Section B-4. WarningsSyslog Severity Level 4 Messages

team bbl


B-4. WarningsSyslog Severity Level 4 Messages

Table B-4 lists all the severity level 4 logging messages, along with their message numbers and text. All the messages supported by PIX OS releases 6.3 and 7.0, as well as FWSM 2.3, are shown.

Table B-4. Severity 4 (Warnings) Logging Messages

%PIX-4-106023

Deny protocol src [interface_name:source_address/source_port] dst interface_name:dest_address/dest_port [type {string}, code {code}] by access_group acl_ID.

%PIX-4-106027

Failed to determine the security context for the packet:vlansource Vlan#:ethertype src sourceMAC dst destMAC. (7.0)

%PIX-4-106101

Maximum number of ACL denied flows reached.

%PIX-4-109017

User at IP_address exceeded auth proxy connection limit (max).

%PIX-4-109022

Exceeded HTTPS proxy process limit.

%PIX-4-109027

[aaa protocol] Unable to decipher response message Server = server_IP_address, User = username. (7.0)

%PIX-4-209003

Fragment database limit of number exceeded: src = IP_address, dest = IP_address, proto = protocol, id = number.

%PIX-4-209004

Invalid IP fragment, size = bytes exceeds maximum size = bytes: src = IP_address, dest = IP_address, proto = protocol, id = number.

%PIX-4-209005

Discard IP fragment set with more than number elements: src = IP_address, dest = IP_address, proto = protocol, id = number.

%FWSM-4-307004

Telnet session limit exceeded. Connection request from IP_address on interface interface_name.

%PIX-4-308002

Static global_address inside_address netmask netmask overlapped with global_address inside_address.

%FWSM-4-309004

Manager session limit exceeded. Connection request from IP_address on interface interface_name.

%PIX-4-313003

Invalid destination for ICMP error.

%PIX-4-313004

Denied ICMP type=icmp_type, from src_IP_address on interface interface_name to dest_IP_address:no matching session. (7.0)

%FWSM-4-315005

SH session limit exceeded. Connection request from IP_address on interface interface_name.

%PIX-4-325002

Duplicate address ipv6_address/mac_address on interface. (7.0)

%PIX-4-400000-%PIX-4-400051

IDS: signature_number signature_message from IP_address to IP_address on interface interface_name.

%PIX-4-401000

Unknown message text. (7.0)

%PIX-4-401001

Shuns cleared.

%PIX-4-401002

Shun added: IP_address IP_address port port.

%PIX-4-401003

Shun deleted: IP_address.

%PIX-4-401004

Shunned packet: IP_address ==> IP_address on interface interface_name.

%PIX-4-401005

Shun add failed: unable to allocate resources for IP_address IP_address port port.

%PIX-4-402101

Decaps: rec'd IPSEC packet has invalid spi for destaddr=dest_address, prot=protocol, spi=number.

%PIX-4-402102

Decapsulate: packet missing {AH | ESP}, destadr=dest_address, actual prot=protocol.

%PIX-4-402103

Identity doesn't match negotiated identity (ip) dest_address= dest_address, src_addr= source_address, prot= protocol, (ident) local=inside_address, remote=remote_address, local_proxy=IP_address/IP_address/port/port, remote_proxy=IP_address/IP_address/port/port.

%PIX-4-402104

Unknown message text. (7.0)

%PIX-4-402106

Rec'd packet not an IPSEC packet (ip) dest_address= dest_address, src_addr= source_address, prot= protocol.

%PIX-4-402107

Unknown message text. (7.0)

%PIX-4-403101

PPTP session state not established, but received an XGRE packet, tunnel_id=number, session_id=number.

%PIX-4-403102

PPP virtual interface interface_name rcvd pkt with invalid protocol: protocol, reason: reason.

%PIX-4-403103

PPP virtual interface max connections reached.

%PIX-4-403104

PPP virtual interface interface_name requires mschap for MPPE.

%PIX-4-403106

PPP virtual interface interface_name requires RADIUS for MPPE.

%PIX-4-403107

PPP virtual interface interface_name missing aaa server group info.

%PIX-4-403108

PPP virtual interface interface_name missing client ip address option.

%PIX-4-403109

Rec'd packet not a PPTP packet. (ip) dest_address= dest_address, src_addr= source_address, data: string.

%PIX-4-403110

PPP virtual interface interface_name, user: user missing MPPE key from aaa server.

%PIX-4-403505

PPPoE:PPPUnable to set default route to IP_address at interface_name. (7.0)

%PIX-4-403506

PPPoE: Failed to assign PPP IP_address netmask netmask at interface_name. (7.0)

%PIX-4-404101

ISAKMP: Failed to allocate address for client from pool string.

%PIX-4-405001

Received ARP {request | response} collision from IP_address/mac_address on interface interface_name.

%PIX-4-405002

Received mac mismatch collision from IP_address/mac_address for authenticated host.

%PIX-4-405101

Unable to Pre-allocate H225 Call Signalling Connection for foreign_address outside_address[/outside_port] to local_address inside_address[/inside_port].

%PIX-4-405102

Unable to Pre-allocate H245 Connection for foreign_address outside_address[/outside_port] to local_address inside_address[/inside_port].

%PIX-4-405103

H225 message from src_ip/src_port to dest_ip/dest_prot contains bad protocol discriminator hex_value. (7.0)

%PIX-4-405104

H225 message received from outside_address/outside_port to inside_address/inside_port before SETUP.

%PIX-4-405105

H323 RAS message AdmissionConfirm received from source_IP_ address/source_port to destination_IP_address/destination_port without an AdmissionRequest. (7.0)

%PIX-4-405201

ILS ILS_message_type from inside_interface:source_IP_address to outside_interface:/destination_IP_address has wrong embedded address embedded_IP_address. (7.0)

%PIX-4-406000

Unknown message text. (7.0)

%PIX-4-406001

FTP port command low port: IP_address/port to IP_address on interface interface_name.

%PIX-4-406002

FTP port command different address: IP_address(IP_address) to IP_address on interface interface_name.

%PIX-4-407001

Deny traffic for local-host interface_name:inside_address, license limit of number exceeded.

%PIX-4-407002

Embryonic limit neconns/elimit for through connections exceeded: outside_address/outside_port to global_address (inside_address)/inside_port on interface interface_name. (7.0)

%PIX-4-407003

Established limit for RPC services exceeded number. (7.0)

%PIX-4-408001

IP route counter negativereason, IP_address Attempt: number.

%PIX-4-408002

ospf process id route type update address1 mask1 [distance1/metric1] via source IP:interface1 address2 mask2 [distance2/metric2]. (7.0)

%PIX-4-409001

Database scanner: external LSA IP_address netmask is lost, reinstalls.

%PIX-4-409002

db_free: external LSA IP_address netmask.

%PIX-4-409003

Received invalid packet: reason from IP_address, interface_name.

%PIX-4-409004

Received reason from unknown neighbor IP_address.

%PIX-4-409005

Invalid length number in OSPF packet from IP_address (ID IP_address), interface_name.

%PIX-4-409006

Invalid lsa: reason Type number, LSID IP_address from IP_address, IP_address, interface_name.

%PIX-4-409007

Found LSA with the same host bit set but using different mask LSA ID IP_address netmask New: Destination IP_address netmask.

%PIX-4-409008

Found generating default LSA with non-zero mask LSA type : number Mask : IP_address metric : number area : string.

%PIX-4-409009

OSPF process number cannot start. There must be at least one up IP interface, for OSPF to use as router ID.

%PIX-4-409010

Virtual link information found in non-backbone area: string.

%PIX-4-409011

OSPF detected duplicate router-id IP_address from IP_address on interface interface_name.

%PIX-4-409012

Detected router with duplicate router ID IP_address in area string.

%PIX-4-409013

Detected router with duplicate router ID IP_address in Type-4 LSA advertised by IP_address.

%PIX-4-409023

Attempting AAA Fallback method method_name for request_type request for user username :Auth-server group server_tag unreachable. (7.0)

%PIX-4-410001

UDP DNS packet dropped due to domain name length check of 255 bytes: actual length:n bytes.

%PIX-4-411001

Line protocol on interface interface_name changed state to up. (7.0)

%PIX-4-411002

Line protocol on interface interface_name changed state to down. (7.0)

%PIX-4-411003

Configuration status on interface interface_name changed state to downup. (7.0)

%PIX-4-411004

Configuration status on interface interface_name changed state to up. (7.0)

%PIX-4-412001

MAC mac-address moved from interface-1 to interface-2. (7.0)

%PIX-4-412002

Detected bridge table full while inserting MAC mac-address on interface interface. Number of entries = num. (7.0)

%PIX-4-413001

Module in slot slotnum is not able to shut down. Module Error: errnum message. (7.0)

%PIX-4-413002

Module in slot slotnum is not able to reload. Module Error: errnum message. (7.0)

%PIX-4-413003

Module in slot slotnum is not a recognized type. (7.0)

%PIX-4-416001

Dropped UDP SNMP packet from source_interface:source_IP/source_port to dest_interface:dest_IP/dest_port; version (version) is not allowed through the firewall. (7.0)

%PIX-4-417001

Unexpected event received: number. (7.0)

%PIX-4-417002

Unknown message text. (7.0)

%PIX-4-417003

Unknown message text. (7.0)

%PIX-4-417004

Filter violation error: conn number (string:string) in string. (7.0)

%PIX-4-417005

Unknown message text. (7.0)

%PIX-4-417006

No memory for string in string. Handling: string. (7.0)

%PIX-4-417007

Unknown message text. (7.0)

%PIX-4-418001

Through-the-device packet to/from management-only network is denied: prot_str from ifc_name ip (port) to ifc_name ip (port). (7.0)

%PIX-4-500004

Invalid transport field for protocol=protocol, from source_address/source_port to dest_address/dest_port.

%PIX-4-507001

Terminating TCP-Proxy connection from ifc_in:sip/sport to ifc_out:dip/dportreassembly limit of limit bytes exceeded. (7.0)

%FWSM-4-605002

HTTP daemon connection limit exceeded.

%PIX-4-612002

Auto Update failed:filename, version:number, reason:reason.

%PIX-4-612003

Auto Update failed to contact:url, reason:reason.

%PIX-4-620002

Unsupported CTIQBE version: hex: from interface_name:IP_address/port to interface_name:IP_address/port.

%PIX-4-710004

TCP connection limit exceeded from source_address/source_port to interface_name:dest_address/service.

%PIX-4-713154

DNS lookup for peer description Server [server name] failed! (7.0)

%PIX-4-713157

Timed out on initial contact to server [server name or IP address] Tunnel could not be established. (7.0)

%PIX-4-713207

Unknown message text. (7.0)

%PIX-4-713903

Descriptive_event_string. (7.0)

%PIX-4-716007

Group name User user WebVPN session terminated. Maximum time exceeded. (7.0)

%PIX-4-716022

WebVPN filter setup has returned an error acl. (7.0)

%PIX-4-716023

Group name User user Session could not be established: session limit of max_sess reached. (7.0)


    team bbl



    Cisco ASA and PIX Firewall Handbook
    CCNP BCMSN Exam Certification Guide (3rd Edition)
    ISBN: 1587051583
    EAN: 2147483647
    Year: 2003
    Pages: 120
    Authors: David Hucaby

    flylib.com © 2008-2017.
    If you may any questions please contact us: flylib@qtcs.net