Symantec™ Security Gateways Reference Guide - Sawmill

366 IDS eventsSuspicious activityBGP Invalid MULTI_EXIT_DISC LengthBase Event:Details:ReferencesBGP_UPDATE_MULTI_EXIT_DISC_BAD_LENGTHThe BGP UPDATE message contained an invalid MULTI_EXIT_DISC length. This violation of thestandard could indicate an attempt to compromise the protocol.BGP SpecificationsBGP Invalid Network Reachability LengthBase Event:Details:ReferencesBGP_UPDATE_NETWORK_REACH_BAD_LENGTHThe BGP UPDATE message contained an invalid Network Reachability length. This violation of thestandard could indicate an attempt to compromise the protocol.BGP SpecificationsBGP Invalid Next Hop LengthBase Event:Details:ReferencesBGP_UPDATE_NEXT_HOP_BAD_LENGTHThe BGP UPDATE message contained an invalid NEXT_HOP length. This violation of the standardcould indicate an attempt to compromise the protocol.BGP SpecificationsBGP Invalid NOTIFICATION Message LengthBase Event:Details:ReferencesBGP_BAD_NOTIFICATION_MSG_LENGTHThe BGP NOTIFICATION message length was outside the limitations specified in the RFC. Thisviolation of the standard could indicate an attempt to compromise the protocol.BGP SpecificationsBGP Invalid OPEN Message LengthBase Event:Details:ReferencesBGP_BAD_OPEN_MSG_LENGTHThe BGP OPEN message length was outside the limitations specified in the RFC. This violation ofthe standard could indicate an attempt to compromise the protocol.BGP SpecificationsBGP Invalid Origin LengthBase Event:Details:ReferencesBGP_UPDATE_ORIGIN_BAD_LENGTHThe BGP UPDATE message contained an invalid ORIGIN length. This violation of the standardcould indicate an attempt to compromise the protocol.BGP SpecificationsBGP Invalid Origin ValueBase Event:Details:ReferencesBGP_UPDATE_ORIGIN_INVALID_VALUEThe BGP UPDATE message contained an invalid ORIGIN value. This violation of the standard couldindicate an attempt to compromise the protocol.BGP Specifications