Intrusion_Detected (Id: 01300003); Virus_Detected (Id: 01300004) - D-Link NetDefend DFL-210 Log Reference Manual

2.17.3. intrusion_detected (ID:
01300003)
Context Parameters

2.17.3. intrusion_detected (ID: 01300003)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
Context Parameters

2.17.4. virus_detected (ID: 01300004)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
srcport
destip
destport
Rule Name
Deep Inspection
WARNING
Intrusion detected: <description>, Signature ID=<signatureid>. ID
Rule: <idrule>. Protocol: <ipproto>. Source IP: <srcip>. Source Port:
<srcport>. Destination IP: <destip>. Destination Port: <destport>.
Closing connection.
An attack signature mapped to the "protect" action matched the traffic.
close
Research the advisory (searchable by the unique ID).
1
description
signatureid
idrule
ipproto
srcip
srcport
destip
destport
Rule Name
Deep Inspection
WARNING
Virus/worm detected: <description>, Signature ID=<signatureid>. ID
Rule: <idrule>. Protocol: <ipproto>. Source IP: <srcip>. Source Port:
<srcport>. Destination IP: <destip>. Destination Port: <destport>.
Closing connection.
A virus signature mapped to the "protect" action matched the traffic.
close
Research the advisory (searchable by the unique ID).
1
description
signatureid
idrule
ipproto
srcip
srcport
226
Chapter 2. Log Message Reference