ZyXEL Communications ZyXEL ZyWALL 2WE User Manual page 405

LOG MESSAGE
syn flood TCP
ports scan TCP
teardrop TCP
teardrop UDP
teardrop ICMP
(type:%d, code:%d)
illegal command TCP
NetBIOS TCP
ip spoofing - no
routing entry TCP
ip spoofing - no
routing entry UDP
ip spoofing - no
routing entry IGMP
ip spoofing - no
routing entry ESP
ip spoofing - no
routing entry GRE
ip spoofing - no
routing entry OSPF
ip spoofing - no
routing entry ICMP
(type:%d, code:%d)
vulnerability ICMP
(type:%d, code:%d)
traceroute ICMP
(type:%d, code:%d)
Log Descriptions
Chart Q-5 Attack Logs
The firewall detected a TCP syn flood attack.
The firewall detected a TCP port scan attack.
The firewall detected a TCP teardrop attack.
The firewall detected an UDP teardrop attack.
The firewall detected an ICMP teardrop attack; see the section on
ICMP messages for type and code details.
The firewall detected a TCP illegal command attack.
The firewall detected a TCP NetBIOS attack.
The firewall detected a TCP IP spoofing attack while the ZyWALL did
not have a default route.
The firewall detected an UDP IP spoofing attack while the ZyWALL did
not have a default route.
The firewall detected an IGMP IP spoofing attack while the ZyWALL
did not have a default route.
The firewall detected an ESP IP spoofing attack while the ZyWALL did
not have a default route.
The firewall detected a GRE IP spoofing attack while the ZyWALL did
not have a default route.
The firewall detected an OSPF IP spoofing attack while the ZyWALL
did not have a default route.
The firewall detected an ICMP IP spoofing attack while the ZyWALL
did not have a default route; see the section on ICMP messages for
type and code details.
The firewall detected an ICMP vulnerability attack; see the section on
ICMP messages for type and code details.
The firewall detected an ICMP traceroute attack; see the section on
ICMP messages for type and code details.
ZyWALL 2 and ZyWALL 2WE
DESCRIPTION
73