Hi I have a lot of this logs in my

[khaledeshah]

Hi
I have a lot of this logs in my PIX :
Invalid transport field for protocol=6, from x.x.x.x/0 to y.y.y.y/1080
Where x.x.x.x & y.y.y.y are different in each log
what does this logs mean ?

 

[yizhar]

HI.

Please post the complete message, including message ID, and more info like what is the pix OS version.

Do you get complains from clients not able to do something, or you only see the logs but everything seems to work fine?

Anyway, it seems to me like somekind of an attack.

You should also try to enable the limitted built in IDS of the pix.
Look for the "ip audit" command reference, it goes like this:

ip audit name attack1 attack action alarm drop reset
ip audit name info1 info action alarm
ip audit interface outside attack1
ip audit interface outside info1

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/gl.htm#36470

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar