Explanation
An ICMP error packet did not match a filter rule
but was permitted based on information in the embedded packet that
caused the error. For an inbound packet, the packet was received
over a tunnel and the selectors in the embedded headers matched the
selectors for the tunnel. For an outbound packet, the original packet
for which the ICMP message was generated was received over a tunnel
and the outbound ICMP packet will be encapsulated using this tunnel.
For this message to be issued, the IPFilterPolicy policy must have
filter logging enabled.
In the message text:
- timestamp
- The stack timestamp that indicates the time at which the IP packet
was handled by the stack. This time is retrieved from the system time-of-day
clock, which usually reflects coordinated universal time (UTC). This
timestamp might be different than the syslogd message timestamp.
- sipaddr
- The source IP address.
- dipaddr
- The destination IP address.
- proto
- The protocol from the packet. Possible values are:
- type
- The ICMP or ICMPv6 type.
- code
- The ICMP or ICMPv6 code.
- ifcaddr
- The interface address over which the packet was received or sent.
- dir
- The possible values are I if the packet is inbound
or O if the packet is outbound.
- secclass
- The security class assigned to the interface. Security class
is a numeric value in the range 0 - 255.
- dest
- The possible values are local if the destination
is local or routed if the destination is being routed.
- len
- The packet length.
- tunID
- The tunnel ID.
- ifcname
- The interface name.
- embsipaddr
- The source IP address from the embedded IP header.
- embdipaddr
- The destination IP address from the embedded IP header.
- embproto
- The protocol from the embedded IP header. Possible values are:
- ICMP(1)
- IGMP(2)
- IP(4)
- TCP(6)
- UDP(17)
- ESP(50)
- AH(51)
- ICMPv6(58)
- OSPF(89)
- IPIP(94)
- MIPV6(135)
- Unknown
- The protocol number
- tag1
- The tag1 value varies depending on the proto value.
- If the proto value is ICMP or ICMPv6, the tag1 value
is type= followed by the ICMP or ICMPv6 type.
- If the proto value is TCP or UDP, the tag1 value
is sport= followed by the source port.
- If the proto value is OSPF, the tag1 value
is type= followed by the type.
- If the proto value is MIPv6, the tag1 value
is type= followed by the typ.
- If the proto value is any value not previously
mentioned, the tag1 value is -= which indicates
that the data is not applicable.
- tag2
- tag2 value varies depending on the proto value.
- If the proto value is ICMP or ICMPv6, the tag2 value
is code= followed by the ICMP or ICMPv6 code.
- If the proto value is TCP or UDP, the tag2 value
is dport= followed by the destination port.
- If the proto value is any value not previously
mentioned, tag2 is -= which indicates that the
data is not applicable.
- tag3
- tag3 value varies depending on the proto value
and direction.
- If the proto value is TCP or UDP, the direction
is inbound, and the port has been translated by the CommServer NAT
Traversal function, the tag3 value is origport=
followed by the original source port.
- If the proto value is TCP or UDP, the direction
is outbound, and the port has been translated by the CommServer NAT
Traversal function, the tag3 value is origport= followed
by the original destination port.
- If the proto value is any value not previously
mentioned, the tag3 value is -= which indicates
that the data is not applicable.
System action
TCP/IP processing continues.
Operator response
System programmer response
User response
Problem determination
Source
z/OS® Communications
Server TCP/IP: TRMD
Module
Routing code
Not applicable for syslog message.
Descriptor code
Not applicable for syslog message.
Automation
Example
EZD0836I Packet permitted: 09/11/2007 15:23:06.95 sipaddr= 10.11.2.4 dipaddr= 10.81.2.2 proto= icmp(1)
type= 3 code= 1 Interface= 10.11.2.4 (O) secclass= 255 dest= local len= 56 tunnelID= Y4
ifcname= MPC4124L embsipaddr= 10.81.2.2 embdipaddr= 10.81.8.8 embproto= udp(17) sport= 1050
dport= 10173 -=