Large UDP Fragmented Datagram

Last updated on:

Applies to: Log360Log360 Cloud

About the rule

Rule Type

Standard

Rule Description

Flags oversized fragmented UDP packets which may be used to exhaust system resources during reassembly.

Severity

Trouble

Rule Requirement

Criteria

Action1: actionname = "Large UDP Fragmented Datagram" select Action1.HOSTNAME,Action1.IDS_NAME,Action1.IDS_STATUS,Action1.EVENTID,Action1.SOURCE_IP,Action1.DEST_IP,Action1.DESCRIPTION,Action1.MESSAGE

Detection

Execution Mode

realtime

Log Sources

SonicWall