Bad_Packet_Order (Id: 03700502); Bad_Clienthello_Msg (Id: 03700503); Bad_Changecipher_Msg (Id: 03700504) - D-Link DFL-260E Log Reference Manual

2.49.46. bad_packet_order (ID:
03700502)
Gateway Action
Recommended Action
Revision
Parameters

2.49.46. bad_packet_order (ID: 03700502)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters

2.49.47. bad_clienthello_msg (ID: 03700503)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters

2.49.48. bad_changecipher_msg (ID: 03700504)

Default Severity
Log Message
Explanation
Gateway Action
ssl_close
Investigate the source of this, and try to find out if it is a part of a
possible attack, or normal traffic.
2
client_ip
ERROR
Bad SSL Handshake packet order. Closing down SSL connection
Two or more SSL Handshake message were received in the wrong
order, and the SSL connection is closed.
ssl_close
None.
1
client_ip
ERROR
SSL Handshake: Bad ClientHello message. Closing down SSL
connection
The ClientHello message (which is the first part of a SSL handshake)
is invalid, and the SSL connection is closed.
ssl_close
None.
1
client_ip
ERROR
SSL Handshake: Bad ChangeCipher message. Closing down SSL
connection
The ChangeCipher message (which is a part of a SSL handshake) is
invalid, and the SSL connection is closed.
ssl_close
514
Chapter 2. Log Message Reference