HP ProCurve 9304M Installation And Configuration Manual page 481

Message Level Message
Notification Transit ICMP in interface <portnum>
exceeds <num> burst packets, stopping for
<num> seconds!!
Notification Local TCP exceeds <num> burst packets,
stopping for <num> seconds!!
Notification Transit TCP in interface <portnum> exceeds
<num> burst packets, stopping for <num>
seconds!!
Notification DOT1X issues software but not physical port
up indication of Port <portnum> to other
software applications
Notification DOT1X issues software but not physical port
down indication of Port <portnum> to other
software applications
Informational Cold start
Table A.2: HP Syslog Messages (Continued)
Explanation
Threshold parameters for ICMP transit
(through) traffic have been configured on an
interface, and the maximum burst size for
ICMP packets on the interface has been
exceeded.
The <portnum> is the port number.
The first <num> is the maximum burst size
(maximum number of packets allowed).
The second <num> is the number of
seconds during which additional ICMP
packets will be blocked on the interface.
Note: This message can occur in response
to an attempted Smurf attack.
Threshold parameters for local TCP traffic on
the device have been configured, and the
maximum burst size for TCP packets has
been exceeded.
The first <num> is the maximum burst size
(maximum number of packets allowed).
The second <num> is the number of
seconds during which additional TCP
packets will be blocked on the device.
Note: This message can occur in response
to an attempted TCP SYN attack.
Threshold parameters for TCP transit
(through) traffic have been configured on an
interface, and the maximum burst size for
TCP packets on the interface has been
exceeded.
The <portnum> is the port number.
The first <num> is the maximum burst size
(maximum number of packets allowed).
The second <num> is the number of
seconds during which additional TCP
packets will be blocked on the interface.
Note: This message can occur in response
to an attempted TCP SYN attack.
The device has indicated that the specified
port has been authenticated, but the actual
port may not be active.
The device has indicated that the specified is
no longer authorized, but the actual port may
still be active.
The device has been powered on.
Using Syslog
A - 29