Table of Contents
Advertisement
Chapter 2
Messages and Recovery Procedures
Error Message SW_DAI-4-INVALID_ARP: [dec] Invalid ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Explanation
ARP inspection. The packets do not pass one or more validation checks of the source or destination
MAC address or the IP address. The first [dec] is the number of invalid ARP packets. The first
[chars] is either Req (request), Res (response), or Invalid Opcode. The second [chars] is the short
name of the ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action
Error Message SW_DAI-4-PACKET_BURST_RATE_EXCEEDED: [dec] packets received in [dec]
seconds on [chars].
Explanation
the specified burst interval. The interface is in the error-disabled state when the switch receives
packets at a higher rate than the configured packet rate every second over the configured burst
interval. The message is logged just before the interface is error disabled and if the configured burst
interval is more than a second. The first [dec] is the number of packets, the second [dec] is the
number of seconds, and [chars] is the affected interface.
Recommended Action
Error Message SW_DAI-4-PACKET_RATE_EXCEEDED: [dec] packets received in [dec]
milliseconds on [chars].
Explanation
the specified duration on the interface. This message is logged just before the port is put into the
error-disabled state because of the exceeded packet rate and when the burst interval is set to
1 second. The first [dec] is the number of packets, the second [dec] is the number of milliseconds,
and [chars] is the affected interface.
Recommended Action
Error Message SW_DAI-4-SPECIAL_LOG_ENTRY: [dec] Invalid ARP packets [[time-of-day]].
Explanation
ARP inspection. The packets are erroneous, and their presence might show attempted
man-in-the-middle attacks in the network. This message differs from other SW_DAI messages in
that this message captures all messages when the rate of incoming packets exceeds the dynamic ARP
inspection logging rate. [dec] is the number of invalid ARP packets, and [time-of-day] is the time
of day.
Recommended Action
OL-9641-04
This message means that the switch has received ARP packets considered invalid by
No action is required.
This message means that the switch has received the given number of ARP packets in
No action is required.
This message means that the switch has received the given number of ARP packets for
No action is required.
This message means that the switch has received ARP packets considered invalid by
No action is required.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
SW_DAI Messages
2-79
Advertisement
Table of Contents
