SECE/3/ARPS_DROP_PACKET_LENTH

Message

SECE/3/ARPS_DROP_PACKET_LENTH: Invalid packet length. (PacketLength=[ULONG], SourceMAC=[STRING], SourceIP=[STRING], SourceInterface=[STRING], DropTime=[STRING])

Description

The length of the ARP packet is invalid.

Parameters

Parameter Name	Parameter Meaning
PacketLength	Indicates the length of the ARP packet. The length ranges from 60 to 1518.
SourceMAC	Indicates the source MAC address of the ARP packets.
SourceIP	Indicates the source IP address of the ARP packets.
SourceInterface	Indicates the source interface of the ARP packets.
DropTime	Indicates the packet discard time.

Possible Causes

The device receives an ARP packet of invalid length.

Procedure

Find out the interface that initiates the attack according to the SourceInterface field in the alarm message.
Find out the user who sends attack packets according to the SourceMAC field.
Check whether the user host runs abnormally; if not, the user may be an attacker. In this case, you can take measures to prevent the user, for example, disconnect the user from the network.