3-134
Catalyst 3750, 3560, 3550, 2975, 2970, and 2960 Switch System Message Guide
OL-8551-04
Chapter 3 Message and Recovery Proced ures
SW_DAI Messages
The second [dec] is the ingress VLAN ID. [enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC
address of the sender, the IP address of the sender, the MAC address of the target, the IP address of
the target, and the time of day.
Recommended Action No action is required.
Error Message SW_DAI-4-DHCP_SNOOPING_DENY: [dec] Invalid ARPs ([chars]) on [chars],
vlan [dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Note This message applies only to Catalyst 3750 and 3560 switches.
Explanation The switch has received ARP packets considered invalid by ARP inspection. The
packets are erroneous, and their presence might show attempted man-in-the-middle attacks in the
network. This log message appears when the sender’s IP and MAC address binding for the received
VLAN is not present in the DHCP snooping database. The first [dec] is the nu mber of invalid ARP
packets. The first [chars] is either Req (request) or Res (response), and the se cond [chars] is the short
name of the ingress interface. The second [dec] is the i ngress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action No action is required.
Error Message SW_DAI-6-DHCP_SNOOPING_PERMIT: [dec] ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Note This message applies only to Catalyst 3750 and 3560 switches.
Explanation The switch has received ARP packets that have been permitted because the sender’s IP
and MAC address match the DHCP snooping database for the received VLAN. The first [dec] is the
number of valid ARP packets. The first [chars] is either Req (request) or Res (response), and the
second [chars] is the short name of the ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action No action is required.
Error Message SW_DAI-4-INVALID_ARP: [dec] Invalid ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Note This message applies only to Catalyst 3750 and 3560 switches.
Explanation The switch has received ARP packets considered invalid by ARP inspection. The
packets do not pass one or more validation checks of the source or destination MAC address or the
IP address. The first [dec] is the number of invalid ARP packets. The first [chars] is either Req
(request), Res (response), or Invalid Opcode. The second [chars] is the short name of the ingress