ZyXEL Communications Vantage Report User Manual page 617

Table 277 IPSec Logs
LOG MESSAGE
Corrupt packet,
Inbound transform
operation fail
Encapsulated packet
too big with length
Get inbound transform
fail
Get outbound transform
fail
Inbound transform
operation fail
Outbound transform
operation fail
Packet too big with
Fragment Off
SPI:0x%x SEQ:0x%x
Execute transform step
fail, ret=%d
SPI:0x%x SEQ:0x%x No
rule found, Dropping
packet
SPI:0x%x SEQ:0x%x
Packet Anti-Replay
detected
VPN connection %s was
disabled.
VPN connection %s was
enabled.
Table 278 Firewall Logs
LOG MESSAGE
priority:%lu, from %s
to %s, service %s, %s
%s:%d: in %s():
Firewall has been %s.
Vantage Report User's Guide
Appendix B ZyWALL USG Series and ZyWALL 1050 Log Descriptions
DESCRIPTION
The device received corrupt IPsec packets and could not
process them.
An outgoing packet needed to be transformed but was longer
than 65535.
When performing inbound processing for incoming IPSEC
packets and ICMPs related to them, the engine cannot obtain
the transform context.
When outgoing packet need to be transformed, the engine
cannot obtain the transform context.
After encryption or hardware accelerated processing,
HWAccel dropped packet (resource shortage, corrupt packet,
invalid MAC, and so on).
After encryption or hardware accelerated processing, Hwaccel
dropped packet (e.g., resource overflow, corrupt packet, and
so on).
An outgoing packet needed to be transformed, but the
fragment flag was off and the packet was too big.
The variables represent the SPI, sequence number and the
error number. When trying to perform transforming, the
engine returned an error.
The variables represent the SPI and the sequence number.
The packet did not match the tunnel policy and was dropped.
The variables represent the SPI and the sequence number.
The device received a packet again (that it had already
received).
%s is the VPN connection name. An administrator disabled the
VPN connection.
%s is the VPN connection name. An administrator enabled the
VPN connection.
DESCRIPTION
1st variable is the global index of rule, 2nd is the from zone,
3rd is the to zone, 4th is the service name, 5th is ACCEPT/
DROP/REJECT.
Firewall is dead, trace to %s is which file, %d is which line, %s
is which function
%s is enabled/disabled
617