3-135
Catalyst 3750, 3560, 3550, 2975, 2970, and 2960 Switch System Message Guide
OL-8551-04
Chapter 3 Message and Recovery Procedures
SW_DAI Messages
interface. The second [dec] is the ingress VLAN ID. [enet]/[chars]/[enet]/[chars]/[time-of-day] is
the MAC address of the sender, the IP address of the sender, the MAC address of the target, the IP
address of the target, and the time of day.
Recommended Action No action is required.
Error Message SW_DAI-4-PACKET_BURST_RATE_EXCEEDED: [dec] packets received in [dec]
seconds on [chars].
Note This message applies only to Catalyst 3750 and 3560 switches.
Explanation The switch has received the given number of ARP packets in the specified burst interval.
The interface is in the error-disabled state when the switch receives packets at a higher rate than the
configured packet rate every second over the configured burst interval. The message is logged just
before the interface is error disabled and if the configured burst interval is more than a second. The
first [dec] is the number of packets, the second [dec] is the number of seconds, and [chars] is the
affected interface.
Recommended Action No action is required.
Error Message SW_DAI-4-PACKET_RATE_EXCEEDED: [dec] packets received in [dec]
milliseconds on [chars].
Note This message applies only to Catalyst 3750 and 3560 switches.
Explanation The switch has received the given number of ARP packets for the specified duration on
the interface. This message is logged just before the port is put into the error-disabled st ate because
of the exceeded packet rate and when the burst interval is set to 1 second. The first [dec] is the
number of packets, the second [dec] is the number of milliseconds, and [chars] is the affected
interface.
Recommended Action No action is required.
Error Message SW_DAI-4-SPECIAL_LOG_ENTRY: [dec] Invalid ARP packets [[time-of-day]].
Note This message applies only to Catalyst 3750 and 3560 switches.
Explanation The switch has received ARP packets considered invalid by ARP inspection. The
packets are erroneous, and their presence might show attempted man-in-the-middle attacks in the
network. This message differs from other SW_DAI messages in that this message captures all
messages when the rate of incoming packets exceeds the dynamic ARP inspection logging rate.
[dec] is the number of invalid ARP packets, and [time-of-day] is the time of day.
Recommended Action No action is required.