2.48. SYSLOGALG

These log messages refer to the SYSLOGALG category.

2.48.1. [ID: 1707] Failed to create new session

Log Categories
SYSLOGALG
Log Message
Failed to create new session.
Default Log Severity
Error
Parameters
 
Explanation
An attempt to create a new Syslog ALG session failed, because the unit is out of memory.
Gateway Action
Close
Action Description
None
Proposed Action
Decrease the maximum allowed Syslog ALG sessions, or try to free some of the RAM used.

2.48.2. [ID: 1711] Flow failed

Log Categories
SYSLOGALG
Log Message
Flow failed.
Default Log Severity
Notice
Parameters
reason, originator, sessionid, flow, rule
Explanation
An error occurred that caused the Syslog flow to be aborted.
Gateway Action
Abort
Action Description
None
Proposed Action
None

2.48.3. [ID: 1710] Session closed

Log Categories
SYSLOGALG
Log Message
Session closed.
Default Log Severity
Information
Parameters
sessionid, profile, flow
Explanation
A session using the Syslog ALG was closed.
Gateway Action
Close
Action Description
None
Proposed Action
None

2.48.4. [ID: 1706] Session opened

Log Categories
SYSLOGALG
Log Message
Session opened.
Default Log Severity
Information
Parameters
sessionid, profile, flow
Explanation
A session using the Syslog ALG was opened.
Gateway Action
Open
Action Description
None
Proposed Action
None

2.48.5. [ID: 1708] Too large syslog packet received

Log Categories
SYSLOGALG
Log Message
Too large syslog packet received.
Default Log Severity
Error
Parameters
sessionid, profile, size, max, flow
Explanation
Syslog packet rejected due to being larger than the configuration allows.
Gateway Action
Drop
Action Description
None
Proposed Action
If required, change the configuration to allow syslog packets with this size.

2.48.6. [ID: 1705] Syslog packet rejected

Log Categories
SYSLOGALG
Log Message
Syslog packet rejected.
Default Log Severity
Information
Parameters
sessionid, profile, reason, flow
Explanation
A Syslog packet was rejected by the ALG.
Gateway Action
Drop
Action Description
None
Proposed Action
Verify that the Syslog clients are correctly configured.

2.48.7. [ID: 1712] Prohibited keyword detected in syslog data

Log Categories
SYSLOGALG
Log Message
Prohibited keyword detected in syslog data.
Default Log Severity
Error
Parameters
sessionid, profile, keyword, flow
Explanation
Syslog packet rejected due to presence of a prohibited keyword.
Gateway Action
Drop
Action Description
None
Proposed Action
Change the configuration to allow syslog packets with this keyword.

2.48.8. [ID: 1709] Reverse traffic detected on syslog flow

Log Categories
SYSLOGALG
Log Message
Reverse traffic detected on syslog flow.
Default Log Severity
Error
Parameters
sessionid, profile, flow
Explanation
The Syslog ALG detected data packets sent in the reverse direction i.e. from the server towards the client. The session is closed.
Gateway Action
Drop
Action Description
None
Proposed Action
Investigate why the packets are sent in the reverse direction of the syslog connection.