Explanation Of Drop Code And Module-ID Values In Packet Capture Output (SonicOS 6.5.4.5)

10/01/2020 3 2308

DESCRIPTION:

The Packet Monitor Feature on the SonicWall is one of the most powerful and useful tools for troubleshooting a wide variety of issues. Any Packets which pass through the SonicWall can be viewed, examined, and even exported to tools like Wireshark.

The Module-ID field provides information on the specific area of the firewall (UTM) appliance's firmware that handled a particular packet. The Drop-Code field provides a reason why the appliance dropped a particular packet. This article provides a list of the Module-ID and Drop-Code numbers along with their meanings.

Module ID and Name
Drop Code ID and Name

RESOLUTION:

Module Id	Module Name
1	adminTools
2	attacks
3	av
4	bwmmgmt
5	CIA
6	cli
7	clients
8	config
9	connectionCache
10	contentFilter
11	dea
12	debug
13	dhcpRelay
14	dhtml
15	fileSystem
16	fwCore
17	ha
18	idp
19	ipHelper
20	ipSec
21	lib
22	log
23	modem
24	netObj
25	network
26	packetFilter
27	policy
28	pppStack
29	RADIUS acct
30	redirector
31	reports
32	resource
33	sarc
34	servers
35	snmp
36	spdpp
37	stateful
38	system
39	TRAV2
40	TSA
41	USERS
42	version
43	wizards
44	wlan
45	wlb
46	zones
47	ARP
48	system stack
49	PPTP
50	L2TP
51	PPP-Dialup
52	IGMP
53	PPPOE
54	NAT
55	anti-spam
56	NetMonitor
57	Mirroring
58	SIP
59	BandOpt
60	GMSFlow server
61	APPFlow server
62	QoS
63	IPv6
64	ICMPv6
65	CFS
66	Cloud GAV
67	AWS API
68	LLDP
69	SSO REST API

Drop Code ID	Drop Code Name
1	PIP handling error in CP
2	PIP handling error in DP
3	Packet on the backup aggregate interface, but no Sonic END can be found.
4	Broadcast packet on the backup redundant port when primary port is up.
5	Packet the redundancy port, but no Sonic END can be found.
6	CP throttled DP for stack traffic
7	Packet dropped due to pass to stack failed.
8	Packet dropped by outputhook.
9	Inter-blade Packet dropped due to CP pass to stack failed.
10	HA active data packet processing failed.
11	Packet dropped due to CP pass to stack failed.
12	Drop IEEE802 BPDU packet Becuase L2 Bridge block non-ip packets.
13	Dispatching IEEE802 BPDU packet failed.
14	IEEE 802 BPDU support module has not been initialized yet.
15	Invalide Ether type for IEEE 802 BPDU packet.
16	Invalide source address for IEEE 802 BPDU packet.
17	Unknown Ether type ingress.
18	Null Ether header egress.
19	Unknown Ether type egress.
20	IPv6 packets not supported.
21	Packet on invalid vlan
22	Packet ingress on invalid interface
23	Packet egress on invalid interface
24	Packet on invalid device
25	Destination MAC address is not our interface
26	Source MAC address is one of our Interface MAC
27	Device is not attached.
28	Packet on invalid svrrp group
29	Invalid HA packet
30	Invalid IPv6 HA packet
31	Invalid HA ARP packet
32	PPPoE discover packet not allowed
33	Invalid HA SDP packet
34	Routing packet not allowed
35	Routing packet not allowed for BGP packet
36	Routing packet not allowed for ZebOS
37	Routing packet not allowed for v6 ZebOS
38	VLAN filtered.
39	Unicast MACADDR not mine
40	L2B Learning-Bridge filtered
41	Invalid NET-ID found on mist if write.
42	Invalid NET-ID found on if write arp real.
43	Invalid NET-ID found on write ip fast.
44	Invalid NET-ID found on if write.
45	Invalid NET-ID found on if write no mbuf.
46	Invalid Run-time NET data on mist if write.
47	Invalid Run-time NET data on if write arp real.
48	Invalid Run-time NET data on write ip fast.
49	Invalid Run-time NET data on if write.
50	Invalid parent Run-time NET data on if write.
51	Invalid Run-time NET data on if write no mbuf.
52	Invalid parent Run-time NET data on if write no mbuf.
53	Unknown ARP type.
54	Arp reply ignored.
55	IP address not for our subnet
56	ARP unexpected link ip
57	ARP source ip not connected
58	NULL source IP address
59	Own gratuitous arp
60	IP address not on our lan subnet
61	Classical mode, ARP bridge not supported
62	ARP proxy, subnet mismatch
63	Not for me.
64	ARP glean disabled.
65	ARP request from stack
66	ARP response from stack
67	ARP fail to resolve from SonicPoint
68	ARP unknown ethernet address format
69	IP length of fragment UDP packets is too big(>65535), drop
70	Invalid TCP Flag(#1)
71	Invalid TCP Flag(#2)
72	Invalid TCP Options(#1)
73	Invalid TCP Options(#2)
74	Invalid TCP Options(#3)
75	Invalid TCP Options(#4)
76	Invalid TCP Stack
77	IP sanity test failed
78	IP sanity test failed in out hook
79	IP advanced sanity test failed
80	Non sonicpoint traffic in wlan zone
81	Multicast spank attack
82	Multicast Data packet dropped
83	Load Balancing Probe error
84	Syn Flood Protection(#1)
85	Syn Flood Protection(#2)
86	Syn Flood Protection(#3)
87	Duplicated in Syn Flood Protection
88	IP source route option found
89	IP record route option found
90	Source IP is subnet broadcast address
91	Invalid connection cache.
92	Invalid connection cache after lookup.
93	Unknown destination(#1)
94	Unknown destination(#2)
95	Unknown destination for bridged bcast pkt
96	Bounce traffic detected
97	Access Rule Policy not found
98	DPI-SSL Enforcement detection
99	AV detection
100	NG AV detection
101	SEC detection
102	DEA detection
103	Bad TFTP packets
104	Enforced firewall rule(#1)
105	Enforced firewall rule(#2)
106	Enforced firewall rule(#3)
107	Enforced Content Filter Policy
108	LICENSE drop
109	IDP detection
110	IDP detection 2
111	IDP detection 3
112	IDP detection DPI-SSL Enforcement
113	IDP detection Relaod Signatures Database
114	IDP detection Attack Prevented(#1)
115	IDP detection Attack Prevented(#2)
116	IDP detection AF SMTP Reply
117	IDP detection Packet Out Of Order
118	IDP detection AF_DROP_PACKET
119	IDP detection AF_SEND_BLOCK_PAGE
120	IDP detection DROP_IP_IDP_AF_SEND_SMTP_REPLY
121	IDP detection DROP_IP_IDP_AF_SEND_HTTP_REDIRECT
122	IDP detection DROP_IP_IDP_AF_SEND_FTP_ERROR
123	IDP detection DROP_IP_IDP_AF_RESET_CONNECTION
124	IDP detection DROP_IP_IDP_DROP_PACKET
125	IDP detection DROP_IP_IDP_DROP_PACKET 2
126	IDP detection DROP_IP_IDP_DROP_PACKET 3
127	IDP detection DROP_IP_IDP_SEND_BLOCK_PAGE
128	IDP detection DROP_IP_IDP_SEND_SMTP_REPLY
129	IDP detection DROP_IP_IDP_SEND_HTTP_REDIRECT
130	IDP detection DROP_IP_IDP_SEND_FTP_ERROR
131	IDP detection DROP_IP_IDP_RESET_CONNECTION
132	IDP detection DROP_IP_IDP_AC_DROP_PACKET
133	IDP detection DROP_IP_IDP_AS_DROP_PACKET
134	IDP detection DROP_IP_IDP_GAV_DROP_PACKET_1
135	IDP detection DROP_IP_IDP_GAV_DROP_PACKET_2
136	IDP detection DROP_IP_IDP_GAV_DROP_PACKET_3
137	IDP detection DROP_IP_IDP_GAV_DROP_PACKET_4
138	IDP detection Fragmentation
139	IDP detection Block Retry Exception
140	IDP detection OOO Exceeded Max
141	IDP detection OOO Out of Buffers
142	IDP detection Keep Original
143	IDP detection SMB out of order read/write
144	IDP detection, bad tcp checksum
145	IDP detection, bad ip checksum in tcp checking
146	IDP detection, bad ip checksum in tcp packet
147	IDP detection, bad udp checksum
148	IDP detection, bad ip checksum in udp checking
149	IDP detection, bad ip checksum in udp packet
150	IDP detection, bad icmp checksum
151	IDP detection, bad ip checksum in icmp checking
152	IDP detection, bad ip checksum in icmp packet
153	Packet to public IP from inside firewall
154	Bad TTL
155	IP check failed
156	Bad source IP(#1)
157	Bad source IP(#2)
158	Bad output source IP
159	Bad destination MAC address
160	Broadcast not allowed on bridge.
161	Antispam: Going to blacklisted server.
162	Going to blacklisted server.
163	coming from blacklisted server.
164	Broadcast traffic not handled.
165	Multicast forwarding not configured
166	Multicast IGMP state not found
167	Multicast IP not in the allowed list
168	NAT64 not support multicast IP
169	Anti-Spam Connection Limit Reached
170	Active/Active DPI drop offload packet
171	UDP Flood Protection
172	ICMP Flood Protection
173	UDP Flood Protection For IPv6
174	ICMPv6 Flood Protection
175	Control Plane Flood Protection
176	Guest Service not allowed
177	WLAN Guest Service not allowed
178	Packet dropped - PDF rules:
179	Unknown Ether type
180	Incorrect IP Version
181	Blacklisted MAC address
182	Greater IP Length
183	Less IP Length
184	TCP packet length mismatch with interface MTU
185	UDP packet length mismatch with interface MTU
186	Other protocol packet length mismatch with interface MTU
187	First fragment length less than minimum IP MTU
188	Wrong fragmentation boundary(#1).
189	Wrong fragmentation boundary(#2).
190	Wrong IP checksum value(#1).
191	Wrong IP checksum value(#2).
192	Wrong TCP Checksum value.
193	Wrong UDP Checksum value.
194	Wrong ICMP Checksum value(#1).
195	Wrong ICMP Checksum value(#2).
196	ICMP High perf error.
197	NULL Udp port number
198	Non PPP-GRE traffic
199	Missing ESP Header
200	Missing AH Header
201	Missing IPCOMP Header
202	Unknown IP protocol type(#1)
203	Unknown IP protocol type(#2)
204	TTL value is zero.
205	TTL value is zero, case two.
206	l2 mcast but dest ip is unicast(#1)
207	l2 mcast but dest ip is unicast(#2)
208	Null Source Zone.
209	Wrong UDP Length.
210	IGMP packets could not be fragmented
211	RECV: IP pkt recvd without IPCP session
212	RECV: IP pkt recvd without contiguous buf
213	RECV: IP pkt recvd without combuf
214	RECV: TNMP can't alloc contiguous buf
215	XMIT: AHDLC encap no buf
216	XMIT: TNMP can't alloc contiguous buf
217	XMIT: Device not ready to forward traffic
218	XMIT: No IPCP session
219	XMIT: IPCP is down
220	XMIT: No Dialup Msg Buffer available
221	Non Zero GIAddr field in DHCP packet from client
222	Source MAC is different from chAddr field in DHCP client packet
223	Iphelper policy not found for DHCP relay.
224	Iphelper cache not found for DHCP.
225	Zero NSID in Netbios request packet.
226	Iphelper policy not found for Netbios.
227	Iphelper cache not found for Netbios.
228	Zero NSID in Netbios reply packet when recv from server.
229	Zero NSID in Netbios reply packet when recv from client.
230	Zero NSID in Netbios reply packet.
231	Netbios client no egress element
232	Netbios server no egress element
233	Netbios client fail to create record
234	DHCP server fail to relay to client
235	DHCP client no egress element
236	DHCP client fail to create record
237	DHCP server, Ingress interface is same as egress interface.
238	Firewall, Ingress interface is same as egress interface.
239	Other Application, Ingress interface is same as egress interface.
240	Ingress interface is same as egress interface.
241	DHCP server packet dropped, RPF check failed.
242	Netbios client packet dropped, RPF check failed.
243	Netbios server packet dropped, RPF check failed.
244	Other Application relay to client failed
245	Other Application no egress element
246	Other Application fail to create record
247	Other Application packet dropped, RPF check failed.
248	Other Application client packet dropped, RPF check failed.
249	Other Application server packet dropped, RPF check failed.
250	Iphelper policy not found for other Application.
251	Iphelper policy not found for other Application when creating record.
252	Combuf Allocation Error.
253	Memory Allocation Error.
254	BSEG Memory Allocation Error.
255	Length Mismatch. Cant forward pkt!!!.
256	Control message header size error.
257	Drop GRE packet as call not yet established.
258	Invalid GRE Flags or Caller ID.
259	Invalid GRE sequence number.
260	No payload for GRE packet.
261	PPTP Tunnel is not up yet.
262	PPTP Client is not enabled.
263	PPTP WAN Write Spin Lock Error.
264	PPTP Spin Lock Error.
265	PPTP Flow Control Queuing Error.
266	Error copying PPTP combuf chain to continuous buffer.
267	Error fragmenting packet that is larger than PPTP MTU.
268	Enforced Dial-on-Data restriction.
269	PPPDU has not completed initialization.
270	Error fragmenting packet that is larger than PPPDU MTU.
271	PPPDU dropped packet because packet that is larger then PPPDU MTU and fragmentation is disabled.
272	Packet received with DF bit Set and large than MTU
273	PPP MLP link is not up/available.
274	PPP link is not up/available.
275	PPP link is not up.
276	PPP link is not opened.
277	The PPP buffer processing failed.
278	LCP: The PPP buffer is truncated.
279	The PPP buffer decompressing failed.
280	NCP: The PPP buffer is truncated.
281	PPP MLP pre-xmit error.
282	PPP MLP encapsulate error.
283	PPP MLP null pointer found.
284	PPP MLP no data packet.
285	PPP MLP link is not opened.
286	PPP MLP buffer decompressing failed.
287	PPP MLP BAP no netif nlinfo.
288	PPP MLP IP no netif nlinfo.
289	PPP MLP NBF no netif nlinfo.
290	PPP MLP VJCOMP no netif nlinfo.
291	PPP MLP VJCOMP decompressing failed.
292	PPP MLP VJUNCOMP no netif nlinfo.
293	PPP MLP VJUNCOMP decompressing failed.
294	PPP MLP IPX no netif nlinfo.
295	PPP MLP IPX decompressing failed.
296	PPP MLP AT no netif nlinfo.
297	PPP MLP 802.1 no netif nlinfo.
298	PPP MLP IBMSR no netif nlinfo.
299	PPP MLP DECLAN no netif nlinfo.
300	PPP MLP BRIDGE no netif nlinfo.
301	PPP MLP NBFCP no netif nlinfo.
302	PPP MLP IPCP no netif nlinfo.
303	The PPP PAP buffer processing failed.
304	The PPP CHAP buffer processing failed.
305	The PPP NCP buffer processing failed.
306	The PPP LCP buffer processing failed.
307	Received PPP pkt but there is no existing PPP information.
308	PPP Network Interface structure is NULL.
309	PPP Virtual Interface structure is NULL.
310	PPP no active link.
311	PPP dropped packet because it contains unknown protocol.
312	PPP dropped packet because of transmission failure.
313	PPP MLP NCP processing failed
314	PPP dropped packet because NCP is not open.
315	PPP dropped packet because the LCP code is unacceptable.
316	PPP dropped packet because the LCP code is unknown.
317	PPP HDLC PPPOE packet has no payload.
318	PPPOE packet has no payload.
319	The PPPOE buffer processing failed.
320	The PPPOE ingress buffer processing failed.
321	The PPPOE egress buffer processing failed.
322	PPPOE packet dropped because of NULL pointer.
323	PPPOE packet dropped because of NULL pointer in DP.
324	PPPOE packet dropped because BSEG allocation failed.
325	PPPOE packet dropped because buf put head action failed.
326	PPPOE packet dropped because PADO create PAD packet failed.
327	PPPOE packet dropped because PADI create PAD packet failed.
328	PPPOE packet dropped because PADR create PAD packet failed.
329	The PPP HDLC ingress buffer processing failed.
330	The PPP HDLC egress buffer processing failed.
331	The PPP HDLC dropped because of NULL pointer.
332	The PPP HDLC dropped because of NULL pointer in DP.
333	PPP HDLC packet dropped because BSEG allocation failed.
334	PPP HDLC packet dropped because buf put head action failed.
335	The PPP HDLC buffer processing failed.
336	The PPP HDLC PPPOE IPCP is not up.
337	The PPP HDLC PPPOE is not ready.
338	The PPP HDLC PPPOE is not ready in DP.
339	The PPPOE IPCP is not up.
340	The PPPOE module is not yet ready.
341	The PPPOE module is not yet ready in DP.
342	The PPPOE module dropped the packet because it was an IPv6 one and not for us
343	The PPP HDLC PPPOE is not enabled.
344	The PPP HDLC PPPOE is not enabled in DP.
345	The PPPOE module is not enabled.
346	The PPPOE module is not enabled in DP.
347	The PPP HDLC PPPOE is not re/started with NTP packets.
348	The PPP HDLC PPPOE is not re/started with NTP packets in DP.
349	The PPPOE module is not re/started with NTP packets.
350	The PPPOE module is not re/started with NTP packets in DP.
351	The PPP HDLC PPPOE is not re/started with non-IP packets.
352	The PPP HDLC PPPOE is not re/started with non-IP packets in DP.
353	The PPPOE module dropped the packet because it was non-IP.
354	The PPPOE module dropped the packet because it was non-IP in DP.
355	PPP HDLC PPPoE packet has unsupported version.
356	PPPoE packet has unsupported version.
357	Received PPP HDLC PPPOE packet for non-existent PPP session.
358	Received PPP HDLC PPPOE packet for non-existent PPP session in DP.
359	Received PPPoE packet for non-existent PPP session.
360	Received PPPoE packet for non-existent PPP session in DP.
361	PPPoE packet in ether type 'session' has an illegal session id.
362	PPPoE packet in ether type 'discovery' has an illegal session id.
363	PPPoE packet has unknown ethertype.
364	PPPoE packet is missing the service name tag.
365	PPPoE packet was not transmitted.
366	PPPoE packet dropped due to failure in adding enet header.
367	L2TP Length Mismatch
368	L2TP UDP checksum error
369	L2TP buffer corrupted
370	L2TP invalid tunnel
371	L2TP invalid session
372	L2TP Invalid source interface
373	L2TP packet not encrypted
374	L2TP Drop PPP control packet, session not established yet
375	L2TP Tunnel/Seesion Invalid
376	L2TP invalid pkt type
377	L2TP invalid control msg
378	L2TP unsupported version
379	L2TP invalid packet
380	L2TP not enabled on this interface
381	L2TP invalid runtime data
382	L2TP connection not UP
383	L2TP memory allocation failed
384	No IPSec tunnel active for this connection ,
385	Invalid L2TP Mode ,
386	Pkt pass to stack failed
387	UDP length greater than 1500
388	IP length greater than 1500
389	Pkt authentication failed
390	SA not found on lookup by SPI after decryption
391	SA not found on lookup by SPI after encryption
392	Failed to copy frag chain to contiguous buffer
393	Pkt with SPI less than 256
394	SA not found on lookup by SPI for inbound packet
395	Pkt length smaller than expected
396	Replayed Pkt
397	Pkt received on invalid interface
398	Expecting udp encapsulation
399	Not expecting udp encapsulation
400	Throughput regulator drop inbound pkt
401	Throughput regulator drop inbound pkt in CP
402	HW processing request error for inbound pkt
403	AH auth failed
404	ESP auth failed
405	ESP decrypt failed
406	Unknown protocol
407	Nested tunnels not supported
408	Pkt is not thru tunnell
409	Pkt is not thru tunnel or l2tp transport mode
410	Pkt not destined to mgmt interface
411	Pkt not destined to mgmt interface in CP
412	Pkt not destined to mgmt interface (non-octeon)
413	Pkt from invalid peer
414	VPN access list check failure
415	VPN access list check failure in CP
416	VPN access list check failure (non-octeon)
417	Pkt does not match traffic selectors
418	Pkt fragment not allowed
419	DHCP pkt invalid IP length
420	Octeon Decrypyion Failed for inbound packet
421	Octeon Decrypyion Failed for inbound packet on DP
422	Octeon Decrypyion Failed replay check
423	Octeon Decrypyion Failed non esp ike
424	Octeon Decrypyion Failed MAC compare
425	Octeon Decrypyion Failed Pad check
426	Octeon Decrypyion Failed policy version check
427	Octeon Decrypyion Failed policy direction check
428	Octeon Decrypyion Failed policy direction check on DP
429	Octeon Decrypyion Failed protocol check
430	Octeon Decrypyion Failed SA check
431	Octeon Decrypyion Failed inner checksum
432	Octeon Decrypyion Failed L4 checksum
433	Octeon Decrypyion Failed soft lifebyte check
434	Octeon Decrypyion Failed hard lifebyte check
435	Octeon Decrypyion Failed illegal conf check
436	Octeon Decrypyion Failed illegal auth check
437	Octeon Decrypyion Failed esp payload length check
438	Octeon Decrypyion Failed esp payload length check on DP
439	Octeon Decrypyion Failed esp payload align check
440	Octeon Decrypyion Failed sequence number check
441	Octeon Decrypyion Failed sequence number check on DP
442	Octeon Decrypyion Failed AH hdr len
443	Octeon Decrypyion Failed Selector check
444	Octeon Decrypyion inbound SA not found
445	Incoming packet's combuf Ip Length Error
446	Combuf Ip Ptr Null Error
447	Multicast sa not found
448	SA not found on lookup by SPI for outbound pkt
449	Incorrect src IP on mgmt SA
450	Throughput regulator drop outbound pkt
451	Throughput regulator drop outbound pkt in CP
452	Insufficient command context for outbound pkt
453	HW processing request error for outbound pkt
454	Software esp decrypt processing request error
455	Software esp auth processing request error
456	Software ah auth processing request error
457	Software null sa processing request error
458	Software processing request error
459	Software malloc combuf fragment error
460	Combuf Fragmentation error
461	Combuf Fragmentation disallowed(#1)
462	Combuf Fragmentation disallowed(#2)
463	Combuf Fragmentation error after encryption
464	Combuf Fragmentation error after encryption in CP
465	Packet is large than MTU
466	IPSec MTU is less than IPv6 standard header size(#1)
467	IPSec MTU is less than IPv6 standard header size(#2)
468	Packet is large than MTU after encryption
469	Packet received with DF bit Set and large than MTU
470	Packet received in IPv6 and large than MTU(#1)
471	Packet received in IPv6 and large than MTU(#2)
472	Sequence overflow while encryting packet
473	Encption error for out going packet
474	Combuf Ip Ptr NUll Error
475	Combuf Ip Length Error
476	Combuf Ipv6 Length Error
477	Next Hope MAC ARP error
478	Next Hope ARP not Resolved
479	Multicast buffer error
480	No IGMP entry found when leaving
481	No IGMP entry found when forwarding
482	No IGMP interface entry found
483	Combuf fields mismatch iplen-enet not equal to etherhdr size
484	IGMP wrong Checksum
485	Multicast not enabled
486	Multicast not enabled(IGMP)
487	IGMPv2 state table error
488	IGMPv3 state table error
489	IGMP message has invalid length
490	IGMP message has invalid destination
491	IGMP message has invalid subtype
492	IGMPv3 message has invalid data length
493	IGMPv3 message has less data record
494	IGMPv3 message is invalid
495	IGMP query message version is not supported
496	IGMP report message version is not supported
497	IGMP message version is unknown
498	IGMP version not supported
499	Multicast RTP stateful failed
500	IP Spoof check failed recorded in module conncache
501	IP Spoof check failed recorded in module network
502	OutGoing interface not available
503	OutGoing interface is invalid
504	OutGoing interface is invalid for V6(#1)
505	OutGoing interface is invalid for V6(#21)
506	OutGoing interface is invalid for V6(#3)
507	OutGoing interface is invalid for V6(#4)
508	OutGoing interface is invalid for V6(#5)
509	OutGoing interface is invalid for V6(#6)
510	OutGoing interface is invalid for V6(#7)
511	OutGoing interface is invalid for V6(#8)
512	Cache pointer is NULL. NAT policy lookup cannot be performed
513	Cache add to hash table failed
514	NAT policy remap failed for original src
515	NAT policy remap failed for original dst
516	NAT policy remap failed for original svc
517	NAT policy remap failed for translated src
518	NAT policy remap failed for translated dst
519	NAT policy remap failed for translated svc
520	NAT policy generate unique remap port failed
521	NAT policy lookup failed. Cache add aborted
522	Connection cache is full
523	Get VPN tunnel interface from policy failed
524	Packet from bounced path from initiator
525	Half open ESP connection
526	Half open IPCOMP connection
527	Allocate memory for connection cache failed
528	Allocate memory for connection cache failed for caller
529	Connection Cache Add Failed
530	NAT Remap: Source IP not found in NAT Policy's Original Source Address Object
531	NAT Remap: Destination IP not found in NAT Policy's Original Destination Address Object
532	NAT Remap: Service not found in NAT Policy's Original Service Object
533	NAT Remap: Obtained invalid offset in original source(#1)
534	NAT Remap: Obtained invalid offset in original source(#2)
535	NAT Remap: Obtained invalid offset in oringinal destination(#1)
536	NAT Remap: Obtained invalid offset in oringinal destination(#2)
537	NAT Remap: Invalid address object type configured for original source(#1)
538	NAT Remap: Invalid address object type configured for original source(#2)
539	NAT Remap: Invalid address object type configured for original destination(#1)
540	NAT Remap: Invalid address object type configured for original destination(#2)
541	NAT Remap: Invalid address object type configured for translated source(#1)
542	NAT Remap: Invalid address object type configured for translated source(#2)
543	NAT Remap: Obtained invalid translated source from original offset(#1)
544	NAT Remap: Obtained invalid translated source from original offset(#2)
545	NAT Remap: Obtained invalid translated destination IP(#1)
546	NAT Remap: Obtained invalid translated destination IP(#2)
547	NAT Remap: Obtained invalid translated destination IP(#3)
548	NAT Remap: Size of translated destination object is zero
549	NAT Remap: Unable to find a host that is alive from translated destination pool
550	NAT Remap: Size of translated service object is zero
551	NAT Remap: Obtained invalid offset in original service
552	NAT Remap: Obtained invalid translated service from original offset(#1)
553	NAT Remap: Obtained invalid translated service from original offset(#2)
554	Packet marked to be dropped on ingress
555	Packet marked to be dropped on WAN ingress
556	Packet marked to be dropped on egress
557	Packet marked to be dropped on WAN egress
558	Packet dropped by BWM CBQ as there is no default queue
559	Packet dropped by BWM CBQ as the queue is full
560	Packet dropped by BWM ACKQ as the queue is full
561	Packet dropped by BWM CBQ as the queue allocation failed
562	Packet dropped by BWM ACKQ as the queue allocation failed
563	Packet dropped by BWM CBQ as enqueue failed
564	Packet dropped by BWM ACKQ as no ACKQ element
565	Packet dropped by BWM ACKQ as there is no default queue
566	Packet dropped due to BWM spin lock error
567	MAC-IP Anti-spoof check enforced for hosts.
568	MAC-IP Anti-spoof cache not found for this router.
569	MAC-IP Anti-spoof cache found, but it is not a router.
570	MAC-IP Anti-spoof cache found, but it is blacklisted device.
571	MAC-IP Anti-spoof cache found, but the spoof code is unknown.
572	Packet dropped - IDP failure on sslspy packet
573	Packet dropped - Content filter failure on sslspy packet
574	Packet droppedd - Connection reseted on sslspy packet
575	Packet dropped - failed processing
576	Packet dropped - failed registration
577	Packet dropped - bad SIP packet
578	Packet dropped - new SIP flow with bad length
579	Packet dropped - failed new SIP flow processing
580	Packet dropped - failed SIP pre-processing
581	Packet dropped - failed SIP post-processing
582	Packet dropped - unknown SIP request method
583	Packet dropped - unknown SIP response method
584	Packet dropped - unknown SIP message type
585	Packet dropped - unknown Call-ID in method
586	Packet dropped - invalid SIP method to create call-id
587	Packet dropped - not allowed to create call-id
588	Packet dropped - invalid Contact:
589	Packet dropped - invalid Call-ID:
590	Packet dropped - invalid Via:
591	Packet dropped - invalid From: in SIP request
592	Packet dropped - invalid From: in SIP response
593	Packet dropped - invalid To: in SIP request
594	Packet dropped - invalid To: in SIP response
595	Packet dropped - invalid RecordRoute: in SIP request
596	Packet dropped - invalid RecordRoute: in SIP response
597	Packet dropped - invalid Maddr: in SIP request
598	Packet dropped - invalid Maddr: in SIP response
599	Packet dropped - invalid Route:
600	Packet dropped - invalid ACK
601	Packet dropped - invalid method
602	Packet dropped - invalid request method
603	Packet dropped - invalid ReferredBy:
604	Packet dropped - failed to modify ReferredBy:
605	Packet dropped - SIP invite failed to modify ReferredBy:
606	Packet dropped - SIP request failed to modify ReferredBy:
607	Packet dropped - invalid ReferredTo:
608	Packet dropped - invalid BYE
609	Packet dropped - invalid BYE response
610	Packet dropped - invalid CANCEL
611	Packet dropped - invalid CANCEL response
612	Packet dropped - invalid INVITE
613	Packet dropped - invalid INVITE response
614	Packet dropped - invalid REGISTER
615	Packet dropped - SDP body not found
616	Packet dropped - bad SDP content length
617	Packet dropped - bad SDP c=
618	Packet dropped - mismatched SDP c=
619	Packet dropped - bad SDP c= IP
620	Packet dropped - bad SDP m=
621	Packet dropped - failed to read content length in SDP processing
622	Packet dropped - failed to update content length in SDP processing
623	Packet dropped - failed SDP processing
624	Packet dropped - Geo-IP block for init country, country loc: Backendtree
625	Packet dropped - Per Policy Geo-IP block for init country, country loc: Backendtree
626	Packet dropped - Geo-IP block for init country, country loc: Frontendtree
627	Packet dropped - Per Policy Geo-IP block for init country, country loc: Frontendtree
628	Packet dropped - Geo-IP block for new lookup init country
629	Packet dropped - Geo-IP block for existing init country, country loc: FirewallDefaultTree
630	Packet dropped - Per Policy Geo-IP block for existing init country, country loc: FirewallDefaultTree
631	Packet dropped - Geo-IP block for existing init country, country loc: CustomTree
632	Packet dropped - Per Policy Geo-IP block for existing init country, country loc: CustomTree
633	Packet dropped - Geo-IP block for resp country, country loc: FirewallDefaultTree
634	Packet dropped - Per Policy Geo-IP block for resp country, country loc: FirewallDefaultTree
635	Packet dropped - Geo-IP block for resp country, country loc: CustomTree
636	Packet dropped - Per Policy Geo-IP block for resp country, country loc: CustomTree
637	Packet dropped - Geo-IP block for new lookup resp country
638	Packet dropped - Geo-IP block for existing lookup resp country, country loc: FirewallDefaulTree
639	Packet dropped - Per Policy Geo-IP block for existing lookup resp country, country loc: FirewallDefaulTree
640	Packet dropped - Geo-IP block for existing lookup resp country, country loc: CustomTree
641	Packet dropped - Per Policy Geo-IP block for existing lookup resp country, country loc: CustomTree
642	Packet dropped - BOTNET block for init command and control center,Botnet source: FirewallDefaulTree
643	Packet dropped - BOTNET block for init command and control center,Botnet source: CustomTree
644	Packet dropped - BOTNET block for init command and control center,Botnet source: DynamicTree
645	Packet dropped - BOTNET block for new lookup init command and control center, Botnet source: FirewallDefaulTree
646	Packet dropped - BOTNET block for new lookup init command and control center, Botnet source: CustomTree
647	Packet dropped - BOTNET block for new lookup init command and control center, Botnet source: DynamicTree
648	Packet dropped - BOTNET block for new lookup init command and control center, Botnet DB not downloaded
649	Packet dropped - BOTNET block for resp command and control center, Botnet source: FirewallDefaulTree
650	Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: CustomTree
651	Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: DynamicTree
652	Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: FirewallDefaulTree
653	Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: CustomTree
654	Packet dropped - BOTNET block for new lookup resp command and control center, Botnet source: DynamicTree
655	Packet dropped - BOTNET block for new lookup resp command and control center, Botnet DB not downloaded
656	Packet dropped - Packet rate limit for IPHelper packets
657	Packet dropped - TCP sequence out of order
658	Packet dropped - cache PTR is null in SPI (#1)
659	Packet dropped - cache PTR is null in SPI (#2)
660	Packet dropped - cache PTR is null in SPI (#3)
661	Packet dropped - cache PTR is null in SPI (#4)
662	Packet dropped - cache PTR is null in SPI (#5)
663	Packet dropped - cache PTR is null in SPI (#6)
664	Packet dropped - cache PTR is null in SPI (#7)
665	Packet dropped - handle FTP stream fail
666	Packet dropped - handle PPTP control stream fail
667	Packet dropped - handle real audio stream fail
668	Packet dropped - handle oracle stream fail
669	Packet dropped - handle MSN stream fail
670	Packet dropped - fail to do reassemble for stateful packet
671	Packet dropped - DNS Rebind attack
672	Packet dropped - L2B filtering source is our IP
673	Packet dropped - L2B filtering dst is same link
674	Packet dropped - L2B drop non-IP packet
675	Packet dropped - Fail to find tunnel bound interface
676	Packet dropped - Fail to do the packet init for zebos pkt over VPN
677	Packet dropped - Ping of Death attacks
678	Packet dropped - ICMP on non master blade
679	Packet dropped - IPSec invalid dst blade
680	Packet dropped - fails to handle IPSec pkt
681	Packet dropped - fails to do reassemble for decrypted IPSec pkt
682	Packet dropped - fails to handle this GMS tunnel pkt
683	Packet dropped - fails to handle DHCP over VPN pkt
684	Packet dropped - fails to handle DHCP over VPN output pkt
685	Packet dropped - fails to handle IPSec PMTU pkt
686	Packet dropped - fails to handle L2TP pkt(#1)
687	Packet dropped - fails to handle L2TP pkt(#2)
688	Packet dropped - fails to handle L2TP pkt(#3)
689	Packet dropped - fails to handle L2TP pkt(#4)
690	Packet dropped - fails to handle multicast pkt
691	Packet dropped - unsolicit ICMP message
692	Packet dropped - cache lookup fail and drop the pkt
693	Packet dropped - TCP reset and remove cache
694	Packet dropped - Wiremode Config has changed recently and is INVALID
695	Packet dropped - Cache add failed
696	Packet dropped - Duplicated in cache add
697	Packet dropped - cache entry is deleted
698	Packet dropped - cache entry is reused
699	Packet dropped - cannot handle this pkt in DP
700	Packet dropped - connection to be closed
701	Packet dropped - BWM dropped the pkt
702	Packet dropped - handle DNS dropped the pkt
703	Packet dropped - DNS sinkhole dropped the pkt
704	Packet dropped - handle DNS Sinkhole forged ipv4 pkt
705	Packet dropped - handle DNS pkt,transmitting via suspicious DNS tunnel
706	Packet dropped - handle SSLVPN dropped the pkt
707	Packet dropped - invalid PPTP control message
708	Packet dropped - invalid PPTP data message
709	Packet dropped - drop land attack pkt
710	Packet dropped - drop smurf amp pkt
711	Packet dropped - drop Web CFS DNS reply pkt
712	Packet dropped - drop Web CFS reply pkt
713	Packet dropped - drop N2H2 reply pkt
714	Packet dropped - drop WebSense reply pkt
715	Packet dropped - drop GAV cloud response pkt
716	Packet dropped - drop GAV cloud request pkt
717	Packet dropped - DHCP record Iface scope failed
718	Packet dropped - send to DHCP server failed
719	Packet dropped - invalid DHCP discovery pkt(#1)
720	Packet dropped - invalid DHCP discovery pkt(#2)
721	Packet dropped - IPSec pkt received on wrong blade
722	Packet dropped - IPSec pkt received on wrong blade in CP
723	Packet dropped - IPSec handle DHCP relay out fails
724	Packet dropped - IPSec handle DHCP out fails
725	Packet dropped - Denied by SSLVPN per user control policy
726	Packet dropped - Policy drop
727	Packet dropped - Guest service drop pkt
728	Packet dropped - WLAN SSLVPN enforcement drop pkt
729	Packet dropped - WLAN restrict VPN traversal
730	Packet dropped - WLAN Guest service drop pkt
731	Packet dropped - VPN only on WLAN
732	Packet dropped - drop received syslog pkt
733	Packet dropped - drop bounce land attack pkt
734	Packet dropped - drop bounce same link pkt
735	Packet dropped - firewall deactivated
736	Packet dropped - cache add cleanup drop the pkt
737	Packet dropped - outbound interface is unavailable
738	Packet from bounced path (from responder)
739	Packet dropped - outbound interface is unavailable (pkt from responder)
740	Packet dropped - TCP option (SACK Permitted) not allowed in non-SYN segment
741	Packet dropped - TCP option (SACK Permitted) length is invalid
742	Packet dropped - TCP option (MSS) not allowed in non-SYN segment
743	Packet dropped - TCP option (MSS) length is invalid
744	Packet dropped - TCP option (SACK) not allowed in non-SYN segment
745	Packet dropped - TCP option (SACK) length is invalid
746	Packet dropped - TCP SYN cookie is invalid
747	Packet dropped - connection cache setup failed
748	Packet dropped - policy check failed
749	Packet dropped - invalid TCP flag combination
750	Packet dropped - TCP SYN cookie is invalid (protect 3)
751	Packet dropped - pkt from initiator on an incomplte connection
752	Packet dropped - pkt dropped in handle proxied connection
753	Packet dropped - TCP init failed in IDP
754	Packet dropped - UDP source port is zero in IDP
755	Packet dropped - Descheduling queue is full
756	IPv6 Internal Error(#1)
757	IPv6 Internal Error(#2)
758	IPv6 Internal Error(#3)
759	IPv6 Internal Error(#4)
760	IPv6 Internal Error(#5)
761	IPv6 Internal Error(#6)
762	IPv6 Internal Error(#7)
763	IPv6 Internal Error(#8)
764	IPv6 Internal Error(#9)
765	IPv6 Internal Error(#10)
766	IPv6 Internal Error(#11)
767	IPv6 Internal Error(#12)
768	IPv6 Internal Error(#13)
769	IPv6 Internal Error(#14)
770	IPv6 Internal Error(#15)
771	IPv6 Internal Error(#16)
772	IPv6 Internal Error(#17)
773	IPv6 packet dropped due to IPv6 traffic processing is disabled on this firewall
774	IPv6 packet with option RH.
775	IPv6 packet with option HBH/DH.
776	IPv6 next header validation failed.
777	IPv6 virtual firewall ID not found.
778	IPv6 virtual firewall ID not in forwarding state.
779	IPv6 packets on non IPv6 enabled interface(#1).
780	IPv6 packets on non IPv6 enabled interface(#2).
781	IPv6 packets on non IPv6 enabled interface(#3).
782	IPv6 packets on non IPv6 enabled interface(#4).
783	IPv6 interface state is DOWN(#1).
784	IPv6 interface state is DOWN(#2).
785	Source Zone is not defined.
786	Invalid TCP flag detected.
787	Firewall rule applied(#1).
788	Firewall rule applied(#2).
789	Firewall rule applied(#3).
790	Firewall rule applied(#4).
791	Connection cache add failed.
792	Cleanup needed for connection cache failed .
793	Maximum hop allowed for this IPv6 packet has reached.
794	IPv6 pkt not for us.
795	Src IP as link local or multicast but pkt not for us.
796	SRC RPF Failed
797	Pkt need redirection, not supported
798	Stack destined packet, cant handle for now.
799	IPv6 packet with ICMPv4.
800	Interface has no IP addresses.
801	Dest IP as solNode mcast but not for us
802	Src IP is not valid
803	Source IP is spoofed
804	Null Dst IP
805	Bad src or dst IP
806	Null tunnel Dst IP
807	NULL src IP, not supported(#1)
808	NULL src IP, not supported(#2)
809	Src IP is non unicast pkt
810	Dst route not found
811	Dst IP is LLU but not for us
812	Dst IP is MC but not for us
813	Dst IP is non unicast pkt
814	IP address is site-local address
815	NDP packet's hop limit is less than 255
816	IF is non ready for V6 muticast pkt
817	Dst IF same as SRc IF, redirect not supported
818	Dst IF is not V6 enabled
819	AH and ESP extn hdr found, dropped
820	ipLen mismatch with payloadLen
821	No 6to4 relay Ip specified
822	Non 2002:: src ip packet destined for 6to4 relay
823	invalid unicast src ip packet destined for 6to4 relay
824	invalid unicast dest ip packet destined for 6to4 relay
825	Remote IPv4 address is our IP(#1)
826	Remote IPv4 address is our IP(#2)
827	Remote IPv4 address is non unicast(#1)
828	Remote IPv4 address is non unicast(#2)
829	Remote IPv4 address is non unicast(#3)
830	Remote IPv4 address is non unicast(#4)
831	Incoming Ipv6 tunnel pkt failed for IPspoof
832	Incoming Ipv6 tunnel pkt from stack
833	Incoming IPv6 tunnel pkt failed for IPspoof
834	Non unicast pkt trying for tunnel to relay
835	pkt in from tunnel and going back to tunnel
836	pkt in from relay and going back to relay
837	Connection initiated from WAN ZONE, not allowed
838	Connection initiated from WLAN ZONE, not allowed
839	No cache but tcp packet with no syn
840	Not finished to resolve ngbr
841	failed to resolve ngbr
842	pkt destined to us, management via IPv6 not allowed
843	Source IP is a multicast address
844	DHCPv6 packets from stack should not be sent from SLAVE blades
845	pkt dropped due to ip fragmentation length is smaller than Minimum IPV6 MTU(1280 Bytes)
846	pkt dropped due to ndpp rules(#1)
847	pkt dropped due to ndpp rules(#2)
848	pkt dropped due to ndpp loopback src
849	pkt dropped due to cache pointer is NULL
850	IPv6 address is reserved
851	IPv6 Packet with bad extension header order
852	invalid net id found on mist if write v6
853	invalid runtime found on mist if write v6
854	invalid netid found on if write v6
855	invalid runtime found on if write v6
856	Invalid TCP Flag for IPv6
857	Multicast spank attack for IPv6
858	Invalid connection cache after lookup for IPv6.
859	Access Rule Policy not found for IPv6
860	IPv6 check failed
861	Blacklisted MAC address for IPv6
862	Wrong IPv6 Length
863	Wrong fragmentation boundary for IPv6.
864	Unknown DHCPv6 port number
865	Unknown IPv6 protocol type(#1)
866	Unknown IPv6 protocol type(#2)
867	IPv6 sanity test failed(#1)
868	IPv6 sanity test failed(#2)
869	Null Source Zone(#1).
870	Null Source Zone(#2).
871	Packet dropped - drop IPv6 land attack pkt(#1)
872	Packet dropped - drop IPv6 land attack pkt(#2)
873	Syn Flood Protection for IPv6(#1)
874	Syn Flood Protection for IPv6(#2)
875	Unknown IPv6 destination(#1)
876	Unknown IPv6 destination(#2)
877	Unknown IPv6 destination(#3)
878	Enforced firewall rule for IPv6(#1)
879	Enforced firewall rule for IPv6(#2)
880	IDP detection for DPI-SSL Enforcement
881	IDP detection for AV
882	IDP detection for NG AV
883	IDP detection for Sec
884	IDP detection for generic
885	IP address is dns sinkhole forged ipv6 address
886	internal ICMP module error
887	Not allowed to reply on ping pkt
888	Parsing inner ICMPv6 error payload as non UDP/ICMPv6
889	Parsing inner ICMPv6 error payload as non UDP/ICMPv6
890	Wrong hopLimit in the IP header
891	ICMP echo reply not allowed on dst Ip as mcast.
892	incoming interface is not v6 enabled
893	src ip not in our subnet
894	unknown icmp type
895	fragmented icmpv6 packet
896	icmpv6 packet from tunnel interface
897	echo packet with null srcip
898	pkt with null srcIp not directed at multicast dst ip
899	Sol message srcIP is null but option is present dropped
900	reply option received.
901	Unknown option.
902	No option but dstIP is multicast.
903	bad length in ngbr sol msg.
904	bad icmp len
905	bad length in rtr sol msg, dropped.
906	Unknown option, discarded.
907	target option received, discarded.
908	bad length in ngbr adv msg, dropped.
909	Unknown option, discarded.
910	source option received, discarded.
911	icmpv6 smurf amplification, dropped.
912	RA is not allowed
913	NDP packet is not for us
914	Packet dropped - handle DNS Proxy query dropped the pkt
915	Packet dropped - handle DNS Proxy reply dropped the pkt
916	IPv6 MAC-IP Anti-spoof check enforced for hosts.
917	IPv6 MAC-IP Anti-spoof cache not found for this router.
918	IPv6 MAC-IP Anti-spoof cache found, but it is not a router.
919	IPv6 MAC-IP Anti-spoof cache found, but it is blacklisted device.
920	Packet dropped - handle IPv6 DNS Sinkhole dropped the pkt
921	SDP Packet dropped - SonicPoint/SonicWave management on zone is disabled

Capture Cloud Platform

Federal

Partner Portal

Support Portal

Capture Cloud Platform

Federal

Partner Portal

Support Portal

Explanation Of Drop Code And Module-ID Values In Packet Capture Output (SonicOS 6.5.4.5)

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Not Finding Your Answer?

Stay In Touch

Explanation Of Drop Code And Module-ID Values In Packet Capture Output (SonicOS 6.5.4.5)

Categories

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Not Finding Your Answer?

Stay In Touch