Netgear UTM25EW-100NAS ユーザーズマニュアル
ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
C-10
System Logs and Error Messages
v1.0, September 2009
Multicast/Broadcast Logs
This section describes logs that are generated when the UTM processes multicast and broadcast
packets.
packets.
Invalid Packet Logging
This section describes logs that are generated when the UTM processes invalid packets.
Table C-16. System Logs: Multicast/Broadcast
Message
Jan 1 07:24:13 [UTM] [kernel] MCAST-BCAST IN=WAN OUT=SELF
SRC=192.168.1.73 DST=192.168.1.255 PROTO=UDP SPT=138 DPT=138
SRC=192.168.1.73 DST=192.168.1.255 PROTO=UDP SPT=138 DPT=138
Explanation
Recommended Action
None
Table C-17. System Logs: Invalid Packets
Message
2007 Oct 1 00:44:17 [UTM] [kernel] [INVALID]
[NO_CONNTRACK_ENTRY] [DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
[NO_CONNTRACK_ENTRY] [DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
Explanation
No connection tracking entry exists.
Recommended Action
None
Message
2007 Oct 1 00:44:17 [UTM] [kernel]
[INVALID][RST_PACKET][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
[INVALID][RST_PACKET][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
Explanation
Invalid RST packet.
Recommended Action
None
Message
2007 Oct 1 00:44:17 [UTM] [kernel]
[INVALID][ICMP_TYPE][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=ICMP TYPE=19 CODE=0
[INVALID][ICMP_TYPE][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=ICMP TYPE=19 CODE=0
Explanation
Invalid ICMP type.
Recommended Action
None
Message
2007 Oct 1 00:44:17 [UTM] [kernel]
[INVALID][TCP_FLAG_COMBINATION][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
[INVALID][TCP_FLAG_COMBINATION][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
Explanation
Invalid TCP flag combination.
Recommended Action
None