2.42. Tcp_Flag; Tcp_Flags_Set (Id: 03300001); Tcp_Flags_Set (Id: 03300002); Tcp_Flag_Set (Id: 03300003) - D-Link NetDefend DFL-210 Log Reference Manual

2.42. TCP_FLAG

2.42. TCP_FLAG
These log messages refer to the TCP_FLAG (Events concerning the TCP header flags) category.

2.42.1. tcp_flags_set (ID: 03300001)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
Context Parameters

2.42.2. tcp_flags_set (ID: 03300002)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
Context Parameters

2.42.3. tcp_flag_set (ID: 03300003)

Default Severity
Log Message
Explanation
NOTICE
The TCP <good_flag> and <bad_flag> flags are set. Allowing
The possible combinations for these flags are: SYN URG, SYN PSH,
SYN RST, SYN FIN and FIN URG.
allow
If any of these combinations should either be dropped or having the
bad flag stripped, specify this in configuration, in the "Settings" sub
system.
1
good_flag
bad_flag
Rule Name
Packet Buffer
WARNING
The TCP <good_flag> and <bad_flag> flags are set. Stripping
<bad_flag> flag
The possible combinations for these flags are: SYN URG, SYN PSH,
SYN RST, SYN FIN and FIN URG. Removing the "bad" flag.
strip_bad_flag
If any of these combinations should either be dropped or ignored,
specify this in configuration, in the "Settings" sub system.
1
good_flag
bad_flag
Rule Name
Packet Buffer
NOTICE
The TCP <bad_flag> flag is set. Ignoring
The TCP flag is set. Ignoring.
424
Chapter 2. Log Message Reference