what is "catch-all error"

[emily]

I got a lot of error message from my syslog server , I check FWSM system message got explanation "catch-all error" anyone can tell me what's catch-all error ? What reson production ???

Feb 10 10:37:51 172.19.239.243 %FWSM-6-302014: Teardown TCP connection 219025269 faddr 172.19.100.6/8101 gaddr 172.19.103.30/3636 laddr 172.19.103.30/3636 duration 0:00:01 bytes 142 (Unknown)

Feb 10 10:37:51 172.19.239.243 %FWSM-6-302014: Teardown TCP connection 219025270 faddr 172.19.100.6/8101 gaddr 172.19.103.30/3637 laddr 172.19.103.30/3637 duration 0:00:01 bytes 142 (Unknown)

Feb 10 10:37:52 172.19.239.243 %FWSM-6-302014: Teardown TCP connection 219025272 faddr 172.19.100.6/8101 gaddr 172.19.103.30/3639 laddr 172.19.103.30/3639 duration 0:00:01 bytes 142 (Unknown)

Feb 10 10:37:52 172.19.239.243 %FWSM-6-302014: Teardown TCP connection 219025273 faddr 172.19.100.6/8101 gaddr 172.19.103.30/3640 laddr 172.19.103.30/3640 duration 0:00:01 bytes 142 (Unknown)

[pkhatri]

Hi,

That means that an error occured and the TCP connection was terminated but the error is not one of the following:

Reset-I

Reset-O

TCP FINs

FIN Timeout

SYN Timeout

Xlate Clear

Deny

SYN Control

Uauth Deny

It could be some of DoS attack sending invalid TCP packets that the FWSM is dropping...

Hope that helps - pls rate the post if it does.

Paresh