Explore System Log Messages
Find all system log messages in a software release.
Select a Release
Compare System Log Messages
Compare system log messages in two different software releases.
Select two Releases to Compare
Unique system log messages in
Unique system log messages in
Unique system log messages in
Unique system log messages in
Common log messages
No information available.
ASP_IDS_SYN_COOKIE_ON
Filter Releases
Specific system log message Information:
Name
ASP_IDS_SYN_COOKIE_ON
Message
Host <variable>destination-address</variable>, SYN-COOKIE protection activated
Help
IDS activated SYN cookie protection
Description
Intrusion detection services (IDS) activated SYN cookie protection for the indicated destination address, because it learned from the stateful firewall that the rate of certain events exceeded the threshold set by the 'threshold' statement at the [edit services ids rule <rule-name> term <term-name> then syn-cookie] hierarchy level. The events include the ones reported by the ASP_IDS_TCP_SYN_ATTACK, ASP_SFW_SYN_DEFENSE, and ASP_SFW_TCP_SCAN system log messages. When SYN cookie protection is activated for a flow to a destination and the TCP handshake has not completed, the stateful firewall generates a SYN/ACK packet for each SYN packet directed to the destination.
Type
Event: This message reports an event, not an error
Severity
error
Cause
Facility
LOG_PFE
Action
Attributes
destination-address
ASP_IDS_SYN_COOKIE_ON available in the following releases: