packet size too big in fsso log. Should I worry?

Author
zeki893
Bronze Member
  • Total Posts : 24
  • Scores: 0
  • Reward points: 0
  • Joined: 2013/04/03 03:12:59
  • Status: offline
2017/08/11 22:01:18 (permalink)
0

packet size too big in fsso log. Should I worry?

Anything I should be concerned about?
 
08/11/2017 20:56:04 [13104] FortiGate:172.17.0.2 on socket (8988) disconnected
08/11/2017 20:56:04 [11392] packet size too big:1811942144
#1

1 Reply Related Threads

    xsilver_FTNT
    Platinum Member
    • Total Posts : 209
    • Scores: 42
    • Reward points: 0
    • Joined: 2015/02/02 03:22:58
    • Status: offline
    Re: packet size too big in fsso log. Should I worry? 2017/08/15 07:57:09 (permalink)
    0
    Hi,
    it looks like something is trying to connect to local collector port 8988 and connection is refused and terminated by FortiGate.
    Any time pattern ? Any network scanner operating in your network ? Or just miss-configured app trying to use the port ?
    I'd go after time patterns first, then scan/listen on the net for any other scanner activities.
    Best regards,
    Tomas

    Kind Regards,
    Tomas
    #2
    Jump to:
    © 2017 APG vNext Commercial Version 5.5