SECE/3/ARPS_DROP_PACKET_SRC_MAC

Message

SECE/3/ARPS_DROP_PACKET_SRC_MAC: Invalid source mac address. (SourceMAC=[STRING], SourceIP=[STRING], SourceInterface=[STRING], DropTime=[STRING])

The source MAC address in the ARP packet is invalid.

Parameter Name	Parameter Meaning
SourceMAC	Indicates the source MAC address of the ARP packets.
SourceIP	Indicates the source IP address of the ARP packets.
SourceInterface	Indicates the source interface of the ARP packets.
DropTime	Indicates the packet discard time.

The device receives an ARP packet with invalid source MAC address.

Find out the interface that initiates the attack according to the SourceInterface field in the alarm message.
Find out the user who sends attack packets according to the SourceMAC field.
Check whether the user host runs abnormally; if not, the user may be an attacker. In this case, you can take measures to prevent the user, for example, disconnect the user from the network.