Explanation of drop code and module-Id values in packet capture output (SonicOS 6.2.6.0-20n)

12/20/2019 16 People found this article helpful 494,594 Views

Description

When viewing output in the System | Packet Capture page, there are two fields that display potentially useful diagnostic information in numeric format. The Module-ID field provides information on the specific area of the firewall appliance's firmware that handled a particular packet. The Drop-Code field provides a reason why the appliance dropped a particular packet. This article provides a list of the Module-ID and Drop-Code numbers along with their meanings.

NOTE: The following Drop Codes were extracted from SonicOS Enhanced 6.2.6.0-20n firmware version. These codes may change when a new firmware is available. If unsure, please contact SonicWall support.

NOTE: Drop code numbers may change based on the firmware version, however, the drop code message (description) remains the same.

Additional drop code articles:

Resolution

Module-ID List
ID NAME 1 adminTools 2 attacks 3 av 4 bwmmgmt 5 CIA 6 cli 7 clients 8 config 9 connectionCache 10 Content Filter 11 dea 12 debug 13 dhcp relay 14 dhtml 15 fileSystem 16 fwCore 17 ha 18 IDP 19 ip helper 20 IPSec 21 lib 22 log	ID NAME 23 modem 24 netObj 25 network 26 packetFilter 27 policy 28 pppStack 29 RADIUS acct 30 redirector 31 reports 32 resource 33 sarc 34 servers 35 snmp 36 spdpp 37 stateful 38 system 39 TRAV2 40 TSA 41 USERS 42 version 43 wizards 44 wlan 45 wlb	ID NAME 46 zones 47 ARP 48 system stack 49 PPTP 50 L2TP 51 PPP-Dialup 52 IGMP 53 PPPOE 54 NAT 55 anti-spam 56 NetMonitor 57 Mirroring 58 SIP 59 BandOpt 60 GMSFlow server 61 APPFlow server 62 QoS 63 IPv6 64 ICMPv6 65 CFS 66

Drop Code List

ID NAME

0

1 PIP handling error in CP

2 PIP handling error in DP

3 Packet on the backup aggregate interface, but no Sonic END can be found.

4 Broadcast packet on the backup redundant port when primary port is up.

5 Packet the redundancy port, but no Sonic END can be found.

6 CP throttled DP for stack traffic

7 Packet dropped due to pass to stack failed.

8 Packet dropped by outputhook.

9 Inter-blade Packet dropped due to CP pass to stack failed.

10 HA active data packet processing failed.

11 Packet dropped due to CP pass to stack failed.

12 Drop IEEE802 BPDU packet Because L2 Bridge block non-ip packets.

13 Dispatching IEEE802 BPDU packet failed.

14 IEEE 802 BPDU support module has not been initialized yet.

15 Invalid Ether type for IEEE 802 BPDU packet.

16 Invalid source address for IEEE 802 BPDU packet.

17 Unknown Ether type ingress.

18 Null Ether header egress.

19 Unknown Ether type egress.

20 IPv6 packets not supported.

21 Packet on invalid vlan

22 Packet ingress on invalid interface

23 Packet egress on invalid interface

24 Packet on invalid device

25 Destination MAC address is not our interface

26 Source MAC address is one of our Interface MAC

27 Device is not attached.

28 Packet on invalid svrrp group

29 Invalid HA packet

30 Invalid IPv6 HA packet

31 Invalid HA ARP packet

32 PPPoE discover packet not allowed

33 Invalid HA SDP packet

34 Routing packet not allowed

35 Routing packet not allowed for BGP packet

36 Routing packet not allowed for ZebOS

37 Routing packet not allowed for v6 ZebOS

38 VLAN filtered.

39 Unicast MACADDR not mine

40 L2B Learning-Bridge filtered

41 Invalid NET-ID found on mist if write.

42 Invalid NET-ID found on if write arp real.

43 Invalid NET-ID found on write ip fast.

44 Invalid NET-ID found on if write.

45 Invalid NET-ID found on if write no mbuf.

46 Invalid Run-time NET data on mist if write.

47 Invalid Run-time NET data on if write arp real.

48 Invalid Run-time NET data on write ip fast.

49 Invalid Run-time NET data on if write.

50 Invalid parent Run-time NET data on if write.

51 Invalid Run-time NET data on if write no mbuf.

52 Invalid parent Run-time NET data on if write no mbuf.

53 Unknown ARP type.

54 Arp reply ignored.

55 IP address not for our subnet

56 ARP unexpected link ip

57 ARP source ip not connected

58 NULL source IP address

59 Own gratuitous arp

60 IP address not on our lan subnet

61 Classical mode, ARP bridge not supported

62 ARP proxy, subnet mismatch

63 Not for me.

64 ARP glean disabled.

65 ARP request from stack

66 ARP response from stack

67 ARP fail to resolve from SonicPoint

68 ARP unknown ethernet address format

69 IP length of fragment UDP packets is too big(>65535), drop

70 Invalid TCP Flag(#1)

71 Invalid TCP Flag(#2)

72 Invalid TCP Options(#1)

73 Invalid TCP Options(#2)

74 Invalid TCP Options(#3)

75 Invalid TCP Options(#4)

76 IP sanity test failed

77 IP sanity test failed in out hook

78 IP advanced sanity test failed

79 Non SonicPoint traffic in wlan zone

80 Multicast spank attack

81 Multicast Data packet dropped

82 Load Balancing Probe error

83 Syn Flood Protection(#1)

84 Syn Flood Protection(#2)

85 Syn Flood Protection(#3)

86 Duplicated in Syn Flood Protection

87 IP source route option found

88 Invalid connection cache.

89 Invalid connection cache after lookup.

90 Unknown destination(#1)

91 Unknown destination(#2)

92 Unknown destination for bridged bcast pkt

93 Bounce traffic detected

94 Access Rule Policy not found

95 AV detection

96 SEC detection

97 DEA detection

98 Bad TFTP packets

99 Enforced firewall rule(#1)

100 Enforced firewall rule(#2)

101 Enforced Content Filter Policy

102 LICENSE drop

103 IDP detection

104 IDP detection 2

105 IDP detection 3

106 IDP detection Relaod Signatures Database

107 IDP detection Attack Prevented(#1)

108 IDP detection Attack Prevented(#2)

109 IDP detection AF SMTP Reply

110 IDP detection Packet Out Of Order

111 IDP detection AF_DROP_PACKET

112 IDP detection AF_SEND_BLOCK_PAGE

113 IDP detection DROP_IP_IDP_AF_SEND_SMTP_REPLY

114 IDP detection DROP_IP_IDP_AF_SEND_HTTP_REDIRECT

115 IDP detection DROP_IP_IDP_AF_SEND_FTP_ERROR

116 IDP detection DROP_IP_IDP_AF_RESET_CONNECTION

117 IDP detection DROP_IP_IDP_DROP_PACKET

118 IDP detection DROP_IP_IDP_DROP_PACKET 2

119 IDP detection DROP_IP_IDP_DROP_PACKET 3

120 IDP detection DROP_IP_IDP_SEND_BLOCK_PAGE

121 IDP detection DROP_IP_IDP_SEND_SMTP_REPLY

122 IDP detection DROP_IP_IDP_SEND_HTTP_REDIRECT

123 IDP detection DROP_IP_IDP_SEND_FTP_ERROR

124 IDP detection DROP_IP_IDP_RESET_CONNECTION

125 IDP detection DROP_IP_IDP_AC_DROP_PACKET

126 IDP detection DROP_IP_IDP_AS_DROP_PACKET

127 IDP detection DROP_IP_IDP_GAV_DROP_PACKET_1

128 IDP detection DROP_IP_IDP_GAV_DROP_PACKET_2

129 IDP detection DROP_IP_IDP_GAV_DROP_PACKET_3

130 IDP detection DROP_IP_IDP_GAV_DROP_PACKET_4

131 IDP detection Fragmentation

132 IDP detection Block Retry Exception

133 IDP detection OOO Exceeded Max

134 IDP detection OOO Out of Buffers

135 IDP detection Keep Original

136 IDP detection SMB out of order read/write

137 IDP detection, bad tcp checksum

138 IDP detection, bad ip checksum in tcp checking

139 IDP detection, bad ip checksum in tcp packet

140 IDP detection, bad udp checksum

141 IDP detection, bad ip checksum in udp checking

142 IDP detection, bad ip checksum in udp packet

143 IDP detection, bad icmp checksum

144 IDP detection, bad ip checksum in icmp checking

145 IDP detection, bad ip checksum in icmp packet

146 Packet to public IP from inside firewall

147 Bad TTL

148 IP check failed

149 Bad source IP(#1)

150 Bad source IP(#2)

151 Bad output source IP

152 Bad destination MAC address

153 Broadcast not allowed on bridge.

154 Antispam: Going to blacklisted server.

155 Going to blacklisted server.

156 coming from blacklisted server.

157 Broadcast traffic not handled.

158 Multicast forwarding not configured

159 Multicast IGMP state not found

160 Multicast IP not in the allowed list

161 Anti-Spam Connection Limit Reached

162 Active/Active DPI drop offload packet

163 UDP Flood Protection

164 ICMP Flood Protection

165 UDP Flood Protection For IPv6

166 ICMPv6 Flood Protection

167 Control Plane Flood Protection

168 Guest Service not allowed

169 WLAN Guest Service not allowed

170 Unknown Ether type

171 Incorrect IP Version

172 Blacklisted MAC address

173 Greater IP Length

174 Less IP Length

175 TCP packet length mismatch with interface MTU

176 UDP packet length mismatch with interface MTU

177 Other protocol packet length mismatch with interface MTU

178 First fragment length less than minimum IP MTU

179 Wrong fragmentation boundary(#1).

180 Wrong fragmentation boundary(#2).

181 Wrong IP checksum value(#1).

182 Wrong IP checksum value(#2).

183 Wrong TCP Checksum value.

184 Wrong UDP Checksum value.

185 Wrong ICMP Checksum value(#1).

186 Wrong ICMP Checksum value(#2).

187 ICMP High perf error.

188 NULL Udp port number

189 Non PPP-GRE traffic

190 Missing ESP Header

191 Missing AH Header

192 Missing IPCOMP Header

193 Unknown IP protocol type(#1)

194 Unknown IP protocol type(#2)

195 TTL value is zero.

196 TTL value is zero, case two.

197 l2 mcast but dest ip is unicast(#1)

198 l2 mcast but dest ip is unicast(#2)

199 Null Source Zone.

200 Wrong UDP Length.

201 IGMP packets could not be fragmented

202 RECV: IP pkt recvd without IPCP session

203 RECV: IP pkt recvd without contiguous buf

204 RECV: IP pkt recvd without combuf

205 RECV: TNMP can't alloc contiguous buf

206 XMIT: AHDLC encap no buf

207 XMIT: TNMP can't alloc contiguous buf

208 XMIT: Device not ready to forward traffic

209 XMIT: No IPCP session

210 XMIT: IPCP is down

211 XMIT: No Dialup Msg Buffer available

212 Non Zero GIAddr field in DHCP packet from client

213 Source MAC is different from chAddr field in DHCP client packet

214 Iphelper policy not found for DHCP relay.

215 Iphelper cache not found for DHCP.

216 Zero NSID in Netbios request packet.

217 Iphelper policy not found for Netbios.

218 Iphelper cache not found for Netbios.

219 Zero NSID in Netbios reply packet when recv from server.

220 Zero NSID in Netbios reply packet when recv from client.

221 Zero NSID in Netbios reply packet.

222 Netbios client no egress element

223 Netbios server no egress element

224 Netbios client fail to create record

225 DHCP server fail to relay to client

226 DHCP client no egress element

227 DHCP client fail to create record

228 DHCP server, Ingress interface is same as egress interface.

229 Firewall, Ingress interface is same as egress interface.

230 Other Application, Ingress interface is same as egress interface.

231 Ingress interface is same as egress interface.

232 DHCP server packet dropped, RPF check failed.

233 Netbios client packet dropped, RPF check failed.

234 Netbios server packet dropped, RPF check failed.

235 Other Application relay to client failed

236 Other Application no egress element

237 Other Application fail to create record

238 Other Application packet dropped, RPF check failed.

239 Other Application client packet dropped, RPF check failed.

240 Other Application server packet dropped, RPF check failed.

241 Iphelper policy not found for other Application.

242 Iphelper policy not found for other Application when creating record.

243 Combuf Allocation Error.

244 Memory Allocation Error.

245 BSEG Memory Allocation Error.

246 Length Mismatch. Cant forward pkt!!!.

247 Control message header size error.

248 Drop GRE packet as call not yet established.

249 Invalid GRE Flags or Caller ID.

250 Invalid GRE sequence number.

251 No payload for GRE packet.

252 PPTP Tunnel is not up yet.

253 PPTP Client is not enabled.

254 PPTP WAN Write Spin Lock Error.

255 PPTP Spin Lock Error.

256 PPTP Flow Control Queuing Error.

257 Error copying PPTP combuf chain to continuous buffer.

258 Error fragmenting packet that is larger than PPTP MTU.

259 Enforced Dial-on-Data restriction.

260 PPPDU has not completed initialization.

261 Error fragmenting packet that is larger than PPPDU MTU.

262 PPPDU dropped packet because packet that is larger then PPPDU MTU and fragmentation is disabled.

263 Packet received with DF bit Set and large than MTU

264 PPP MLP link is not up/available.

265 PPP link is not up/available.

266 PPP link is not up.

267 PPP link is not opened.

268 The PPP buffer processing failed.

269 LCP: The PPP buffer is truncated.

270 The PPP buffer decompressing failed.

271 NCP: The PPP buffer is truncated.

272 PPP MLP pre-xmit error.

273 PPP MLP encapsulate error.

274 PPP MLP null pointer found.

275 PPP MLP no data packet.

276 PPP MLP link is not opened.

277 PPP MLP buffer decompressing failed.

278 PPP MLP BAP no netif nlinfo.

279 PPP MLP IP no netif nlinfo.

280 PPP MLP NBF no netif nlinfo.

281 PPP MLP VJCOMP no netif nlinfo.

282 PPP MLP VJCOMP decompressing failed.

283 PPP MLP VJUNCOMP no netif nlinfo.

284 PPP MLP VJUNCOMP decompressing failed.

285 PPP MLP IPX no netif nlinfo.

286 PPP MLP IPX decompressing failed.

287 PPP MLP AT no netif nlinfo.

288 PPP MLP 802.1 no netif nlinfo.

289 PPP MLP IBMSR no netif nlinfo.

290 PPP MLP DECLAN no netif nlinfo.

291 PPP MLP BRIDGE no netif nlinfo.

292 PPP MLP NBFCP no netif nlinfo.

293 PPP MLP IPCP no netif nlinfo.

294 The PPP PAP buffer processing failed.

295 The PPP CHAP buffer processing failed.

296 The PPP NCP buffer processing failed.

297 The PPP LCP buffer processing failed.

298 Received PPP pkt but there is no existing PPP information.

299 PPP Network Interface structure is NULL.

300 PPP Virtual Interface structure is NULL.

301 PPP no active link.

302 PPP dropped packet because it contains unknown protocol.

303 PPP dropped packet because of transmission failure.

304 PPP MLP NCP processing failed

305 PPP dropped packet because NCP is not open.

306 PPP dropped packet because the LCP code is unacceptable.

307 PPP dropped packet because the LCP code is unknown.

308 PPP HDLC PPPOE packet has no payload.

309 PPPOE packet has no payload.

310 The PPPOE buffer processing failed.

311 The PPPOE ingress buffer processing failed.

312 The PPPOE egress buffer processing failed.

313 PPPOE packet dropped because of NULL pointer.

314 PPPOE packet dropped because of NULL pointer in DP.

315 PPPOE packet dropped because BSEG allocation failed.

316 PPPOE packet dropped because buf put head action failed.

317 PPPOE packet dropped because PADO create PAD packet failed.

318 PPPOE packet dropped because PADI create PAD packet failed.

319 PPPOE packet dropped because PADR create PAD packet failed.

320 The PPP HDLC ingress buffer processing failed.

321 The PPP HDLC egress buffer processing failed.

322 The PPP HDLC dropped because of NULL pointer.

323 The PPP HDLC dropped because of NULL pointer in DP.

324 PPP HDLC packet dropped because BSEG allocation failed.

325 PPP HDLC packet dropped because buf put head action failed.

326 The PPP HDLC buffer processing failed.

327 The PPP HDLC PPPOE IPCP is not up.

328 The PPP HDLC PPPOE is not ready.

329 The PPP HDLC PPPOE is not ready in DP.

330 The PPPOE IPCP is not up.

331 The PPPOE module is not yet ready.

332 The PPPOE module is not yet ready in DP.

333 The PPP HDLC PPPOE is not enabled.

334 The PPP HDLC PPPOE is not enabled in DP.

335 The PPPOE module is not enabled.

336 The PPPOE module is not enabled in DP.

337 The PPP HDLC PPPOE is not re/started with NTP packets.

338 The PPP HDLC PPPOE is not re/started with NTP packets in DP.

339 The PPPOE module is not re/started with NTP packets.

340 The PPPOE module is not re/started with NTP packets in DP.

341 The PPP HDLC PPPOE is not re/started with non-IP packets.

342 The PPP HDLC PPPOE is not re/started with non-IP packets in DP.

343 The PPPOE module dropped the packet because it was non-IP.

344 The PPPOE module dropped the packet because it was non-IP in DP.

345 PPP HDLC PPPoE packet has unsupported version.

346 PPPoE packet has unsupported version.

347 Received PPP HDLC PPPOE packet for non-existent PPP session.

348 Received PPP HDLC PPPOE packet for non-existent PPP session in DP.

349 Received PPPoE packet for non-existent PPP session.

350 Received PPPoE packet for non-existent PPP session in DP.

351 PPPoE packet in ether type 'session' has an illegal session id.

352 PPPoE packet in ether type 'discovery' has an illegal session id.

353 PPPoE packet has unknown ethertype.

354 PPPoE packet is missing the service name tag.

355 PPPoE packet was not transmitted.

356 PPPoE packet dropped due to failure in adding enet header.

357 L2TP Length Mismatch

358 L2TP UDP checksum error

359 L2TP buffer corrupted

360 L2TP invalid tunnel

361 L2TP invalid session

362 L2TP Invalid source interface

363 L2TP packet not encrypted

364 L2TP Drop PPP control packet, session not established yet

365 L2TP Tunnel/Seesion Invalid

366 L2TP invalid pkt type

367 L2TP invalid control msg

368 L2TP unsupported version

369 L2TP invalid packet

370 L2TP not enabled on this interface

371 L2TP invalid runtime data

372 L2TP connection not UP

373 L2TP memory allocation failed

374 No IPSec tunnel active for this connection ,

375 Invalid L2TP Mode ,

376 Pkt pass to stack failed

377 UDP length greater than 1500

378 IP length greater than 1500

379 Pkt authentication failed

380 SA not found on lookup by SPI after decryption

381 SA not found on lookup by SPI after encryption

382 Failed to copy frag chain to contiguous buffer

383 Pkt with SPI less than 256

384 SA not found on lookup by SPI for inbound packet

385 Pkt length smaller than expected

386 Replayed Pkt

387 Pkt received on invalid interface

388 Expecting udp encapsulation

389 Not expecting udp encapsulation

390 Throughput regulator drop inbound pkt

391 Throughput regulator drop inbound pkt in CP

392 HW processing request error for inbound pkt

393 AH auth failed

394 ESP auth failed

395 ESP decrypt failed

396 Unknown protocol

397 Nested tunnels not supported

398 Pkt is not thru tunnell

399 Pkt is not thru tunnel or l2tp transport mode

400 Pkt not destined to mgmt interface

401 Pkt not destined to mgmt interface in CP

402 Pkt not destined to mgmt interface (non-octeon)

403 Pkt from invalid peer

404 VPN access list check failure

405 VPN access list check failure in CP

406 VPN access list check failure (non-octeon)

407 Pkt does not match traffic selectors

408 Pkt fragment not allowed

409 DHCP pkt invalid IP length

410 Octeon Decrypyion Failed for inbound packet

411 Octeon Decrypyion Failed for inbound packet on DP

412 Octeon Decrypyion Failed replay check

413 Octeon Decrypyion Failed non esp ike

414 Octeon Decrypyion Failed MAC compare

415 Octeon Decrypyion Failed Pad check

416 Octeon Decrypyion Failed policy version check

417 Octeon Decrypyion Failed policy direction check

418 Octeon Decrypyion Failed policy direction check on DP

419 Octeon Decrypyion Failed protocol check

420 Octeon Decrypyion Failed SA check

421 Octeon Decrypyion Failed inner checksum

422 Octeon Decrypyion Failed L4 checksum

423 Octeon Decrypyion Failed soft lifebyte check

424 Octeon Decrypyion Failed hard lifebyte check

425 Octeon Decrypyion Failed illegal conf check

426 Octeon Decrypyion Failed illegal auth check

427 Octeon Decrypyion Failed esp payload length check

428 Octeon Decrypyion Failed esp payload length check on DP

429 Octeon Decrypyion Failed esp payload align check

430 Octeon Decrypyion Failed sequence number check

431 Octeon Decrypyion Failed sequence number check on DP

432 Octeon Decrypyion Failed AH hdr len

433 Octeon Decrypyion Failed Selector check

434 Octeon Decrypyion inbound SA not found

435 Incoming packet's combuf Ip Length Error

436 Combuf Ip Ptr Null Error

437 Multicast sa not found

438 SA not found on lookup by SPI for outbound pkt

439 Incorrect src IP on mgmt SA

440 Throughput regulator drop outbound pkt

441 Throughput regulator drop outbound pkt in CP

442 Insufficient command context for outbound pkt

443 HW processing request error for outbound pkt

444 Software esp decrypt processing request error

445 Software esp auth processing request error

446 Software ah auth processing request error

447 Software null sa processing request error

448 Software processing request error

449 Software malloc combuf fragment error

450 Combuf Fragmentation error

451 Combuf Fragmentation disallowed(#1)

452 Combuf Fragmentation disallowed(#2)

453 Combuf Fragmentation error after encryption

454 Combuf Fragmentation error after encryption in CP

455 Packet is large than MTU

456 IPSec MTU is less than IPv6 standard header size(#1)

457 IPSec MTU is less than IPv6 standard header size(#2)

458 Packet is large than MTU after encryption

459 Packet received with DF bit Set and large than MTU

460 Packet received in IPv6 and large than MTU(#1)

461 Packet received in IPv6 and large than MTU(#2)

462 Sequence overflow while encryting packet

463 Encption error for out going packet

464 Combuf Ip Ptr NUll Error

465 Combuf Ip Length Error

466 Combuf Ipv6 Length Error

467 Next Hope MAC ARP error

468 Next Hope ARP not Resolved

469 Multicast buffer error

470 No IGMP entry found when leaving

471 No IGMP entry found when forwarding

472 No IGMP interface entry found

473 Combuf fields mismatch iplen-enet not equal to etherhdr size

474 IGMP wrong Checksum

475 Multicast not enabled

476 Multicast not enabled(IGMP)

477 IGMPv2 state table error

478 IGMPv3 state table error

479 IGMP message has invalid length

480 IGMP message has invalid destination

481 IGMP message has invalid subtype

482 IGMPv3 message has invalid data length

483 IGMPv3 message has less data record

484 IGMPv3 message is invalid

485 IGMP query message version is not supported

486 IGMP report message vers

Not Finding Your Answers?

ASK THE COMMUNITY

Was This Article Helpful?

YES NO

Explanation of drop code and module-Id values in packet capture output (SonicOS 6.2.6.0-20n)

Description

Resolution

Related Articles

Categories

Not Finding Your Answers?

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Follow Us

Subscribe to newsletter

Stay In Touch