Buffer overflow transferring message data between the stack and TRMD
The following messages in syslog indicate that IDS events
or statistics are being generated at a rate that is overflowing internal
buffers used to relay the messages from the stack to TRMD. These
messages are a warning that actual event or statistics messages are
missing from the syslog. If these messages occur frequently, then
IDS policy changes are necessary to reduce the amount of IDS logging,
or the amount of statistics information, being generated.
EZZ9325I TRMD Log records missing: logtype,logmissing
EZZ9326I TRMD Statistics records missing: stattype,statmissing A large number of syslogd messages can be generated for the global TCP stall attack type if the syslogd detailed parameter is specified in the configuration. A message (either EZZ8673I or EZZ8674I) is generated for each stalled connection when a global TCP stall condition is detected and syslogd detail information has been requested. Consider updating your policy to turn off the syslogd detailed parameter for the global TCP stall attack type if these messages are causing a buffer overflow.