Brocade Multi-Service IronWare Administration Guide (Supporting R05.6.00) - Manual (Page 391)

Multi-Service IronWare Administration Guide 373
53-1003028-02
Syslog messages
A
TABLE 78 Syslog messages TCP
Message level Message Explanation
Notification TCP Local TCP exceeds burst-max burst
packets, stopping for lockup seconds! The number of TCP SYN packets exceeds
the burst-max threshold set by the ip tcp
burst command. The device may be the
victim of a TCP SYN DoS attack.
All TCP SYN packets will be dropped for the
number of seconds specified by the lockup
value. When the lockup period expires, the
packet counter is reset and measurement
is restarted.
Notification TCP Transit TCP in interface portnum
exceeds num burst packets, stopping for
num seconds! Threshold parameters for TCP transit
(through) traffic have been configured on
an interface, and the maximum burst size
for TCP packets on the interface has been
exceeded.
The portnum is the port number.
The first num is the maximum burst size
(maximum number of packets allowed).
The second num is the number of seconds
during which additional TCP packets will be
blocked on the interface.
NOTE: This message can occur in
response to an attempted TCP SYN
attack.
TABLE 79 Syslog messages DOT1X
Message level Message Explanation
Warning DOT1X security violation at port portnum,
malicious mac address detected
mac-address A security violation was encountered at the
specified port number.
Warning DOT1X Port portnum,
AuthControlledPortStatus change
restricted
Notification DOT1X Port portnum port default vlan-id
changes to vlan-id
Notification DOT1X Port portnum currently used vlan-id
changes to vlan-id due to move to
restricted vlan
Notification DOT1X issues software port up indication
of Port portnum to other software
applications The device has indicated that the specified
port has been authenticated, but the actual
port may not be active.
Notification DOT1X issues software port down
indication of Port portnum to other
software applications The device has indicated that the specified
is no longer authorized, but the actual port
may still be active.
Informational DOT1X Port portnum,
AuthControlledPortStatus change
authorized The status of the interface’s controlled port
has changed from unauthorized to
authorized.
Informational DOT1X Port portnum,
AuthControlledPortStatus change
unauthorized The status of the interface’s controlled port
has changed from authorized to
unauthorized.