2.19. FRAG
These log messages refer to the FRAG (Fragmentation events) category.
2.19.1. individual_frag_timeout (ID: 02000001)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Context Parameters
2.19.2. fragact_contains_frags (ID: 02000002)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Context Parameters
2.19.3. fail_suspect_out_of_resources (ID: 02000003)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
WARNING
Individual fragment timed out.
A fragment of an IP packet timed out, and is dropped.
drop
None.
1
Rule Name
Packet Buffer
CRITICAL
Internal Error: A failed active fragment contained fragments.
Dropping
An Internal Error occured when freeing an active fragment.
Dropping packet.
drop
None.
1
Dropped Fragments
Rule Name
CRITICAL
Out of reassembly resources for suspect. Frags: <frags>.
<srcip>-<destip> <ipproto> FragID: <fragid>, State: <fragact>
Out of fragmentation-reassembly resources when processing the IP
packet, which may contain illegal fragments. Dropping packet and
freeing resources.
drop
None.
259
Chapter 2: Log Message Reference