................250
2.22.11. icv_failure (ID: 01800111) .......................................................250
2.22.12. sequence_number_failure (ID: 01800112) ................................... 250
2.22.13. sa_lookup_failure (ID: 01800113) .............................................251
2.22.14. ip_fragment (ID: 01800114) .....................................................251
2.22.15. sequence_number_overflow (ID: 01800115) ................................251
2.22.16. bad_padding (ID: 01800116) ....................................................252
2.22.17. hardware_accelerator_congested (ID: 01800117) .......................... 252
2.22.18. hardware_acceleration_failure (ID: 01800118) ............................. 253
2.22.19. commit_failed (ID: 01800200) ..................................................253
2.22.20. commit succeeded (ID: 01800201) .............................................253
2.22.21. IPsec_successfully_started (ID: 01800202) ..................................254
2.22.22. x509_init_failed (ID: 01800203) ...............................................254
2.22.23. pm_create_failed (ID: 01800204) ..............................................254
2.22.24. failed_to_start_ipsec (ID: 01800206) .......................................... 254
2.22.25. failed_create_audit_module (ID: 01800207) ................................255
2.22.26. failed_to_configure_IPsec (ID: 01800210) .................................. 255
2.22.27. reconfig_IPsec (ID: 01800211) .................................................255
2.22.28. IPsec_init_failed (ID: 01800213) ...............................................255
2.22.29. ipsec_started_successfully (ID: 01800214) .................................. 256
2.22.30. Failed_to_add_certificate (ID: 01800302) ................................... 256
2.22.31. Default_IKE_DH_groups_will_be_used (ID: 01800303) ...............256
2.22.32. failed_to_set_algorithm_properties (ID: 01800304) ...................... 256
2.22.33. failed_to_set_algorithm_properties (ID: 01800305) ...................... 257
2.22.34. failed_to_add_root_certificate (ID: 01800306) ............................. 257
2.22.35. dns_resolve_failed (ID: 01800308) ............................................257
2.22.36. dns_resolve_failed (ID: 01800309) ............................................258
2.22.37. failed_to_add_peer (ID: 01800312) ............................................ 258
2.22.38. failed_to_add_rules (ID: 01800313) ...........................................258
2.22.39. failed_to_add_rules (ID: 01800314) ...........................................259
2.22.40. new_remote_gw_ip (ID: 01800315) ...........................................259
2.22.41. no_policymanager (ID: 01800316) .............................................259
2.22.42. peer_is_dead (ID: 01800317) ....................................................260
2.22.43. failed_to_set_dpd_cb (ID: 01800318) ......................................... 260
2.22.44. failed_to_add_key_provider (ID: 01800321) ................................260
2.22.45. failed_to_add_certificate (ID: 01800322) ....................................261
2.22.46. failed_to_set_remote_ID (ID: 01800323) ....................................261
2.22.47. failed_to_create_authorization (ID: 01800327) ............................. 261
2.22.48. Failed_to_set_xauth (ID: 01800328) .......................................... 261
2.22.49. Failed_to_create_xauth_group (ID: 01800329) ............................. 262
2.22.50. IPSec_tunnel_added (ID: 01800333) ..........................................262
2.22.51. IPSec_tunnel_added_bySGW (ID: 01800334) .............................. 262
2.22.52. IPSec_tunnel_modified_bySGW (ID: 01800335) ......................... 263
2.22.53. IPSec_tunnel_modified (ID: 01800336) ......................................263
2.22.54. IPSec_tunnel_removed (ID: 01800337) ...................................... 263
Log Reference Guide
13

2.22.55. tunnel_disabled (ID: 01800340) ................................................264
2.22.56. tunnel_cfg_error (ID: 01800341) ...............................................264
2.22.57. ippool_does_not_exist (ID: 01800400) .......................................264
2.22.58. cfgmode_ip_freed (ID: 01800402) .............................................264
2.22.59. recieved_packet_to_disabled_IPsec (ID: 01800500) ...................... 265
2.22.60. recieved_packet_to_disabled_IPsec (ID: 01800501) ...................... 265
2.22.61. Recieved_plaintext_packet_for_disabled_IPsec_interface (ID: 01800502)
........................................................................................................265
2.22.62. no_remote_gateway (ID: 01800503) .......................................... 266
2.22.63. no_route (ID: 01800504) .........................................................266
2.22.64. ping_keepalive_failed_in_tunnel (ID: 01800505) ......................... 266
2.22.65. ipsec_interface_disabled (ID: 01800506) .................................... 266
2.22.66. maximum_allowed_tunnels_limit_reached (ID: 01800900) ............267
2.22.67. SAs_not_killed_for_remote_peer (ID: 01800901) ......................... 267
2.22.68. sa_write_congestion (ID: 01801337) ..........................................267
2.22.69. sa_write_congestion (ID: 01801338) ..........................................268
2.22.70. trigger_non_ip_packet (ID: 01802001) ....................................... 268
2.22.71. rule_not_active (ID: 01802002) .................................................268
2.22.72. malformed_packet (ID: 01802003) ............................................269
2.22.73. max_ipsec_sa_negotiations_reached (ID: 01802004) ..................... 269
2.22.74. max_number_of_tunnels_reached (ID: 01802011) ........................269
2.22.75. ike_sa_failed (ID: 01802022) ....................................................269
2.22.76. ike_sa_negotiation_completed (ID: 01802024) ............................. 270
2.22.77. ike_sa_negotiation_failed (ID: 01802030) ................................... 270
2.22.78. ike_sa_negotiation_failed (ID: 01802031) ................................... 270
2.22.79. ipsec_sa_negotiation_completed (ID: 01802040) .......................... 271
2.22.80. ipsec_sa_informal (ID: 01802041) .............................................271
2.22.81. ipsec_sa_informal (ID: 01802043) .............................................271
2.22.82. ipsec_sa_informal (ID: 01802044) .............................................272
2.22.83. ipsec_sa_lifetime (ID: 01802045) ..............................................272
2.22.84. ipsec_sa_lifetime (ID: 01802046) ..............................................272
2.22.85. ipsec_sa_lifetime (ID: 01802047) ..............................................273
2.22.86. ipsec_sa_lifetime (ID: 01802048) ..............................................273
2.22.87. ipsec_sa_informal (ID: 01802058) .............................................273
2.22.88. ipsec_invalid_protocol (ID: 01802059) .......................................274
2.22.89. ipsec_sa_negotiation_aborted (ID: 01802060) .............................. 274
2.22.90. create_rules_failed (ID: 01802080) ............................................274
2.22.91. create_rules_failed (ID: 01802081) ............................................274
2.22.92. no_authentication_method_specified (ID: 01802100) .................... 275
2.22.93. no_key_method_configured_for tunnel (ID: 01802102) .................275
2.22.94. invalid_configuration_of_force_open (ID: 01802104) ................... 275
2.22.95. invalid_rule_setting (ID: 01802105) ........................................... 276
2.22.96. invalid_rule_setting (ID: 01802106) ........................................... 276
2.22.97. invalid_rule_setting (ID: 01802107) ........................................... 276
2.22.98. invalid_rule_setting (ID: 01802108) ........................................... 276
2.22.99. invalid_rule_setting (ID: 01802109) ........................................... 277
2.22.100. max_number_of_policy_rules_reached (ID: 01802110) ...............277
2.22.101. suspicious_outbound_rule (ID: 01802114) .................................277
2.22.102. no_algorithms_configured_for_tunnel (ID: 01802200) .................277
2.22.103. no_encryption_algorithm_configured_for_tunnel (ID: 01802201) .. 278
2.22.104. no_authentication_algorithm_specified (ID: 01802203) ...............278
2.22.105. AH_not_supported (ID: 01802204) .......................................... 278
2.22.106. invalid_tunnel_configuration (ID: 01802208) ............................. 279
2.22.107. invalid_tunnel_configuration (ID: 01802209) ............................. 279
2.22.108. invalid_tunnel_configuration (ID: 01802210) ............................. 279
2.22.109. out_of_memory_for_tunnel (ID: 01802211) ............................... 280
2.22.110. invalid_key_size (ID: 01802214) .............................................280
2.22.111. invalid_key_size (ID: 01802215) .............................................280
2.22.112. invalid_key_size (ID: 01802216) .............................................280
2.22.113. invalid_key_size (ID: 01802217) .............................................281
2.22.114. invalid_cipher_keysize (ID: 01802218) .....................................281
2.22.115. invalid_key_size (ID: 01802219) .............................................281
2.22.116. invalid_cipher_keysize (ID: 01802220) .....................................281
Log Reference Guide
14

2.22.117. malformed_tunnel_id_configured (ID: 01802225) ....................... 282
2.22.118. malformed_psk_configured (ID: 01802229) ............................... 282
2.22.119. rule_selection_failed (ID: 01802300) ........................................ 282
2.22.120. max_phase1_sa_reached (ID: 01802400) ...................................283
2.22.121. max_phase1_negotiations_reached (ID: 01802402) ..................... 283
2.22.122. max_active_quickmode_negotiation_reached (ID: 01802403) ....... 283
2.22.123. could_not_decode_certificate (ID: 01802600) ............................ 283
2.22.124. could_not_convert_certificate (ID: 01802601) ............................ 284
2.22.125. could_not_get_subject_nam_from_ca_cert (ID: 01802602) ...........284
2.22.126. could_not_set_cert_to_non_CRL_issuer (ID: 01802603) .............. 284
2.22.127. could_not_force_cert_to_be_trusted (ID: 01802604) ................... 285
2.22.128. could_not_trusted_set_for_cert (ID: 01802605) .......................... 285
2.22.129. could_not_insert_cert_to_db (ID: 01802606) .............................285
2.22.130. could_not_decode_certificate (ID: 01802607) ............................ 285
2.22.131. could_not_loack_certificate (ID: 01802608) ..............................286
2.22.132. could_not_insert_cert_to_db (ID: 01802609) .............................286
2.22.133. could_not_decode_crl (ID: 01802610) ......................................286
2.22.134. ike_sa_negotiation_completed (ID: 01802703) ........................... 286
2.22.135. ike_sa_negotiation_completed (ID: 01802704) ........................... 287
2.22.136. Certificate_contains_bad_IP_address (ID: 01802705) ..................287
2.22.137. dn_name_as_subject_alt_name (ID: 01802706) .......................... 287
2.22.138. could_not_decode_certificate (ID: 01802707) ............................ 288
2.22.139. ike_sa_destroyed (ID: 01802708) .............................................288
2.22.140. cfgmode_exchange_event (ID: 01802709) ................................. 288
2.22.141. remote_access_address (ID: 01802710) ..................................... 289
2.22.142. remote_access_dns (ID: 01802711) ..........................................289
2.22.143. remote_access_wins (ID: 01802712) ........................................289
2.22.144. remote_access_dhcp (ID: 01802713) ........................................ 290
2.22.145. remote_access_subnets (ID: 01802714) .....................................290
2.22.146. event_on_ike_sa (ID: 01802715) .............................................290
2.22.147. ipsec_sa_selection_failed (ID: 01802717) ..................................290
2.22.148. certificate_search_failed (ID: 01802718) ................................... 291
2.22.149. ipsec_sa_event (ID: 01802730) ...............................................291
2.22.150. ipsec_sa_event (ID: 01802731) ...............................................291
2.22.151. ipsec_sa_destroyed (ID: 01802732) .......................................... 292
2.22.152. (ID: 01802735) .....................................................................292
2.22.153. (ID: 01802736) .....................................................................292
2.22.154. outofmem_create_engine (ID: 01802901) .................................. 293
2.22.155. init_rulelooklup_failed (ID: 01802903) ..................................... 293
2.22.156. init_rule_looklup_failed (ID: 01802904) ................................... 293
2.22.157. init_rule_looklup_failed (ID: 01802905) ................................... 294
2.22.158. init_mutexes_failed (ID: 01802906) ......................................... 294
2.22.159. init_interface_table_failed (ID: 01802907) ................................294
2.22.160. init_flow_id_table_failed (ID: 01802908) .................................. 294
2.22.161. init_flow_table_failed (ID: 01802909) ......................................295
2.22.162. init_next_hop_table_failed (ID: 01802910) ................................295
2.22.163. init_transform_table_failed (ID: 01802911) ............................... 295
2.22.164. init_peer_hash_failed (ID: 01802912) .......................................295
2.22.165. init_peer_id_hash_failed (ID: 01802913) ...................................296
2.22.166. init_rule_table_failed (ID: 01802914) .......................................296
2.22.167. init_inbound_spi_hash_failed (ID: 01802915) ............................ 296
2.22.168. init_transform_context_hash_failed (ID: 01802916) .................... 296
2.22.169. init_packet_context_cache_failed (ID: 01802917) .......................297
2.22.170. init_transform_context_table_failed (ID: 01802918) .................... 297
2.22.171. init_nat_table_failed (ID: 01802919) ........................................297
2.22.172. init_frag_table_failed (ID: 01802920) .......................................297
2.22.173. init_engine_tables_failed (ID: 01802921) .................................. 298
2.22.174. init_interceptor_failed (ID: 01802922) ......................................298
2.22.175. malformed_ike_sa_proposal (ID: 01803000) .............................. 298
2.22.176. failed_to_select_policy_rule (ID: 01803001) .............................. 298
2.22.177. failed_to_select_ike_sa (ID: 01803002) .................................... 299
2.22.178. ike_phase1_notification (ID: 01803003) ....................................299
2.22.179. ipsec_sa_failed (ID: 01803020) ...............................................299
Log Reference Guide
15

2.22.180. ipsec_sa_statistics (ID: 01803021) ...........................................300
2.22.181. config_mode_exchange_event (ID: 01803022) ........................... 300
2.22.182. config_mode_exchange_event (ID: 01803023) ........................... 300
2.22.183. xauth_exchange_done (ID: 01803024) ......................................301
2.22.184. config_mode_exchange_event (ID: 01803025) ........................... 301
2.22.185. config_mode_exchange_event (ID: 01803026) ........................... 301
2.22.186. rejecting_ipsec_sa_delete (ID: 01803027) .................................301
2.22.187. rejecting_ipsec_sa_delete (ID: 01803028) .................................302
2.22.188. ike_phase2_notification (ID: 01803029) ....................................302
2.22.189. ike_qm_notification (ID: 01803030) ......................................... 302
2.22.190. failed_to_verify_peer_identity (ID: 01803040) ........................... 303
2.22.191. malformed_ipsec_sa_proposal (ID: 01803050) ........................... 303
2.22.192. malformed_ipsec_esp_proposal (ID: 01803051) .........................303
2.22.193. malformed_ipsec_ah_proposal (ID: 01803052) ........................... 304
2.22.194. failed_to_select_ipsec_proposal (ID: 01803053) .........................304
2.22.195. failed_to_select_ipsec_sa (ID: 01803054) ..................................304
2.22.196. ike_responder_mode_not_available (ID: 01803101) .................... 304
2.22.197. audit_event (ID: 01803200) ....................................................305
2.22.198. ipsec_hwaccel_failed (ID: 01803410) .......................................305
2.23. IP_ERROR .......................................................................................306
2.23.1. too_small_packet (ID: 01500001) ...............................................306
2.23.2. disallwed_ip_ver (ID: 01500002) ................................................306
2.23.3. invalid_ip_length (ID: 01500003) ...............................................306
2.23.4. invalid_ip_length (ID: 01500004) ...............................................307
2.23.5. invalid_ip_checksum (ID: 01500005) .......................................... 307
2.24. IP_FLAG ..........................................................................................308
2.24.1. ttl_low (ID: 01600001) ..............................................................308
2.24.2. ip_rsv_flag_set (ID: 01600002) ..................................................308
2.24.3. ip_rsv_flag_set (ID: 01600003) ..................................................308
2.25. IP_OPT ............................................................................................310
2.25.1. source_route (ID: 01700001) ......................................................310
2.25.2. timestamp (ID: 01700002) .........................................................310
2.25.3. router_alert (ID: 01700003) .......................................................310
2.25.4. ipopt_present (ID: 01700004) .....................................................311
2.25.5. ipoptlen_too_small (ID: 01700010) .............................................311
2.25.6. ipoptlen_invalid (ID: 01700011) .................................................311
2.25.7. multiple_ip_option_routes (ID: 01700012) ....................................312
2.25.8. bad_length (ID: 01700013) ........................................................312
2.25.9. bad_route_pointer (ID: 01700014) ...............................................312
2.25.10. source_route_disallowed (ID: 01700015) ....................................313
2.25.11. multiple_ip_option_timestamps (ID: 01700016) ...........................313
2.25.12. bad_timestamp_len (ID: 01700017) ...........................................313
2.25.13. bad_timestamp_pointer (ID: 01700018) ......................................314
2.25.14. bad_timestamp_pointer (ID: 01700019) ......................................314
2.25.15. timestamp_disallowed (ID: 01700020) ....................................... 314
2.25.16. router_alert_bad_len (ID: 01700021) .......................................... 315
2.25.17. router_alert_disallowed (ID: 01700022) ......................................315
2.25.18. ipopt_present_disallowed (ID: 01700023) ...................................315
2.26. IP_PROTO ........................................................................................317
2.26.1. multicast_ethernet_ip_address_missmatch (ID: 07000011) ...............317
2.26.2. invalid_ip4_header_length (ID: 07000012) ................................... 317
2.26.3. ttl_zero (ID: 07000013) .............................................................317
2.26.4. ttl_low (ID: 07000014) ..............................................................318
2.26.5. ip_rsv_flag_set (ID: 07000015) ..................................................318
2.26.6. oversize_tcp (ID: 07000018) ......................................................318
2.26.7. invalid_tcp_header (ID: 07000019) .............................................319
2.26.8. oversize_udp (ID: 07000021) .....................................................319
2.26.9. invalid_udp_header (ID: 07000022) .............................................319
2.26.10. oversize_icmp (ID: 07000023) ..................................................320
2.26.11. invalid_icmp_header (ID: 07000024) .........................................320
2.26.12. multicast_ethernet_ip_address_missmatch (ID: 07000033) ............. 321
2.26.13. oversize_gre (ID: 07000050) ....................................................321
2.26.14. oversize_esp (ID: 07000051) ....................................................321
Log Reference Guide
16

2.26.15. oversize_ah (ID: 07000052) .....................................................322
2.26.16. oversize_skip (ID: 07000053) ...................................................322
2.26.17. oversize_ospf (ID: 07000054) ...................................................322
2.26.18. oversize_ipip (ID: 07000055) ...................................................323
2.26.19. oversize_ipcomp (ID: 07000056) ...............................................323
2.26.20. oversize_l2tp (ID: 07000057) ...................................................323
2.26.21. oversize_ip (ID: 07000058) ......................................................324
2.26.22. fragmented_icmp (ID: 07000070) ..............................................324
2.26.23. invalid_icmp_data_too_small (ID: 07000071) .............................. 324
2.26.24. invalid_icmp_data_ip_ver (ID: 07000072) .................................. 325
2.26.25. invalid_icmp_data_too_small (ID: 07000073) .............................. 325
2.26.26. invalid_icmp_data_invalid_ip_length (ID: 07000074) ................... 326
2.26.27. invalid_icmp_data_invalid_paramprob (ID: 07000075) .................326
2.27. L2TP ................................................................................................327
2.27.1. l2tpclient_resolve_successful (ID: 02800001) ................................327
2.27.2. l2tpclient_resolve_failed (ID: 02800002) ......................................327
2.27.3. l2tpclient_init (ID: 02800003) ....................................................327
2.27.4. l2tp_connection_disallowed (ID: 02800004) .................................328
2.27.5. unknown_l2tp_auth_source (ID: 02800005) .................................. 328
2.27.6. only_routes_set_up_by_server_iface_allowed (ID: 02800006) ..........328
2.27.7. l2tp_session_closed (ID: 02800007) ............................................ 329
2.27.8. l2tp_tunnel_closed (ID: 02800008) ..............................................329
2.27.9. session_closed (ID: 02800009) ...................................................329
2.27.10. l2tp_session_request (ID: 02800010) .......................................... 330
2.27.11. l2tp_session_up (ID: 02800011) ................................................330
2.27.12. l2tp_no_userauth_rule_found (ID: 02800014) .............................. 330
2.27.13. l2tp_session_request (ID: 02800015) .......................................... 331
2.27.14. l2tp_session_up (ID: 02800016) ................................................331
2.27.15. failure_init_radius_accounting (ID: 02800017) ............................ 331
2.27.16. l2tpclient_tunnel_up (ID: 02800018) .......................................... 332
2.27.17. malformed_packet (ID: 02800019) ............................................332
2.27.18. waiting_for_ip_to_listen_on (ID: 02800050) ...............................332
2.28. NATPOOL ........................................................................................333
2.28.1. uninitialized_ippool (ID: 05600001) ............................................ 333
2.28.2. removed_translation_address (ID: 05600002) ................................ 333
2.28.3. reconf_state_violation (ID: 05600003) .........................................333
2.28.4. out_of_memory (ID: 05600005) ..................................................334
2.28.5. dhcp_address_expired (ID: 05600006) .........................................334
2.28.6. out_of_memory (ID: 05600007) ..................................................334
2.28.7. proxyarp_failed (ID: 05600008) ..................................................335
2.28.8. max_states_reached (ID: 05600009) ............................................335
2.28.9. max_states_reached (ID: 05600010) ............................................335
2.28.10. registerip_failed (ID: 05600011) ...............................................336
2.28.11. registerip_failed (ID: 05600012) ...............................................336
2.28.12. dynamicip_failed (ID: 05600013) ..............................................336
2.28.13. synchronization_failed (ID: 05600014) .......................................337
2.28.14. registerip_failed (ID: 05600015) ...............................................337
2.29. OSPF ...............................................................................................338
2.29.1. internal_error (ID: 02400001) .....................................................338
2.29.2. internal_error (ID: 02400002) .....................................................338
2.29.3. unable_to_map_ptp_neighbor (ID: 02400003) ............................... 338
2.29.4. bad_packet_len (ID: 02400004) ..................................................339
2.29.5. bad_ospf_version (ID: 02400005) ...............................................339
2.29.6. sender_not_in_iface_range (ID: 02400006) ................................... 339
2.29.7. area_mismatch (ID: 02400007) ...................................................340
2.29.8. hello_netmask_mismatch (ID: 02400008) ..................................... 340
2.29.9. hello_interval_mismatch (ID: 02400009) ......................................341
2.29.10. hello_rtr_dead_mismatch (ID: 02400010) ................................... 341
2.29.11. hello_e_flag_mismatch (ID: 02400011) ......................................341
2.29.12. hello_n_flag_mismatch (ID: 02400012) ......................................342
2.29.13. both_np_and_e_flag_set (ID: 02400013) .....................................342
2.29.14. unknown_lsa_type (ID: 02400014) ............................................342
2.29.15. auth_mismatch (ID: 02400050) .................................................343
Log Reference Guide
17

2.29.16. bad_auth_password (ID: 02400051) ...........................................343
2.29.17. bad_auth_crypto_key_id (ID: 02400052) .................................... 343
2.29.18. bad_auth_crypto_seq_number (ID: 02400053) ............................. 344
2.29.19. bad_auth_crypto_digest (ID: 02400054) ..................................... 344
2.29.20. checksum_mismatch (ID: 02400055) ......................................... 344
2.29.21. dd_mtu_exceeds_interface_mtu (ID: 02400100) ........................... 345
2.29.22. m_ms_mismatch (ID: 02400101) ...............................................345
2.29.23. i_flag_misuse (ID: 02400102) ...................................................345
2.29.24. opt_change (ID: 02400103) ......................................................346
2.29.25. bad_seq_num (ID: 02400104) ...................................................346
2.29.26. non_dup_dd (ID: 02400105) .....................................................346
2.29.27. as_ext_on_stub (ID: 02400106) .................................................347
2.29.28. unknown_lsa (ID: 02400107) ....................................................347
2.29.29. bad_lsa_sequencenumber (ID: 02400108) ...................................347
2.29.30. bad_lsa_maxage (ID: 02400109) ...............................................348
2.29.31. lsa_checksum_mismatch (ID: 02400150) ....................................348
2.29.32. unknown_lsa_type (ID: 02400151) ............................................348
2.29.33. bad_lsa_sequencenumber (ID: 02400152) ...................................349
2.29.34. bad_lsa_maxage (ID: 02400153) ...............................................349
2.29.35. received_as_ext_on_stub (ID: 02400154) ....................................349
2.29.36. received_selforg_for_unknown_lsa_type (ID: 02400155) ...............350
2.29.37. db_copy_more_recent_then_received (ID: 02400156) ................... 350
2.29.38. got_ack_mismatched_lsa (ID: 02400157) ....................................350
2.29.39. upd_packet_lsa_size_mismatch (ID: 02400158) ........................... 351
2.29.40. req_packet_lsa_size_mismatch (ID: 02400159) ............................ 351
2.29.41. ack_packet_lsa_size_mismatch (ID: 02400160) ........................... 351
2.29.42. failed_to_create_replacement_lsa (ID: 02400161) ......................... 352
2.29.43. unable_to_send_ack (ID: 02400162) .......................................... 352
2.29.44. unknown_neighbor (ID: 02400200) ...........................................352
2.29.45. too_many_neighbors (ID: 02400201) ......................................... 353
2.29.46. neighbor_died (ID: 02400202) ..................................................353
2.29.47. unable_to_find_transport_area (ID: 02400300) ............................ 353
2.29.48. internal_error_unable_to_map_identifier (ID: 02400301) ............... 354
2.29.49. lsa_size_too_big (ID: 02400302) ...............................................354
2.29.50. memory_usage_exceeded_70_percent_of_max_allowed (ID: 02400303)
........................................................................................................354
2.29.51. memory_usage_exceeded_90_percent_of_max_allowed (ID: 02400304)
........................................................................................................355
2.29.52. as_disabled_due_to_mem_alloc_fail (ID: 02400305) .................... 355
2.29.53. internal_lsa_chksum_error (ID: 02400306) ..................................355
2.29.54. unable_to_find_iface_to_stub_net (ID: 02400400) ........................356
2.29.55. internal_error_unable_to_find_lnk_connecting_to_lsa (ID: 02400401) 356
2.29.56. internal_error_unable_to_find_iface_connecting_to_lsa (ID: 02400402)
........................................................................................................356
2.29.57. internal_error_unable_to_find_lnk_connecting_to_lsa (ID: 02400403) 357
2.29.58. internal_error_unable_to_find_iface_connecting_to_lsa (ID: 02400404)
........................................................................................................357
2.29.59. internal_error_unable_neighbor_iface_attached_back_to_me (ID:
02400405) ........................................................................................357
2.29.60. bad_iface_type_mapping_rtr_to_rtr_link (ID: 02400406) ............... 358
2.29.61. internal_error_unable_to_find_lnk_connecting_to_lsa (ID: 02400407) 358
2.29.62. memory_allocation_failure (ID: 02400500) .................................358
2.29.63. unable_to_send (ID: 02400501) ................................................359
2.29.64. failed_to_add_route (ID: 02400502) .......................................... 359
2.30. PPP ..................................................................................................360
2.30.1. ip_pool_empty (ID: 02500001) ...................................................360
2.30.2. ip_address_required_but_not_received (ID: 02500002) ................... 360
2.30.3. primary_dns_address_required_but_not_received (ID: 02500003) ..... 360
2.30.4. seconday_dns_address_required_but_not_received (ID: 02500004) ... 361
2.30.5. primary_nbns_address_required_but_not_received (ID: 02500005) ...361
2.30.6. seconday_nbns_address_required_but_not_received (ID: 02500006) . 361
2.30.7. failed_to_agree_on_authentication_protocol (ID: 02500050) ............ 362
2.30.8. peer_refuses_to_use_authentication (ID: 02500051) .......................362
Log Reference Guide
18

2.30.9. lcp_negotiation_stalled (ID: 02500052) ........................................362
2.30.10. ppp_tunnel_limit_exceeded (ID: 02500100) ................................363
2.30.11. authentication_failed (ID: 02500101) .........................................363
2.30.12. response_value_too_long (ID: 02500150) ................................... 363
2.30.13. username_too_long (ID: 02500151) ........................................... 364
2.30.14. username_too_long (ID: 02500201) ........................................... 364
2.30.15. username_too_long (ID: 02500301) ........................................... 364
2.30.16. username_too_long (ID: 02500350) ........................................... 364
2.30.17. password_too_long (ID: 02500351) ...........................................365
2.30.18. unsupported_auth_server (ID: 02500500) ....................................365
2.30.19. radius_error (ID: 02500501) .....................................................365
2.30.20. authdb_error (ID: 02500502) ....................................................366
2.30.21. ldap_error (ID: 02500503) .......................................................366
2.30.22. MPPE_decrypt_fail (ID: 02500600) ...........................................366
2.31. PPPOE .............................................................................................367
2.31.1. pppoe_tunnel_up (ID: 02600001) ................................................367
2.31.2. pppoe_tunnel_closed (ID: 02600002) ........................................... 367
2.32. PPTP ................................................................................................368
2.32.1. pptpclient_resolve_successful (ID: 02700001) ............................... 368
2.32.2. pptpclient_resolve_failed (ID: 02700002) .....................................368
2.32.3. pptp_connection_disallowed (ID: 02700003) .................................368
2.32.4. unknown_pptp_auth_source (ID: 02700004) ................................. 369
2.32.5. user_disconnected (ID: 02700005) ..............................................369
2.32.6. only_routes_set_up_by_server_iface_allowed (ID: 02700006) ..........369
2.32.7. mppe_required (ID: 02700007) ...................................................370
2.32.8. pptp_session_closed (ID: 02700008) ............................................ 370
2.32.9. pptp_session_request (ID: 02700009) .......................................... 370
2.32.10. unsupported_message (ID: 02700010) ........................................371
2.32.11. failure_init_radius_accounting (ID: 02700011) ............................ 371
2.32.12. pptp_session_up (ID: 02700012) ...............................................371
2.32.13. pptp_session_up (ID: 02700013) ...............................................372
2.32.14. tunnel_idle_timeout (ID: 02700014) .......................................... 372
2.32.15. session_idle_timeout (ID: 02700015) ......................................... 373
2.32.16. pptpclient_start (ID: 02700017) .................................................373
2.32.17. pptpclient_connected (ID: 02700018) .........................................373
2.32.18. pptp_tunnel_up (ID: 02700019) ................................................374
2.32.19. ctrlconn_refused (ID: 02700020) ...............................................374
2.32.20. pptp_tunnel_up (ID: 02700021) ................................................374
2.32.21. pptp_tunnel_closed (ID: 02700022) ...........................................375
2.32.22. pptp_connection_disallowed (ID: 02700024) ............................... 375
2.32.23. unknown_pptp_auth_source (ID: 02700025) ................................375
2.32.24. pptp_no_userauth_rule_found (ID: 02700026) .............................376
2.32.25. malformed_packet (ID: 02700027) ............................................376
2.32.26. waiting_for_ip_to_listen_on (ID: 02700050) ...............................376
2.33. REASSEMBLY .................................................................................377
2.33.1. ack_of_not_transmitted_data (ID: 04800002) ................................377
2.33.2. invalid_tcp_checksum (ID: 04800003) ......................................... 377
2.33.3. mismatching_data_in_overlapping_tcp_segment (ID: 04800004) ......377
2.33.4. memory_allocation_failure (ID: 04800005) ...................................378
2.33.5. drop_due_to_buffer_starvation (ID: 04800007) ..............................378
2.33.6. failed_to_send_ack (ID: 04800008) .............................................378
2.33.7. processing_memory_limit_reached (ID: 04800009) ........................378
2.33.8. maximum_connections_limit_reached (ID: 04800010) ....................379
2.33.9. state_memory_allocation_failed (ID: 04800011) ............................ 379
2.34. RFO .................................................................................................380
2.34.1. has_ping (ID: 04100001) ...........................................................380
2.34.2. no_ping (ID: 04100002) ............................................................380
2.34.3. no_ping (ID: 04100003) ............................................................380
2.34.4. unable_to_register_pingmon (ID: 04100004) .................................381
2.34.5. unable_to_register_pingmon (ID: 04100005) .................................381
2.34.6. has_arp (ID: 04100006) .............................................................381
2.34.7. no_arp (ID: 04100007) ..............................................................382
2.34.8. unable_to_register_arp_monitor (ID: 04100008) ............................ 382
Log Reference Guide
19

2.34.9. unable_to_register_arp_monitor (ID: 04100009) ............................ 382
2.34.10. no_link (ID: 04100010) ...........................................................383
2.34.11. has_link (ID: 04100011) ..........................................................383
2.34.12. unable_to_register_interface_monitor (ID: 04100012) ...................384
2.34.13. unable_to_register_interface_monitor (ID: 04100013) ...................384
2.34.14. hostmon_failed (ID: 04100014) .................................................384
2.34.15. hostmon_successful (ID: 04100015) .......................................... 385
2.35. RULE ..............................................................................................386
2.35.1. ruleset_fwdfast (ID: 06000003) ..................................................386
2.35.2. ip_verified_access (ID: 06000005) ..............................................386
2.35.3. rule_match (ID: 06000006) ........................................................386
2.35.4. rule_match (ID: 06000007) ........................................................387
2.35.5. block0net (ID: 06000010) ..........................................................387
2.35.6. block0net (ID: 06000011) ..........................................................387
2.35.7. block127net (ID: 06000012) .......................................................388
2.35.8. block127net (ID: 06000013) .......................................................388
2.35.9. directed_broadcasts (ID: 06000030) .............................................388
2.35.10. directed_broadcasts (ID: 06000031) ...........................................389
2.35.11. unknown_vlanid (ID: 06000040) ...............................................389
2.35.12. ruleset_reject_packet (ID: 06000050) ......................................... 389
2.35.13. ruleset_drop_packet (ID: 06000051) .......................................... 389
2.35.14. unhandled_local (ID: 06000060) ...............................................390
2.36. SESMGR ..........................................................................................391
2.36.1. sesmgr_session_created (ID: 04900001) .......................................391
2.36.2. sesmgr_session_denied (ID: 04900002) ........................................ 391
2.36.3. sesmgr_session_removed (ID: 04900003) ..................................... 391
2.36.4. sesmgr_access_set (ID: 04900004) ..............................................392
2.36.5. sesmgr_session_timeout (ID: 04900005) ......................................392
2.36.6. sesmgr_upload_denied (ID: 04900006) ........................................ 392
2.36.7. sesmgr_console_denied (ID: 04900007) ....................................... 393
2.36.8. sesmgr_session_maximum_reached (ID: 04900008) ....................... 393
2.36.9. sesmgr_allocate_error (ID: 04900009) ......................................... 393
2.36.10. sesmgr_session_activate (ID: 04900010) .....................................394
2.36.11. sesmgr_session_disabled (ID: 04900011) .................................... 394
2.36.12. sesmgr_console_denied_init (ID: 04900012) ...............................394
2.36.13. sesmgr_session_access_missing (ID: 04900015) ..........................395
2.36.14. sesmgr_session_old_removed (ID: 04900016) .............................395
2.36.15. sesmgr_file_error (ID: 04900017) ..............................................395
2.36.16. sesmgr_techsupport (ID: 04900018) ........................................... 396
2.37. SLB .................................................................................................397
2.37.1. server_online (ID: 02900001) .....................................................397
2.37.2. server_offline (ID: 02900002) ....................................................397
2.38. SMTPLOG ........................................................................................398
2.38.1. unable_to_establish_connection (ID: 03000001) ............................398
2.38.2. connect_timeout (ID: 03000002) .................................................398
2.38.3. send_failure (ID: 03000004) .......................................................398
2.38.4. receive_timeout (ID: 03000005) ..................................................399
2.38.5. rejected_connect (ID: 03000006) ................................................399
2.38.6. rejected_ehlo_helo (ID: 03000007) ..............................................399
2.38.7. rejected_sender (ID: 03000008) ..................................................399
2.38.8. rejected_recipient (ID: 03000009) ...............................................400
2.38.9. rejected_all_recipients (ID: 03000010) .........................................400
2.38.10. rejected_data (ID: 03000011) ....................................................400
2.38.11. rejected_message_text (ID: 03000012) ....................................... 401
2.39. SNMP ..............................................................................................402
2.39.1. disallowed_sender (ID: 03100001) ..............................................402
2.39.2. invalid_snmp_community (ID: 03100002) ....................................402
2.40. SSHD ...............................................................................................403
2.40.1. out_of_mem (ID: 04700001) ......................................................403
2.40.2. dh_key_exchange_failure (ID: 04700002) ..................................... 403
2.40.3. illegal_version_string (ID: 04700004) ..........................................403
2.40.4. error_occurred (ID: 04700005) ...................................................403
2.40.5. invalid_mac (ID: 04700007) .......................................................404
Log Reference Guide
20