Bad_Src (Id: 04200011); Igmp_Report_Received (Id: 04200012) - D-Link NetDefend SOHO DFL-160 Reference Manual

Utm firewall
Hide thumbs Also See for NetDefend SOHO DFL-160:
Table of Contents

Advertisement

2.13.10. bad_src (ID: 04200011)

Explanation
Gateway Action
Recommended Action
Revision
Parameters
2.13.10. bad_src (ID: 04200011)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters

2.13.11. igmp_report_received (ID: 04200012)

Default Severity
Log Message
Explanation
into <sgrp> and source <src> into <ssrc>.
Got IGMP Query.
allow
None.
1
if
rip
igmpver
grp
src
sgrp
ssrc
name
action
WARNING
Rule <name> drops multicast sender <src> (SAT'ed into <sats>) in
group <grp> (SAT'ed into <satg>) specific IGMP Query at interface
<iface>.
This is most likely a faulty IGMP configuration, but may also indicate
faulty software on the network. Under special circumstances this could
be an active attempt to scan the network for information.
drop
Specifically check your IGMP ruleset for incorrect SAT information
(IGMP support requires at least one "REPORT" (Member Report) rule
and one matching "QUERY" rule). Make sure both multicast groups
and source addresses map one-to-one between Member Reports and
Queries. Finally check the network for for other anomalies that could
indicate broken equipment or installed "spyware".
1
name
src
grp
sats
satg
iface
NOTICE
Rule <name> <action> IGMP Member Report concerning group
<grp> and source <src> at interface <if> from host <hip>. Group
<grp> is translated into <sgrp> and source <src> into <ssrc>
Got IGMP Report.
174
Chapter 2. Log Message Reference

Advertisement

Table of Contents
loading

Table of Contents