Symantec™ Security Gateways Reference Guide - Sawmill

IDS eventsSuspicious activity443OSPF Cleartext PasswordBase Event:Details:ReferencesOSPF_SIMPLE_AUTHENTICATIONAn OSPF message with an unencrypted password field was detected. Simple passwordauthentication guards against routers inadvertently joining the routing domain, but provides nosecurity against passive attacks. Anyone with physical access to the network can learn thepassword and send malicious packets.OSPF SpecificationsOSPF DB Desc Invalid FlagsBase Event:Details:ReferencesOSPF_DBDESC_INVALID_FLAGSThe database description OSPF message carried invalid flags. This violation of the standard couldindicate an attempt to compromise the protocol.OSPF SpecificationsOSPF DB Desc Invalid OptionsBase Event:Details:ReferencesOSPF_DBDESC_INVALID_OPTSThe database description OSPF message carried invalid options. This violation of the standardcould indicate an attempt to compromise the protocol.OSPF SpecificationsOSPF DB Desc Short PacketBase Event:Details:ReferencesOSPF_DBDESC_SHORT_PACKETThe database description OSPF message was shorter than minimum required length. This violationof the standard could indicate an attempt to compromise the protocol.OSPF SpecificationsOSPF External LSA Invalid FlagsBase Event:Details:ReferencesOSPF_LSA_EXTERNAL_BAD_FLAGSThe OSPF message contained an external LSA with invalid flag bits set. This violation of thestandard could indicate an attempt to compromise the protocol.OSPF SpecificationsOSPF External LSA Short PacketBase Event:Details:ReferencesOSPF_LSA_EXTERNAL_SHORT_PACKETThe OSPF message contained an external LSA that was shorter than minimum required length.This violation of the standard could indicate an attempt to compromise the protocol.OSPF Specifications