ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
C-10 System Logs and Error Messages
v1.0, September 2009
Multicast/Broadcast Logs
This section describes logs that are generated when the UTM processes multicast and broadcast
packets.
Invalid Packet Logging
This section describes logs that are generated when the UTM processes invalid packets.
Table C-16. System Logs: Multicast/Broadcast
Message Jan 1 07:24:13 [UTM] [kernel] MCAST-BCAST IN=WAN OUT=SELF
SRC=192.168.1.73 DST=192.168.1.255 PROTO=UDP SPT=138 DPT=138
Explanation • This packet (broadcast) is destined to the device from the WAN network.
• For other settings, see Table C-1.
Recommended Action None
Table C-17. System Logs: Invalid Packets
Message 2007 Oct 1 00:44:17 [UTM] [kernel] [INVALID]
[NO_CONNTRACK_ENTRY] [DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
Explanation No connection tracking entry exists.
Recommended Action None
Message 2007 Oct 1 00:44:17 [UTM] [kernel]
[INVALID][RST_PACKET][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
Explanation Invalid RST packet.
Recommended Action None
Message 2007 Oct 1 00:44:17 [UTM] [kernel]
[INVALID][ICMP_TYPE][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=ICMP TYPE=19 CODE=0
Explanation Invalid ICMP type.
Recommended Action None
Message 2007 Oct 1 00:44:17 [UTM] [kernel]
[INVALID][TCP_FLAG_COMBINATION][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
Explanation Invalid TCP flag combination.
Recommended Action None