SECE/3/ARPS_DROP_PACKET_HDADDR_LEN

Message

SECE/3/ARPS_DROP_PACKET_HDADDR_LEN: Invalid hard address length. (HardAddressLength=[ULONG], SourceMAC=[STRING], SourceIP=[STRING], SourceInterface=[STRING], DropTime=[STRING])

Description

The hardware address length in the ARP packet is invalid.

Parameters

Parameter Name	Parameter Meaning
HardAddressLength	Indicates the MAC address length of the ARP packets.
SourceMAC	Indicates the source MAC address of the ARP packets.
SourceIP	Indicates the source IP address of the ARP packets.
SourceInterface	Indicates the source interface of the ARP packets.
DropTime	Indicates the packet discard time.

Possible Causes

The device receives an ARP packet with the hardware address that has an invalid length.

Procedure

Find out the interface that initiates the attack according to the SourceInterface field in the alarm message.
Find out the user who sends attack packets according to the SourceMAC field.
Check whether the user host runs abnormally; if not, the user may be an attacker. In this case, you can take measures to prevent the user, for example, disconnect the user from the network.