Symantec™ Security Gateways Reference Guide - Sawmill

IDS eventsSuspicious activity445OSPF LSA Short PacketBase Event:Details:ReferencesOSPF_LSA_SHORT_PACKETThe OSPF message carried an LSA that was shorter than minimum required length. This violationof the standard could indicate an attempt to compromise the protocol.OSPF SpecificationsOSPF Malformed AUTH FieldBase Event:Details:ReferencesOSPF_BAD_CRYPTO_AUTH_FIELDThe OSPF message carried an authentication type not in the RFC. This may be either a legitimatemessage using an unassigned authentication type or an attempt to compromise the authenticationmechanism of OSPF.OSPF SpecificationsOSPF Malformed Network LSABase Event:Details:ReferencesOSPF_LSA_NETWORK_BAD_PACKETThe OSPF message contained a malformed network LSA. This violation of the standard couldindicate an attempt to compromise the protocol.OSPF SpecificationsOSPF Malformed Summary LSABase Event:Details:ReferencesOSPF_LSA_SUMMARY_MALFORMED_PACKETThe OSPF message contained a malformed summary LSA. This violation of the standard couldindicate an attempt to compromise the protocol.OSPF SpecificationsOSPF Network LSA Short PacketBase Event:Details:ReferencesOSPF_LSA_NETWORK_SHORT_PACKETThe OSPF message contained a network LSA that was shorter than minimum required length. Thisviolation of the standard could indicate an attempt to compromise the protocol.OSPF SpecificationsOSPF Packet Length MismatchBase Event:Details:ReferencesOSPF_PACKET_LEN_MISMATCHThe length specified in the header of the OSPF packet was different from actual packet length. Thisviolation of the standard could indicate an attempt to compromise the protocol.OSPF Specifications