|
|
Syslog messages severity levels are as follows:
The sections that follow list syslog messages by severity level. All messages are described in detail in "System Log Messages."
The following messages appear at severity 1, alerts:
%PIX-1-101001: (Primary) failover cable OK. %PIX-1-101002: (Primary) Bad failover cable. %PIX-1-101003: (Primary) failover cable not connected (this unit). %PIX-1-101004: (Primary) failover cable not connected (other unit). %PIX-1-101005: (Primary) Error reading failover cable status. %PIX-1-102001: (Primary) Power failure/System reload other side. %PIX-1-103001: (Primary) No response from other firewall. %PIX-1-103002: (Primary) Other firewall network interface chars OK. %PIX-1-103003: (Primary) Other firewall network interface chars failed. %PIX-1-103004: (Primary) Other firewall reports this firewall failed. %PIX-1-103005: (Primary) Other firewall reporting failure. %PIX-1-104001: Secondary: Switching to ACTIVE (cause: chars). %PIX-1-104002: (Primary) Switching to STNDBY. %PIX-1-104003: (Primary) Switching to FAILED. %PIX-1-104004: (Primary) Switching to OK. %PIX-1-105001: Disabling failover. %PIX-1-105002: Enabling failover. %PIX-1-105003: Monitoring on interface dec waiting. %PIX-1-105004: Monitoring on interface dec normal. %PIX-1-105005: Lost failover communications with mate on interface dec. %PIX-1-105006: Link status 'Up' on interface dec. %PIX-1-105007: Link status 'Down' on interface dec. %PIX-1-105008: Testing interface dec. %PIX-1-105009: Testing interface dec chars. %PIX-1-302001: Built TCP connection for faddr IP_addr/port gaddr IP_addr/port laddr IP_addr/port (chars) %PIX-1-709003: (chars) Beginning configuration replication: Send to mate. %PIX-1-709004: (chars) End Configuration Replication (ACT)
The following messages appear at severity 2, critical:
%PIX-2-106001: Inbound TCP connection denied from IP_addr/port to IP_addr/port flags chars %PIX-2-106002: TCP Connection denied by outbound list dec src IP_addr/port dest IP_addr/port %PIX-2-106003: Connection denied src IP_addr dest IP_addr due to JAVA Applet. %PIX-2-106006: Deny inbound UDP from IP_addr/port to IP_addr/port %PIX-2-106007: Deny inbound UDP from IP_addr/port to IP_addr/port due to DNS query/response. %PIX-2-106008: Translation for IP_addr denied by outbound dec %PIX-2-106009: Translation for IP_addr to IP_addr denied by outbound dec %PIX-2-106012: Deny IP from IP_addr to IP_addr, IP options hex. %PIX-2-107001: IP_addr attempted to ping IP_addr. %PIX-2-108001: SMTP made noop: out chars in chars data: chars %PIX-2-108002:SMTP replaced chars: out chars in chars data: chars %PIX-2-109009: Authorization denied from IP_addr/port to IP_addr/port (not authenticated) %PIX-2-109011: Authen Session Start: user 'user', sid session_num %PIX-2-110003: No interface is configured (with chars). %PIX-2-112001: (chars:dec) PIX clear finished. %PIX-2-199004: PIX clear config char from char. %PIX-2-201003: Embryonic limit exceeded dec/dec for IP_addr/port (IP_addr)IP_addr/port %PIX-2-304006: URL Server went OFFLINE
The following messages appear at severity 3, errors:
%PIX-3-105010: host failover message block alloc failed %PIX-3-106010: Deny inbound from outside:IP_addr to inside:IP_addr chars. %PIX-3-109010: Auth from IP_addr/port to IP_addr/port failed (too many pending auths) %PIX-3-110002: No ARP for host IP_addr %PIX-3-201001: Out of connections! dec/dec. %PIX-3-201002: Too many connections on static IP_addr %PIX-3-201005: FTP data connection failed for IP_addr. %PIX-3-201006: RCMD back connection failed for IP_addr/port. %PIX-3-201007: Unable to allocate new UDP connections (IP_addr/port-IP_addr/port) %PIX-3-202001: Out of address translation slots! %PIX-3-202002: Unable to find translation for incoming IP_addr. %PIX-3-202002: Unable to find translation for SRC=IP_addr DEST=IP_addr IP octal inside|outside. %PIX-3-202003: Could not build translation for IP_addr. %PIX-3-202004: Could not build portmap translation for IP_addr. %PIX-3-203001: ESP Error: No Key SPI hex SRC IP_addr DEST IP_addr %PIX-3-208005: (chars:dec) pix clear return dec %PIX-3-304003: URL Server IP_addr timed out URL string %PIX-3-304004: URL Server IP_addr request failed URL chars %PIX-3-305005: No translation group found for protocol
Currently, PIX Firewall does not generate severity 4, warning, syslog messages.
The following messages appear at severity 5, notifications:
%PIX-5-109012: Authen Session End: user 'user', sid session_num, elapsed num_seconds seconds %PIX-5-111001: Begin configuration: chars writing to chars %PIX-5-111002: Begin configuration: source reading from device %PIX-5-111003: chars erase configuration %PIX-5-111004: chars end configuration: FAILED|OK %PIX-5-111005: chars end configuration: OK %PIX-5-111006: Console login from chars at chars %PIX-5-111007: Begin configuration: chars reading from chars. %PIX-5-199001: PIX reload command executed from IP_addr. %PIX-5-304002: Access denied URL chars SRC IP_addr DEST IP_addr: chars
The following messages appear at severity 6, informational:
%PIX-6-109001: Auth start for user 'chars' from IP_addr/port to IP_addr/port %PIX-6-109002: Auth from IP_addr/port to IP_addr/port failed (server IP_addr failed) %PIX-6-109003: Auth from IP_addr/port to IP_addr failed (server IP_addr failed) %PIX-6-109005: Authentication succeeded for user 'chars' from IP_addr/port to IP_addr/port. %PIX-6-109006: Authentication failed for user 'chars' from IP_addr/port to IP_addr/port. %PIX-6-109007: Authorization permitted for user 'chars' from IP_addr/port to IP_addr/port. %PIX-6-109008: Authorization denied for user 'chars' from IP_addr/port to IP_addr/port. %PIX-6-199002: PIX startup completed. Beginning operation. %PIX-6-199003: Reducing link MTU dec. %PIX-6-209001: IPFRAG: Unable to allocate frag record for IP_addr/port to IP_addr/port %PIX-6-209002: IPFRAG: First Frag have not been seen source_host to dest_host %PIX-6-302002: Teardown TCP connection for faddr IP_addr/port gaddr IP_addr/port laddr IP_addr/port duration time bytes dec (chars) %PIX-6-302003: Built H245 connection for faddr IP_addr laddr IP_addr/port %PIX-6-302004: Preallocate H323 UDP backconnection for faddr IP_addr to laddr IP_addr/port %PIX-6-302005: Built UDP connection for faddr IP_addr/port gaddr IP_addr/port laddr IP_addr/port %PIX-6-302006: Teardown UDP connection for faddr IP_addr/port gaddr IP_addr/port laddr IP_addr/port duration time bytes dec (chars) %PIX-6-302009: Rebuilt TCP connection %d for faddr IP_addr/port gaddr IP_addr/port laddr IP_addr/port %PIX-6-303002: IP_addr retrieved IP_addr:chars %PIX-6-304001: IP_addr accessed IP_addr:chars. %PIX-6-305001: Portmapped translation built for gaddr IP_addr/port laddr IP_addr/port (chars) %PIX-6-305002: Translation built for gaddr IP_addr to IP_addr %PIX-6-305003: Teardown translation for IP_addr (IP_addr) %PIX-6-305004: Teardown portmap translation for global IP_addr/port local IP_addr/port %PIX-6-307001: Denied Telnet login session from IP_addr. %PIX-6-307002: Permitted Telnet login session from IP_addr. %PIX-6-307003: Telnet login session failed from IP_addr (3 attempts). %PIX-6-308001: PIX console enable password incorrect for 3 tries from IP_addr. %PIX-6-309001: Denied manager connection from IP_addr. %PIX-6-309002: Permitted manager connection from IP_addr.
The following messages appear at severity 7, debugging:
%PIX-7-106011: Deny self route chars %PIX-7-304005: URL Server IP_addr request pending URL chars %PIX-7-305006: type translation creation failed for protocol %PIX-7-701001: alloc_user() out of Tcp_user objects %PIX-7-709001: (chars) Rep CI ioctl (chars) return chars %PIX-7-709002: (chars) Rep no replication chars %PIX-7-709006: (chars) End Configuration Replication (STB)
|
|