IDS scan-detection can consume large amounts of storage if HIGH was specified as the scan sensitivity for high usage ports or if the port is undergoing a flooding attack. If the storage used to track the source IP addresses exceeds 1 MB of storage, scan processing will inform the installation. This information can be used with message EZZ4364I to determine if scan detection is the cause of a storage constraint.

nbrmeg is the number of megabytes of storage exceeded. The message is issued at 1 MB, 2 MB and power of 2 MB increments (for example, 1 MB, 2 MB , 4 MB, 8 MB, and so forth).

nbrsip is the number of source IP addresses currently being tracked by scan detection.