SECE/4/ILLEGAL_IP_DROP_STAT

Message

SECE/4/ILLEGAL_IP_DROP_STAT: There are [STRING1] IP packets dropped due to invalid destination IP addresses. (ZeroIp=[STRING], LoopBackIp=[STRING], ClassEIp=[STRING])

Description

The device discards IP packets with invalid destination IP addresses and collects statistics on these packets.

Parameters

Parameter Name	Parameter Meaning
[STRING1]	Total number of discarded IP packets with invalid destination IP addresses.
ZeroIp	Number of IP packets destined to 0.0.0.0.
LoopBackIp	Number of IP packets destined to a loopback address.
ClassEIp	Number of IP packets destined to a Class E IP address.

Possible Causes

The drop illegal-dst-ip enable command has been run on the device to discard IP packets with invalid destination IP addresses. This log records the statistics about the discarded IP packets.

The following three types of IP addresses are invalid destination IP addresses and should not be used on the network:

IP address with all 0s, that is, 0.0.0.0
IP addresses with a network ID of 127, that is, 127.0.0.0 to 127.255.255.255
Class E IP addresses except 255.255.255.255, that is, 240.0.0.0 to 255.255.255.254

Procedure

Check whether the device is attacked. If so, eliminate the sources where attacks are initiated.
Collect log information and configuration information, and then contact technical support personnel.You can collect diagnostic information using the display diagnostic-information command.