sonicwall:explanation_of_drop_code_and_module_id_values_in_packet_capture_output_sonicos_6_5_4_5
Explanation Of Drop Code And Module-ID Values In Packet Capture Output (SonicOS 6.5.4.5)
Explanation Of Drop Code And Module-ID Values In Packet Capture Output (SonicOS 6.5.4.5)
Description
The Packet Monitor Feature on the SonicWall is one of the most powerful and useful tools for troubleshooting a wide variety of issues. Any Packets which pass through the SonicWall can be viewed, examined, and even exported to tools like Wireshark.
The Module-ID field provides information on the specific area of the firewall (UTM) appliance's firmware that handled a particular packet. The Drop-Code field provides a reason why the appliance dropped a particular packet. This article provides a list of the Module-ID and Drop-Code numbers along with their meanings.
- Module ID and Name
- Drop Code ID and Name
| Module Id | Module Name |
|---|---|
| 1 | adminTools |
| 2 | attacks |
| 3 | av |
| 4 | bwmmgmt |
| 5 | CIA |
| 6 | cli |
| 7 | clients |
| 8 | config |
| 9 | connectionCache |
| 10 | contentFilter |
| 11 | dea |
| 12 | debug |
| 13 | dhcpRelay |
| 14 | dhtml |
| 15 | fileSystem |
| 16 | fwCore |
| 17 | ha |
| 18 | idp |
| 19 | ipHelper |
| 20 | ipSec |
| 21 | lib |
| 22 | log |
| 23 | modem |
| 24 | netObj |
| 25 | network |
| 26 | packetFilter |
| 27 | policy |
| 28 | pppStack |
| 29 | RADIUS acct |
| 30 | redirector |
| 31 | reports |
| 32 | resource |
| 33 | sarc |
| 34 | servers |
| 35 | snmp |
| 36 | spdpp |
| 37 | stateful |
| 38 | system |
| 39 | TRAV2 |
| 40 | TSA |
| 41 | USERS |
| 42 | version |
| 43 | wizards |
| 44 | wlan |
| 45 | wlb |
| 46 | zones |
| 47 | ARP |
| 48 | system stack |
| 49 | PPTP |
| 50 | L2TP |
| 51 | PPP-Dialup |
| 52 | IGMP |
| 53 | PPPOE |
| 54 | NAT |
| 55 | anti-spam |
| 56 | NetMonitor |
| 57 | Mirroring |
| 58 | SIP |
| 59 | BandOpt |
| 60 | GMSFlow server |
| 61 | APPFlow server |
| 62 | QoS |
| 63 | IPv6 |
| 64 | ICMPv6 |
| 65 | CFS |
| 66 | Cloud GAV |
| 67 | AWS API |
| 68 | LLDP |
| 69 | SSO REST API |
| Drop Code ID | Drop Code Name |
|---|---|
| 1 | PIP handling error in CP |
| 2 | PIP handling error in DP |
| 3 | Packet on the backup aggregate interface, but no Sonic END can be found. |
| 4 | Broadcast packet on the backup redundant port when primary port is up. |
| 5 | Packet the redundancy port, but no Sonic END can be found. |
| 6 | CP throttled DP for stack traffic |
| 7 | Packet dropped due to pass to stack failed. |
| 8 | Packet dropped by outputhook. |
| 9 | Inter-blade Packet dropped due to CP pass to stack failed. |
| 10 | HA active data packet processing failed. |
| 11 | Packet dropped due to CP pass to stack failed. |
| 12 | Drop IEEE802 BPDU packet Becuase L2 Bridge block non-ip packets. |
| 13 | Dispatching IEEE802 BPDU packet failed. |
| 14 | IEEE 802 BPDU support module has not been initialized yet. |
| 15 | Invalide Ether type for IEEE 802 BPDU packet. |
| 16 | Invalide source address for IEEE 802 BPDU packet. |
| 17 | Unknown Ether type ingress. |
| 18 | Null Ether header egress. |
| 19 | Unknown Ether type egress. |
| 20 | IPv6 packets not supported. |
| 21 | Packet on invalid vlan |
| 22 | Packet ingress on invalid interface |
| 23 | Packet egress on invalid interface |
| 24 | Packet on invalid device |
| 25 | Destination MAC address is not our interface |
| 26 | Source MAC address is one of our Interface MAC |
| 27 | Device is not attached. |
| 28 | Packet on invalid svrrp group |
| 29 | Invalid HA packet |
| 30 | Invalid IPv6 HA packet |
| 31 | Invalid HA ARP packet |
| 32 | PPPoE discover packet not allowed |
| 33 | Invalid HA SDP packet |
| 34 | Routing packet not allowed |
| 35 | Routing packet not allowed for BGP packet |
| 36 | Routing packet not allowed for ZebOS |
| 37 | Routing packet not allowed for v6 ZebOS |
| 38 | VLAN filtered. |
| 39 | Unicast MACADDR not mine |
| 40 | L2B Learning-Bridge filtered |
| 41 | Invalid NET-ID found on mist if write. |
| 42 | Invalid NET-ID found on if write arp real. |
| 43 | Invalid NET-ID found on write ip fast. |
| 44 | Invalid NET-ID found on if write. |
| 45 | Invalid NET-ID found on if write no mbuf. |
| 46 | Invalid Run-time NET data on mist if write. |
| 47 | Invalid Run-time NET data on if write arp real. |
| 48 | Invalid Run-time NET data on write ip fast. |
| 49 | Invalid Run-time NET data on if write. |
| 50 | Invalid parent Run-time NET data on if write. |
| 51 | Invalid Run-time NET data on if write no mbuf. |
| 52 | Invalid parent Run-time NET data on if write no mbuf. |
| 53 | Unknown ARP type. |
| 54 | Arp reply ignored. |
| 55 | IP address not for our subnet |
| 56 | ARP unexpected link ip |
| 57 | ARP source ip not connected |
| 58 | NULL source IP address |
| 59 | Own gratuitous arp |
| 60 | IP address not on our lan subnet |
| 61 | Classical mode, ARP bridge not supported |
| 62 | ARP proxy, subnet mismatch |
| 63 | Not for me. |
| 64 | ARP glean disabled. |
| 65 | ARP request from stack |
| 66 | ARP response from stack |
| 67 | ARP fail to resolve from SonicPoint |
| 68 | ARP unknown ethernet address format |
| 69 | IP length of fragment UDP packets is too big(>65535), drop |
| 70 | Invalid TCP Flag(#1) |
| 71 | Invalid TCP Flag(#2) |
| 72 | Invalid TCP Options(#1) |
| 73 | Invalid TCP Options(#2) |
| 74 | Invalid TCP Options(#3) |
| 75 | Invalid TCP Options(#4) |
| 76 | Invalid TCP Stack |
| 77 | IP sanity test failed |
| 78 | IP sanity test failed in out hook |
| 79 | IP advanced sanity test failed |
| 80 | Non sonicpoint traffic in wlan zone |
| 81 | Multicast spank attack |
| 82 | Multicast Data packet dropped |
| 83 | Load Balancing Probe error |
| 84 | Syn Flood Protection(#1) |
| 85 | Syn Flood Protection(#2) |
| 86 | Syn Flood Protection(#3) |
| 87 | Duplicated in Syn Flood Protection |
| 88 | IP source route option found |
| 89 | IP record route option found |
| 90 | Source IP is subnet broadcast address |
| 91 | Invalid connection cache. |
| 92 | Invalid connection cache after lookup. |
| 93 | Unknown destination(#1) |
| 94 | Unknown destination(#2) |
| 95 | Unknown destination for bridged bcast pkt |
| 96 | Bounce traffic detected |
| 97 | Access Rule Policy not found |
| 98 | DPI-SSL Enforcement detection |
| 99 | AV detection |
| 100 | NG AV detection |
| 101 | SEC detection |
| 102 | DEA detection |
| 103 | Bad TFTP packets |
| 104 | Enforced firewall rule(#1) |
| 105 | Enforced firewall rule(#2) |
| 106 | Enforced firewall rule(#3) |
| 107 | Enforced Content Filter Policy |
| 108 | LICENSE drop |
| 109 | IDP detection |
| 110 | IDP detection 2 |
| 111 | IDP detection 3 |
| 112 | IDP detection DPI-SSL Enforcement |
| 113 | IDP detection Relaod Signatures Database |
| 114 | IDP detection Attack Prevented(#1) |
| 115 | IDP detection Attack Prevented(#2) |
| 116 | IDP detection AF SMTP Reply |
| 117 | IDP detection Packet Out Of Order |
| 118 | IDP detection AF_DROP_PACKET |
| 119 | IDP detection AF_SEND_BLOCK_PAGE |
| 120 | IDP detection DROP_IP_IDP_AF_SEND_SMTP_REPLY |
| 121 | IDP detection DROP_IP_IDP_AF_SEND_HTTP_REDIRECT |
| 122 | IDP detection DROP_IP_IDP_AF_SEND_FTP_ERROR |
| 123 | IDP detection DROP_IP_IDP_AF_RESET_CONNECTION |
| 124 | IDP detection DROP_IP_IDP_DROP_PACKET |
| 125 | IDP detection DROP_IP_IDP_DROP_PACKET 2 |
| 126 | IDP detection DROP_IP_IDP_DROP_PACKET 3 |
| 127 | IDP detection DROP_IP_IDP_SEND_BLOCK_PAGE |
| 128 | IDP detection DROP_IP_IDP_SEND_SMTP_REPLY |
| 129 | IDP detection DROP_IP_IDP_SEND_HTTP_REDIRECT |
| 130 | IDP detection DROP_IP_IDP_SEND_FTP_ERROR |
| 131 | IDP detection DROP_IP_IDP_RESET_CONNECTION |
| 132 | IDP detection DROP_IP_IDP_AC_DROP_PACKET |
| 133 | IDP detection DROP_IP_IDP_AS_DROP_PACKET |
| 134 | IDP detection DROP_IP_IDP_GAV_DROP_PACKET_1 |
| 135 | IDP detection DROP_IP_IDP_GAV_DROP_PACKET_2 |
| 136 | IDP detection DROP_IP_IDP_GAV_DROP_PACKET_3 |
| 137 | IDP detection DROP_IP_IDP_GAV_DROP_PACKET_4 |
| 138 | IDP detection Fragmentation |
| 139 | IDP detection Block Retry Exception |
| 140 | IDP detection OOO Exceeded Max |
| 141 | IDP detection OOO Out of Buffers |
| 142 | IDP detection Keep Original |
| 143 | IDP detection SMB out of order read/write |
| 144 | IDP detection, bad tcp checksum |
| 145 | IDP detection, bad ip checksum in tcp checking |
| 146 | IDP detection, bad ip checksum in tcp packet |
| 147 | IDP detection, bad udp checksum |
| 148 | IDP detection, bad ip checksum in udp checking |
| 149 | IDP detection, bad ip checksum in udp packet |
| 150 | IDP detection, bad icmp checksum |
| 151 | IDP detection, bad ip checksum in icmp checking |
| 152 | IDP detection, bad ip checksum in icmp packet |
| 153 | Packet to public IP from inside firewall |
| 154 | Bad TTL |
| 155 | IP check failed |
| 156 | Bad source IP(#1) |
| 157 | Bad source IP(#2) |
| 158 | Bad output source IP |
| 159 | Bad destination MAC address |
| 160 | Broadcast not allowed on bridge, Bad output source IP source |
| 161 | Antispam: Going to blacklisted server. |
| 162 | Going to blacklisted server. |
| 163 | coming from blacklisted server. |
| 164 | Broadcast traffic not handled. |
| 165 | Multicast forwarding not configured |
| 166 | Multicast IGMP state not found |
| 167 | Multicast IP not in the allowed list |
| 168 | NAT64 not support multicast IP |
| 169 | Anti-Spam Connection Limit Reached |
| 170 | Active/Active DPI drop offload packet |
| 171 | UDP Flood Protection |
| 172 | ICMP Flood Protection |
| 173 | UDP Flood Protection For IPv6 |
| 174 | ICMPv6 Flood Protection |
| 175 | Control Plane Flood Protection |
| 176 | Guest Service not allowed |
| 177 | WLAN Guest Service not allowed |
| 178 | Packet dropped - PDF rules: |
| 179 | Unknown Ether type |
| 180 | Incorrect IP Version |
| 181 | Blacklisted MAC address |
| 182 | Greater IP Length |
| 183 | Less IP Length |
| 184 | TCP packet length mismatch with interface MTU |
| 185 | UDP packet length mismatch with interface MTU |
| 186 | Other protocol packet length mismatch with interface MTU |
| 187 | First fragment length less than minimum IP MTU |
| 188 | Wrong fragmentation boundary(#1). |
| 189 | Wrong fragmentation boundary(#2). |
| 190 | Wrong IP checksum value(#1). |
| 191 | Wrong IP checksum value(#2). |
| 192 | Wrong TCP Checksum value. |
| 193 | Wrong UDP Checksum value. |
| 194 | Wrong ICMP Checksum value(#1). |
| 195 | Wrong ICMP Checksum value(#2). |
| 196 | ICMP High perf error. |
| 197 | NULL Udp port number |
| 198 | Non PPP-GRE traffic |
| 199 | Missing ESP Header |
| 200 | Missing AH Header |
| 201 | Missing IPCOMP Header |
| 202 | Unknown IP protocol type(#1) |
| 203 | Unknown IP protocol type(#2) |
| 204 | TTL value is zero. |
| 205 | TTL value is zero, case two. |
| 206 | l2 mcast but dest ip is unicast(#1) |
| 207 | l2 mcast but dest ip is unicast(#2) |
| 208 | Null Source Zone. |
| 209 | Wrong UDP Length. |
| 210 | IGMP packets could not be fragmented |
| 211 | RECV: IP pkt recvd without IPCP session |
| 212 | RECV: IP pkt recvd without contiguous buf |
| 213 | RECV: IP pkt recvd without combuf |
| 214 | RECV: TNMP can't alloc contiguous buf |
| 215 | XMIT: AHDLC encap no buf |
| 216 | XMIT: TNMP can't alloc contiguous buf |
| 217 | XMIT: Device not ready to forward traffic |
| 218 | XMIT: No IPCP session |
| 219 | XMIT: IPCP is down |
| 220 | XMIT: No Dialup Msg Buffer available |
| 221 | Non Zero GIAddr field in DHCP packet from client |
| 222 | Source MAC is different from chAddr field in DHCP client packet |
| 223 | Iphelper policy not found for DHCP relay. |
| 224 | Iphelper cache not found for DHCP. |
| 225 | Zero NSID in Netbios request packet. |
| 226 | Iphelper policy not found for Netbios. |
| 227 | Iphelper cache not found for Netbios. |
| 228 | Zero NSID in Netbios reply packet when recv from server. |
| 229 | Zero NSID in Netbios reply packet when recv from client. |
| 230 | Zero NSID in Netbios reply packet. |
| 231 | Netbios client no egress element |
| 232 | Netbios server no egress element |
| 233 | Netbios client fail to create record |
| 234 | DHCP server fail to relay to client |
| 235 | DHCP client no egress element |
| 236 | DHCP client fail to create record |
| 237 | DHCP server, Ingress interface is same as egress interface. |
| 238 | Firewall, Ingress interface is same as egress interface. |
| 239 | Other Application, Ingress interface is same as egress interface. |
| 240 | Ingress interface is same as egress interface. |
| 241 | DHCP server packet dropped, RPF check failed. |
| 242 | Netbios client packet dropped, RPF check failed. |
| 243 | Netbios server packet dropped, RPF check failed. |
| 244 | Other Application relay to client failed |
| 245 | Other Application no egress element |
| 246 | Other Application fail to create record |
| 247 | Other Application packet dropped, RPF check failed. |
| 248 | Other Application client packet dropped, RPF check failed. |
| 249 | Other Application server packet dropped, RPF check failed. |
| 250 | Iphelper policy not found for other Application. |
| 251 | Iphelper policy not found for other Application when creating record. |
| 252 | Combuf Allocation Error. |
| 253 | Memory Allocation Error. |
| 254 | BSEG Memory Allocation Error. |
| 255 | Length Mismatch. Cant forward pkt!!!. |
| 256 | Control message header size error. |
| 257 | Drop GRE packet as call not yet established. |
| 258 | Invalid GRE Flags or Caller ID. |
| 259 | Invalid GRE sequence number. |
| 260 | No payload for GRE packet. |
| 261 | PPTP Tunnel is not up yet. |
| 262 | PPTP Client is not enabled. |
| 263 | PPTP WAN Write Spin Lock Error. |
| 264 | PPTP Spin Lock Error. |
| 265 | PPTP Flow Control Queuing Error. |
| 266 | Error copying PPTP combuf chain to continuous buffer. |
| 267 | Error fragmenting packet that is larger than PPTP MTU. |
| 268 | Enforced Dial-on-Data restriction. |
| 269 | PPPDU has not completed initialization. |
| 270 | Error fragmenting packet that is larger than PPPDU MTU. |
| 271 | PPPDU dropped packet because packet that is larger then PPPDU MTU and fragmentation is disabled. |
| 272 | Packet received with DF bit Set and large than MTU |
| 273 | PPP MLP link is not up/available. |
| 274 | PPP link is not up/available. |
| 275 | PPP link is not up. |
| 276 | PPP link is not opened. |
| 277 | The PPP buffer processing failed. |
| 278 | LCP: The PPP buffer is truncated. |
| 279 | The PPP buffer decompressing failed. |
| 280 | NCP: The PPP buffer is truncated. |
| 281 | PPP MLP pre-xmit error. |
| 282 | PPP MLP encapsulate error. |
| 283 | PPP MLP null pointer found. |
| 284 | PPP MLP no data packet. |
| 285 | PPP MLP link is not opened. |
| 286 | PPP MLP buffer decompressing failed. |
| 287 | PPP MLP BAP no netif nlinfo. |
| 288 | PPP MLP IP no netif nlinfo. |
| 289 | PPP MLP NBF no netif nlinfo. |
| 290 | PPP MLP VJCOMP no netif nlinfo. |
| 291 | PPP MLP VJCOMP decompressing failed. |
| 292 | PPP MLP VJUNCOMP no netif nlinfo. |
| 293 | PPP MLP VJUNCOMP decompressing failed. |
| 294 | PPP MLP IPX no netif nlinfo. |
| 295 | PPP MLP IPX decompressing failed. |
| 296 | PPP MLP AT no netif nlinfo. |
| 297 | PPP MLP 802.1 no netif nlinfo. |
| 298 | PPP MLP IBMSR no netif nlinfo. |
| 299 | PPP MLP DECLAN no netif nlinfo. |
| 300 | PPP MLP BRIDGE no netif nlinfo. |
| 301 | PPP MLP NBFCP no netif nlinfo. |
| 302 | PPP MLP IPCP no netif nlinfo. |
| 303 | The PPP PAP buffer processing failed. |
| 304 | The PPP CHAP buffer processing failed. |
| 305 | The PPP NCP buffer processing failed. |
| 306 | The PPP LCP buffer processing failed. |
| 307 | Received PPP pkt but there is no existing PPP information. |
| 308 | PPP Network Interface structure is NULL. |
| 309 | PPP Virtual Interface structure is NULL. |
| 310 | PPP no active link. |
| 311 | PPP dropped packet because it contains unknown protocol. |
| 312 | PPP dropped packet because of transmission failure. |
| 313 | PPP MLP NCP processing failed |
| 314 | PPP dropped packet because NCP is not open. |
| 315 | PPP dropped packet because the LCP code is unacceptable. |
| 316 | PPP dropped packet because the LCP code is unknown. |
| 317 | PPP HDLC PPPOE packet has no payload. |
| 318 | PPPOE packet has no payload. |
| 319 | The PPPOE buffer processing failed. |
| 320 | The PPPOE ingress buffer processing failed. |
| 321 | The PPPOE egress buffer processing failed. |
| 322 | PPPOE packet dropped because of NULL pointer. |
| 323 | PPPOE packet dropped because of NULL pointer in DP. |
| 324 | PPPOE packet dropped because BSEG allocation failed. |
| 325 | PPPOE packet dropped because buf put head action failed. |
| 326 | PPPOE packet dropped because PADO create PAD packet failed. |
| 327 | PPPOE packet dropped because PADI create PAD packet failed. |
| 328 | PPPOE packet dropped because PADR create PAD packet failed. |
| 329 | The PPP HDLC ingress buffer processing failed. |
| 330 | The PPP HDLC egress buffer processing failed. |
| 331 | The PPP HDLC dropped because of NULL pointer. |
| 332 | The PPP HDLC dropped because of NULL pointer in DP. |
| 333 | PPP HDLC packet dropped because BSEG allocation failed. |
| 334 | PPP HDLC packet dropped because buf put head action failed. |
| 335 | The PPP HDLC buffer processing failed. |
| 336 | The PPP HDLC PPPOE IPCP is not up. |
| 337 | The PPP HDLC PPPOE is not ready. |
| 338 | The PPP HDLC PPPOE is not ready in DP. |
| 339 | The PPPOE IPCP is not up. |
| 340 | The PPPOE module is not yet ready. |
| 341 | The PPPOE module is not yet ready in DP. |
| 342 | The PPPOE module dropped the packet because it was an IPv6 one and not for us. |
| 343 | The PPP HDLC PPPOE is not enabled. |
| 344 | The PPP HDLC PPPOE is not enabled in DP. |
| 345 | The PPPOE module is not enabled. |
| 346 | The PPPOE module is not enabled in DP. |
| 347 | The PPP HDLC PPPOE is not re/started with NTP packets. |
| 348 | The PPP HDLC PPPOE is not re/started with NTP packets in DP. |
| 349 | The PPPOE module is not re/started with NTP packets. |
| 350 | The PPPOE module is not re/started with NTP packets in DP. |
| 351 | The PPP HDLC PPPOE is not re/started with non-IP packets. |
| 352 | The PPP HDLC PPPOE is not re/started with non-IP packets in DP. |
| 353 | The PPPOE module dropped the packet because it was non-IP. |
| 354 | The PPPOE module dropped the packet because it was non-IP in DP. |
| 355 | PPP HDLC PPPoE packet has unsupported version. |
| 356 | PPPoE packet has unsupported version. |
| 357 | Received PPP HDLC PPPOE packet for non-existent PPP session. |
| 358 | Received PPP HDLC PPPOE packet for non-existent PPP session in DP. |
| 359 | Received PPPoE packet for non-existent PPP session. |
| 360 | Received PPPoE packet for non-existent PPP session in DP. |
| 361 | PPPoE packet in ether type 'session' has an illegal session id. |
| 362 | PPPoE packet in ether type 'discovery' has an illegal session id. |
| 363 | PPPoE packet has unknown ethertype. |
| 364 | PPPoE packet is missing the service name tag. |
| 365 | PPPoE packet was not transmitted. |
| 366 | PPPoE packet dropped due to failure in adding enet header. |
| 367 | L2TP Length Mismatch. |
| 368 | L2TP UDP checksum error. |
| 369 | L2TP buffer corrupted. |
| 370 | L2TP invalid tunnel. |
| 371 | L2TP invalid session. |
| 372 | L2TP Invalid source interface. |
| 373 | L2TP packet not encrypted. |
| 374 | L2TP Drop PPP control packet, session not established yet. |
| 375 | L2TP Tunnel/Session Invalid. |
| 376 | L2TP invalid pkt type. |
| 377 | L2TP invalid control msg. |
| 378 | L2TP unsupported version. |
| 379 | L2TP invalid packet. |
| 380 | L2TP not enabled on this interface. |
| 381 | L2TP invalid runtime data. |
| 382 | L2TP connection not UP. |
| 383 | L2TP memory allocation failed. |
| 384 | No IPSec tunnel active for this connection. |
| 385 | Invalid L2TP Mode. |
| 386 | Pkt pass to stack failed. |
| 387 | UDP length greater than 1500. |
| 388 | IP length greater than 1500. |
| 389 | Pkt authentication failed. |
| 390 | SA not found on lookup by SPI after decryption. |
| 391 | SA not found on lookup by SPI after encryption. |
| 392 | Failed to copy frag chain to contiguous buffer. |
| 393 | Pkt with SPI less than 256. |
| 394 | SA not found on lookup by SPI for inbound packet. |
| 395 | Pkt length smaller than expected. |
| 396 | Replayed Pkt. |
| 397 | Pkt received on invalid interface. |
| 398 | Expecting udp encapsulation. |
| 399 | Not expecting udp encapsulation, ensure that X0 IP is configured. |
| 400 | Throughput regulator drop inbound pkt. |
| 401 | Throughput regulator drop inbound pkt in CP. |
| 402 | HW processing request error for inbound pkt. |
| 403 | AH auth failed. |
| 404 | ESP auth failed. |
| 405 | ESP decrypt failed. |
| 406 | Unknown protocol. |
| 407 | Nested tunnels not supported. |
| 408 | Pkt is not thru tunnel. |
| 409 | Pkt is not thru tunnel or l2tp transport mode. |
| 410 | Pkt not destined to mgmt interface. |
| 411 | Pkt not destined to mgmt interface in CP. |
| 412 | Pkt not destined to mgmt interface (non-octeon). |
| 413 | Pkt from invalid peer. |
| 414 | VPN access list check failure. |
| 415 | VPN access list check failure in CP. |
| 416 | VPN access list check failure (non-octeon). |
| 417 | Pkt does not match traffic selectors. |
| 418 | Pkt fragment not allowed. |
| 419 | DHCP pkt invalid IP length. |
| 420 | Octeon Decryption Failed for inbound packet. |
| 421 | Octeon Decryption Failed for inbound packet on DP. |
| 422 | Octeon Decryption Failed replay check. |
| 423 | Octeon Decryption Failed non esp ike. |
| 424 | Octeon Decryption Failed MAC compare. |
| 425 | Octeon Decryption Failed Pad check. |
| 426 | Octeon Decryption Failed policy version check. |
| 427 | Octeon Decryption Failed policy direction check. |
| 428 | Octeon Decryption Failed policy direction check on DP. |
| 429 | Octeon Decryption Failed protocol check. |
| 430 | Octeon Decryption Failed SA check. |
| 431 | Octeon Decryption Failed inner checksum. |
| 432 | Octeon Decryption Failed L4 checksum. |
| 433 | Octeon Decryption Failed soft lifebyte check. |
| 434 | Octeon Decryption Failed hard lifebyte check. |
| 435 | Octeon Decryption Failed illegal conf check. |
| 436 | Octeon Decryption Failed illegal auth check. |
| 437 | Octeon Decryption Failed esp payload length check. |
| 438 | Octeon Decryption Failed esp payload length check on DP. |
| 439 | Octeon Decryption Failed esp payload align check. |
| 440 | Octeon Decryption Failed sequence number check. |
| 441 | Octeon Decryption Failed sequence number check on DP. |
| 442 | Octeon Decryption Failed AH hdr len. |
| 443 | Octeon Decryption Failed Selector check. |
| 444 | Octeon Decryption inbound SA not found. |
| 445 | Incoming packet's combuf Ip Length Error. |
| 446 | Combuf Ip Ptr Null Error. |
| 447 | Multicast sa not found. |
| 448 | SA not found on lookup by SPI for outbound pkt. |
| 449 | Incorrect src IP on mgmt SA. |
| 450 | Throughput regulator drop outbound pkt. |
| 451 | Throughput regulator drop outbound pkt in CP |
| 452 | Insufficient command context for outbound pkt |
| 453 | HW processing request error for outbound pkt |
| 454 | Software esp decrypt processing request error |
| 455 | Software esp auth processing request error |
| 456 | Software ah auth processing request error |
| 457 | Software null sa processing request error |
| 458 | Software processing request error |
| 459 | Software malloc combuf fragment error |
| 460 | Combuf Fragmentation error |
| 461 | Combuf Fragmentation disallowed(#1) |
| 462 | Combuf Fragmentation disallowed(#2) |
| 463 | Combuf Fragmentation error after encryption |
| 464 | Combuf Fragmentation error after encryption in CP |
| 465 | Packet is large than MTU |
| 466 | IPSec MTU is less than IPv6 standard header size(#1) |
| 467 | IPSec MTU is less than IPv6 standard header size(#2) |
| 468 | Packet is large than MTU after encryption |
| 469 | Packet received with DF bit Set and large than MTU |
| 470 | Packet received in IPv6 and large than MTU(#1) |
| 471 | Packet received in IPv6 and large than MTU(#2) |
| 472 | Sequence overflow while encryting packet |
| 473 | Encryption error for outgoing packet |
| 474 | Combuf Ip Ptr Null Error |
| 475 | Combuf Ip Length Error |
| 476 | Combuf Ipv6 Length Error |
| 477 | Next Hope MAC ARP error |
| 478 | Next Hope ARP not Resolved |
| 479 | Multicast buffer error |
| 480 | No IGMP entry found when leaving |
| 481 | No IGMP entry found when forwarding |
| 482 | No IGMP interface entry found |
| 483 | Combuf fields mismatch iplen-enet not equal to etherhdr size |
| 484 | IGMP wrong Checksum |
| 485 | Multicast not enabled |
| 486 | Multicast not enabled(IGMP) |
| 487 | IGMPv2 state table error |
| 488 | IGMPv3 state table error |
| 489 | IGMP message has invalid length |
| 490 | IGMP message has invalid destination |
| 491 | IGMP message has invalid subtype |
| 492 | IGMPv3 message has invalid data length |
| 493 | IGMPv3 message has less data record |
| 494 | IGMPv3 message is invalid |
| 495 | IGMP query message version is not supported |
| 496 | IGMP report message version is not supported |
| 497 | IGMP message version is unknown |
| 498 | IGMP version not supported |
| 499 | Multicast RTP stateful failed |
| 500 | IP Spoof check failed recorded in module conncache |
| 501 | IP Spoof check failed recorded in module network |
| 502 | OutGoing interface not available |
| 503 | OutGoing interface is invalid |
| 504 | OutGoing interface is invalid for V6(#1) |
| 505 | OutGoing interface is invalid for V6(#21) |
| 506 | OutGoing interface is invalid for V6(#3) |
| 507 | OutGoing interface is invalid for V6(#4) |
| 508 | OutGoing interface is invalid for V6(#5) |
| 509 | OutGoing interface is invalid for V6(#6) |
| 510 | OutGoing interface is invalid for V6(#7) |
| 511 | OutGoing interface is invalid for V6(#8) |
| 512 | Cache pointer is NULL. NAT policy lookup cannot be performed |
| 513 | Cache add to hash table failed |
| 514 | NAT policy remap failed for original src |
| 515 | NAT policy remap failed for original dst |
| 516 | NAT policy remap failed for original svc |
| 517 | NAT policy remap failed for translated src |
| 518 | NAT policy remap failed for translated dst |
| 519 | NAT policy remap failed for translated svc |
| 520 | NAT policy generate unique remap port failed |
| 521 | NAT policy lookup failed. Cache add aborted |
| 522 | Connection cache is full |
| 523 | Get VPN tunnel interface from policy failed |
| 524 | Packet from bounced path from initiator |
| 525 | Half open ESP connection |
| 526 | Half open IPCOMP connection |
| 527 | Allocate memory for connection cache failed |
| 528 | Allocate memory for connection cache failed for caller |
| 529 | Connection Cache Add Failed |
| 530 | NAT Remap: Source IP not found in NAT Policy's Original Source Address Object |
| 531 | NAT Remap: Destination IP not found in NAT Policy's Original Destination Address Object |
| 532 | NAT Remap: Service not found in NAT Policy's Original Service Object |
| 533 | NAT Remap: Obtained invalid offset in original source(#1) |
| 534 | NAT Remap: Obtained invalid offset in original source(#2) |
| 535 | NAT Remap: Obtained invalid offset in original destination(#1) |
| 536 | NAT Remap: Obtained invalid offset in original destination(#2) |
| 537 | NAT Remap: Invalid address object type configured for original source(#1) |
| 538 | NAT Remap: Invalid address object type configured for original source(#2) |
| 539 | NAT Remap: Invalid address object type configured for original destination(#1) |
| 540 | NAT Remap: Invalid address object type configured for original destination(#2) |
| 541 | NAT Remap: Invalid address object type configured for translated source(#1) |
| 542 | NAT Remap: Invalid address object type configured for translated source(#2) |
| 543 | NAT Remap: Obtained invalid translated source from original offset(#1) |
| 544 | NAT Remap: Obtained invalid translated source from original offset(#2) |
| 545 | NAT Remap: Obtained invalid translated destination IP(#1) |
| 546 | NAT Remap: Obtained invalid translated destination IP(#2) |
| 547 | NAT Remap: Obtained invalid translated destination IP(#3) |
| 548 | NAT Remap: Size of translated destination object is zero |
| 549 | NAT Remap: Unable to find a host that is alive from translated destination pool |
| 550 | NAT Remap: Size of translated service object is zero |
| 551 | NAT Remap: Obtained invalid offset in original service |
| 552 | NAT Remap: Obtained invalid translated service from original offset(#1) |
| 553 | NAT Remap: Obtained invalid translated service from original offset(#2) |
| 554 | Packet marked to be dropped on ingress |
| 555 | Packet marked to be dropped on WAN ingress |
| 556 | Packet marked to be dropped on egress |
| 557 | Packet marked to be dropped on WAN egress |
| 558 | Packet dropped by BWM CBQ as there is no default queue |
| 559 | Packet dropped by BWM CBQ as the queue is full |
| 560 | Packet dropped by BWM ACKQ as the queue is full |
| 561 | Packet dropped by BWM CBQ as the queue allocation failed |
| 562 | Packet dropped by BWM ACKQ as the queue allocation failed |
| 563 | Packet dropped by BWM CBQ as enqueue failed |
| 564 | Packet dropped by BWM ACKQ as no ACKQ element |
| 565 | Packet dropped by BWM ACKQ as there is no default queue |
| 566 | Packet dropped due to BWM spin lock error |
| 567 | MAC-IP Anti-spoof check enforced for hosts. |
| 568 | MAC-IP Anti-spoof cache not found for this router. |
| 569 | MAC-IP Anti-spoof cache found, but it is not a router. |
| 570 | MAC-IP Anti-spoof cache found, but it is blacklisted device. |
| 571 | MAC-IP Anti-spoof cache found, but the spoof code is unknown. |
| 572 | Packet dropped - IDP failure on sslspy packet |
| 573 | Packet dropped - Content filter failure on sslspy packet |
| 574 | Packet dropped - Connection reseted on sslspy packet |
| 575 | Packet dropped - failed processing |
| 576 | Packet dropped - failed registration |
| 577 | Packet dropped - bad SIP packet |
| 578 | Packet dropped - new SIP flow with bad length |
| 579 | Packet dropped - failed new SIP flow processing |
| 580 | Packet dropped - failed SIP pre-processing |
| 581 | Packet dropped - failed SIP post-processing |
| 582 | Packet dropped - unknown SIP request method |
| 583 | Packet dropped - unknown SIP response method |
| 584 | Packet dropped - unknown SIP message type |
| 585 | Packet dropped - unknown Call-ID in method |
| 586 | Packet dropped - invalid SIP method to create call-id |
| 587 | Packet dropped - not allowed to create call-id |
| 588 | Packet dropped - invalid Contact: |
| 589 | Packet dropped - invalid Call-ID: |
| 590 | Packet dropped - invalid Via: |
| 591 | Packet dropped - invalid From: in SIP request |
| 592 | Packet dropped - invalid From: in SIP response |
| 593 | Packet dropped - invalid To: in SIP request |
| 594 | Packet dropped - invalid To: in SIP response |
| 595 | Packet dropped - invalid RecordRoute: in SIP request |
| 596 | Packet dropped - invalid RecordRoute: in SIP response |
| 597 | Packet dropped - invalid Maddr: in SIP request |
| 598 | Packet dropped - invalid Maddr: in SIP response |
| 599 | Packet dropped - invalid Route: |
| 600 | Packet dropped - invalid ACK |
| 601 | Packet dropped - invalid method |
| 602 | Packet dropped - invalid request method |
| 603 | Packet dropped - invalid ReferredBy: |
| 604 | Packet dropped - failed to modify ReferredBy: |
| 605 | Packet dropped - SIP invite failed to modify ReferredBy: |
| 606 | Packet dropped - SIP request failed to modify ReferredBy: |
| 607 | Packet dropped - invalid ReferredTo: |
| 608 | Packet dropped - invalid BYE |
| 609 | Packet dropped - invalid BYE response |
| 610 | Packet dropped - invalid CANCEL |
| 611 | Packet dropped - invalid CANCEL response |
| 612 | Packet dropped - invalid INVITE |
| 613 | Packet dropped - invalid INVITE response |
| 614 | Packet dropped - invalid REGISTER |
| 615 | Packet dropped - SDP body not found |
| 616 | Packet dropped - bad SDP content length |
| 617 | Packet dropped - bad SDP c= |
| 618 | Packet dropped - mismatched SDP c= |
| 619 | Packet dropped - bad SDP c= IP |
| 620 | Packet dropped - bad SDP m= |
| 621 | Packet dropped - failed to read content length in SDP processing |
| 622 | Packet dropped - failed to update content length in SDP processing |
| 623 | Packet dropped - failed SDP processing |
| 624 | Packet dropped - Geo-IP block for init country, country loc: Backendtree |
| 625 | Packet dropped - Per Policy Geo-IP block for init country, country loc: Backendtree |
| 626 | Packet dropped - Geo-IP block for init country, country loc: Frontendtree |
| 627 | Packet dropped - Per Policy Geo-IP block for init country, country loc: Frontendtree |
| 628 | Packet dropped - Geo-IP block for new lookup init country |
| 629 | Packet dropped - Geo-IP block for existing init country, country loc: FirewallDefaultTree |
| 630 | Packet dropped - Per Policy Geo-IP block for existing init country, country loc: FirewallDefaultTree |
| 631 | Packet dropped - Geo-IP block for existing init country, country loc: CustomTree |
| 632 | Packet dropped - Per Policy Geo-IP block for existing init country, country loc: CustomTree |
| 633 | Packet dropped - Geo-IP block for resp country, country loc: FirewallDefaultTree |
| 634 | Packet dropped - Per Policy Geo-IP block for resp country, country loc: FirewallDefaultTree |
| 635 | Packet dropped - Geo-IP block for resp country, country loc: CustomTree |
| 636 | Packet dropped - Per Policy Geo-IP block for resp country, country loc: CustomTree |
| 637 | Packet dropped - Geo-IP block for new lookup resp country |
| 638 | Packet dropped - Geo-IP block for existing lookup resp country, country loc: FirewallDefaulTree |
| 639 | Packet dropped - Per Policy Geo-IP block for existing lookup resp country, country loc: FirewallDefaulTree |
| 640 | Packet dropped - Geo-IP block for existing lookup resp country, country loc: CustomTree |
| 641 | Packet dropped - Per Policy Geo-IP block for existing lookup resp country, country loc: CustomTree |
| 642 | Packet dropped - BOTNET block for init command and control center,Botnet source: FirewallDefaulTree |
| 643 | Packet dropped - BOTNET block for init command and control center,Botnet source: CustomTree |
| 644 | Packet dropped - BOTNET block for init command and control center,Botnet source: DynamicTree |
| 645 | Packet dropped - BOTNET block for new lookup init command and control center, Botnet source: FirewallDefaulTree |
| 646 | Packet dropped - BOTNET block for new lookup init command and control center, Botnet source: CustomTree |
| 647 | Packet dropped - BOTNET block for new lookup init command and control center, Botnet source: DynamicTree |
| 648 | Packet dropped - BOTNET block for new lookup init command and control center, Botnet DB not downloaded |
| 649 | Packet dropped - BOTNET block for resp command and control center, Botnet source: FirewallDefaulTree |
| 650 | Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: CustomTree |
| 651 | Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: DynamicTree |
| 652 | Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: FirewallDefaulTree |
| 653 | Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: CustomTree |
| 654 | Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: DynamicTree |
| 655 | Packet dropped - BOTNET block for new lookup resp command and control center, Botnet DB not downloaded |
| 656 | Packet dropped - Packet rate limit for IPHelper packets |
| 657 | Packet dropped - TCP sequence out of order |
| 658 | Packet dropped - cache PTR is null in SPI (#1) |
| 659 | Packet dropped - cache PTR is null in SPI (#2) |
| 660 | Packet dropped - cache PTR is null in SPI (#3) |
| 661 | Packet dropped - cache PTR is null in SPI (#4) |
| 662 | Packet dropped - cache PTR is null in SPI (#5) |
| 663 | Packet dropped - cache PTR is null in SPI (#6) |
| 664 | Packet dropped - cache PTR is null in SPI (#7) |
| 665 | Packet dropped - handle FTP stream fail |
| 666 | Packet dropped - handle PPTP control stream fail |
| 667 | Packet dropped - handle real audio stream fail |
| 668 | Packet dropped - handle oracle stream fail |
| 669 | Packet dropped - handle MSN stream fail |
| 670 | Packet dropped - fail to do reassemble for stateful packet |
| 671 | Packet dropped - DNS Rebind attack |
| 672 | Packet dropped - L2B filtering source is our IP |
| 673 | Packet dropped - L2B filtering dst is same link |
| 674 | Packet dropped - L2B drop non-IP packet |
| 675 | Packet dropped - Fail to find tunnel bound interface |
| 676 | Packet dropped - Fail to do the packet init for zebos pkt over VPN |
| 677 | Packet dropped - Ping of Death attacks |
| 678 | Packet dropped - ICMP on non master blade |
| 679 | Packet dropped - IPSec invalid dst blade |
| 680 | Packet dropped - fails to handle IPSec pkt |
| 681 | Packet dropped - fails to do reassemble for decrypted IPSec pkt |
| 682 | Packet dropped - fails to handle this GMS tunnel pkt |
| 683 | Packet dropped - fails to handle DHCP over VPN pkt |
| 684 | Packet dropped - fails to handle DHCP over VPN output pkt |
| 685 | Packet dropped - fails to handle IPSec PMTU pkt |
| 686 | Packet dropped - fails to handle L2TP pkt(#1) |
| 687 | Packet dropped - fails to handle L2TP pkt(#2) |
| 688 | Packet dropped - fails to handle L2TP pkt(#3) |
| 689 | Packet dropped - fails to handle L2TP pkt(#4) |
| 690 | Packet dropped - fails to handle multicast pkt |
| 691 | Packet dropped - unsolicit ICMP message |
| 692 | Packet dropped - cache lookup fail and drop the pkt |
| 693 | Packet dropped - TCP reset and remove cache |
| 694 | Packet dropped - Wiremode Config has changed recently and is INVALID |
| 695 | Packet dropped - Cache add failed |
| 696 | Packet dropped - Duplicated in cache add |
| 697 | Packet dropped - cache entry is deleted |
| 698 | Packet dropped - cache entry is reused |
| 699 | Packet dropped - cannot handle this pkt in DP |
| 700 | Packet dropped - connection to be closed |
| 701 | Packet dropped - BWM dropped the pkt |
| 702 | Packet dropped - handle DNS dropped the pkt |
| 703 | Packet dropped - DNS sinkhole dropped the pkt |
| 704 | Packet dropped - handle DNS Sinkhole forged ipv4 pkt |
| 705 | Packet dropped - handle DNS pkt,transmitting via suspicious DNS tunnel |
| 706 | Packet dropped - handle SSLVPN dropped the pkt |
| 707 | Packet dropped - invalid PPTP control message |
| 708 | Packet dropped - invalid PPTP data message |
| 709 | Packet dropped - drop land attack pkt |
| 710 | Packet dropped - drop smurf amp pkt |
| 711 | Packet dropped - drop Web CFS DNS reply pkt |
| 712 | Packet dropped - drop Web CFS reply pkt |
| 713 | Packet dropped - drop N2H2 reply pkt |
| 714 | Packet dropped - drop WebSense reply pkt |
| 715 | Packet dropped - drop GAV cloud response pkt |
| 716 | Packet dropped - drop GAV cloud request pkt |
| 717 | Packet dropped - DHCP record Iface scope failed |
| 718 | Packet dropped - send to DHCP server failed |
| 719 | Packet dropped - invalid DHCP discovery pkt(#1) |
| 720 | Packet dropped - invalid DHCP discovery pkt(#2) |
| 721 | Packet dropped - IPSec pkt received on wrong blade |
| 722 | Packet dropped - IPSec pkt received on wrong blade in CP |
| 723 | Packet dropped - IPSec handle DHCP relay out fails |
| 724 | Packet dropped - IPSec handle DHCP out fails |
| 725 | Packet dropped - Denied by SSLVPN per user control policy |
| 726 | Packet dropped - Policy drop |
| 727 | Packet dropped - Guest service drop pkt |
| 728 | Packet dropped - WLAN SSLVPN enforcement drop pkt |
| 729 | Packet dropped - WLAN restrict VPN traversal |
| 730 | Packet dropped - WLAN Guest service drop pkt |
| 731 | Packet dropped - VPN only on WLAN |
| 732 | Packet dropped - drop received syslog pkt |
| 733 | Packet dropped - drop bounce land attack pkt |
| 734 | Packet dropped - drop bounce same link pkt |
| 735 | Packet dropped - firewall deactivated |
| 736 | Packet dropped - cache add cleanup drop the pkt |
| 737 | Packet dropped - outbound interface is unavailable |
| 738 | Packet from bounced path (from responder) |
| 739 | Packet dropped - outbound interface is unavailable (pkt from responder) |
| 740 | Packet dropped - TCP option (SACK Permitted) not allowed in non-SYN segment |
| 741 | Packet dropped - TCP option (SACK Permitted) length is invalid |
| 742 | Packet dropped - TCP option (MSS) not allowed in non-SYN segment |
| 743 | Packet dropped - TCP option (MSS) length is invalid |
| 744 | Packet dropped - TCP option (SACK) not allowed in non-SYN segment |
| 745 | Packet dropped - TCP option (SACK) length is invalid |
| 746 | Packet dropped - TCP SYN cookie is invalid |
| 747 | Packet dropped - connection cache setup failed |
| 748 | Packet dropped - policy check failed |
| 749 | Packet dropped - invalid TCP flag combination |
| 750 | Packet dropped - TCP SYN cookie is invalid (protect 3) |
| 751 | Packet dropped - pkt from initiator on an incomplete connection |
| 752 | Packet dropped - pkt dropped in handle proxied connection |
| 753 | Packet dropped - TCP init failed in IDP |
| 754 | Packet dropped - UDP source port is zero in IDP |
| 755 | Packet dropped - Descheduling queue is full |
| 756 | IPv6 Internal Error(#1) |
| 757 | IPv6 Internal Error(#2) |
| 758 | IPv6 Internal Error(#3) |
| 759 | IPv6 Internal Error(#4) |
| 760 | IPv6 Internal Error(#5) |
| 761 | IPv6 Internal Error(#6) |
| 762 | IPv6 Internal Error(#7) |
| 763 | IPv6 Internal Error(#8) |
| 764 | IPv6 Internal Error(#9) |
| 765 | IPv6 Internal Error(#10) |
| 766 | IPv6 Internal Error(#11) |
| 767 | IPv6 Internal Error(#12) |
| 768 | IPv6 Internal Error(#13) |
| 769 | IPv6 Internal Error(#14) |
| 770 | IPv6 Internal Error(#15) |
| 771 | IPv6 Internal Error(#16) |
| 772 | IPv6 Internal Error(#17) |
| 773 | IPv6 packet dropped due to IPv6 traffic processing is disabled on this firewall |
| 774 | IPv6 packet with option RH. |
| 775 | IPv6 packet with option HBH/DH. |
| 776 | IPv6 next header validation failed. |
| 777 | IPv6 virtual firewall ID not found. |
| 778 | IPv6 virtual firewall ID not in forwarding state. |
| 779 | IPv6 packets on non IPv6 enabled interface(#1). |
| 780 | IPv6 packets on non IPv6 enabled interface(#2). |
| 781 | IPv6 packets on non IPv6 enabled interface(#3). |
| 782 | IPv6 packets on non IPv6 enabled interface(#4). |
| 783 | IPv6 interface state is DOWN(#1). |
| 784 | IPv6 interface state is DOWN(#2). |
| 785 | Source Zone is not defined. |
| 786 | Invalid TCP flag detected. |
| 787 | Firewall rule applied(#1). |
| 788 | Firewall rule applied(#2). |
| 789 | Firewall rule applied(#3). |
| 790 | Firewall rule applied(#4). |
| 791 | Connection cache add failed. |
| 792 | Cleanup needed for connection cache failed. |
| 793 | Maximum hop allowed for this IPv6 packet has reached. |
| 794 | IPv6 pkt not for us. |
| 795 | Src IP as link local or multicast but pkt not for us. |
| 796 | SRC RPF Failed |
| 797 | Pkt need redirection, not supported |
| 798 | Stack destined packet, can't handle for now. |
| 799 | IPv6 packet with ICMPv4. |
| 800 | Interface has no IP addresses. |
| 801 | Dest IP as solNode mcast but not for us |
| 802 | Src IP is not valid |
| 803 | Source IP is spoofed |
| 804 | Null Dst IP |
| 805 | Bad src or dst IP |
| 806 | Null tunnel Dst IP |
| 807 | NULL src IP, not supported(#1) |
| 808 | NULL src IP, not supported(#2) |
| 809 | Src IP is non unicast pkt |
| 810 | Dst route not found |
| 811 | Dst IP is LLU but not for us |
| 812 | Dst IP is MC but not for us |
| 813 | Dst IP is non unicast pkt |
| 814 | IP address is site-local address |
| 815 | NDP packet's hop limit is less than 255 |
| 816 | IF is non ready for V6 multicast pkt |
| 817 | Dst IF same as Src IF, redirect not supported |
| 818 | Dst IF is not V6 enabled |
| 819 | AH and ESP extn hdr found, dropped |
| 820 | ipLen mismatch with payloadLen |
| 821 | No 6to4 relay IP specified |
| 822 | Non 2002:: src ip packet destined for 6to4 relay |
| 823 | invalid unicast src ip packet destined for 6to4 relay |
| 824 | invalid unicast dest ip packet destined for 6to4 relay |
| 825 | Remote IPv4 address is our IP(#1) |
| 826 | Remote IPv4 address is our IP(#2) |
| 827 | Remote IPv4 address is non unicast(#1) |
| 828 | Remote IPv4 address is non unicast(#2) |
| 829 | Remote IPv4 address is non unicast(#3) |
| 830 | Remote IPv4 address is non unicast(#4) |
| 831 | Incoming IPv6 tunnel pkt failed for IPspoof |
| 832 | Incoming IPv6 tunnel pkt from stack |
| 833 | Incoming IPv6 tunnel pkt failed for IPspoof |
| 834 | Non unicast pkt trying for tunnel to relay |
| 835 | pkt in from tunnel and going back to tunnel |
| 836 | pkt in from relay and going back to relay |
| 837 | Connection initiated from WAN ZONE, not allowed |
| 838 | Connection initiated from WLAN ZONE, not allowed |
| 839 | No cache but TCP packet with no SYN |
| 840 | Not finished to resolve neighbor |
| 841 | failed to resolve neighbor |
| 842 | pkt destined to us, management via IPv6 not allowed |
| 843 | Source IP is a multicast address |
| 844 | DHCPv6 packets from stack should not be sent from SLAVE blades |
| 845 | pkt dropped due to IP fragmentation length is smaller than Minimum IPV6 MTU(1280 Bytes) |
| 846 | pkt dropped due to ndpp rules(#1) |
| 847 | pkt dropped due to ndpp rules(#2) |
| 848 | pkt dropped due to ndpp loopback src |
| 849 | pkt dropped due to cache pointer is NULL |
| 850 | IPv6 address is reserved |
| 851 | IPv6 Packet with bad extension header order |
| 852 | invalid net id found on mist if write v6 |
| 853 | invalid runtime found on mist if write v6 |
| 854 | invalid netid found on if write v6 |
| 855 | invalid runtime found on if write v6 |
| 856 | Invalid TCP Flag for IPv6 |
| 857 | Multicast spank attack for IPv6 |
| 858 | Invalid connection cache after lookup for IPv6. |
| 859 | Access Rule Policy not found for IPv6 |
| 860 | IPv6 check failed |
| 861 | Blacklisted MAC address for IPv6 |
| 862 | Wrong IPv6 Length |
| 863 | Wrong fragmentation boundary for IPv6. |
| 864 | Unknown DHCPv6 port number |
| 865 | Unknown IPv6 protocol type(#1) |
| 866 | Unknown IPv6 protocol type(#2) |
| 867 | IPv6 sanity test failed(#1) |
| 868 | IPv6 sanity test failed(#2) |
| 869 | Null Source Zone(#1). |
| 870 | Null Source Zone(#2). |
| 871 | Packet dropped - drop IPv6 land attack pkt(#1) |
| 872 | Packet dropped - drop IPv6 land attack pkt(#2) |
| 873 | Syn Flood Protection for IPv6(#1) |
| 874 | Syn Flood Protection for IPv6(#2) |
| 875 | Unknown IPv6 destination(#1) |
| 876 | Unknown IPv6 destination(#2) |
| 877 | Unknown IPv6 destination(#3) |
| 878 | Enforced firewall rule for IPv6(#1) |
| 879 | Enforced firewall rule for IPv6(#2) |
| 880 | IDP detection for DPI-SSL Enforcement |
| 881 | IDP detection for AV |
| 882 | IDP detection for NG AV |
| 883 | IDP detection for Sec |
| 884 | IDP detection for generic |
| 885 | IP address is DNS sinkhole forged IPv6 address |
| 886 | internal ICMP module error |
| 887 | Not allowed to reply on ping pkt |
| 888 | Parsing inner ICMPv6 error payload as non UDP/ICMPv6 |
| 889 | Parsing inner ICMPv6 error payload as non UDP/ICMPv6 |
| 890 | Wrong hopLimit in the IP header |
| 891 | ICMP echo reply not allowed on dst Ip as mcast. |
| 892 | incoming interface is not v6 enabled |
| 893 | src ip not in our subnet |
| 894 | unknown icmp type |
| 895 | fragmented icmpv6 packet |
| 896 | icmpv6 packet from tunnel interface |
| 897 | echo packet with null srcip |
| 898 | pkt with null srcIp not directed at multicast dst ip |
| 899 | Sol message srcIP is null but option is present dropped |
| 900 | reply option received. |
| 901 | Unknown option. |
| 902 | No option but dstIP is multicast. |
| 903 | bad length in ngbr sol msg. |
| 904 | bad icmp len |
| 905 | bad length in rtr sol msg, dropped. |
| 906 | Unknown option, discarded. |
| 907 | target option received, discarded. |
| 908 | bad length in ngbr adv msg, dropped. |
| 909 | Unknown option, discarded. |
| 910 | source option received, discarded. |
| 911 | icmpv6 smurf amplification, dropped. |
| 912 | RA is not allowed |
| 913 | NDP packet is not for us |
| 914 | Packet dropped - handle DNS Proxy query dropped the pkt |
| 915 | Packet dropped - handle DNS Proxy reply dropped the pkt |
| 916 | IPv6 MAC-IP Anti-spoof check enforced for hosts. |
| 917 | IPv6 MAC-IP Anti-spoof cache not found for this router. |
| 918 | IPv6 MAC-IP Anti-spoof cache found, but it is not a router. |
| 919 | IPv6 MAC-IP Anti-spoof cache found, but it is blacklisted device. |
| 920 | Packet dropped - handle IPv6 DNS Sinkhole dropped the pkt |
| 921 | SDP Packet dropped - SonicPoint/SonicWave management on zone is disabled |
sonicwall/explanation_of_drop_code_and_module_id_values_in_packet_capture_output_sonicos_6_5_4_5.txt · Last modified: 2024/09/12 09:46 by aperez