D-Link DFL-260E Log Reference Guide for DFL-260E
D-Link DFL-260E Manual
 |
View all D-Link DFL-260E manuals
Add to My Manuals
Save this manual to your list of manuals |
D-Link DFL-260E manual content summary:
- D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 1
Network Security Firewall Log Reference Guide NetDefendOS Ver. 2.40.00 SecurSiteycurity Network Security Solution http://www.dlink.com - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 2
Log Reference Guide DFL-260E/860E/1660/2560/2560G NetDefendOS Version 2.40.00 D-Link Corporation No. 289, Sinhu 3rd Rd, Neihu District, Taipei City 114, Taiwan R.O.C. http://www.DLink.com Published 2011-09-06 Copyright © 2011 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 3
Log Reference Guide DFL-260E/860E/1660/2560/2560G NetDefendOS Version 2.40.00 Published 2011-09-06 Copyright © 2011 Copyright Notice This publication, including all photographs, illustrations and software, is protected under international copyright laws, with all rights reserved. Neither this manual - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 4
Table of Contents Preface ...27 1. Introduction ...29 1.1. Log Message Structure 29 1.2. Context Parameters 31 1.3. Severity levels 35 2. Log Message Reference 37 2.1. ALG ...38 2.1.1. alg_session_open (ID: 00200001 38 2.1.2. alg_session_closed (ID: 00200002 39 2.1.3. max_line_length_exceeded - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 5
Log Reference Guide 2.1.51. some_recipient_email_ids_are_in_blocklist (ID: 00200160 57 2.1.52. base64_decode_failed (ID: 00200164 57 2.1.53. base64_decode_failed (ID: 00200165 58 2.1.54. blocked_filetype (ID: 00200166 58 2.1.55. content_type_mismatch (ID: 00200167 58 2.1. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 6
Log Reference Guide 2.1.112. invalid_message (ID: 00200301 80 2.1.113. decode_failed (ID: 00200302 80 2.1.114. encode_failed (ID: 00200303 81 2.1.115. encode_failed (ID: 00200304 81 2.1.116. encode_failed (ID: 00200305 82 2.1. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 7
Log Reference Guide 2.1.174. tls_alert_received (ID: 00200453 103 2.1.175. tls_renegotiation_attempted (ID: 00200454 103 2.1.176. tls_alert_sent (ID: 00200455 104 2.1.177. tls_cipher_suite_certificate_mismatch (ID: 00200456 104 2.1.178. ssl_renegotiation_attempted (ID: 00200457 104 2.1. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 8
Log Reference Guide 2.1.236. failed_to_update_callleg (ID: 00200557 128 2.1.237. sipalg_callleg_deleted (ID: 00200558 128 2.1.238. failed_to_modify_response (ID: 00200559 129 2.1.239. sipalg_callleg_state_updated (ID: 00200560 129 2.1.240. failed_to_modify_sat_request (ID: 00200561 130 2.1. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 9
Log Reference Guide 2.4.10. arp_cache_size_limit_reached (ID: 00300030 152 2.4.11. invalid_arp_sender_ip_address (ID: 00300049 152 2.4.12. arp_access_allowed_expect (ID: 00300050 152 2.4.13. impossible_hw_address (ID: 00300051 153 2.4.14. arp_response_broadcast_drop (ID: 00300052 153 2.4. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 10
Log Reference Guide 2.10.1. unable_to_save_dhcp_relay_list (ID: 00800001 175 2.10.2. dhcp_relay_list_saved (ID: 00800002 175 2.10.3. dhcp_pkt_too_small (ID: 00800003 175 2.10.4. incorrect_bootp_dhcp_cookie (ID: 00800004 175 2.10.5. maximum_ppm_for_relayer_reached (ID: 00800005 176 2. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 11
Log Reference Guide 2.12.4. failed_to_add_route_unable_to_alloc (ID: 01100004 195 2.12.5. route_added (ID: 01100005 195 2.12.6. route_removed (ID: 01100006 195 2.13. FRAG 197 2.13.1. individual_frag_timeout (ID: 02000001 197 2.13.2. fragact_contains_frags ( - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 12
Log Reference Guide 2.15.20. resync_conns_to_peer (ID: 01200100 216 2.15.21. hasync_connection_established (ID: 01200200 216 2.15.22. hasync_connection_disconnected_lifetime_expired (ID: 01200201) . 217 2.15.23. hasync_connection_failed_timeout (ID: 01200202 217 2.15. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 13
Log Reference Guide 2.21. IPPOOL 242 2.21.1. 2.21.17. ip_returned_to_pool (ID: 01900017 247 2.22. IPSEC 248 2.22.1. fatal_ipsec_event (ID: 01800100 248 2.22 failed_to_add_rules (ID: 01800313 260 2.22.39. failed_to_add_rules (ID: 01800314 260 2.22.40. new_remote_gw_ip (ID: 01800315 260 2.22.41. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 14
Log Reference Guide 2.22.44. failed_to_add_key_provider (ID: 01800321 261 2.22.45. failed_to_add_certificate (ID: 01800322 262 2.22.46. failed_to_set_remote_ID (ID: 01800323 262 2.22.47. failed_to_create_authorization (ID: 01800327 262 2.22. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 15
Log Reference Guide 2.22.105. AH_not_supported (ID: 01802204 280 2.22.106. invalid_tunnel_configuration (ID: 01802208 280 2.22.107. invalid_tunnel_configuration (ID: 01802209 280 2.22.108. invalid_tunnel_configuration (ID: 01802210 281 2.22. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 16
Log Reference Guide 2.22.167. init_inbound_spi_hash_failed (ID: 01802915 298 2.22.168. init_transform_context_hash_failed (ID: 01802916 298 2.22.169. init_packet_context_cache_failed (ID: 01802917 298 2.22.170. init_transform_context_table_failed (ID: 01802918 298 2.22. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 17
Log Reference Guide 2.26.1. multicast_ethernet_ip_address_missmatch (ID: 07000011 319 2.26.2. invalid_ip4_header_length (ID: 07000012 319 2.26.3. ttl_zero (ID: 07000013 319 2.26.4. ttl_low (ID: 07000014 320 2.26.5. ip_rsv_flag_set (ID: 07000015 320 2. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 18
Log Reference Guide 2.29.1. internal_error (ID: 02400001 342 2.29.2. internal_error (ID: 02400002 342 2.29.3. unable_to_map_ptp_neighbor (ID: 02400003 342 2.29.4. bad_packet_len (ID: 02400004 343 2.29.5. bad_ospf_version (ID: 02400005 343 2. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 19
Log Reference Guide 2.29.59. internal_error_unable_neighbor_iface_attached_back_to_me (ID: 02400405 362 2.29.60. : 02600001 372 2.31.2. pppoe_tunnel_closed (ID: 02600002 372 2.32. PPTP 373 2.32.1. pptpclient_resolve_successful (ID: 02700001 373 2.32.2. pptpclient_resolve_failed (ID - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 20
Log Reference Guide 2.33.2. invalid_tcp_checksum (ID: 04800003 383 2.33.3. mismatching_data_in_overlapping_tcp_segment (ID: 04800004) ...... 383 2.33.4. memory_allocation_failure (ID: 04800005 384 2.33.5. drop_due_to_buffer_starvation (ID: 04800007 384 2.33.6. failed_to_send_ack (ID: 04800008 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 21
Log Reference Guide 2.38.3. send_failure (ID: 03000004 404 2.38.4. receive_timeout (ID: 03000005 405 2.38.5. rejected_connect (ID: 03000006 405 2.38.6. rejected_ehlo_helo (ID: 03000007 405 2.38.7. rejected_sender (ID: 03000008 405 2. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 22
Log Reference Guide 2.42.20. disk_cannot_rename (ID: 03200604 425 2.42.21. cfg_switch_fail (ID: 03200605 425 2.42.22. core_switch_fail (ID: 03200606 425 2.42.23. bidir_ok (ID: 03200607 426 2.42. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 23
Log Reference Guide 2.45. THRESHOLD 449 2.45.1. conn_threshold_exceeded (ID: 05300100 449 2.45.2. reminder_conn_threshold (ID: 05300101 449 2.45.3. conn_threshold_exceeded (ID: 05300102 449 2.45.4. failed_to_keep_connection_count (ID: 05300200 450 2.45.5. failed_to_keep_connection_count ( - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 24
Log Reference Guide 2.48.34. cant_create_new_request (ID: 03700402 471 2.48.35. ldap_user_authentication_successful (ID: 03700403 471 2.48.36. ldap_user_authentication_failed (ID: 03700404 472 2.48.37. ldap_context_new_out_of_memory (ID: 03700405 472 2.48. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 25
List of Tables 1. Abbreviations 28 25 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 26
List of Examples 1. Log Message Parameters 27 2. Conditional Log Message Parameters 27 26 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 27
configuring and managing a NetDefendOS installation. • Administrators that are responsible for troubleshooting a NetDefendOS installation. This guide assumes that the reader is familiar with NetDefendOS and understands the fundamentals of IP Message New configuration activated by user , - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 28
guide: Table 1. Abbreviations Abbreviation ALG ARP DHCP DNS ESP FTP HA HTTP ICMP IDS IP IPSec L2TP NAT OSPF PPP PPPoE RADIUS SAT SMTP SNMP SSL TCP TLS UDP URL UTF VLAN VPN Full name Application Layer Gateway Address Resolution Protocol Dynamic Host Configuration Authentication Dial In User Service - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 29
maps to a specific subsystem in NetDefendOS. For instance, the IPSEC category includes some hundreds of log messages, all related to IPSec VPN activities. Other examples of categories include ARP, DHCP, IGMP and USERAUTH. In this guide, categories are listed as sections in Chapter 2, Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 30
message is received. If the log message is purely informative, this is set to "None". Note that this information is only featured in this reference guide, and is never actually included in the log message. The current revision of the log message. This is increased each time a log message is changed - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 31
, the log message should, besides all the normal log message attributes, also include information about which protocol is used, source and destination IP addresses and ports (if applicable), and so on. As the same information will be included in many log messages, these are referenced as a Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 32
The source ID. Valid if the protocol is not TCP or UDP. conndestif The name of the destination interface. conndestip The destination IP address. [conndestport] The destination port. Valid if the protocol is TCP or UDP. [conndestidt] The destination ID. Valid if the protocol is not TCP or UDP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 33
an additional log receiver, an SMTP log receiver, can be configured. This information is only sent to log receives of that kind For example, the name of an authenticated user is only included if this rule contains network objects that has user authentication information in them. rule The name - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 34
and unknown. The name of the user that triggered this event. The source IP address of the user that triggered this event. OSPF Additional about OSPF LSA. lsatype The LSA type Possible values: Router, network, IP summary, ASBR summary and AS external. lsaid The LSA identifier. lsaadvrtr The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 35
Severity levels Chapter 1. Introduction 1.3. Severity levels An event has a default severity level, based on how serious the event is. The following a specific category or a specific message has the severity reset to a particular level when it is sent by NetDefendOS. These features - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 36
1.3. Severity levels Chapter 1. Introduction 36 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 37
, page 208 • HA, page 211 • HWM, page 221 • IDP, page 226 • IDPPIPES, page 234 • IDPUPDATE, page 237 • IFACEMON, page 240 • IPPOOL, page 242 • IPSEC, page 248 • IP_ERROR, page 308 • IP_FLAG, page 310 • IP_OPT, page 312 • IP_PROTO, page 319 • L2TP, page 330 • NATPOOL, page 337 • OSPF, page 342 • PPP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 38
2.1. ALG • PPTP, page 373 • REASSEMBLY, page 383 • RFO, page 386 • RULE, page 392 • SESMGR, (Events from Application Layer Gateways) category. 2.1.1. alg_session_open (ID: 00200001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision INFORMATIONAL ALG session opened - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 39
1 len max ALG Module Name ALG Session ID 2.1.4. alg_session_allocation_failure (ID: 00200009) Default Severity Log Message Explanation Gateway Action Recommended Action CRITICAL Failed to allocate ALG session The of memory. None Increase the number of ALG sessions on services configured with 39 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 40
out why the client is sending an invalid header. 1 algname ALG Module Name ALG Session ID 2.1.6. invalid_url_format (ID: 00200101) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR HTTPALG: Failed to parse the URL requested by - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 41
(ID: 00200106) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING HTTPALG: Too much suspicious data has been received from the server. Closing the connection. ALG name: . The unit is configured to do content blocking - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 42
to find out why the server is sending compressed data. 1 algname ALG Module Name ALG Session ID 2.1.12. max_http_sessions_reached (ID: 00200110) Default Severity Log Message Explanation WARNING HTTPALG: Maximum number of HTTP sessions () for service reached. Closing connection The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 43
could not be successfully opened. close Verify that there is a listening HTTP Server on the specified address. 1 algname ALG Module Name ALG Session ID 2.1.15. content_type_mismatch (ID: 00200113) Default Severity Log Message NOTICE HTTPALG: Content type mismatch in file . Identified - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 44
16. wcf_override_full (ID: 00200114) Default Severity Log Message Explanation Gateway Action 2.1.17. content_filtering_disabled (ID: 00200115) Default Severity Log Message Explanation Gateway Action 2.1.18. max_download_size_reached (ID: 00200116) Default Severity Log Message WARNING HTTPALG: The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 45
server exceeds the maximun allowed download file size, the request is rejected and the connection is closed. close If the configurable maximum download ALG Session ID 2.1.20. out_of_memory (ID: 00200118) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 46
was unable to connect to the Web Content Filtering servers. Verify that the unit has been configured with Internet access. none Check_configuration. 2 ALG Module Name 2.1.22. wcf_srv_connection_error (ID: 00200120) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 47
Context Parameters INFORMATIONAL HTTPALG:Connecting to web content server Connecting to Web Content Filtering server. connecting None. 1 server ALG Module Name 2.1.25. wcf_server_connected (ID: 00200123) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 48
Name ALG Session ID 2.1.28. request_url (ID: 00200126) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters 00200127) Default Severity Log Message Explanation Gateway Action ERROR HTTPALG: Failed to authenticate with WCF server The WCF service could not - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 49
Failed to parse WCF server response The WCF service could not parse the server response. The WCF transmission queue is reset and a new server connection will be established. restarting None. 1 failedserver ALG Module Name 2.1.31. request_url (ID: 00200129) Default Severity Log Message Explanation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 50
by changing configuration parameters. 1 ALG Module Name 2.1.33. wcf_bad_sync (ID: 00200131) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR HTTPALG: WCF request out of sync The WCF response received from the server did not - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 51
. New Category . ALG name: . The user has requested a category reclassification for the URL. allow Disable the Module Name ALG Session ID 2.1.36. request_url (ID: 00200135) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 52
Connection Connection ALG Module Name ALG Session ID 2.1.39. restricted_site_notice (ID: 00200138) Default Severity Log Message Explanation WARNING HTTPALG: User requests the forbidden URL , eventhough Restricted Site Notice was applied. ALG name: . The URL has been requested - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 53
the ALLOW_RECLASSIFICATION mode of parameter CATEGORIES for this ALG. 2 newcat url user algname Connection Connection ALG Module Name ALG Session ID 2.1.41. wcf_mem_optimized (ID: 00200140) Default Severity Log Message Explanation Gateway Action Recommended Action DEBUG HTTPALG: Optimizing WCF - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 54
service reached. Closing connection The maximum number of concurrent SMTP sessions has been reached for this service. configured value. session_rejected This can be a possible DOS attack. 2 sender_email_address ALG Module Name ALG Session ID 2.1.44. failed_create_new_session (ID: 00200152) Default - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 55
None. 3 ALG Module Name ALG Session ID 2.1.46. invalid_server_response (ID: 00200155) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ERROR SMTPALG: Could not parse server response code The SMTP ALG failed to parse the SMTP response code from - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 56
wrongly tagged. 3 sender_email_address recipient_email_addresses data_sender_address ALG Module Name ALG Session ID 2.1.48. sender_email_id_mismatched (ID: 00200157) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING SMTPALG - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 57
mail to those recipients. reject Emails can be forwarded only to the Non-Black List users. 1 sender_email_address recipient_email_addresses ALG Module Name ALG Session ID 2.1.52. base64_decode_failed (ID: 00200164) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 58
Session ID 2.1.53. base64_decode_failed (ID: 00200165) Default Severity Log Message Explanation Gateway Action Recommended Action list. The file is present in the block list. It will be blocked as per configuration. block If this file should be allowed, update the ALLOW/BLOCK list. 2 filename - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 59
None. 4 filename filetype sender_email_address recipient_email_addresses ALG Module Name ALG Session ID 2.1.56. max_email_size_reached (ID: 00200170) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING SMTPALG: Maximum email - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 60
the client request. reject None. 1 sender_email_address recipient_email_addresses ALG Module Name ALG Session ID 2.1.59. out_of_memory (ID: 00200175) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ALERT SMTPALG: Failed to allocate memory - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 61
for spam. Email will be processed without spam checks. none None. 2 ALG Module Name ALG Session ID 2.1.62. cmd_too_long (ID: 00200179) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ERROR SMTPALG: Command line too long The SMTP Command line - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 62
. failed_send_reply_code (ID: 00200181) Default Severity Log Message Explanation Gateway Action 2.1.65. smtp_no_header (ID: 00200184) Default Severity Log Message Explanation Gateway Action 2.1.66. unsupported_extension (ID: 00200185) Default Severity Log Message Explanation INFORMATIONAL SMTPALG - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 63
Name ALG Session ID 2.1.67. cmd_pipelined (ID: 00200186) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ERROR SMTPALG: Received pipelined request. The SMTP ALG does not support pipelined requests. The appearance of this log message indicates - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 64
whitelist, this mark is removed. none None. 1 sender_email_address ALG Module Name ALG Session ID 2.1.70. illegal_data_direction (ID: 00200202) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR FTPALG: TCP data from not - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 65
will be closed. close If 8 bit characters should be allowed, modify the FTPALG configuration. 1 peer ALG Module Name ALG Session ID Connection 2.1.74. control_chars (ID: 00200211) Default Severity Log Message Explanation Gateway Action Recommended Action WARNING FTPALG: Unexpected telnet control - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 66
be closed. close If unknown commands should be allowed, modify the FTPALG configuration. 1 peer string ALG Module Name ALG Session ID Connection 2.1.76. illegal_command (ID: 00200213) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 67
: 00200216) Default Severity Log Message Explanation Gateway Action CRITICAL FTPALG: Illegal PORT command from , bad IP address . String=. Rejecting command An illegal "PORT" command was received from the client. It requests that the server should connect to another IP that - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 68
Action Revision Parameters Context Parameters CRITICAL FTPALG: Illegal PORT command from , port not allowed. String=. Rejecting command An illegal "PORT" command was received from the client. It requests that the server should connect to a port which is out of range. This is - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 69
should be allowed to do issue "SITE EXEC" commands, modify the FTPALG configuration. 1 peer ALG Module Name ALG Session ID Connection 2.1.83. illegal_direction1 (ID: 00200220) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 70
will be rejected. rejecting_command None. 1 peer string ALG Module Name ALG Session ID Connection 2.1.86. illegal_option (ID: 00200223) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING FTPALG: Disallowed OPTS argument from - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 71
rejected. rejecting_command If unknown commands should be allowed, modify the FTPALG configuration. 1 peer string ALG Module Name ALG Session ID Connection 2.1.88. illegal_command (ID: 00200225) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 72
FTPALG configuration. 1 peer string ALG Module Name ALG Session ID Connection 2.1.90. illegal_reply (ID: 00200228) Default Severity server, and the connection will be closed. close None. 1 peer reply string ALG Module Name ALG Session ID Connection 2.1.91. illegal_reply (ID: 00200230) Default - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 73
Session ID Connection 2.1.93. illegal_reply (ID: 00200232) Default Severity Log Message Explanation Gateway Action Recommended Action Revision . String=. Closing connection. An illegal response was received from the server, and the connection is closed. close None. 1 peer string ALG Module - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 74
trusted. 1 peer port range string ALG Module Name ALG Session ID Connection 2.1.95. bad_ip (ID: 00200234) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters CRITICAL FTPALG: Invalid IP , Server IP is . String - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 75
2.1.98. failed_to_send_port (ID: 00200237) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING FTPALG: Failed to send port. Peer= An error occured when trying to send the "PORT" command to the server. None None. 1 peer ALG - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 76
closed. close Contact the support. 1 ALG Module Name 2.1.101. max_ftp_sessions_reached (ID: 00200241) Default Severity Log Message Explanation Gateway () for service reached. Closing connection The maximum number of concurrent FTP sessions has been reached for this service. No more - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 77
not be successfully opened. close Verify that there is a listening FTP Server on the specified address. 1 ALG Module Name ALG Session ID 2.1.104. content_type_mismatch (ID: 00200250) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 78
to the server could not be sent. none None. 1 ALG Module Name 2.1.106. resumed_compressed_file_transfer (ID: 00200252) Default Severity Log list. It will be blocked as per configuration. data_blocked_control_and_data_channel_closed If this file should be allowed, update the ALLOW/BLOCK list. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 79
FTP ALG could not send the correct response code to the client. none None. 1 ALG Module Name 2.1.110. illegal_command (ID: 00200267) Default Severity Log Message Explanation Gateway Action Recommended Action WARNING FTPALG: REST from not allowed, rejecting command The client tried to issue - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 80
Chapter 2. Log Message Reference Revision Parameters Context Parameters the FTPALG configuration. 1 filename peer ALG Module Name ALG Session ID Connection 2.1.111. unknown_state (ID: 00200300) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 81
session will be closed. close None. 1 peer message_type ALG Module Name ALG Session ID Connection 2.1.114. encode_failed (ID: 00200303) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING H323ALG: Encoding of message from peer - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 82
will be closed. close None. 1 peer message_type ALG Module Name ALG Session ID Connection 2.1.117. decode_failed (ID: 00200306) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING H323ALG: Failed before encoding H.245 message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 83
session is too low, increase it. 1 max_channels ALG Module Name ALG Session ID Connection 2.1.120. max_connections_per_call_exceeded (ID: 00200309) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING H323ALG: No more connections allowed for this - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 84
ALG Module Name ALG Session ID Connection 2.1.123. max_h323_session_reached (ID: 00200312) Default Severity Log Message Explanation WARNING H323ALG: Maximum number of H.323 sessions () for service reached. Closing connection. The maximum number of concurrent H.323 sessions has been - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 85
sessions has been reached for this service. Connection will be closed. close If the maximum number of concurrent H.323 gatekeeper sessions is too low, increase it. 1 max_sessions ALG Module Name 2.1.126. failed_create_new_session (ID: 00200315) Default Severity Log Message WARNING H323ALG: Failed - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 86
could not open successfully. close Verify that there is a listening H.323 Server on the specified address. 1 ALG Module Name ALG Session ID 2.1.128. com_mode_command_message_not_translated (ID: 00200317) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 87
If all characters in filenames should be allowed modify the TFTP Alg configuration. 1 filename ALG Module Name ALG Session ID Connection 2.1.131. command_not_allowed (ID: 00200353) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 88
ALG Module Name ALG Session ID Connection 2.1.134. option_tsize_invalid (ID: 00200356) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING TFTPALG: should be allowed modify the filetransfersize of the TFTP Alg configuration . 1 value 88 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 89
If connection should be allowed modify the filetransfersize of the TFTP Alg configuration . 1 value maxvalue ALG Module Name ALG Session ID Connection 2.1.137. unknown_option_blocked (ID: 00200359) Default Severity Log Message Explanation WARNING TFTPALG: Request contained unknown option - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 90
Context Parameters close If connection should be allowed modify the TFTP Alg configuration . 1 option ALG Module Name ALG Session ID Connection 2.1.138. option_not_sent (ID: 00200360) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 91
configuration. 1 old_blksize new_blksize ALG Module Name ALG Session ID Connection 2.1.142. max_tftp_sessions_reached (ID: 00200364) Default Severity () for service reached. Closing connection The maximum number of concurrent TFTP sessions has been reached for this service. No more - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 92
TFTPALG sessions, or try to free some of the RAM used. 1 ALG Module Name 2.1.144. invalid_packet_received (ID: 00200366) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING TFTPALG: Received invalid packet Opcode - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 93
new instead. close None. 1 opcode packet_length ALG Module Name ALG Session ID Connection 2.1.147. packet_out_of_sequence (ID: 00200369) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING TFTPALG: Received packet out of - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 94
options from packet. rewrite If options should be allowed modify the TFTP Alg configuration. 1 ALG Module Name ALG Session ID Connection 2.1.150. failed_strip_option (ID: 00200372) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ERROR TFTPALG - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 95
Module Name 2.1.152. invalid_error_message_received (ID: 00200374) Default Severity Log Message Explanation Gateway Action Recommended Action Revision () for service reached. Closing connection The maximum number of concurrent POP3 sessions has been reached for this service. No more - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 96
could not be successfully opened. close Verify that there is a listening POP3 Server on the specified address. 1 ALG Module Name ALG Session ID 2.1.156. out_of_memory (ID: 00200383) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ERROR - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 97
the block list. It will be blocked as per configuration. block If this file should be allowed, update the ALLOW/ Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING POP3ALG: Response blocked.Invalid response= The server - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 98
sending possible invalid end of mail. 1 sender_email_address ALG Module Name ALG Session ID 2.1.161. command_blocked_invalid_len (ID: 00200388) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING POP3ALG: Command line blocked - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 99
Gateway Action Recommended Action Revision Parameters Context Parameters The server is sending response with invalid response length. The response ALG Session ID 2.1.163. content_type_mismatch (ID: 00200390) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 100
block If the command are to be allowed change the Alg configuration.Note: The STLS command is allways blocked!. 1 command ALG Module Name ALG Session ID 2.1.167. unknown_command_blocked (ID: 00200394) Default Severity Log Message Explanation Gateway Action WARNING POP3ALG: Unknown command blocked - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 101
Parameters Context Parameters If the command are to be allowed change the Alg configuration. 1 command" ALG Module Name ALG Session ID 2.1.168. unexpected_mail_end (ID: 00200396) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 102
has been reached for this service. No more sessions can be opened before old sessions have been released. close If the maximum number of TLS sessions is too low, increase it. 1 max_sessions ALG Module Name 2.1.172. failed_create_new_session (ID: 00200451) Default Severity Log Message Explanation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 103
HTTP Server on the specified address. 1 algname ALG Module Name ALG Session ID 2.1.174. tls_alert_received (ID: 00200453) Default Severity Log TLS renegotiation attempted but not supported. The TLS peer initiated a renegotiation. Renegotiation is however not supported so an alert was sent - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 104
cipher suite can not be used with the configured certificate. The negotiated cipher suite, which is an Default Severity Log Message Explanation Gateway Action ERROR TLSALG: SSL renegotiation attempted but not supported. The SSL peer initiated a renegotiation. Renegotiation is however not supported - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 105
a part of a possible attack, or normal traffic. 1 algname ALG Module Name ALG Session ID 2.1.180. tls_invalid_message (ID: 00200459) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR TLSALG: Invalid TLS message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 106
client and the unit share atleast one cipher suite. 1 algname ALG Module Name ALG Session ID 2.1.183. tls_out_of_memory (ID: 00200462) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR TLSALG: Out of memory. The unit was unable - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 107
(ID: 00200463) Default Severity Log Message ID 2.1.185. unknown_tls_error (ID: 00200464) Default Severity Log Message Explanation Gateway Action Recommended Action ID 2.1.186. sdp_message_parsing_failed (ID: 00200501) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 108
to malformed message. Reason: [reason]. drop Examine why client or server is sending a malformed SDP message. 2 reason from_uri to_uri srcip ALG Module Name 2.1.188. sip_message_parsing_failed (ID: 00200503) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 109
Reason: [reason]. drop Examine why client or server is sending a malformed SIP message. 2 reason max_sessions_per_uri_reached (ID: 00200505) Default Severity Log Message Explanation Gateway per SIP URI has been reached The configured maximum number of concurrent SIP sessions [max_ses_per_id - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 110
The session will be deleted. close If the configured SIP signal timeout value is too low, increase it. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.193. sip_request_response_timeout (ID: 00200508) Default Severity Log Message Explanation Gateway Action WARNING SIPALG - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 111
modified the requested registration time since it exceeds the configured maximum registration time value [cfg_registration_time]. allow None. ) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING SIPALG: Unsuccessful registration The user failed - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 112
Module Name 2.1.196. unsuccessful_unregistration (ID: 00200511) Default Severity Log Message Explanation Gateway Action Recommended Action Parameters Context Parameters WARNING SIPALG: Registration entry not found The specified user could not be found in the register table. Reason: [reason]. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 113
could not be created. drop None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.200. failed_to_find_session (ID: 00200515) Default Severity Log Message Explanation Gateway Action ERROR SIPALG: Failed to find sipalg session Failed to find sipalg session. Reason: [reason - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 114
[method] request. close None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.202. sipalg_session_state_updated (ID: 00200517) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters DEBUG SIPALG: SIP-ALG session state updated The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 115
] request. allow None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.204. failed_to_create_new_transaction (ID: 00200521) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR SIPALG: Failed to create - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 116
None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name ALG Session ID 2.1.207. sipalg_transaction_state_updated (ID: 00200524) Default Severity Log Message Explanation Gateway Action Recommended Action DEBUG SIPALG: Transaction state updated A SIP-ALG transaction state has - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 117
Module Name 2.1.208. no_route_found (ID: 00200526) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Revision Parameters CRITICAL SIPALG: Failed to get free NAT port pair for the given host Failed to get free port for the given host. Reason: [reason]. drop The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 118
ALG Module Name 2.1.210. failed_to_find_role (ID: 00200528) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR SIPALG: Failed to update port information Failed to update port into session for [method] request. drop None - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 119
. Reason: [reason]. drop None. 2 reason from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.214. failed_to_modify_via (ID: 00200532) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR SIPALG: Failed to modify via in message Failed to - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 120
request. drop None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.216. failed_to_modify_request_uri (ID: 00200534) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR SIPALG: Failed to modify request - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 121
Parameters Context Parameters WARNING SIPALG: Method not supported The method [method] is not supported. drop None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.219. general_error (ID: 00200537) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 122
SIP request The SIP-ALG has detected a SIP/SDP message involving third party IP address. Reason: [reason]. The request will be dropped. drop None. 2 message. drop Change configuration to free up more RAM. 1 message 2.1.222. null_sip_message_received (ID: 00200540) Default Severity ERROR 122 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 123
Action Revision Parameters Context Parameters NOTICE SIPALG: Successful Registration User [user_name] registered. None None. 2 user_name contact ALG Module Name 2.1.224. user_unregistered (ID: 00200542) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 124
Revision Parameters Context Parameters Failed to do dns resolve An attempt to resolve dns failed. Reason: [reason]. drop Check if the dns servers are configured. 1 reason ALG Module Name 2.1.226. failed_to_modify_contact (ID: 00200547) Default Severity Log Message Explanation Gateway Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 125
destip destport ALG Module Name 2.1.230. max_tsxn_per_session_reached (ID: 00200551) Default Severity Log Message Explanation WARNING SIPALG: Maximum number of sessions per Service has been reached The configured maximum number of transaction [max_tsxn_per_session] per SIP SESSION has been - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 126
]. close None. 2 tsxn_invalid_state from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.232. invalid_session_state (ID: 00200553) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR SIPALG: Invalid session state change Invalid session - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 127
request. allow None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.234. failed_to_create_new_callleg (ID: 00200555) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR SIPALG: Failed to create callleg - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 128
[method] request. drop None. 2 method from_uri to_uri srcip srcport destip destport ALG Module Name 2.1.237. sipalg_callleg_deleted (ID: 00200558) Default Severity Log Message Explanation Gateway Action Recommended Action NOTICE SIPALG: sipalg callleg deleted The callleg for [method] request is - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 129
Parameters 2 method from_uri to_uri srcip srcport destip destport ALG Module Name ALG Session ID 2.1.238. failed_to_modify_response (ID: 00200559) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR SIPALG: Failed to modify the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 130
modify the SAT request Failed to modify requst ip to SAT destination IP in the [method] request. drop None. Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING PPTPALG: Maximum number of PPTP sessions () for service - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 131
1 ALG Module Name 2.1.243. failed_connect_pptp_server (ID: 00200603) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ERROR PPTPALG: Failed to connect to the PPTP Server. Closing the connection. The PPTP ALG could not connect to the receiving - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 132
Context Parameters NOTICE PPTPALG: PPTP tunnel between server and security gateway removed A PPTP tunnel has been removed betweem the PPTP server and the PPTP-ALG. None None. 1 ALG Session ID ALG Module Name 2.1.247. pptp_session_established (ID: 00200607) Default Severity Log Message Explanation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 133
2.1.250. pptp_tunnel_established_server (ID: 00200610) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE PPTPALG: PPTP tunnel established from server A PPTP tunnel has been established between PPTP server and security gateway. None None - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 134
TO:" e-mail address is changed to the Drop address configured in DNS Blacklist. none None. 1 sender_email_address drop_address ALG Module Name ALG Session ID 2.2.2. dnsbl_allocate_error (ID: 05900800) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 135
ipaddr 2.2.6. dnsbl_session_error (ID: 05900813) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Error creating Session for IP for Error creating new Session. dnsbl will not process mail Check configuration and dns settings. 1 135 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 136
> An IP address was added to the IP Cache. none None. 1 type algname ipaddr result 2.2.8. dnsbl_disabled (ID: 05900815) Default Severity Log few active BlackLists. none Check configuration of DNSBL. 1 type algname 2.2.9. dnsbl_active (ID: 05900816) Default Severity Log Message Explanation Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 137
Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Query created for IP to BlackList for A DNS configuration if keeps begin disabled. 1 type algname blacklist 2.2.12. dnsbl_txtrecord_truncated (ID: 05900819) Default - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 138
2. Log Message Reference algname ipaddr 2.2.13. dnsbl_record_truncated (ID: 05900820) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING DNSBL name not fit buffer for Session with IP for DNSBL name will not fit the string - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 139
Reference 2.3. ANTIVIRUS These log messages refer to the ANTIVIRUS (Anti-virus related events) category. 2.3.1. virus_found (ID: 05800001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Virus found in file - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 140
None. 1 filename filetype [layer7_srcinfo] [layer7_dstinfo] ALG Module Name ALG Session ID Connection 2.3.4. decompression_failed (ID: 05800004) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR Decompression error for file - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 141
should be blocked. 1 filename [layer7_srcinfo] [layer7_dstinfo] ALG Module Name ALG Session ID Connection 2.3.6. compression_ratio_violation (ID: 05800006) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Compression ratio - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 142
Module Name ALG Session ID Connection 2.3.9. out_of_memory (ID: 05800009) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Try to free some memory by changing configuration parameters. 1 filename filetype [layer7_srcinfo] [layer7_dstinfo] 142 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 143
. block_data Try to free some memory by changing configuration parameters. 1 filename filetype [layer7_srcinfo] [layer7_dstinfo] ALG Module Name ALG Session ID Connection 2.3.11. virus_scan_failure (ID: 05800011) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 144
ALG Session ID 2.3.14. no_signature_database (ID: 05800016) Default Severity Log Message Explanation Gateway Action Recommended Action Revision av_scanning_denied Connect your gateway to the Internet and download the anti-virus database or configure automatic updates of anti-virus. 2 ALG Session - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 145
scan engine run out of memory during initialization. av_scanning_denied Review your configuration in order to free up more RAM. 2 ALG Session ID 2.3.17. decompression_failed_encrypted_file (ID: 05800024) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 146
be scanned by the anti-virus module since the compressed file is encrypted with password protection. Since anti-virus is running in audit mode, the data transfer will ID Connection 2.3.19. unknown_encoding (ID: 05800182) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 147
is blocked. block_data None. 1 filename unknown_content_transfer_encoding sender_email_address ALG Module Name ALG Session ID 2.3.22. unknown_encoding (ID: 05800185) Default Severity Log Message Explanation Gateway Action Recommended Action WARNING POP3ALG: Content transfer encoding is unknown or - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 148
2.3.22. unknown_encoding (ID: 05800185) Chapter 2. Log Message Reference Revision Parameters Context Parameters 1 filename unknown_content_transfer_encoding sender_email_address ALG Module Name ALG Session ID 148 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 149
Context Parameters NOTICE ARP query sender IP is 0.0.0.0 The source IP-address of an ARP query is 0.0.0.0. Allowing. allow If this is not the desired behaviour, modify the configuration. 1 Rule Name Packet Buffer 2.4.3. no_sender_ip (ID: 00300003) Default Severity Log Message Explanation Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 150
equipment in the network. Allowing. allow If this is not the desired behaviour, modify the configuration. 1 Rule Name Packet Buffer 2.4.6. mismatching_hwaddrs (ID: 00300006) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE ARP hw sender - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 151
sender address. Dropping packet. drop If this is not the desired behaviour, modify the configuration. 1 Rule Name Packet Buffer 2.4.8. hwaddr_change (ID: 00300008) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters NOTICE - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 152
, and the packet is dropped. drop If all ARP sender IP addresses should be accepted without validation, modify the configuration. 1 Rule Name Packet Buffer 2.4.12. arp_access_allowed_expect (ID: 00300050) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 153
address. Dropping packet. drop If this is not the desired behaviour, modify the configuration. 1 Rule Name Packet Buffer 2.4.15. arp_response_multicast_drop (ID: 00300053) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE ARP response - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 154
packet. drop If this is not the desired behaviour, modify the configuration. 1 reason knowntype knownip knownhw Rule Name Packet Buffer 2.4.17. hwaddr_change_drop (ID: 00300055) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 155
for this is specified in the "reason" parameter. None None. 1 reason 2.5.2. av_database_downloaded (ID: 05000002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE New anti-virus database downloaded An updated version of the anti-virus database has been - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 156
Check and set the system time correct and perform a manual antivirus update. 1 date 2.5.6. downloading_new_database (ID: 05000007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Downloading new antivirus database A new antivirus database is availible - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 157
2.5.7. unsynced_databases (ID: 05000008) Gateway Action Recommended Action Revision downloading_new_database None. 1 Chapter 2. Log Message Reference 157 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 158
Unable to allocate static entry. Unit is low on memory. no_block Review the configuration in order to free more RAM. 1 host 2.6.3. unable_to_allocate_host_entry (ID: 04600003) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Unable to - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 159
threshold or IntrusionDetection rules that could have triggered dynamic blacklisting. 1 blacklisted_host rule description ip proto port 2.6.6. packet_blacklisted (ID: 04600006) Default Severity Log Message Explanation Gateway Action NOTICE Found source in blacklist. Triggered rule - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 160
2.6.6. packet_blacklisted (ID: 04600006) Chapter 2. Log Message Reference Recommended Action Revision Parameters Investigate threshold or IntrusionDetection rules that could have triggered dynamic blacklisting. 1 rule description proto ip port 160 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 161
. 1 duration buf_usage 2.7.2. buffers_profile (ID: 00500002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters will only be generated by special built firmware for the purpose of debugging. None Nothing. 1 numstop duration reason Packet Buffer - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 162
CONN These log messages refer to the CONN (State engine events, e.g. open/close connections) category. 2.8.1. conn_open (ID: 00600001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters INFORMATIONAL Connection opened A connection has been opened - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 163
Parameters INFORMATIONAL Connection closed A connection has been closed. close None. 1 Rule Information Connection 2.8.6. out_of_connections (ID: 00600010) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING Out of connections. Rejecting - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 164
TCP flag are allowed to open a new TCP connection. reject None. 1 protocol Rule Name Packet Buffer 2.8.9. no_new_conn_for_this_packet (ID: 00600013) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING State inspector would not open a new connection for this - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 165
of a connection. Dropping the packet. drop None. 1 Rule Name Connection Packet Buffer 2.8.12. port_0_illegal (ID: 00600020) Default Severity Log Message Explanation Gateway Action WARNING TCP/UDP destination port or TCP source port was set to 0. Dropping The TCP/UDP destination or TCP source - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 166
setting. 1 Rule Name Packet Buffer 2.8.14. udp_src_port_0_forwarded (ID: 00600022) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING UDP source port is set to 0. Forwards packet The UDP source port was set to 0. This can be used by UDP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 167
has been established. None None. 1 ALG Module Name ALG Session ID Rule Information Connection 2.8.18. active_data (ID: 00600102) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters INFORMATIONAL FTPALG: Active data channel closed An active data - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 168
2.8.19. passive_data (ID: 00600103) Chapter 2. Log Message Reference Rule Information Connection 2.8.19. passive_data (ID: 00600103) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters INFORMATIONAL FTPALG: Passive data channel closed A passive - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 169
with an offered IP that appear to be occupied () Received a DHCP lease which appears to be in use by someone else. restart Check network for statically configured hosts or incorrectly proxy ARPed routes. 1 iface ip4addr 2.9.2. lease_changed (ID: 00700002) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 170
Interface lease expired A lease have expired and the ip data for this interface are no longer valid. restart Check connection and DHCP server reachability. 1 iface 2.9.6. invalid_lease_time (ID: 00700007) Default Severity Log Message Explanation Gateway Action WARNING Interface - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 171
netmask () An interface received a lease with an invalid netmask. drop Check DHCP server configuration. 1 iface netmask Packet Buffer 2.9.9. invalid_broadcast (ID: 00700010) Default Severity Log Message WARNING Interface received a lease with an invalid broadcast address 171 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 172
>) An interface received a lease with an invalid offered IP address. drop Check DHCP server configuration. 1 iface offered_ip Packet Buffer 2.9.11. invalid_gateway (ID: 00700012) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 173
lease which if used will cause an IP collision with a configured route. drop Check DHCP server configuration and the SG interface configuration. 1 iface dhcp_ip configured_route Packet Buffer 2.9.14. route_collision (ID: 00700015) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 174
2.9.14. route_collision (ID: 00700015) Parameters Context Parameters iface dhcp_route configured_route Packet Buffer Chapter 2. Log Message Reference 174 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 175
Chapter 2. Log Message Reference 2.10. DHCPRELAY These log messages refer to the DHCPRELAY (DHCP relayer events) category. 2.10.1. unable_to_save_dhcp_relay_list (ID: 00800001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING Unable to auto save the DHCP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 176
of time The maximum DHCP packets-per-minute limit for the relayer have been reached. None Verify packets-per-minute limit. 1 Packet Buffer 2.10.6. relayer_resuming (ID: 00800006) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 177
>. Dropping Received a server reply without a matching transaction state. drop Check the network environment for errors. 1 client_hw Packet Buffer 2.10.10. maximum_dhcp_client_relay_routes_reached (ID: 00800010) Default Severity Log Message Explanation WARNING The limit for DHCP relay routes have - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 178
ERROR Internal Error: Out of memory: Can't add DHCP relay route. Dropping Unable to add DHCP relay route since out of memory. drop Check firewall memory consumption. 1 Rule Name 2.10.12. ignored_relay_request (ID: 00800012) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 179
packet passed a relayer but the client ip isnt set. Dropping Received relayed INFORM DHCP packet with illegally missing client IP. drop Investigate what client implementation is being used. 1 Rule Name Packet Buffer 2.10.16. maximum_current_dhcp_relays_for_iface (ID: 00800016) Default Severity Log - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 180
Parameters Verify max-relay-per-interface setting. 1 max_relays Rule Name Packet Buffer 2.10.17. dhcp_server_is_unroutable (ID: 00800017) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING BOOTP/DHCP-server at is - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 181
Packet Buffer 2.10.21. relayed_request (ID: 00800021) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters NOTICE Relayed BOOTP-request from client to Relayed a BOOTP request. None None. 1 client_hw dest_ip Rule - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 182
Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING DHCP/BOOTP-Server tried to assign a client with an illegal IP . Dropping Received a lease with an illegal client assignment IP. drop Check DHCP server configuration. 1 server_ip ip - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 183
route indicating another interface was detected trying to setup a dynamic hostroute for a client. drop Review previous configured host route for client. 1 dest_ip Rule Name Packet Buffer 2.10.26. relayed_dhcp_reply (ID: 00800026) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 184
Rule Name Packet Buffer 2.10.29. relayed_bootp_reply (ID: 00800029) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters NOTICE Relayed BOOTP-reply to gateway Relayed BOOTP reply to a gateway. None None. 1 gateway_ip Rule - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 185
Chapter 2. Log Message Reference 2.11. DHCPSERVER These log messages refer to the DHCPSERVER (DHCP server events) category. 2.11.1. unable_to_send_response (ID: 00900001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING Failed to get buffer for sending - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 186
None None. 1 2.11.5. dhcp_packet_too_small (ID: 00900005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context WARNING Received a request from client(not in bound) for IP without state. Rejecting Received a request from a non bound - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 187
pools are depleted. Unable to handle request. Ignoring All IP pools have been depleted. None Extend the pools to support more clients. 1 Packet Buffer 2.11.10. request_with_bad_udp_checksum (ID: 00900011) Default Severity Log Message WARNING Received request with bad UDP checksum. Dropping 187 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 188
a client was never accepted and timed out. lease_inactive None. 1 client_ip client_hw Rule Name 2.11.13. pool_depleted (ID: 00900014) Default Severity Log Message Explanation WARNING All IPs in the pool are in use. Request cannot be fulfilled A request cannot be fullfilled since all pools are in - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 189
Action Revision Context Parameters NOTICE All IPs in the pool are now in use All IPs the the pool have been consumed. None Extend the pool to support more clients. 1 Rule Name Packet Buffer 2.11.16. request_for_non_offered_ip (ID: 00900017) Default Severity Log Message Explanation Gateway Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 190
Context Parameters WARNING Client requested non bound IP. Rejecting Client requested a non bound IP. reject None. 1 client_hw client_wanted bound Rule Name Packet Buffer 2.11.18. client_bound (ID: 00900019) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 191
Got an inform (client already got an IP and asks for configuration parameters) request from a client. acknowledging None. 1 client_hw client_ip Rule Name Packet Buffer 2.11.21. decline_for_ip_on_wrong_iface (ID: 00900022) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 192
in use someone else) offered IP. blacklist Check network for statically configured hosts or incorrectly proxy ARPed routes. 1 client_hw client_ip Rule Name Packet Buffer 2.11.24. request_for_ip_from_bound_client_without_state (ID: 00900025) Default Severity Log Message Explanation Gateway Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 193
Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Got release for ip on wrong interface (recv: , lease: < Buffer 2.11.26. released_by_client (ID: 00900027) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 194
OSPF AS A route was just exported to a OSPF AS. None None. 1 Dynamic Route Rule Name Route 2.12.3. route_unexported_from_ospf_as (ID: 01100003) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Route unexported from OSPF AS A route was just unexported from - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 195
to create a route since out of memory. alert Check memory consumption. 1 Dynamic Route Rule Name Route 2.12.5. route_added (ID: 01100005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE Route added A route was just added. None None - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 196
2.12.6. route_removed (ID: 01100006) Route Chapter 2. Log Message Reference 196 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 197
Context Parameters WARNING Individual fragment timed out. A fragment of an IP packet timed out, and is dropped. drop None. 1 Rule Name Packet Buffer 2.13.2. fragact_contains_frags (ID: 02000002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 198
Name 2.13.4. fail_out_of_resources (ID: 02000004) Default Severity Log Message Explanation Gateway Action Recommended Action , State: Out of fragmentation-reassembly resources when processing the IP packet. Dropping packet and freeing resources. drop None. 1 srcip destip ipproto - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 199
Rule Name 2.13.7. disallowed_suspect (ID: 02000007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision FragID: , State: The fragments of a disallowed IP packet, which may contain illegal fragments, were dropped. drop None. 1 srcip - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 200
: , State: The fragments of an illegal IP packet were dropped. drop None. 1 srcip destip ipproto fragid fragact Rule Name 2.13.10. drop_extraneous_frags_of_completed_packet (ID: 02000010) Default Severity Log Message WARNING Dropping extraneous fragments of completed packet - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 201
Internal Error: Invalid state Internal Error, the fragmented IP packet has an invalid state. drop None. 1 state Dropped Fragments Rule Name 2.13.12. drop_duplicate_frag_suspect_packet (ID: 02000012) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 202
> The fragment offset and length would be outside of the allowed IP size range. Dropping packet. drop None. 1 minipdatalen maxipdatalen Rule Name Packet Buffer 2.13.15. no_available_fragacts (ID: 02000015) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 203
plus length would result in a greater length than the configured maximum length of an IP packet. Dropping packet. drop None. 1 maxipdatalen Rule Name Packet Buffer 2.13.18. overlapping_frag (ID: 02000018) Default Severity Log Message Explanation Gateway Action Recommended Action ERROR Overlapping - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 204
. bad_offs (ID: 02000019) Chapter 2. Log Message Reference Revision Context Parameters 1 Rule Name Packet Buffer 2.13.19. bad_offs (ID: 02000019) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ERROR Bad fragment offset The fragment has an - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 205
Packet Buffer 2.13.23. drop_frag_disallowed_suspect_packet (ID: 02000023) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Dropping fragment of disallowed suspect packet A fragment of a disallowed IP packet, which may contain illegal fragments, is dropped. drop - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 206
Dropping fragment of failed suspect packet A fragment of a failed IP packet, which may contain illegal fragments, is dropped. drop Name Packet Buffer 2.13.27. drop_frag_failed_packet (ID: 02000027) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 207
Parameters WARNING Dropping fragment of illegal packet A fragment of an illegal IP packet is dropped. drop None. 1 Rule Name Packet Buffer 2.13.29. fragments_available_freeing (ID: 02000100) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 208
Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Failed to setup open tunnel from to Unable to setup Check GRE endpoint configuration. 1 Packet Buffer 2.14.3. gre_bad_version (ID: 02200003) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 209
error. Packet dropped Received GRE packet with length error. drop Check GRE endpoint configuration. 1 Packet Buffer 2.14.6. gre_send_routing_loop_detected (ID: 02200006) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING Routing loop - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 210
Context Parameters Check GRE session key settings on the remote gateway. 1 session_key Packet Buffer 2.14.8. gre_routing_flag_set (ID: 02200008) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING Received GRE packet with routing flag - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 211
log messages refer to the HA (High Availability events) category. 2.15.1. peer_gone (ID: 01200001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Peer firewall disappeared. Going active The peer gateway (which was active) is not available anymore. This - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 212
are active, but the peer has higher local load. This gateway will stay active. stay_active None. 1 2.15.5. peer_has_lower_local_load (ID: 01200005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Both active, peer has lower local load; deactivating Both - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 213
... Both members are inactive, but the peer has fewer connections. This gateway will go active. activate None. 1 2.15.11. peer_alive (ID: 01200011) Default Severity Log Message Explanation Gateway Action Recommended Action NOTICE Peer firewall is alive The peer gateway is alive. None None. 213 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 214
IP. The packet will be dropped. drop None. 1 Rule Name Packet Buffer 2.15.13. should_have_arrived_on_sync_iface (ID: 01200044) Default (ID: 01200050) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING Failed to activate the configuration merged from HA - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 215
and commit the changes again. 1 2.15.17. ha_write_failed (ID: 01200053) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING Could not write HA configuration to disk The HA configuration could not be written to the storate media. ha_commitchanges Verify that - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 216
15.21. hasync_connection_established (ID: 01200200) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE HASync connection to peer firewall established HA syncronization connection to peer has been establihsed. Supported events will now be synchronized between - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 217
the peer. reconnect None. 1 2.15.23. hasync_connection_failed_timeout (ID: 01200202) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE HASync connection to peer firewall failed. Reconnecting... The HA syncronization connection attempt failed. Reconnecting - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 218
. This should never happend, and the packet will be dropped. drop None. 1 Rule Name Packet Buffer 2.15.27. ttl_too_low (ID: 01200411) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING Received HA heartbeat with too low TTL. Dropping The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 219
Parameters None. 1 Rule Name Packet Buffer 2.15.29. config_sync_failure (ID: 01200500) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters CRITICAL Tried to synchronize configuration to peer 3 times without success. Giving up. The gateway tried to - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 220
2.15.32. action=going_online (ID: 01200618) Chapter 2. Log Message Reference 2.15.32. action=going_online (ID: 01200618) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Ha unit going online. Ha unit going online. None None. 1 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 221
failing or to hot enviroment. none Shutdown the unit and determine the problem. 1 index name unit current_temp min_limit max_limit 2.16.2. temperature_normal (ID: 04000012) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Temperature monitor - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 222
value is back in the normal range. None None. 1 index name unit current_voltage min_limit max_limit 2.16.5. fanrpm_alarm (ID: 04000031) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING Fan RPM monitor () is outside the specified limit - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 223
value is back in the normal range. None None. 1 index name unit current_fanrpm min_limit max_limit 2.16.7. gpio_alarm (ID: 04000041) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING GPIO monitor () is outside the specified limit - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 224
current_gpio min_limit max_limit 2.16.9. free_memory_warning_level (ID: 04000101) Default Severity Log Message Explanation Gateway Action Recommended Action Revision The amount of free memory is getting low. None Review the configuration and disable or lower settings to reduce memory consumption - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 225
Message Reference Revision Parameters memory consumption. 1 limit_megabyte total_mem free_mem free_percentage severity 2.16.11. free_memory_normal_level (ID: 04000103) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE The amount of free memory - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 226
events) category. 2.17.1. scan_detected (ID: 01300001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters idrule>. Protocol: . Source IP: . Source Port: . Destination IP: . Destination Port: . Closing connection. - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 227
Deep Inspection 2.17.4. virus_detected (ID: 01300004) Default Severity Log Message Explanation Gateway Action Recommended Action Revision : . Protocol: . Source IP: . Source Port: . Destination IP: . Destination Port: . Closing connection. A virus - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 228
(ID: 01300006) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE IDP Notice: , Signature ID=. ID Rule: . Protocol: . Source IP: . Source Port: . Destination IP: . Destination - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 229
) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Virus/Worm detected: , Signature ID=. ID Rule: . Protocol: . Source IP: . Source Port: . Destination IP: . Destination Port - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 230
Rule Name 2.17.10. invalid_url_format (ID: 01300010) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Rule: . URL: . Source IP: . Source Port: . Destination IP: . Destination Port: . Ignoring the URL. The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 231
(ID: 01300012) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters ERROR Failed to reassemble data. ID Rule: . Source IP: . Source Port: . Destination IP: . Destination Port: . The unit - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 232
Source Port: . Destination IP: . Destination Port: . The unit failed to scan data. The reason for this is due to low amount of memory. ignore Review your configuration. 1 idrule srcip srcport destip destport Rule Name 2.17.15. idp_failscan (ID: 01300015) Default Severity - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 233
Rule Name 2.17.16. idp_failscan (ID: 01300016) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters scan data. ID Rule: . Source IP: . Source Port: . Destination IP: . Destination Port: . Reason: . The unit - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 234
the specified connection. The connection is piped to [limit] kbps. limit_throughput None. 1 limit Connection 2.18.2. host_idp_piped (ID: 06100002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters NOTICE Dynamic pipe state added for - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 235
" CLI command and check for modules with abnormal memory consumption. Otherwise, revise configuration in order to free more RAM. 1 2.18.4. idp_piped_state_replaced (ID: 06100004) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters DEBUG Replaced IDP pipe - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 236
limit Connection 2.18.7. conn_idp_piped (ID: 06100007) Default Severity Log Message Explanation Gateway Action Recommended Action kbps since either the source or destination IP is dynamically throttled by IDP dynamic pipe state. New connections to and from the IP will be throttled as long as an - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 237
An updated version of the Intrusion Detection & Prevention database has been downloaded, which will now be used. using_new_database None. 2 2.19.3. idp_db_already_up_to_date (ID: 01400003) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Intrusion - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 238
. idp_disabled Check and set the system time correct and perform a manual IDP update. 1 date 2.19.6. downloading_new_database (ID: 01400007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Downloading new IDP database A new IDP database is availible. The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 239
2.19.7. unsynced_databases (ID: 01400009) Chapter 2. Log Message Reference Explanation Gateway Action Recommended Action Revision The IDP hardware and software databases are not synchronized. A full update is automatically initiated. downloading_new_database None. 1 239 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 240
[linkspeed] [duplex] 2.20.2. ifacemon_status_bad (ID: 03900003) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING IfaceMon reports interface problems on . Resetting interface. Link status: Mbps duplex The Interface - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 241
2.20.3. ifacemon_status_bad (ID: 03900004) Revision Parameters 1 iface [linkspeed] [duplex] Chapter 2. Log Message Reference 241 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 242
offers were received No DHCP offers where received by the IP pool general query. None Review DHCP server parameters and IP pool configuration. 1 waited Rule Name 2.21.2. no_valid_dhcp_offer_received (ID: 01900002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 243
) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING The lease was rejected due to a bad DHCP-server address A lease was rejected due to a bad DHCP server address. lease_rejected Check DHCP server configuration. 1 client_ip - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 244
Parameters Context Parameters WARNING The lease was rejected due to a bad offered IP address A lease was rejected due to a bad offered IP address. lease_rejected Check DHCP server configuration. 1 client_ip Rule Name 2.21.10. lease_have_bad_gateway_ip (ID: 01900010) Default Severity WARNING 244 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 245
Check DHCP server configuration. 1 gateway_ip Rule Name 2.21.11. lease_ip_is_already_occupied (ID: 01900011) Default Severity Log Message DHCP server configuration and statically configured hosts. 1 client_ip Rule Name 2.21.12. lease_rejected_by_server (ID: 01900012) Default Severity - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 246
Context Parameters A lease was rejected since the offered IP already exists in the pool. lease_rejected Check IP pool configuration. 1 client_ip Rule Name 2.21.14. pool_reached_max_dhcp_clients (ID: 01900014) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 247
) Chapter 2. Log Message Reference Revision Parameters Context Parameters 1 client_ip subsystem Rule Name 2.21.17. ip_returned_to_pool (ID: 01900017) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters NOTICE Subsystem returned an - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 248
Chapter 2. Log Message Reference 2.22. IPSEC These log messages refer to the IPSEC (IPsec (VPN) events) category. 2.22.1. fatal_ipsec_event (ID: 01800100) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ALERT Fatal event occured, because of - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 249
was reached. None None. 1 reason 2.22.5. ike_delete_notification (ID: 01800105) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Local IP: , Remote IP: , Cookies: , Reason: . None. None None. 1 local_ip - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 250
None. 1 local_ip remote_ip cookies reason 2.22.8. ike_retry_limit_reached (ID: 01800108) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Local IP: , Remote IP: , Cookies: , Reason: . The retry limit for - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 251
of the received packet did not match. drop None. 1 source_ip dest_ip spi seq protocol reason 2.22.12. sequence_number_failure (ID: 01800112) Default Severity Log Message NOTICE Source IP: , Destination IP: , SPI: , Seq: , Protocol: , Reason: . 251 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 252
dest_ip spi seq protocol reason 2.22.13. sa_lookup_failure (ID: 01800113) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Source IP: , Destination IP: , SPI: , Seq: , Protocol: , Reason: . The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 253
None. 1 source_ip dest_ip spi seq protocol reason 2.22.17. hardware_accelerator_congested (ID: 01800117) Default Severity Log Message Explanation NOTICE Source IP: , Destination IP: , SPI: , Seq: , Protocol: , Reason: . Hardware accleration failed - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 254
Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Source IP: , Destination IP: IPsec configuration Failed to commit IPsec configuration. IPsec_configuration_disabled Reconfigure_IPsec. 1 2.22.20. commit succeeded (ID: 01800201) Default - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 255
Severity Log Message Explanation Gateway Action Recommended Action Revision INFORMATIONAL IPsec is up and running IPsec configured and started. None None. 1 2.22.22. x509_init_failed (ID: 01800203) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 256
Action Revision Parameters CRITICAL Failed during configuration with error: Failed to set IPsec configuration. IPsec_configuration_disabled Reconfigure_IPsec. 1 error_msg 2.22.27. reconfig_IPsec (ID: 01800211) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 257
Gateway Action Recommended Action Revision INFORMATIONAL IPsec started successfully Succeeded to create Policymanger and commit IPsec configuration. ipsec_started None. 2 2.22.30. Failed_to_add_certificate (ID: 01800302) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 258
tunnel Failed to set specified properties (keysize, lifetimes) for IPsec algorithm. use_default_values_for_algorithm None. 1 alg tunnel 2.22.33. failed_to_set_algorithm_properties (ID: 01800305) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 259
to resolve remote gateway for IPsec Tunnel . Keeping old IP Failed to resolve remote gateway through DNS. keeping_old_ip None. 1 gateway ipsectunnel old_ip 2.22.36. dns_resolve_failed (ID: 01800309) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 260
(ID: 01800315) Default Severity Log Message Explanation Gateway Action Recommended Action Revision INFORMATIONAL Resolved remote-gateway to IP for IPsec tunnel Tunnel have succesfully been reconfigured after remote gateway have been resolved. None None. 1 260 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 261
ip 2.22.41. no_policymanager (ID: 01800316) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL No policymanager!! to free tunnel object from No policymanager to free tunnel from!!! IPsec callback for Dead Peer Detection User will not receive log message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 262
for tunnel Invalid type for ID in remote access idlist have been specified in configuration. vpntunnel_disabled Reconfigure_tunnel. 1 type tunnel 2.22.47. failed_to_create_authorization (ID: 01800327) Default Severity Log Message CRITICAL Failed to create local authorization object 262 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 263
extended authentication (XAuth) group. None None. 1 2.22.50. IPSec_tunnel_added (ID: 01800333) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL IPsec tunnel added to the configuration An IPsec tunnel has been enabled or added to the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 264
client_ip IPsec_tunnel 2.22.53. IPSec_tunnel_modified (ID: 01800336) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL IPsec tunnel configuration modified An IPsec tunnel has been modified. reconfiguration None. 1 client_ip username - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 265
Chapter 2. Log Message Reference Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL IPsec tunnel removed from the configuration An IPsec tunnel has been disabled or removed from the configuration. reconfiguration None. 1 client_ip username - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 266
Gateway Action Recommended Action Revision Parameters result, IPsec clients using config mode will not be able lease IP addresses. None Update your config mode configuration. 1 ippool 2.22.58. cfgmode_ip_freed (ID: 01800402) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 267
to the IPsec interface being disabled. packet_will_be_dropped This is usualy a consequence of low memory or a bad configuration. Look for packet_will_be_dropped None. 1 2.22.63. no_route (ID: 01800504) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Failed - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 268
Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR IPsec interface disabled IPsec interface disabled. None None. 1 2.22.66. maximum_allowed_tunnels_limit_reached (ID: 01800900) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 269
an SA to Nitrox II timed out\r\n. None None. 1 dir spi 2.22.70. trigger_non_ip_packet (ID: 01802001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Trigger for non-IP packet of protocol . Dropping request for policy Trigger for non - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 270
configuration, dropping request. dropping_request None. 1 2.22.72. malformed_packet (ID: 01802003) Default max_ipsec_sa_negotiations_reached (ID: 01802004) Default Severity Log Message Explanation . max_number_of_tunnels_reached (ID: 01802011) Default Severity Log Message Explanation Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 271
of IKE SA completed. None None. 1 options mode auth encryption keysize hash dhgroup bits lifetime 2.22.77. ike_sa_negotiation_failed (ID: 01802030) Default Severity Log Message INFORMATIONAL No IKE SA negotiations done. Reason: The authentication credentials were not specified or private key was - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 272
done because of authentication problems. no_ike_sa None. 1 2.22.78. ike_sa_negotiation_failed (ID: 01802031) Default Severity Log Message (ID: 01802040) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL IPsec SA < - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 273
: Log information about SPI-values and algorithms fro Child SA. None None. 2 spiin spiout mac 2.22.83. ipsec_sa_lifetime (ID: 01802045) Default Severity Log Message Explanation INFORMATIONAL Local lifetime child SA: kilobytes, seconds Inform about lifetime for child SA:. 273 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 274
Local lifetime child SA: seconds Inform about lifetime for child SA:. None None. 1 sec 2.22.85. ipsec_sa_lifetime (ID: 01802047) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL Local lifetime child SA: kilobytes Inform about - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 275
SA Invalid protocol received for SA. None None. 1 proto 2.22.89. ipsec_sa_negotiation_aborted (ID: 01802060) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR IPsec SA Negotiation aborted: AH can not be initiated with NAT-T Negotiation aborted since AH can - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 276
. create_rules_failed (ID: 01802081) Default Severity Log Message Explanation Gateway . no_authentication_method_specified (ID: 01802100) Default Severity Log Message Explanation Gateway Action no_key_method_configured_for tunnel (ID: 01802102) Default Severity Log Message Explanation Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 277
(ID: 01802104) Chapter 2. Log Message Reference 2.22.94. invalid_configuration_of_force_open (ID: 01802104) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Auto-start rule does not specify single IP address or domain name for its remote peer Can not use - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 278
None None. 1 2.22.99. invalid_rule_setting (ID: 01802109) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR To VPN_configuration_disabled Review the advanced setting IPsecMaxRules. 2 2.22.101. suspicious_outbound_rule (ID: 01802114) Default Severity - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 279
Action Revision Detected suspicious outbound IPsec rule without any selectors Detected suspicious outbound IPsec rule without any selectors specified. the_rule_might_not_work Reconfigure_IPsec. 2 2.22.102. no_algorithms_configured_for_tunnel (ID: 01802200) Default Severity Log Message Explanation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 280
not supported Tunnel [tunnel] configured for AH, but AH is not supported. VPN_tunnel_disabled Reconfigure_tunnel. 1 tunnel 2.22.106. invalid_tunnel_configuration (ID: 01802208) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR No IPsec transform - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 281
! Out of memory. Could not allocate memory for tunnel name!. VPN_tunnel_disabled None. 1 tunnel 2.22.110. invalid_key_size (ID: 01802214) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Invalid key sizes specified for algorithms Invalid key sizes - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 282
with fixed key size. VPN_tunnel_disabled Reconfigure_tunnel. 2 alg 2.22.114. invalid_cipher_keysize (ID: 01802218) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Configured max cipher key size is bigger than the built-in maximum - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 283
with fixed key size. VPN_tunnel_disabled Reconfigure_tunnel. 1 alg 2.22.116. invalid_cipher_keysize (ID: 01802220) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Configured max MAC key size is bigger than the built-in maximum - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 284
Explanation Gateway Action Recommended Action Revision Malformed IKE secret specified in configuration. VPN_tunnel_invalid Reconfigure_PSK. 1 2.22.119. rule_selection_failed (ID: 01802300) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 285
ID: 01802403) Default Severity Log Message could_not_decode_certificate (ID: 01802600) Default Severity Log Message Explanation Gateway (ID: 01802601) Default Severity Log Message 125. could_not_get_subject_nam_from_ca_cert (ID: 01802602) Default Severity Log Message Explanation WARNING - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 286
a point of trust Could not force CA certificate as a point of trust. certificate_disabled None. 1 2.22.128. could_not_trusted_set_for_cert (ID: 01802605) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING Could not set the trusted set for a CA certificate - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 287
not lock certificate in cache Could not lock certificate in cache. certificate_invalid None. 1 2.22.132. could_not_insert_cert_to_db (ID: 01802609) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Could not insert certificate into local database Could not - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 288
in unrecognized format. File format may be wrong Could_not_decode_CRL. certificate_invalid None. 1 2.22.134. ike_sa_negotiation_completed (ID: 01802703) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL IKE SA: Local IKE peer: - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 289
bad IP address. try_next_certificate None. 1 len 2.22.137. dn_name_as_subject_alt_name (ID: 01802706) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Directory names are not supported as subject alternative names. Skipping DN: - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 290
> expires time Addresses for remote access attributes. None None. 1 ipaddr [time] 2.22.142. remote_access_dns (ID: 01802711) Default Severity Log Message Explanation Gateway Action INFORMATIONAL DNS for remote access attributes: DNS for remote access attributes. None 290 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 291
for remote access attributes: WINS for remote access attributes. None None. 1 win 2.22.144. remote_access_dhcp (ID: 01802713) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL DHCP for remote access attributes: DHCP remote - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 292
SA. None None. 1 side msg int_severity 2.22.147. ipsec_sa_selection_failed (ID: 01802717) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Selection of IPsec SA failed due to . Internal severity level: Failed to select - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 293
SA. None None. 2 msg local_proxy remote_proxy int_severity 2.22.150. ipsec_sa_event (ID: 01802731) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING IPsec SA negotiation event: . Internal severity level: Event occured for - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 294
: L2TP negotiation event. l2tp_negotiation_event None. 1 side msg local_id remote_id int_severity 2.22.154. outofmem_create_engine (ID: 01802901) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL Failed to allocate memory for engine object - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 295
Message Explanation Gateway Action Recommended Action Revision CRITICAL Allocating default drop rule failed! Allocating default drop rule failed!. ipsec_disabled None. 1 2.22.157. init_rule_looklup_failed (ID: 01802905) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 296
of flow table failed (size ) Allocation of flow table failed. ipsec_disabled None. 1 size 2.22.162. init_next_hop_table_failed (ID: 01802910) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL Allocation of next hop table failed Allocation of next - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 297
Allocation of peer hash table failed Allocation of peer hash table failed. ipsec_disabled None. 1 2.22.165. init_peer_id_hash_failed (ID: 01802913) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL Allocation of peer id hash table failed Allocation of - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 298
hash table failed Allocation of transform context hash table failed. ipsec_disabled None. 1 2.22.169. init_packet_context_cache_failed (ID: 01802917) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL Allocation of packet context cache failed Allocation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 299
Action Recommended Action Revision Allocation of transform context table failed. ipsec_disabled None. 1 2.22.171. init_nat_table_failed (ID: 01802919) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL Allocation of NAT tables failed Allocation of NAT - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 300
Revision INFORMATIONAL Could not select policy rule Could not select policy rule. None None. 1 2.22.177. failed_to_select_ike_sa (ID: 01803002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision INFORMATIONAL Could not select SA from IKE SA proposal Could not - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 301
Explanation Gateway Action Recommended Action Revision Parameters WARNING IPsec SA negotiation failed: Negotiation of IPsec SA failed. no_ipsec_sa None. 1 statusmsg 2.22.180. ipsec_sa_statistics (ID: 01803021) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 302
event: . . A Config Mode exchange event occured. None None. 1 msg reason 2.22.182. config_mode_exchange_event (ID: 01803023) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL Config Mode exchange event: . A Config Mode - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 303
due to protocol mismatch. None None. 1 remote_peer proto 2.22.187. rejecting_ipsec_sa_delete (ID: 01803028) Default Severity Log Message Explanation Gateway Action Recommended Action WARNING Rejecting IPsec SA delete notification from since the SPI size does not match the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 304
Received a IKE Phase-2 notification. None None. 1 status remote_peer proto spi msg type size 2.22.189. ike_qm_notification (ID: 01803030) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Quick-Mode notification from for protocol - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 305
Gateway Action Recommended Action Revision Parameters WARNING Malformed IPsec ESP proposal: Received a malformed IPsec ESP proposal. None None. 1 reason 2.22.193. malformed_ipsec_ah_proposal (ID: 01803052) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 306
Recommended Action Revision Parameters WARNING Could not select proposal for IPsec SA Could not select proposal for IPsec SA. None None. 2 sa_index 2.22.195. failed_to_select_ipsec_sa (ID: 01803054) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 307
acceleration of the IPsec SA couldn't be done. All packets belonging to the specified SA will be processed in software. None Verify that the crypto suites are supported by the hardware accelerator. Contact support and report this issue if a supported crypto suite is configured. 1 dir spi error_msg - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 308
Log Message Reference 2.23. IP_ERROR These log messages refer to the IP_ERROR (Packet discarded due to IP header error(s)) category. 2.23.1. too_small_packet (ID: 01500001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING Packet is too - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 309
recvlen Rule Name Packet Buffer 2.23.5. invalid_ip_checksum (ID: 01500005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Invalid IP header checksum - RecvChkSum=, CompChkSum= The received packet - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 310
IP_FLAG (Events concerning the IP header flags) category. 2.24.1. ttl_low (ID: 01600001) Default Severity Log Message Explanation Gateway . Ignoring and forwarding packet anyway. ignore None. 1 ttl ttlmin Rule Name Packet Buffer 2.24.2. ip_rsv_flag_set (ID: 01600002) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 311
2.24.3. ip_rsv_flag_set (ID: 01600003) Context Parameters Rule Name Packet Buffer Chapter 2. Log Message Reference 311 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 312
Log Message Reference 2.25. IP_OPT These log messages refer to the IP_OPT (Events concerning the IP header options) category. 2.25.1. source_route (ID: 01700001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE Packet has a source route - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 313
Option () is present The packet contains an IP Option. Ignoring. ignore None. 1 ipopt optname Rule Name Packet Buffer 2.25.5. ipoptlen_too_small (ID: 01700010) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 314
. Dropping packet. drop None. 1 ipopt optlen route Rule Name Packet Buffer 2.25.9. bad_route_pointer (ID: 01700014) Default Severity Log Message Explanation Gateway Action WARNING IP Option Type : Bad Source Route Pointer . Dropping The packet has a Source Route Pointer, which is - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 315
packet. drop None. 1 Rule Name Packet Buffer 2.25.12. bad_timestamp_len (ID: 01700017) Default Severity Log Message Explanation Gateway Action WARNING IP Option Type : Bad length . Dropping The packet contains an IP Option, which has an invalid lengh. Dropping packet. drop 315 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 316
. 1 ipopt tsptr Rule Name Packet Buffer 2.25.14. bad_timestamp_pointer (ID: 01700019) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING IP Option Type : Bad Timestamp Pointer with overflow . Dropping The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 317
packet. drop None. 1 Rule Name Packet Buffer 2.25.16. router_alert_bad_len (ID: 01700021) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING IP Option Type : Bad length . Dropping Packet contains a router alert - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 318
2. Log Message Reference Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters IP Option () is present. Dropping The packet contains an IP Option, which is disallowed. Dropping packet. drop None. 1 ipopt optname Rule Name Packet Buffer - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 319
Log Message Reference 2.26. IP_PROTO These log messages refer to the IP_PROTO (IP Protocol verification events) category. 2.26.1. multicast_ethernet_ip_address_missmatch (ID: 07000011) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 320
Action Revision Context Parameters WARNING The IP Reserved Flag was set. Dropping The received packet has the IP Reserved Flag set. Dropping packet. drop None. 1 Rule Name Packet Buffer 2.26.6. oversize_tcp (ID: 07000018) Default Severity Log Message WARNING Configured size limit for the TCP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 321
Rule Name Packet Buffer 2.26.8. oversize_udp (ID: 07000021) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Configured size limit for the UDP protocol exceeded. Dropping The configured size limit for the UDP protocol was - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 322
Packet Buffer 2.26.10. oversize_icmp (ID: 07000023) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Configured size limit for the ICMP protocol exceeded. Dropping The configured size limit for the ICMP protocol was exceeded - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 323
, but the IP address in the IP header does however not match it. This is a known exploit, though the gateway is currently configured to forward these packets. ignore None. 1 ip_multicast_addr eth_multicast_addr Rule Name Packet Buffer 2.26.13. oversize_gre (ID: 07000050) Default Severity Log - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 324
Name Packet Buffer 2.26.15. oversize_ah (ID: 07000052) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Configured size limit for the AH protocol exceeded. Dropping The configured size limit for the AH protocol was exceeded - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 325
Packet Buffer 2.26.18. oversize_ipip (ID: 07000055) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Configured size limit for the IPIP protocol exceeded. Dropping The configured size limit for the IPIP protocol was exceeded - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 326
2.26.21. oversize_ip (ID: 07000058) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Configured size limit for IP protocol exceeded. Dropping The configured size limit for the IP protocol was exceeded. Dropping packet. drop - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 327
Packet Buffer 2.26.24. invalid_icmp_data_ip_ver (ID: 07000072) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ICMP data. ICMPDataLen= ICMPIPVer=. Dropping An invalid IP version is specified in the ICMP data. Version 4 expected - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 328
26. invalid_icmp_data_invalid_ip_length (ID: 07000074) Default Severity Log Message Explanation Gateway Action The ICMP data length is invalid. The contained IP data must be atleast 8 bytes long. Dropping >. Dropping Invalid ICMP Parameter Problem pointer. Parameter Problem pointer is not within the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 329
2.26.27. invalid_icmp_data_invalid_paramprob (ID: 07000075) Chapter 2. Log Message Reference 329 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 330
The L2TP client failed to resolve the DNS name of the remote gateway. None Make sure you have configured the DNS name of the remote gateway and the DNS servers correctly. 1 iface remotegwname 2.27.3. l2tpclient_init (ID: 02800003) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 331
rule is unknown to the L2TP server. None Make sure the userauth rules are configured correctly. 1 rule tunnelid sessionid 2.27.6. only_routes_set_up_by_server_iface_allowed (ID: 02800006) Default Severity Log Message Explanation WARNING L2TP server received a packet routed by a route - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 332
Gateway Action Recommended Action Revision Parameters drop Make sure no manually configured routes to the L2TP server interface exists in the configuration. 1 iface 2.27.7. l2tp_session_closed (ID: 02800007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 333
mppe 2.27.12. l2tp_no_userauth_rule_found (ID: 02800014) Default Severity Log Message Explanation Gateway Action WARNING Did not find a matching userauth rule for this L2TP server! Tunnel ID: , Session ID: The L2TP server was unsuccessful trying to find a matching userauth - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 334
IP: The L2TP session negotiation has completed successfully. None None. 1 tunnelid sessionid user auth mppe assigned_ip 2.27.15. failure_init_radius_accounting (ID: 02800017) Default Severity Log Message Explanation WARNING Failed to send Accounting Start to RADIUS Accounting Server - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 335
) Default Severity Log Message Explanation Gateway Action Recommended Action NOTICE L2TP server cannot start until it has an IP address to listen on The L2TP server cannot start until the L2TP interface has a proper IP address to listen on. None Make sure that the IP address is configured - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 336
2.27.18. waiting_for_ip_to_listen_on (ID: 02800050) Revision Parameters address to the interface. 1 iface Chapter 2. Log Message Reference 336 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 337
longer exist in NATPool The translation IP has been removed by a configuration change. The connection is no longer valid and will be closed. close None. 1 address poolname 2.28.3. reconf_state_violation (ID: 05600003) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 338
closed. close None. 1 address poolname Connection 2.28.6. out_of_memory (ID: 05600007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Out of memory while allocating NATPool IP entry for An IP entry could not be allocated since the unit is out - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 339
> It was not possible to dynamically add a core route for the given IP address. None Try to configure a core route with ProxyARP manually. 1 poolname ip 2.28.8. max_states_reached (ID: 05600009) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 340
ip 2.28.12. dynamicip_failed (ID: 05600013) Default Severity Log Message Explanation Gateway Action Recommended Action ERROR Failed to fetch new Translation IP address from IP Pool Failed to fetch new Translation IP address from IP Pool. None Check configuration for NAT Pool and IP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 341
Revision ERROR Failed to synchronize Translation IP address to peer Failed to synchronize Translation IP address to peer. None Check status of peer and verify High Availability configuration. 1 2.28.14. registerip_failed (ID: 05600015) Default Severity Log Message Explanation Gateway Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 342
state engine. ignore Contact support. 1 iface nevent nstate Rule Name 2.29.3. unable_to_map_ptp_neighbor (ID: 02400003) Default Severity Log Message Explanation WARNING Unable to map PTP neighbor to my ip at HA failover Unable to map a configured PTP neighbor to the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 343
Gateway Action Recommended Action Revision Parameters Context Parameters None Check OSPF interface configuration. 1 iface neighborid myifaceip Rule Name 2.29.4. bad_packet_len (ID: 02400004) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 344
locally attached OSPF routes are on the same network. 1 srcip ifacerange Rule Name Packet Buffer 2.29.7. area_mismatch (ID: 02400007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Bad area Received OSPF data from - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 345
routers share the same router dead interval. 1 recv_rtrdead my_rtrdead Rule Name Packet Buffer 2.29.11. hello_e_flag_mismatch (ID: 02400011) Default Severity Log Message Explanation WARNING Hello E-flag mismatch. Received was , mine is . Dropping Received OSPF data from - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 346
. drop Make sure all locally attached OSPF routers share the same E-flag configuration. 1 recv_e_flag my_e_flag Rule Name Packet Buffer 2.29.12. hello_n_flag_mismatch (ID: 02400012) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 347
drop Check the configuration on the neighboring router. 1 lsatype Rule Name Packet Buffer 2.29.15. auth_mismatch (ID: 02400050) Default Severity Log Message mismatch. Bad password Authentication failed due to a bad password. drop Verify that the neighboring OSPF router share the same password. 1 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 348
neighboring OSPF router share the same crypto key id. 1 recv_id my_id Rule Name 2.29.18. bad_auth_crypto_seq_number (ID: 02400053) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Authentication mismatch. Bad crypto sequence - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 349
OSPF data from neighbor with mismatching checksum. drop Check network equipment for problems. 1 recv_chksum my_chksum Rule Name 2.29.21. dd_mtu_exceeds_interface_mtu (ID: 02400100) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 350
the I-flag. Restarting exchange Neighbor misused the I-flag. restart None. 1 neighbor Rule Name 2.29.24. opt_change (ID: 02400103) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Neighbor changed options during - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 351
A neighbor illegally implied AS-EXT on a stub area. restart Check neighboring OSPF router configuration. 1 neighbor Rule Name 2.29.28. unknown_lsa (ID: 02400107) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Neighbor - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 352
Restarting exchange Received a LSA with a bad maxage value. restart Check orginating router configuration. 1 maxage def_maxage Rule Name 2.29.31. lsa_checksum_mismatch (ID: 02400150) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING LSA - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 353
lsa_type>). LSA is discarded Received LSA of unknown type. discard Check originating router configuration. 1 lsa_type Rule Name 2.29.33. bad_lsa_sequencenumber (ID: 02400152) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 354
AS external LSA which is illegal on a stub area. discard None. 1 Rule Name 2.29.36. received_selforg_for_unknown_lsa_type (ID: 02400155) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Received selforginated LSA for unknown - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 355
ACK ingored Received acknowledge for mismatched LSA. None None. 1 lsa lsaid lsartr Rule Name 2.29.39. upd_packet_lsa_size_mismatch (ID: 02400158) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING UPD packet LSA size mismatch. Parsing - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 356
lsartr>) Failed to create LSA. alert Check memory consumption. 1 lsa lsaid lsartr Rule Name 2.29.43. unable_to_send_ack (ID: 02400162) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters CRITICAL Unable to send ACK Unable to send acknowledgement - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 357
Context Parameters Unknown neighbor(IP: ID:) seen on . Ignoring Unknown neighbor seen on PTP based interface. None Check for incorrectly configured neighbors. 1 neighbor neighborid iface Rule Name 2.29.45. too_many_neighbors (ID: 02400201) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 358
skipped Unable to find transport area for a vlink. skip_iface Check OSPF area configuration. 1 area vlink Rule Name 2.29.48. internal_error_unable_to_map_identifier (ID: 02400301) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 359
70 percent of the maximum allowed. None Check memory consumption. 1 ospfproc Rule Name 2.29.52. as_disabled_due_to_mem_alloc_fail (ID: 02400305) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL AS disabled due to memory allocation failure An OSPF AS - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 360
(ID: 02400401) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Internal error: Unable to find my link connecting to described LSA (NetVtxId: ) Unable to find local link to described LSA. None Contact support with - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 361
LSA (RtrVtxId: ) Unable to find local link connecting to described LSA. None Contact support with a scenario description. 1 rtrvtxid Rule Name 2.29.58. internal_error_unable_to_find_iface_connecting_to_lsa (ID: 02400404) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 362
mapping. None Check OSPF interface configuration. 1 ifacetype rtrvtxid Rule Name 2.29.61. internal_error_unable_to_find_lnk_connecting_to_lsa (ID: 02400407) Default Severity Log Message Explanation WARNING Internal error: Unable to find my link connecting to described LSA (NetVtxId: - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 363
Reference Gateway Action Recommended Action Revision Parameters Context Parameters None Contact support with a scenario description. 1 netvtxid Rule Name 2.29.62. memory_allocation_failure (ID: 02400500) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 364
2.29.64. failed_to_add_route (ID: 02400502) Revision Parameters Context Parameters 1 route Rule Name Chapter 2. Log Message Reference 364 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 365
. Since an IP address lease is required, PPP is terminated. ppp_terminated None. 1 tunnel_type 2.30.3. primary_dns_address_required_but_not_received (ID: 02500003) Default Severity Log Message Explanation Gateway Action Recommended Action WARNING Primary DNS address required but not received - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 366
Peer refuses to give out a secondary DNS address. Since reception of a secondary DNS address is required, PPP is terminated. ppp_terminated None. 1 tunnel_type 2.30.5. primary_nbns_address_required_but_not_received (ID: 02500005) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 367
is terminated. ppp_terminated Review the allowed authentication protocols configured. The client and server must be configured to have at least one authentication protocol in common. 1 tunnel_type 2.30.8. peer_refuses_to_use_authentication (ID: 02500051) Default Severity Log Message Explanation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 368
tunnel_type limit 2.30.11. authentication_failed (ID: 02500101) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters the right username and password is used. 1 tunnel_type user 2.30.12. response_value_too_long (ID: 02500150) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 369
because it was too long. mschapv2_username_truncated Reconfigure the endpoints to use a shorter username. 1 tunnel_type 2.30.16. username_too_long (ID: 02500350) Default Severity Log Message Explanation WARNING PPP PAP username was truncated because it was too long PPP PAP username was truncated - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 370
ERROR Unsupported authentication server. PPP Authentication terminated Unsupported authentication server. PPP Authentication terminated. authentication_terminated Review the authentication server configuration. 1 tunnel_type 2.30.19. radius_error (ID: 02500501) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 371
authenticating using a local user database. PPP Authentication terminated. authentication_terminated None. 1 tunnel_type 2.30.21. ldap_error (ID: 02500503) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR LDAP server authentication error. PPP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 372
tunnel for the interface have been established. . None None. 1 iface pppoeserver auth ifaceip downtime 2.31.2. pppoe_tunnel_closed (ID: 02600002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE PPPoE tunnel on to closed - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 373
to resolve The PPTP client failed to resolve the DNS name of the remote gateway. None Make sure you have configured the DNS name of the remote gateway and the DNS servers correctly. 1 iface remotegwname 2.32.3. pptp_connection_disallowed (ID: 02700003) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 374
PPTP server. Closing down the PPTP connection. pptp_connection_closed Make sure the userauth rules are configured correctly. 1 rule remotegw callid 2.32.5. user_disconnected (ID: 02700005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING User - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 375
up by the interface itself. drop Make sure there are no manually configured routes pointing to the PPTP server interface in the configuration. 1 iface 2.32.7. mppe_required (ID: 02700007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING MPPE - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 376
PPTP session request sent on control connection to An PPTP Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Failed to send Accounting Start to RADIUS Accounting Server START message to RADIUS accounting server. RADIUS accounting will be - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 377
Chapter 2. Log Message Reference Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING PPP negotiation completed for session to on . User: , Auth: , MPPE: , Assigned IP: The PPP negotiation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 378
. 1 iface remotegw callid 2.32.16. pptpclient_start (ID: 02700017) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE PPTP client started, connecting to server on A PPTP client has initiated the connection to its remote gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 379
control connection. None Read the reason specified by the PPTP server. This might give a clue why the PPTP server refused the PPTP control connection. 1 reason iface remotegw 2.32.20. pptp_tunnel_up (ID: 02700021) Default Severity Log Message Explanation Gateway Action Recommended Action NOTICE - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 380
(ID: 02700025) Default Severity Log Message Explanation Gateway Action Recommended Action WARNING Unknown PPTP authentication source for !. Interface: , Remote gateway: . The authentication source for the specified userauth rule is unknown to the PPTP server. None Make sure - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 381
) Default Severity Log Message Explanation Gateway Action Recommended Action WARNING PPTP server cannot start until it has an IP address to listen on. The PPTP server cannot start until it has a proper IP address to listen on. None Make sure that the IP address is configured correctly - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 382
2.32.26. waiting_for_ip_to_listen_on (ID: 02700050) Chapter 2. Log Message Reference Revision Parameters server interface. If the PPTP server is supposed to listen on an IP assigned by a DHCP server, make sure that the DHCP server is working properly. 1 iface 382 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 383
data not yet transmitted was received. The segment will be dropped. drop None. 1 Connection 2.33.2. invalid_tcp_checksum (ID: 04800003) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE TCP segment with invalid checksum A TCP segment - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 384
keep track of packet that was received. The packet will be dropped. drop Review configuration to reduce memory consumption. 1 2.33.5. drop_due_to_buffer_starvation (ID: 04800007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Can't allocate resources to - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 385
. 1 Connection 2.33.9. state_memory_allocation_failed (ID: 04800011) Default Severity Log Message Explanation Gateway Action Recommended Action Revision allocate the memory needed to activate reassembly on a connection. none Review configuration to reduce memory consumption. 1 Connection 385 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 386
to verify the status of the route. Will try again later. try_again_later None. 1 iface table net gateway 2.34.3. no_ping (ID: 04100003) Default Severity Log Message Explanation Gateway Action ERROR Interface , Table , Net : Route disabled, no PING reply from Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 387
monitored. Failed to register PING Route Monitor. route_not_monitored None. 1 iface table net gateway 2.34.5. unable_to_register_pingmon (ID: 04100005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Interface , Table , Net - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 388
Route is available. Received ARP reply from the gateway. route_enabled None. 2 iface table net gateway 2.34.7. no_arp (ID: 04100007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Interface , Table , Net : Route disabled, no - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 389
been disabled. associated_routes_disabled None. 2 iface reason 2.34.11. has_link (ID: 04100011) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Interface has link. Some associated routes may require ARP to be enabled The interface has - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 390
is no longer monitored. Unable to register Interface Monitor. disabled_monitor None. 1 iface table net gateway 2.34.14. hostmon_failed (ID: 04100014) Default Severity Log Message Explanation Gateway Action Recommended Action NOTICE Interface , Table , Net : Route disabled, host - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 391
(ID: 04100015) Chapter 2. Log Message Reference Revision 1 Parameters iface table net 2.34.15. hostmon_successful (ID: 04100015) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Interface , Table , Net : Route enabled - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 392
statelessly forwarded. fwdfast None. 1 Rule Information Packet Buffer 2.35.2. ip_verified_access (ID: 06000005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE IP address verfied according to ACCESS section The IP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 393
a special RETURN action was trigged by an IP-rule lookup. This log message only appears net, which is not allowed according to the configuration. The packet is dropped. drop Investigate why this 2.35.6. block0net (ID: 06000011) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 394
" section in the configuration. 1 Rule Name Packet Buffer 2.35.9. directed_broadcasts (ID: 06000030) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Packet directed to the broadcast address of the destination network. Forwarding The packet was directed - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 395
was directed to the broadcast address of the destination network, and the unit is configured to disallow this. drop None. 1 Rule Name 2.35.11. unknown_vlanid (ID: 06000040) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 396
set. 1 Rule Information Packet Buffer 2.35.14. unhandled_local (ID: 06000060) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE Allowed but unhandled packet to the firewall. Dropping A packet directed to the unit itself was received. The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 397
WARNING New session denied for User: . Database: . IP: . Type: . New session denied in Session Manager. remove_session Check settings for users. 1 user database ip type 2.36.3. sesmgr_session_removed (ID: 04900003) Default Severity Log Message Explanation Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 398
User: . Database: . IP: . Type: . Session has timed out and will be removed. remove_session None. 1 user database ip type 2.36.6. sesmgr_upload_denied (ID: 04900006) Default Severity Log Message Explanation NOTICE File upload connection denied for User: . IP: - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 399
console, new session will be removed. remove_session Check maximum number of sessions and consoles. 1 user database ip type 2.36.8. sesmgr_session_maximum_reached (ID: 04900008) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING Maximum number of sessions - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 400
Parameters NOTICE Session has been activated for User: . Database: . IP: . Type: . Disabled session has been activated. none None. 1 user database ip type 2.36.11. sesmgr_session_disabled (ID: 04900011) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 401
No access level set for User: . Database: . IP: . Type: . No access level set for user, new session denied. deny_session Check user settings. 1 user database ip type 2.36.14. sesmgr_session_old_removed (ID: 04900016) Default Severity Log Message Explanation Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 402
Revision Check available memory. 1 2.36.16. sesmgr_techsupport (ID: 04900018) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE Sending technical support file. Technical support file created and is being sent to user. techsupport_created None. 1 402 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 403
is online according to monitor A disabled server has been determined to be alive again. Adding this server to the active servers list. None. 1 server_ip Rule Name 2.37.2. server_offline (ID: 02900002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 404
is running at the address specified. 1 smtp_server 2.38.3. send_failure (ID: 03000004) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Unable to send data to SMTP server . Send aborted The unit failed to send data to the SMTP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 405
attempt. No SMTP Log will be sent. abort_sending Verify that a SMTP Server is configured to accept connections from the unit. 1 smtp_server 2.38.6. rejected_ehlo_helo (ID: 03000007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING SMTP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 406
rejected the sender. No SMTP Log will be sent. abort_sending Verify that the SMTP server is configured to accept this sender. 1 smtp_server sender 2.38.8. rejected_recipient (ID: 03000009) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING SMTP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 407
Reference Gateway Action Recommended Action Revision Parameters None Verify that the SMTP server is properly configured. 1 smtp_server 2.38.11. rejected_message_text (ID: 03000012) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING SMTP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 408
to the unit. Dropping packet. drop If this sender IP address should have SNMP access to the unit, this should be configured in the ACCESS section. 1 peer Connection 2.39.2. invalid_snmp_community (ID: 03100002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 409
2.40. SSHD Chapter 2. Log Message Reference 2.40. SSHD These log messages refer to the SSHD (SSH Server events) category. 2.40.1. out_of_mem (ID: 04700001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision ERROR Out of memory Memory Allocation Failure. System is - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 410
to process service request sent from the client, closing connection. close None. 1 client 2.40.7. invalid_username_change (ID: 04700020) Default Severity Log Message Explanation WARNING Username change is not allowed. From name to client. Client: User changed the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 411
40.8. invalid_username_change (ID: 04700025) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Service change is not allowed. From serivce to . Client: User changed the service between two authentication phases - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 412
. The client RSA signuature could not be verified. Closing connection. close None. 1 client 2.40.13. dsa_sign_verification_failed (ID: 04700051) Default Severity Log Message Explanation Gateway Action Recommended Action ERROR DSA signature verification for client failed. The client DSA - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 413
using a Public Key Algorithm which is either not supported or not enabled. close If the algorithm is supported by unit, configure the unit to make use of it. 1 authalgo client 2.40.16. max_ssh_clients_reached (ID: 04700060) Default Severity Log Message Explanation Gateway Action WARNING Maximum - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 414
server. Closing connection. close If this client should be granted SSH access, add it in the "remotes" section. 1 client 2.40.18. ssh_force_conn_close (ID: 04700105) Default NOTICE Administrator access could not set for session from this ip: SCP transfers can only be used if sessions has - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 415
2.40.19. scp_failed_not_admin (ID: 04704000) Revision 1 Parameters ip Chapter 2. Log Message Reference 415 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 416
session closed at [remoteip]:[remoteport]. None None. 1 remoteip remoteport 2.41.3. sslvpn_max_sessions_reached (ID: 06300012) Default Severity Log Message Explanation Gateway Action Recommended Action Revision DEBUG SSL VPN can not create session. Maximun allowed SSLVPN tunnels reached. SSL - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 417
server. Closing down the SSL VPN connection. sslvpn_connection_closed Make sure the userauth rules are configured correctly. 1 rule remotegw 2.41.6. user_disconnected (ID: 06300205) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL User - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 418
for the specified userauth rule is unknown to the SSL VPN server. None Make sure the userauth rules are configured correctly. 1 rule iface remotegw 2.41.9. sslvpn_no_userauth_rule_found (ID: 06300226) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 419
. shutdown_soon Install a license. 1 shutdown time 2.42.3. reset_clock (ID: 03200100) Default Severity Log Message Explanation Gateway Action Recommended Action Revision NOTICE The clock at was manually reset by to The clock has manually been reset. None None. 1 419 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 420
Reference Parameters oldtime newtime user 2.42.4. reset_clock (ID: 03200101) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE The clock at was manually reset to The clock has manually been reset. None None. 1 oldtime - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 421
Out of memory while tying to allocate dynamic port for local IP to destination IP The unit failed to allocate a dynamic port, as it is out of memory. None None. 1 reason localip destip 2.42.10. port_bind_failed (ID: 03200301) Default Severity Log Message WARNING Out of dynamic - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 422
as all ports are in use. None None. 1 reason localip destip port_base port_end 2.42.11. port_hlm_conversion (ID: 03200302) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Using High Load Mode for Local IP Destination IP pair - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 423
Message Reference Default Severity Log (ID: 03200401) Default Severity Log Message Explanation ssl_encryption_failed (ID: 03200450) Default Severity Log Message Explanation Gateway bidir_fail (ID: 03200600) Default Severity Log Message Explanation CRITICAL - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 424
the disk media is intact. 1 new_cfg 2.42.19. disk_cannot_remove (ID: 03200603) Default Severity Log Message Explanation Gateway Action Recommended Action ERROR Failed to remove The unit failed to remove the old configuration file. None Verfiy that the disk media is intact, and that the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 425
that the disk media is intact. 1 cfg_new cfg_real 2.42.21. cfg_switch_fail (ID: 03200605) Default Severity Log Message Explanation Gateway Action Recommended Action Revision CRITICAL Failed to switch to new configuration For reasons specified in earlier log events, the unit failed to switch to - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 426
been verified for communication back to peer, and will now be used as the active configuration. None None. 2 localcfgver remotecfgver 2.42.24. shutdown (ID: 03201000) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Shutdown . Active - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 427
. shutdown_gateway_aborted Verify that the disk media is intact. 1 shutdown reason core 2.42.27. config_activation (ID: 03201020) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Reconfiguration requested by from - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 428
previous_shutdown 2.42.30. startup_echo (ID: 03202001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision corever>. Build: . Current uptime: . Using configuration file , localcfgver , remotecfgver . Previous - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 429
admin_logout (ID: 03203001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Administrative user logged out, via . Access level: An adminsitrative user has logged out from the configuration system. None None - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 430
An adminsitrative user failed to log in to configuration system. This is most likely due to an invalid entered username or password. disallow_admin_access None. 1 authsystem username [server_ip] [server_port] [client_ip] [client_port] 2.42.35. sslvpnuser_login (ID: 03203004) Default Severity Log - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 431
42.37. accept_configuration (ID: 03204001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE New configuration activated by user from . The new configuration has been successfully activated. using_new_config - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 432
(ID: 03206001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Administrative user not allowed access via The user does not have proper administration access to the configuration system. disallow_admin_access None - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 433
login, not allowed access via An internal error occured when the user tried to log in, and as a result has not been given administration access. disallow_admin_access Please contact the support and report this issue. 1 authsystem username server_ip server_port client_ip client_port 433 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 434
If any of these combinations should either be dropped or ignored, specify this in configuration, in the "Settings" sub system. 1 good_flag bad_flag Rule Name Packet Buffer 2.43.3. tcp_flag_set (ID: 03300003) Default Severity Log Message NOTICE The TCP flag is set. Ignoring 434 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 435
The packet has no SYN, ACK, FIN or RST flag set. Ignoring. ignore None. 1 Rule Name Packet Buffer 2.43.6. tcp_flags_set (ID: 03300008) Default Severity Log Message Explanation WARNING The TCP and flags are set. Dropping The possible combinations for these flags are: SYN URG - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 436
either be ignored or having the bad flag stripped, specify this in configuration, in the "Settings" sub system. 1 good_flag bad_flag Rule Name Packet Buffer 2.43.7. tcp_flag_set (ID: 03300009) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 437
sequence numbers. Dropping packet. drop None. 1 seqno expectseqno Rule Name Connection Packet Buffer 2.43.11. mismatched_first_ack_seqno (ID: 03300013) Default Severity Log Message Explanation Gateway Action Recommended Action Revision WARNING SYNACK packet with seq . Expected - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 438
window. Dropping packet. drop None. 1 seqno winstart winend Rule Name Connection Packet Buffer 2.43.13. tcp_seqno_too_low (ID: 03300016) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters DEBUG TCP sequence number is not in - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 439
. The packet will be dropped. drop None. 1 ack accstart accend Rule Name Connection Packet Buffer 2.43.15. rst_without_ack (ID: 03300018) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE TCP RST segment without ACK during state SYN_SENT - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 440
the last 10 seconds. close If the system is configured to use TCP based ALGs, increase the amount of maximum sessions parameter on the associated service. 1 max_windows [num_events] 2.43.19. tcp_get_freesocket_failed (ID: 03300024) Default Severity Log Message WARNING System was not able to get - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 441
This event was triggered [num_events] times during the last 10 seconds. None None. 1 2.43.20. tcp_seqno_too_low_with_syn (ID: 03300025) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters DEBUG TCP sequence number is not in the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 442
low. TCPMSSMin=. Adjusting The TCP MSS is too low. Adjusting to use the configured minimum MSS. adjust None. 1 tcpopt mss minmss Rule Name Packet Buffer 2.44.3. tcp_mss_too_high (ID: 03400003) Default Severity Log Message Explanation NOTICE TCP MSS too high. TCPMSSMax= The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 443
. TCPMSSMax=. Adjusting The TCP MSS is too high. Adjusting to use the configured maximum MSS. adjust None. 1 tcpopt mss maxmss Rule Name Packet Buffer 2.44.5. tcp_mss_above_log_level (ID: 03400005) Default Severity NOTICE Log Message TCP MSS higher than log level. TCPMSSLogLevel - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 444
has a TCP Option of the specified type. Ignoring. ignore None. 1 tcpopt Rule Name Packet Buffer 2.44.7. tcp_option_strip (ID: 03400007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters NOTICE Packet has a type TCP option - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 445
type has an invalid length. Dropping packet. drop None. 1 tcpopt optlen expectlen Rule Name Packet Buffer 2.44.11. tcp_mss_too_low (ID: 03400013) Default Severity Log Message Explanation Gateway Action WARNING TCP MSS too low. TCPMSSMin=. Dropping The TCP MSS is too low. Dropping - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 446
is too high. Dropping packet. drop None. 1 tcpopt mss maxmss Rule Name Packet Buffer 2.44.13. tcp_option_disallowed (ID: 03400015) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters Context Parameters WARNING Packet has a TCP option, which is - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 447
SYN, ACK, FIN or RST flag set. Dropping packet. drop None. 1 Rule Name Packet Buffer 2.44.15. multiple_tcp_ws_options (ID: 03400017) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING Multiple window scale options present in a single TCP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 448
2.44.17. mismatching_tcp_window_scale (ID: 03400019) Chapter 2. Log Message Reference Explanation Gateway Action Recommended Action Revision Parameters Context Parameters TCP segment with a window scale option specifying a different shift count than previous segments was received. The lower of - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 449
up new connections too fast. None Look through logs to see if the source ip has misbehaved in the past. 1 description threshold srcip Rule Name 2.45.3. conn_threshold_exceeded (ID: 05300102) Default Severity Log Message Explanation Gateway Action NOTICE Connection threshold exceeded - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 450
the number of connections, the connection will be closed. close Check memory consumption. 1 Connection 2.45.6. threshold_conns_from_srcip_exceeded (ID: 05300210) Default Severity Log Message NOTICE The number of connections matching the rule and originating from exceeds . 450 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 451
threshold. The configured protective measures will be triggered. Note: This log message is rate limited via an exponential back-off procedure. protect None. 1 threshold srcip [username] Rule Name 2.45.8. threshold_conns_from_filter_exceeded (ID: 05300212) Default Severity Log Message Explanation - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 452
Name 2.45.9. threshold_conns_from_filter_exceeded (ID: 05300213) Default Severity Log Message Explanation Gateway Action Recommended The number of connections matching the threshold rule exceeds the configured threshold. The configured protective measures will be triggered. Note: This log message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 453
refer to the TIMESYNC (Firewall time synchronization events) category. 2.46.1. synced_clock (ID: 03500001) Default Severity Log Message Explanation Verify that the time sync server is running. 1 2.46.3. clockdrift_too_high (ID: 03500003) Default Severity Log Message Explanation Gateway - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 454
2.46.3. clockdrift_too_high (ID: 03500003) Revision Parameters 1 clockdrift timeserver interval Chapter 2. Log Message Reference 454 - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 455
Rule Name Packet Buffer 2.47.3. enet_hw_sender_broadcast (ID: 04400412) Default Severity Log Message Explanation Gateway Action NOTICE Ethernet hardware sender is a broadcast address. Rewriting to the address of the forwarding interface. The Ethernet hardware sender address is a broadcast address - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 456
None. 1 Rule Name Packet Buffer 2.47.6. enet_hw_sender_multicast (ID: 04400415) Default Severity Log Message Explanation NOTICE Ethernet hardware sender is a multicast address. Rewriting to the address of the forwarding interface. The Ethernet hardware sender address is a multicast address. The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 457
the behaviour of that equipment. 1 Rule Name Packet Buffer 2.47.8. relay_stp_frame (ID: 04400417) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL Relaying STP frame from to switched interfaces An incomming STP frame has been - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 458
has been dropped since it is either malformed or its type is unknown. Supported Spanning-Tree versions are STP, RSTP, MSTP and PVST+. drop If the ID: 04400420) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters INFORMATIONAL Forwarding MPLS packet from - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 459
2.47.13. invalid_mpls_packet (ID: 04400422) Chapter 2. Log Message Reference Revision Parameters 1 recvif 2.47.13. invalid_mpls_packet (ID: 04400422) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Incomming MPLS packet on dropped - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 460
unit received a valid response to an Accounting-Start event from the Accounting Server. None None. 1 User Authentication 2.48.2. invalid_accounting_start_server_response (ID: 03700002) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters WARNING - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 461
features will be disabled. accounting_disabled Verify that the RADIUS Accounting server is properly configured. 1 User Authentication 2.48.5. no_accounting_start_server_response (ID: 03700005) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 462
to the Accounting-Start event was received from the Accounting Server. logout_user Verify that the RADIUS Accounting server is properly configured. 1 User Authentication 2.48.7. failed_to_send_accounting_stop (ID: 03700007) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 463
not have been propery received by the Accounting Server. None Verify that the RADIUS Accounting server daemon is running on the Accounting Server. 1 User Authentication 2.48.11. invalid_accounting_stop_server_response (ID: 03700011) Default Severity Log Message Explanation Gateway Action ALERT - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 464
logout_user Verify that a route exists from the unit to the RADIUS Accounting server, and that it is properly configured. 1 User Authentication 2.48.14. no_accounting_start_server_response (ID: 03700014) Default Severity Log Message Explanation ALERT Did not send a RADIUS Accounting START request - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 465
Verify that a route exists from the unit to the RADIUS Accounting server, and that it is properly configured. 1 User Authentication 2.48.15. user_timeout (ID: 03700020) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 466
information has been updated on the Accounting Server. None None. 1 bytessent bytesrecv packetssent packetsrecv gigawrapsent gigawraprecv sestime User Authentication 2.48.19. accounting_interim_failure (ID: 03700051) Default Severity Log Message Explanation Gateway Action Recommended Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 467
might not have been propery received by the Accounting Server. None Verify that the RADIUS Accounting server is properly configured. 1 User Authentication 2.48.22. invalid_accounting_interim_server_response (ID: 03700054) Default Severity Log Message Explanation Gateway Action WARNING Received - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 468
logging in from another IP address, logging out current instance A user with the same username as an already authenticated user is logging in. The current instance is logged out. logout_current_user None. 1 User Authentication 2.48.24. already_logged_in (ID: 03700101) Default Severity Log Message - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 469
is running on the Authenication Server. 1 User Authentication 2.48.28. manual_logout (ID: 03700106) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters NOTICE User manually logged out A user manually logged out, and is no longer authenticated - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 470
, and use password verification instead. 1 User Authentication 2.48.31. ldap_auth_error (ID: 03700109) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Context Parameters ALERT Error during LDAP user authentication, contact with LDAP server not established The - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 471
Gateway Action Recommended Action Revision Context Parameters NOTICE User logged out A user logged out, and is no longer authenticated. None None. 1 User Authentication 2.48.33. ldap_session_new_out_of_memory (ID: 03700401) Default Severity Log Message Explanation Gateway Action Recommended - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 472
ldap_user_authentication_failed (ID: 03700404) Chapter 2. Log Message Reference Recommended Action Revision Parameters None. 1 user 2.48.36. ldap_user_authentication_failed (ID: 03700404) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE LDAP - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 473
Cannot retrieve user password from LDAP database Cannot retrive the user password from LDAP database making user authentication impossible. user authentication failed Check configuration for password attribute. 1 database 2.48.42. no_shared_ciphers (ID: 03700500) Default Severity Log - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 474
and try to find out if it is a part of a possible attack, or normal traffic. 2 client_ip 2.48.44. bad_packet_order (ID: 03700502) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Bad SSL Handshake packet order. Closing down SSL connection Two or - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 475
of a SSL handshake) is invalid, and the SSL connection is closed. ssl_close None. 1 client_ip 2.48.48. bad_clientfinished_msg (ID: 03700506) Default Severity Log Message Explanation ERROR SSL Handshake: Bad ClientFinished message. Closing down SSL connection The ClientFinished message (which is - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 476
of a SSL handshake) is invalid, and the SSL connection is closed. ssl_close None. 1 client_ip 2.48.50. unknown_ssl_error (ID: 03700508) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Unknown SSL error. Closing down SSL connection An unknown - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 477
SSL connection, and the SSL connection will be closed. close None. 1 client_ip level description 2.48.53. sent_sslalert (ID: 03700511) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Sent SSL Alert. Closing down SSL connection The unit has sent - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 478
Reference 2.49. VFS These log messages refer to the VFS (VFS file handling events) category. 2.49.1. odm_execute_failded (ID: 05200001) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Usage of file "" failed. File validated as - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 479
enough space. 1 filename 2.49.6. upload_certificate_fail (ID: 05200006) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE could not be added to the configuration Certificate data could not be added to the configuration. None Make sure that the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 480
2. Log Message Reference 2.49.7. upload_certificate_fail (ID: 05200007) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters NOTICE Certificate data in file , could not be added to the configuration Certificate data could not be added to the - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 481
Unable to allocate exclude entry. Unit is low on memory. no_exclude Review the configuration in order to free more RAM. 1 host 2.50.3. unable_to_allocate_block_entry (ID: 03800003) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Unable - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 482
(ID: 03800005) Chapter 2. Log Message Reference Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters WARNING Unable to accommodate block request since out of IP profiles on There are no free IP profiles left on the switch. No more hosts - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 483
the firewall is able to communicate with the switch. 1 type profile switch 2.50.8. failed_writing_zonededense_state_to_media (ID: 03800008) Default Severity returned an error while creating a rule. None Verify that the configured switch model is correct. 1 ruletype network switch 2.50.10. no_response_trying_to_erase_profile - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 484
that the firewall is able to communicate with the switch. 1 type profile switch 2.50.11. failed_to_erase_profile (ID: 03800011) Default Severity Log that the configured switch model is correct. 1 type profile switch 2.50.12. failed_to_save_configuration (ID: 03800012) Default Severity Log - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 485
Parameters Several attempts to save the configuration in the switch has timed out. No more attempts will be made. task_ignored Verify that the firewall is able to communicate with the switch. 1 switch 2.50.14. zd_block (ID: 03800014) Default Severity Log Message Explanation Gateway Action - D-Link DFL-260E | Log Reference Guide for DFL-260E - Page 486
2.50.14. zd_block (ID: 03800014) Chapter 2. Log Message Reference 486
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
 |
 |
Network Security Solution
NetDefendOS
Ver.
2.40.00
Network Security Firewall
Log Reference Guide
Security
Security