ZyXEL Communications ZyWALL 2Plus User Manual page 593

Table 228 Attack Logs (continued)
LOG MESSAGE
land [ TCP | UDP | IGMP |
ESP | GRE | OSPF ]
land ICMP (type:%d,
code:%d)
ip spoofing - WAN [ TCP |
UDP | IGMP | ESP | GRE |
OSPF ]
ip spoofing - WAN ICMP
(type:%d, code:%d)
icmp echo : ICMP
(type:%d, code:%d)
syn flood TCP
ports scan TCP
teardrop TCP
teardrop UDP
teardrop ICMP (type:%d,
code:%d)
illegal command TCP
NetBIOS TCP
ip spoofing - no routing
entry [ TCP | UDP | IGMP |
ESP | GRE | OSPF ]
ip spoofing - no routing
entry ICMP (type:%d,
code:%d)
vulnerability ICMP
(type:%d, code:%d)
traceroute ICMP (type:%d,
code:%d)
ports scan UDP
Firewall sent TCP packet
in response to DoS attack
TCP
ICMP Source Quench ICMP
ICMP Time Exceed ICMP
ICMP Destination
Unreachable ICMP
ping of death. ICMP
smurf ICMP
Appendix N Log Descriptions
DESCRIPTION
The firewall detected a TCP/UDP/IGMP/ESP/GRE/OSPF land
attack.
The firewall detected an ICMP land attack.
The firewall detected an IP spoofing attack on the WAN port.
The firewall detected an ICMP IP spoofing attack on the WAN port.
The firewall detected an ICMP echo attack.
The firewall detected a TCP syn flood attack.
The firewall detected a TCP port scan attack.
The firewall detected a TCP teardrop attack.
The firewall detected an UDP teardrop attack.
The firewall detected an ICMP teardrop attack.
The firewall detected a TCP illegal command attack.
The firewall detected a TCP NetBIOS attack.
The firewall classified a packet with no source routing entry as an
IP spoofing attack.
The firewall classified an ICMP packet with no source routing entry
as an IP spoofing attack.
The firewall detected an ICMP vulnerability attack.
The firewall detected an ICMP traceroute attack.
The firewall detected a UDP port scan attack.
The firewall sent TCP packet in response to a DoS attack
The firewall detected an ICMP Source Quench attack.
The firewall detected an ICMP Time Exceed attack.
The firewall detected an ICMP Destination Unreachable attack.
The firewall detected an ICMP ping of death attack.
The firewall detected an ICMP smurf attack.
ZyWALL 2 Plus User's Guide
593