NETGEAR FWG114P v2 manual Other Connections and Traffic to this Router, DoS Attack/Scan

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P v2

Other Connections and Traffic to this Router

The format is:

<DATE><TIME>< PKT_TYPE ><SRC_IP><DST_IP><ACTION>

[Fri, 2003-12-05 22:31:27] - ICMP Packet[Echo Request] - Source: 192.168.0.10 -

Destination: 192.168.0.1 - [Receive]

[Wed, 2003-07-30 16:34:56] - ICMP Packet[Type: 238] - Source: 64.3.3.201 -

Destination: 192.168.0.3 - [Drop]

[Fri, 2003-12-05 22:59:56] - ICMP Packet[Echo Request] - Source:192.168.0.10 -

Destination:192.168.0.1 - [Receive]

The format is:

<DATE><TIME><EVENT>< SRC_IP><SRC_PORT ><SRC_INF>< DST_IP><DST_PORT><DST_INF><ACTION>

[Wed, 2003-07-30 16:24:23] - UDP Packet - Source: 207.46.130.100 WAN -

Destination: 10.10.10.4,1234 LAN - [Drop]

[Wed, 2003-07-30 17:48:09] - TCP Packet[SYN] - Source: 64.3.3.201,65534 WAN -

Destination: 10.10.10.4,1765 LAN - [Receive]

[Fri, 2003-12-05 22:07:11] - IP Packet [Type Field:8], from 20.97.173.18 to 172.31.12.157 - [Drop]

Notes:

ACTION = "Drop", "Receive"

EVENT = "ICMP Packet", "UDP Packet", "TCP Packet", "IP Packet"

DoS Attack/Scan

Common attacks and scans are logged.

D-4 Firewall Log Formats

201-10301-02, May 2005