Strange FWSM log message

Dear expects,
I have a strange problem with a FWSM on Catalyst 6509, this funny logging message keep generating on the FWSM
%FWSM-3-106011: Deny inbound (No xlate) icmp src fwsm_212:10.10.212.30 dst fwsm_212:10.10.212.14 (type 8, code 0)
%FWSM-3-106011: Deny inbound (No xlate) icmp src fwsm_212:10.10.212.30 dst fwsm_212:10.10.212.12 (type 8, code 0)
Was it mean that a icmp packet source from 10.10.212.30 to 10.10.212.14 being denied in the FWSM in the first statement? it suppose to be on a same subnet (10.10.212.0/24), not sure why it being detected and logged in the FWSM gateway
I have surf some info from the Internet, in the CISCO FWSM log documentation mention this code of log message can typically be ignored, it's recommend to prevent this system log message from getting logged to the syslog server by entering the "no logging message 106011" command. But I have read also this log could be generated by various worms or trojans attempting to connect to known hosts, it may also indicate a port scaning
Could someone explain to me what actually mean by the message log ? what is the best way to investigte this log, shoud I drill down focus and check on the host machine itself or can ignored this system log ?
Thanks in advance.

Other than what you are calling a "message", is the  preview functioning as desired?

Similar Messages

  • Strange console.log messages: Here 0, Here 1, etc.

    I just opened Console.app to check the logs for something, when I saw a very strange list of messages in console.log. There are no time stamps or process IDs listed with these messages; they just look like this:
    Here 0
    Here 1
    Here 0
    Here 1
    Here 0
    Here 1
    Here 2
    Here 3
    Here 4
    Here 5: 2
    Here 0
    Here 1
    Here 2
    Here 0
    Here 1
    You get the idea. This list goes on for over 7000 lines! Based on the time stamps of the messages before and after this list, I can see that this happened sometime during a 2-hour period this morning, and no more have appeared in the last 30 minutes.
    Since the messages have stopped, I am more curious than I am worried. However, I would really like to know what caused this to happen. Does anyone have any clue? Has anyone else seen this happen?

    Well, although I still have no idea what the messages mean, I've discovered what is causing them. It's the result of a conflict between two applications: NeoOffice and ShoveBox. This morning, I inadvertently tried to assign a keyboard shortcut in NeoOffice that already had been assigned to the "Send to ShoveBox" option in the Services menu. Apparently, ShoveBox does not understand input from NeoOffice, because if I select a cell in my spreadsheet, and press Command-Shift-E (the "Send to ShoveBox" shortcut), a long string of those "Here" messages suddenly appears in console.log. If I use that keyboard shortcut in another application—like with text selected in TextEdit—the selection is properly sent to a new text note in ShoveBox.
    I guess the reason, there were so many lines of those messages this morning, is that I kept trying to use the shortcut when nothing was happening in NeoOffice. The strange thing is that I've successfully used that exact shortcut in NeoOffice many times before, even with ShoveBox installed.
    So, I will just pick a different keyboard shortcut for what I want to do in NeoOffice, and go about my merry way. I'm happy to know my computer isn't sending out "Here" messages to some malicious server, or anything like that.

  • Homehub 3.0 Wireless Event Log messages

    Hello,
    Can anyone tell me what event log messages like the following mean?
    3 consecutive beacons have not been transmitted
    I'm getting these about once every 20 minutes.  Smart Wireless is enabled.
    A couple of days ago Wireless became unstable, devices connecting and reconnecting repeatedly. The Wireless light was randomly flashing on and off (Blue) every few seconds.  I had to restart the homehub (which I didn't really want to do, as I was still within my first 10 days, with Infinity).  But after the restart, the admin password had changed.  I assumed it was reset to the original one, but that was also not recognised.  I had to do a password override to get access.
    Ever since then Wireless has been behaving itself but I'm still left with these strange event log messages - google comes up with nothing.
    Any ideas?

    Hi BRunner and welcome
    Although I've not had opportunity to obtain one of these hubs (BT are you listening), as I'm still on the hub 2, I'll try to help you out with this...
    It looks like the hub is reporting that it can't transmit the wireless signal on the chosen channels, why, I'm not too sure
    (this might be due to the design (how 'Smart Wifi' works), or dare I say it, the hub could be faulty!!!!!)
    Firstly, download either inSSIDer2 (Windows) or istumbler (MAC) - take care when installing, uncheck any 'additional freebies' as they're not needed.
    Either will show all the wireless SSIDs in your area. As I use inSSIDer2, I'll explain what to do using this one, I guess itsumbler would be similar (not a MAC man, yet!)
    Disconnect from your own hub, run inSSIDer and monitor any SSIDs, I recently noticed that 2 of my neighbours (VM) routers appears to grab channel 1 upto channel 7!
    This keeps changing and they keep fighting with each other. As this was affecting me, I've moved to channel 8. This can be manually set via the hub manager, but you'd probably need to switch off 'Smart Wifi'
    Ideally, take a screenshot of the results BUT remove ANY wireless SSID's, it's the channels in use that's important.
    -+-No longer a forum member-+-

  • Hide information in FWSM syslog messages

    Hey,
    for privacy reasons I want (or 'have') to shorten the NAT connection buildup and teardown in the syslog of a FWSM to only include source port and source address but not the destination. With a syslog option of "informative" I get
    Mar 14 16:37:35 fwsm %FWSM-6-302013: Built outbound TCP connection 145545661512558860 for wlan:10.18.225.222/50729 (xx.yy.38.34/10566) to outside:zz.aa.59.64/80 (bb.cc.59.64/80)
    but I more think about
    Mar 14 16:37:35 fwsm %FWSM-6-302013: Built outbound TCP connection  145545661512558860 for wlan:10.18.225.222/50729 (xx.yy.38.34/10566)
    Is this possible from within the FWSM or do I have to post-process in the syslog server?

    Hi,
    I dont think you can modify the actual FWSM log messages. You can either enable or disable certain log messages from even being sent to the Syslog server but thats about it.
    For example TCP/UDP
    Connection forming
    Connection teardown
    Translation forming
    Translation teardown
    All have their own Syslog message ID that you can either disable or enable.
    So it would seem to me that you have to use some other "tool" to achieve what you are looking for.
    - Jouni

  • Strange lines in messages.log

    Hi all,
    we have RAC installation with two nodes. On both of them is some strange message in /var/log/messages.log written twice per second. Because of this messages.log is growing in size very fast.
    I'm totally confused which process is responsible using sudo and generating such records.
    Here are few lines......
    Mar 10 14:14:06 fst1333x su: (to oracle) root on none
    Mar 10 14:14:06 fst1333x su: (to oracle) root on none
    Mar 10 14:14:08 fst1333x su: (to oracle) root on none
    Mar 10 14:14:08 fst1333x su: (to oracle) root on none
    Mar 10 14:14:09 fst1333x su: (to oracle) root on none
    Mar 10 14:14:09 fst1333x su: (to oracle) root on none
    Mar 10 14:14:10 fst1333x su: (to oracle) root on none
    Mar 10 14:14:10 fst1333x su: (to oracle) root on none
    Mar 10 14:14:11 fst1333x su: (to oracle) root on none
    Mar 10 14:14:11 fst1333x su: (to oracle) root on none
    Mar 10 14:14:12 fst1333x su: (to oracle) root on none
    Mar 10 14:14:13 fst1333x su: (to oracle) root on none
    Mar 10 14:14:14 fst1333x su: (to oracle) root on none
    Mar 10 14:14:14 fst1333x su: (to oracle) root on none
    Mar 10 14:14:15 fst1333x su: (to oracle) root on none
    Mar 10 14:14:15 fst1333x su: (to oracle) root on none
    Mar 10 14:14:16 fst1333x su: (to oracle) root on none
    Mar 10 14:14:16 fst1333x su: (to oracle) root on none
    Mar 10 14:14:17 fst1333x su: (to oracle) root on none
    Mar 10 14:14:17 fst1333x su: (to oracle) root on none
    Mar 10 14:14:19 fst1333x su: (to oracle) root on none
    Mar 10 14:14:19 fst1333x su: (to oracle) root on none
    Mar 10 14:14:20 fst1333x su: (to oracle) root on none
    Mar 10 14:14:20 fst1333x su: (to oracle) root on none
    Mar 10 14:14:21 fst1333x su: (to oracle) root on none
    Mar 10 14:14:21 fst1333x su: (to oracle) root on none
    Mar 10 14:14:22 fst1333x su: (to oracle) root on none
    Mar 10 14:14:22 fst1333x su: (to oracle) root on none
    Mar 10 14:14:23 fst1333x su: (to oracle) root on none
    Mar 10 14:14:23 fst1333x su: (to oracle) root on none
    Mar 10 14:14:25 fst1333x su: (to oracle) root on none
    Mar 10 14:14:25 fst1333x su: (to oracle) root on none
    Mar 10 14:14:26 fst1333x su: (to oracle) root on none
    Mar 10 14:14:26 fst1333x su: (to oracle) root on none
    Mar 10 14:14:27 fst1333x su: (to oracle) root on none
    Mar 10 14:14:27 fst1333x su: (to oracle) root on none
    Mar 10 14:14:28 fst1333x su: (to oracle) root on none
    thanks for your suggestions
    Robert

    Hi Chandra,
    unfortunately I can't stop the whole database just because of this "little" problem. And don't even know if it really helps. Now I'm installing the same SW on VMWare server. Hope, that it will help me reproduce this problem and then I can try this patch.
    Thank you, however, for your suggestion.
    Robert

  • RV220W Strange Log Message

    I keep getting log messages like the following on my router:
    [RV220W]Tue Aug 14 00:00:14 2012(GMT+0200) [RV220W][Kernel][KERNEL] BW_LIMIT_PKTS  IN=LAN SRC=10.0.0.10 DST=173.194.35.134 PROTO=TCP SPT=1159 DPT=443
    i.e. a large number of BW_LIMIT_PKTS messages regarding traffic from the LAN to the WAN destined to ports 53, 443 and 80 only. Is it related to QoS policies? What is the meaning of this message?

    So, nobody from Cisco knows what the error messages their router produces mean since Cisco did not develop the firmware, it just sells the stuff. Is that the case?
    Sent from Cisco Technical Support iPad App

  • PL/SQL log messages are not printing from Java concurrent program

    Hi,
    I have a strange issue while submitting the Java concurrent program through PL/SQL.
    I have a PL/SQL concurrent program which will invoke the Java concurrent program inside the package by use of "FND_GLOBAL.SUBMIT_REQUEST". It worked and submitted successfully. From that Java concurrent program we are calling some other PL/SQL packages and printing some log messages over there. But problem here is the request is only printing the Java log messages in view log but not the PL/SQL log messages.  But if I submit the Java concurrent program directly from SRS form at that it is printing both Java and PL/SQL log messages.
    I am just wondering how the log messages has not printed. Please provide your inputs to solve this problem.
    Thanks
    Suriya

    I'm adding log messages in the package body , but these messages are not printing after completion of concurrent prog.
    Any suggestions.
    FND_FILE.PUT_LINE(FND_FILE.LOG,'Data Test :');Do you have COMMIT in your code?
    https://forums.oracle.com/forums/search.jspa?threadID=&q=%27FND_FILE.PUT_LINE%27+AND+commit&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    Thanks,
    Hussein

  • Tailing log messages

    Currently I'm working on an app that must display some log messages on the GUI. Depending on the urgency of the message (i.e. fatal, debug, info etc.) I want to give the message some visible characteristics (color, icon) to make the important onces stand out for the end-user. I'm thinking of using a JList (inside a JScrollPane) and add some JLabels to that. I can use html on the JLabel to change the visible characteristics. This seems to work. But...
    I prefer to add each new log message to the end of the list. So the last line is the most recent one. But I also want this line to be visible after it has been added. To accomplish this I've added a listener on the Lists model to get a trigger when the contents have changed. When that happens I use the ensureIndexIsVisible() method of the list to make sure the added line is visible. This works 90% of the time. Once in a while the list scrolls up to the first line and sometimes it even becomes completely blank. The next update gets things back in order though. But I don't like the strange behaviour and I can't figure out if I'm doing something wrong (and if so, what is it). Any thoughts on this?
    Maybe there is another way to accomplish my goal. Any suggestions on how to tail formatted log messages?
    Thanx,
    Vincent

    This may be overkill for your house, but for production its great.  I use Managed Workplaces from http://www.levelplatforms.com/.  Its like cacti etc.  It has built in modules for cisco routers, juniper, windows server etc.  It monitors linux box via snmp  and also set it to watch ports for services to verify they are up and running.  Its set as a syslog server for all the linux boxes as well, and if an say any facility shows a .err, an alert is generated, if any facility logs a critical erroc, an alert is created, a ticket is automatically created and assigned to a technician and depending on the device, the relevant people are email the error.  It also has a centralized remote console for devices.  So for a windows box, you can RDP directly to the console or remotely view the file system, linux we can remotely parse logs on the fly and ssh to the devices. The main dashboard is a web gui, so you can monitor it on your phone, or from your laptop no matter where you are.  It works pretty, well.  Its not without bugs and hiccups of course, and their development cycle seems to be very slow, but the product works great for what we use it for.  You get the bonus of people able to deploy it as a managed service and monitor other 'sites' and scale the view so their local IT staff can only monitor their subsection.  Once again, probably overkill, unless you are talking about monitoring a large amount of devices.

  • Populating our log message along with standard sap log in ck11n.

    Hi all,
    I have developed a user exit which is used in costing of material using ck11n.
    Here i have to show our custom log message along with the standard log shown by standard sap system after costing run is complete.
    I got one FM-- CM_F_MESSAGE  which is used by SAP. But i want the message along with SAP messages and not separately.
    Can u help me out for this. its very urgent.
    Thanks in advance.

    Hi
    I'm not sure because I don't know that trx, but I seem the function group of that function manages a log, so you can try.
    This is an extract of abap code of SAPLCKDI where that fm is used:
    CALL FUNCTION 'CM_F_MESSAGE'
       EXPORTING
         ARBGB = Y_CMF-CK
         MSGNR = '327'
         MSGTY = Y_CMF-W
         MSGV1 = SICHT
         MSGV2 = KLVAR.
    So I suppose you should call it by this way:
    CALL FUNCTION 'CM_F_MESSAGE'
       EXPORTING
         ARBGB = <your message class>
         MSGNR = <message number>
         MSGTY = <message type>
         MSGV1 = <text 1>
         MSGV2 = <text 2>
         MSGV3 = <text 3>
    I think MSGV* is optional parameter.
    Max

  • Log messages for 'auditing' are different in 'general'  and'application log

    Hi,
    From UI, When I audit a file using a profile which comprises of user-defined 'rules/categories/analyzers', I will get log messages at ''File-name(Application) log window' and 'Messages' log window, which are located at bottom of Jdev UI page. One common message in both the log windows is
    " <n1> violations, <n2> exceptions, <n3> documents, <n4> seconds>.
    But here the 'n1,n2,...' numbers are dfferent in two windows though the log output is for a same file. In this the 'file-name' log shows the correct
    Example:-
    In 'file-name' log window ,it shows as:
    3 documents, 8 violations, no exceptions
    In messages window, it shows as
    "Audit starting on EFC.jpr (Default)
    Audit completed: no violations, no exceptions, 3 documents, 1 second"
    If I use the 'pre-existed'(Jdev's) rules profile, I will get similar output in both log windows.
    From this I concluded that there is something missing to register for a new 'rule/category/analyzer'.
    Could you suggest me in this case. Do I forgot anything to do in any files of '<rule-implementation.java>', 'audit.properties', <add-in launcher>.java, extension.xml.
    Actually, I want to use 'ojaudit' executable from command line to my project files. Here I observed that the output of the 'ojaudit' is similar to the above explained 'Message' log window in JDeveloper UI. But where the 'Message' log window output is not correct for user-defined rules.
    Regards
    Madhu

    Romano,
    In the upcoming production release (planned to be released next week), we added caching of authorized roles and permissions in JhsAuthorizationProxy class.
    I suggest you wait for this relase, if the problem persists, it is most likely an ADF issue (as is the logging)
    Steven Davelaar,
    JHeadstart team.

  • Decoding a fire wall log message

    I need help decoding the following firewall log message:
    Stealth Mode connection attempt to TCP 192.168.1.97:50459 from 70.42.185.114:80
    Neither of these IP numbers belong to me (but mine is similar to the first).
    Why is my firewall showing a connection attempt to a different computer?

    Do not panic. That may be a more-or-less innocuous probe by, for example, a "web crawler" that's cataloging everything it can find on the internet. Think Google.
    In your Applications/Utilities folder is the +Network Utility+ app. Among many other things, you can look up IP addresses and, often, find out where it's located and/or registered to.

  • Log Messages from Transaction Event Logger

    I have 4 instances of MII v12.1 and within a transaction I want to add a message to the log when the transaction runs so I can view it through the message logger. All 4 MII instances were installed by the same consultant a few years ago so there "should" be no differences in the log configs. On 3 of the instances this is working fine - I have created a very simple transaction with one Event Logger action configured with a message "Test Message" and when I execute the transaction I see the correct entry in the log viewer. On the fourth however, although the transaction executes without error I am not seeing anything in the viewer for this event. I am using the standard "last 24 hours" log viewer with no filters and no specific log locations selected, and no customisations. I am seeing other system generated messages. I found some documentation about logging and the viewer and I found the Netweaver log config but as far as I can see it looks consistent between the instance which is working and the one which is not working. Is there some other config which needs to be done to enable Event Logging from transactions? My user has the same access across all instances. Any guidance would be appreciated. I attach a screen shot of what I am expecting to see (taken from one of the instances which is working).

    Hi Partha
    Many thanks for your reply. I have tried this and unfortunately it makes no difference. I also checked on the other instances and found they have their tracing levels all set to error, not Info. I have also noticed that on the instance which is working, in the System Configuration section at the bottom of the Log Config page - for Applications and all sub categories I see the entry .\log\applications_00.log in the Pattern column. On the instance which is not working I see that entry for the Applications root but not for any of the sub categories (even after selecting Copy to subtree). I cannot see where I can set this value (there is no modify function available, even under Administrator login).
    Also, when I look at the log messages which have generated when setting the Event Type to Error on the instance which is not working, it shows one entry and the Category and Location columns show <com.sap.xmii.bls.executables.action.logging.LoggingActions>. When I generate an event with type Error on the instance which is working I get 2 log messages, one with the Category and Location <com.sap.xmii.bls.executables.action.logging.LoggingActions> and the other with Category /Applications/XMII/Xacute/Event and Location <com.sap.xmii.bls.executables.action.logging.LoggingActions>.
    I guess that the .\log\applications_00.log should be showing for all subtree items under Applications and because it is not then the messages are not going into any application log. Not sure how to fix this however.
    I have also reset to the default configuration and it does not change the above.
    Best Rgds
    Richard

  • How to add log messages in the sever/webui objects?

    Hi,
    I am new to the OA Framework.
    Can any one share any information in how to add log messages in the sever/webui objects?
    What are the beans I need to use to show in the diagnostic page?
    Can I get sample code for this log staments?
    Thanks in advance,
    Padma

    Hello. This forum is for reporting problems with the published Oracle documentation. You have a better change of getting a reply if you post your question on the Database - General forum.
    Regards,
    Diana

  • How to Write Log Message in a XML Data Source Report

    Hi Friends,
    Can anyone help me out what is the process of writing a log file in the XML Data Source Report. for eg: in Plsql we use FND_LOG.PUT_LINE to print the Log message in the Concurrent Request Output. in the similar manner, when we develop a report using XML, where we write Coding in XQuery of XML, what is the process need to follow to print the logs for the XQuery.
    Any inputs/Suggestion on this Highly appreciable.
    Thanks in advance.

    Create an RMI application (for example) that writes the log, and let all logging calls call that remote application.
    Something like that is the only feasible way that doesn't require you to have a drive on the remote machine mapped to the local one (which causes its own problems as you could have multiple simultaneous write attempts...).

  • How to Write log messages in a text file located in another machine

    Basically My application is distributed across two or more tomcat servers running in multiple machines.And I get a log4j logs in the respective machines.
    But I want a consolidated log message in a single machine.
    How do i get that done??
    Any samples?? Any clues??
    Any specific technoliges??

    Create an RMI application (for example) that writes the log, and let all logging calls call that remote application.
    Something like that is the only feasible way that doesn't require you to have a drive on the remote machine mapped to the local one (which causes its own problems as you could have multiple simultaneous write attempts...).

Maybe you are looking for