beautypg.com

Brocade FastIron Ethernet Switch Administration Guide User Manual

Page 346

background image

Message Level

Notification

Message

Local ICMP exceeds burst-max burst packets,
stopping for lockup seconds!!

Explanation

The number of ICMP packets exceeds the burst-max threshold set by the
ip icmp burst command. The Brocade device may be the victim of a
Denial of Service (DoS) attack.

All ICMP packets will be dropped for the number of seconds specified by
the lockup value. When the lockup period expires, the packet counter is
reset and measurement is restarted.

Message Level

Notification

Message

Local TCP exceeds burst-max burst packets,
stopping for lockup seconds!!

Explanation

The number of TCP SYN packets exceeds the burst-max threshold set by
the ip tcp burst command. The Brocade device may be the victim of a
TCP SYN DoS attack.

All TCP SYN packets will be dropped for the number of seconds specified
by the locku p value. When the lockup period expires, the packet counter is
reset and measurement is restarted.

Message
Level

Notification

Message

Local TCP exceeds num burst packets, stopping for
num seconds!!

Explanation

Threshold parameters for local TCP traffic on the device have been
configured, and the maximum burst size for TCP packets has been
exceeded.

The first num is the maximum burst size (maximum number of packets
allowed).

The second num is the number of seconds during which additional TCP
packets will be blocked on the device.

NOTE
This message can occur in response to an attempted TCP SYN attack.

Message
Level

Notification

Message

MAC Authentication RADIUS timeout for mac_address
on port port_id

Syslog messages

346

FastIron Ethernet Switch Administration Guide

53-1003075-02