SECE/3/ARPS_DROP_PACKET_LENTH
Message
SECE/3/ARPS_DROP_PACKET_LENTH:Invalid packet length.(PacketLength=[ULONG], SourceMAC=[STRING], SourceIP=[STRING], SourceInterface=[STRING], DropTime=[STRING])
Parameters
Parameter Name | Parameter Meaning |
---|---|
[ULONG] |
Indicates the length of the ARP packet. The length ranges from 60 to 1518. |
[STRING] |
Indicates the source MAC address of the ARP packets. |
[STRING] |
Indicates the source IP address of the ARP packets. |
[STRING] |
Indicates the source interface of the ARP packets. |
[STRING] |
Indicates the packet discard time. |
Procedure
- Find out the interface that initiates the attack according to the SourceInterface field in the alarm message.
- Find out the user who sends attack packets according to the SourceMAC field.
- Check whether the user host runs abnormally; if not, the user may be an attacker. In this case, you can take measures to prevent the user, for example, disconnect the user from the network.