No relevant resource is found in the selected language.
Enterprise
Worldwide
Huawei Global - English
Support Documentation
CloudEngine 8800, 7800, 6800, and 5800 V200R005C00 Log Reference

This document provides the explanations, causes, and recommended actions of logs on the product.

Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
SECURITYTRAP/4/LDM_STRACK_IFVLAN

SECURITYTRAP/4/LDM_STRACK_IFVLAN

Message

SECURITYTRAP/4/LDM_STRACK_IFVLAN: Attack occurred. (Interface=[Interface],CVLAN=[CVLAN], PVLAN=[PVLAN], EndTime=[EndTime], TotalPackets=[TotalPackets])

Description

The system detected attacks on an interface.

Parameters

Parameter Name Parameter Meaning
Interface Interface index
CVLAN Inner VLAN tag of an attack packet sent by a user
PVLAN Outer VLAN tag of an attack packet sent by a user
EndTime Time when the last attack packet is received
TotalPackets Number of received attack packets

Possible Causes

Cause: The rate at which packets were sent by a user (Interface + VLAN) to the CPU exceeded the alarm threshold.

Procedure

  • Cause: The rate at which packets were sent by a user (Interface + VLAN) to the CPU exceeded the alarm threshold.
    1. Run the display auto-defend attack-source command to check potential attack sources and to determine whether the packet transmission rate is abnormal.

      • If the packet transmission rate is abnormal, go to Step 2.

      • If the packet transmission rate is normal, go to Step 7.

    2. Check the number of users on the interface that receives attack packets.

      • If there is only one user, go to Step 3.

      • If there are multiple users, go to Step 5.

    3. Check whether this user sent the attack packets.

      • If this user sent the attack packets, go to Step 4.

      • If this user did not send the attack packets, go to Step 7.

    4. Run the shutdown command to shut down the interface. Then, check whether the fault is rectified. If the fault persists, go to Step 7.
    5. Check whether one of the users sent the attack packets.

      • If one of the users sent the attack packets, go to Step 6.

      • If none of the users sent the attack packets, go to Step 7.

    6. Add the user who sent attack packets to a blacklist and check whether the fault is rectified. If the fault persists, go to Step 7.
    7. Collect trap, log, and configuration information, and contact technical support personnel.
Translation
简体中文
Download
Updated: 2019-04-20

Document ID: EDOC1100039602

Views: 544830

Downloads: 133

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next
Huawei e+ App Huawei e+

Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

You are going to visit :