These log messages refer to the FRAG category.
2.14.1. [ID: 505] Fragment with invalid offset
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Fragment with invalid offset.
- Default Log Severity
- Error
- Parameters
- pkt
- Explanation
- A fragment with invalid offset was received.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.2. [ID: 617] The fragment has an invalid IP data length
- Log Categories
- FRAG,VALIDATE,STATELESS
- Log Message
- The fragment has an invalid IP data length.
- Default Log Severity
- Error
- Parameters
- datalen, pkt
- Explanation
- The partly reassembled IP packet has an invalid IP data length.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.3. [ID: 495] Dropping stored fragments of disallowed packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping stored fragments of disallowed packet.
- Default Log Severity
- Warning
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- The fragments of a disallowed IP packet were dropped. The count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:DroppedFrags setting to modify the logging of dropped fragments.
2.14.4. [ID: 389] Dropping duplicate fragment
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping duplicate fragment.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A duplicate fragment of an IP packet was received.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:DuplicateFrags setting to modify the logging of duplicate fragments.
2.14.5. [ID: 174] Duplicate fragment with different data[...]
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Duplicate fragment with different data received.
- Default Log Severity
- Error
- Parameters
- pkt
- Explanation
- The fragment was a duplicate of an already received fragment, but the fragment data differed.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.6. [ID: 525] Duplicate fragment with different length[...]
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Duplicate fragment with different length received.
- Default Log Severity
- Error
- Parameters
- pkt
- Explanation
- The fragment was a duplicate of an already received fragment, but the fragment lengths differed.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.7. [ID: 343] Dropping duplicate fragment of suspect packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping duplicate fragment of suspect packet.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A duplicate fragment of a suspect IP packet was received.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:DuplicateFrags setting to modify the logging of duplicate fragments.
2.14.8. [ID: 528] Dropping extraneous fragments of completed[...]
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping extraneous fragments of completed packet.
- Default Log Severity
- Warning
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- A completed reassembled IP packet contained extraneous fragments, which were dropped. The count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.9. [ID: 473] Fragment offset plus length not in range
- Log Categories
- FRAG,VALIDATE,STATELESS
- Log Message
- Fragment offset plus length not in range.
- Default Log Severity
- Error
- Parameters
- minlen, maxlen, pkt
- Explanation
- The fragment offset and length would be outside of the allowed IP size range.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the LengthLimSettings:LogOversizedPackets setting to modify the logging of over sized packets.
2.14.10. [ID: 171] Dropping extraneous fragment of completed[...]
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping extraneous fragment of completed packet.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A completed reassembled IP packet contained an extraneous fragment, which was dropped.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.11. [ID: 100] Dropping fragment of disallowed packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping fragment of disallowed packet.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A fragment of a disallowed IP packet was dropped.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:DroppedFrags setting to modify the logging of dropped fragments.
2.14.12. [ID: 383] Dropping fragment of disallowed suspect packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping fragment of disallowed suspect packet.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A fragment of a disallowed suspect IP packet was dropped.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:DroppedFrags setting to modify the logging of dropped fragments.
2.14.13. [ID: 582] Dropping fragment of failed packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping fragment of failed packet.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A fragment of a failed IP packet was dropped.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragReassemblyFail setting to modify the logging of failed packet reassembly attempts.
2.14.14. [ID: 248] Dropping fragment of failed suspect packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping fragment of failed suspect packet.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A fragment of a failed suspect IP packet was dropped.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragReassemblyFail setting to modify the logging of failed packet reassembly attempts.
2.14.15. [ID: 336] Dropping fragment of illegal packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping fragment of illegal packet.
- Default Log Severity
- Warning
- Parameters
- pkt
- Explanation
- A fragment of an illegal IP packet was dropped.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- FRAG_DropIllegal
2.14.16. [ID: 203] Fragmented ICMP error
- Log Categories
- FRAG,VALIDATE,STATELESS
- Log Message
- Fragmented ICMP error.
- Default Log Severity
- Warning
- Parameters
- type, pkt
- Explanation
- A disallowed fragmented ICMP error message was received. Only "Echo" and "EchoReply" are allowed to be fragmented.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragmentedICMP setting to modify the handling of fragmented ICMP error messages.
2.14.17. [ID: 577] Fragments partially overlap
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Fragments partially overlap.
- Default Log Severity
- Error
- Parameters
- pkt
- Explanation
- Two fragments partially overlap.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.18. [ID: 570] Dropping fragments of illegal packet
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping fragments of illegal packet.
- Default Log Severity
- Warning
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- The fragments of an illegal IP packet were dropped. The count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.19. [ID: 380] Fragment offset plus length is greater than[...]
- Log Categories
- FRAG,VALIDATE,STATELESS
- Log Message
- Fragment offset plus length is greater than the configured maximum.
- Default Log Severity
- Error
- Parameters
- max, pkt
- Explanation
- The fragment offset plus length would result in a greater length than the configured maximum length of an IP packet.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the LengthLimSettings:LogOversizedPackets setting to modify the logging of over sized packets.
2.14.20. [ID: 265] Out of reassembly resources
- Log Categories
- FRAG,VALIDATE,STATELESS
- Log Message
- Out of reassembly resources.
- Default Log Severity
- Critical
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- Out of fragmentation reassembly resources when processing the IP packet. Dropping packet and freeing resources. The count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragReassemblyFail setting to modify the logging of failed packet reassembly attempts.
2.14.21. [ID: 414] Out of reassembly resources for suspect packet
- Log Categories
- FRAG,VALIDATE,STATELESS
- Log Message
- Out of reassembly resources for suspect packet.
- Default Log Severity
- Critical
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- Out of fragmentation reassembly resources when processing the suspect IP packet. Dropping packet and freeing resources. The
count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragReassemblyFail setting to modify the logging of failed packet reassembly attempts.
2.14.22. [ID: 159] Fragment overlapping next fragment offset
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Fragment overlapping next fragment offset.
- Default Log Severity
- Error
- Parameters
- pkt
- Explanation
- This fragment would overlap the next fragment offset.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:IllegalFrags setting to modify the handling of illegal fragments.
2.14.23. [ID: 516] Dropping stored fragments of disallowed[...]
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Dropping stored fragments of disallowed suspect packet.
- Default Log Severity
- Warning
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- The fragments of a disallowed suspect IP packet were dropped. The count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- FRAG_DropDisallowed
2.14.24. [ID: 289] Time out reassembling
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Time out reassembling.
- Default Log Severity
- Critical
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- Timed out when reassembling a fragmented IP packet. Dropping packet. The count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragReassemblyFail setting to modify the logging of failed packet reassembly attempts.
2.14.25. [ID: 326] Time out reassembling suspect
- Log Categories
- FRAG,VALIDATE,STATEFUL
- Log Message
- Time out reassembling suspect.
- Default Log Severity
- Critical
- Parameters
- count, srcip, destip, ipproto, fragid, state, value
- Explanation
- Timed out when reassembling a fragmented suspect IP packet. The count parameter displays the number of freed fragments while the value parameter contains fragment offset and IP length for the freed fragments.
- Gateway Action
- Drop
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragReassemblyFail setting to modify the logging of failed packet reassembly attempts.
2.14.26. [ID: 126] Fragmented ICMP error
- Log Categories
- FRAG,VALIDATE,STATELESS
- Log Message
- Fragmented ICMP error.
- Default Log Severity
- Warning
- Parameters
- type, pkt
- Explanation
- A disallowed fragmented ICMP error message was received. Only "Echo" and "EchoReply" are allowed to be fragmented.
- Gateway Action
- Allow
- Action Description
- None
- Proposed Action
- Change the FragSettings:FragmentedICMP setting to modify the handling of fragmented ICMP error messages.
cOS Stream 4.00.03 Log Reference Guide
