It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Application Firewall

System Log Messages

  • Last updated on

The following is the list of system log messages, which includes the following:

  • Log Category - The Severity Level of the log.
  • Log ID - The Event ID of the log.
  • Log Message - Description about the log.

 

Log CategoryLog IDLog Message
Data Path Monitoring (STM)
LOG_NOTICE1003Mem Start: SCB <start-address>, Low <start-address>, High <start-address>
LOG_CRIT1013System startup failed at initializing: <stage>. Switching to maintenance mode
LOG_CRIT1014Shutting down all services
LOG_NOTICE1014Shutting down services completed
LOG_NOTICE1015Restarting services
LOG_NOTICE1015Restarting services completed
LOG_NOTICE1024Activate: Default boot image set to <Image Name>
LOG_EMERG1105<Process> is not present
LOG_NOTICE1111Process mon /proc error ret =<retcode> comm=<commandid> pid=<process-id>
LOG_ALERT1119(System is getting real hot) or (Possible overheating at device <device-name> temp reading=<temp in 'C>)
LOG_ALERT1125SBC PII temp overshoot.
LOG_ALERT1126System highest temp has reached = <External temp 'C> <Internal Temp in 'C>
LOG_ALERT1128In Fan Group <Group ID> Fan <Fan ID> is Running at <Current Value> rps which is less than expected <default value>
LOG_NOTICE1130HW: Changing FAN speed <Old Value> -> <New Value> TempReadings (<Max internal 'C> <Max External temp in 'C>])
LOG_NOTICE1203SBC FAN <fan-name> detected rpm = <rpm value>
Threshold Controlled (THRSHLD)
LOG_ALERT50001Threshold Level crossed.
LOG_ALERT50002Threshold Level crossed on a service.
LOG_ALERT50003System critical temp has reached.
LOG_ALERT50004System highest temp has reached.
LOG_ALERT50005One of the CPU/System fans is dead.
LOG_ALERT50007Firmware storage exceeds 85%.
LOG_ALERT50008Mail storage exceeds 85%.
LOG_ALERT50009Log storage exceeds 85%.
LOG_ALERT50010One of the RAID arrays is degrading.
SERVICE
LOG_NOTICE14001New Service (ID 0x<vip-context>) Created at <IP Address>:<Port>
LOG_ERROR14001Failed to Create Service at <IP Address>:<Port>
LOG_NOTICE14002Service Started <IP Address>:<Port>
LOG_ERROR14003Failed to Delete Service (ID 0x%08x) at <IP Address>:<Port>
LOG_ERROR14004Failed to Create Rule at <IP Address>:<Port>
LOG_NOTICE14004New Rule (ID 0x<rule-context>) Created at <IP Address>:<Port> for ID 0x<vip-context>
LOG_NOTICE14005Commited: URL [<URL Key>] Header [<Header Key>]
LOG_ERROR14006Deleted Rule (ID <vapp-context> at <IP:Port> URL [<URL Key>] Header [<Header Key>]
LOG_ERROR14007Failed to Create Service at <IP Address>:<Port>
LOG_NOTICE14007New Vapp (ID 0x<vapp-context>) Created at <IP Address>:<Port> for ID 0x<vip-context>
LOG_NOTICE14008Failed to commit Application: Domain [<Application Rule Domain>] URL [<Application Rule URL>]
LOG_ERROR14009Failed to Delete Vapp (ID 0x<vapp-context>) at <IP Address>:<Port> Domain [<Application Rule Domain>] URL [<Application Rule URL>]
Config Agent (CONFIG)
LOG_ERROR12001Local GATEWAY_NAME not found
LOG_ERROR12001Digest failed
LOG_ERROR12001No Monitoring Dispatcher found
LOG_ERROR12001To execute this operation, peer node should be non-operational
LOG_ERROR12001Configuring Secure Traffic Manager Succeeded
LOG_ERROR12001Failed to resolve type of clear stats
LOG_ERROR12002Duplicate parameter
LOG_ERROR12002Target doesn't exist
LOG_ERROR12002Deleting RuleBackup
LOG_ERROR12002RuleBackup delete succeeded
LOG_ERROR12002Deleting ServerBackup
LOG_ERROR12002ServerBackup delete succeeded
LOG_ERROR12002Unable to delete ServerBackup
LOG_ERROR12002Deleting Server
LOG_ERROR12002Server delete succeeded
LOG_ERROR12002Unable to delete Server
LOG_ERROR12002Deleting application key
LOG_ERROR12002Application key delete succeeded
LOG_ERROR12002Unable to delete application key
LOG_ERROR12002Deleting QOS class
LOG_ERROR12002QOS class delete succeeded
LOG_ERROR12002Unable to delete QOS class
LOG_ERROR12002Deleting Service
LOG_ERROR12002Service delete succeeded
LOG_ERROR12002Unable to delete Service
LOG_ERROR12002Deleting ACL
LOG_ERROR12002ACL delete succeeded
LOG_ERROR12002Unable to delete ACL
LOG_ERROR12002Deleting NAT entry
LOG_ERROR12002NAT entry delete succeeded
LOG_ERROR12002Unable to delete NAT entry
LOG_ERROR12002Deleting ARP entry
LOG_ERROR12002ARP entry delete succeeded
LOG_ERROR12002Duplicate route
LOG_ERROR12002Deleting route
LOG_ERROR12002Route delete succeeded
LOG_ERROR12002Unable to delete route
LOG_ERROR12002Deleting Interface
LOG_ERROR12002Interface delete succeeded
LOG_ERROR12002Unable to delete Interface
LOG_ERROR12002Deleting VirtualHost
LOG_ERROR12002VirtualHost delete succeeded
LOG_ERROR12002Unable to delete VirtualHost
LOG_ERROR12002Adding VirtualHost
LOG_ERROR12002VirtualHost add succeeded
LOG_ERROR12002Unable to add VirtualHost
LOG_ERROR12002Adding Interface
LOG_ERROR12002Interface add succeeded
LOG_ERROR12002Unable to add Interface
LOG_ERROR12002Interface modify succeeded
LOG_ERROR12002Unable to modify Interface
LOG_ERROR12002Adding ARP entry
LOG_ERROR12002ARP entry add succeeded
LOG_ERROR12002Unable to add ARP entry
LOG_ERROR12002ARP entry modify succeeded
LOG_ERROR12002Unable to modify ARP entry
LOG_ERROR12002Adding Route
LOG_ERROR12002Route add succeeded
LOG_ERROR12002Unable to add Route
LOG_ERROR12002Gateway is not directly reachable on any interface
LOG_CRIT12003Failed to retrieve initial groups
LOG_ERROR12004Can't store rule ID
LOG_ERROR12005Can't get " NEXTSAPID ": missing " SAPID " or error retrieving " SAPID
LOG_ERROR12007$NC_INSTALL_ROOT not set
LOG_ERROR12007Target doesn't exist
LOG_ERROR12007Failed to create server
LOG_ERROR12007SetServerConnAttr failed
LOG_ERROR12007SetServerRedirectAttr failed
LOG_ERROR12007SetServerOutOfBandMonitorAttr failed
LOG_ERROR12007SetServerMonitorAttr failed
LOG_ERROR12007SetServerLBAttr failed
LOG_ERROR12007StartServer failed
LOG_ERROR12007SetServerSSLServicePolicy failed
LOG_ERROR12007SetServerSSLServiceOn failed
LOG_ERROR12007SetServerSSLServiceOff failed
LOG_ERROR12007ActiveServerOutOfBandMonitorAttr failed
LOG_ERROR12007Failed to delete server
LOG_ERROR12007Failed to reset Server IP, Port or VLAN
LOG_ERROR12007Failed to look up server
LOG_ERROR12007SetServerTcpMonitorAttr failed
LOG_ERROR12007EnableServer failed
LOG_ERROR12007DisableServer failed
LOG_ERROR12007ActiveServerOutOfBandMonitorAttr failed
LOG_ERROR12008Duplicate server
LOG_ERROR12008Attaching server
LOG_ERROR12008Attaching server succeeded
LOG_ERROR12008Failed to look up back-end server
LOG_ERROR12008Detaching server
LOG_ERROR12008Detaching server succeeded
LOG_ERROR12009OUT OF MEMORY !!! Asserting…
LOG_ERROR12009Error in reading ReadXmlFileIntoString
LOG_ERROR12009sapIndex.AddFromXMLStr (..., SAP::nsap) failed
LOG_ERROR12009Could not find mgmt container
LOG_ERROR12009Could not find ports/ethernet container
LOG_ERROR12009Could not find hardware container
LOG_ERROR12009Could not find box container
LOG_ERROR12009Could not find linux interface
LOG_ERROR12009Could get local box path
LOG_ERROR12009AddSAP for box2SAP failed
LOG_ERROR12009RecurAddChldOfAggSAP for box2 failed
LOG_ERROR12009SetBoxParametersFromOrgTree failed (box2) !
LOG_ERROR12009SetBoxName failed (box2) !
LOG_ERROR12009SetBoxParametersFromOrgTree failed !
LOG_ERROR12009In SetBoxParametersFromOrgTree. Invalid path specified
LOG_ERROR12009Could not find Linux interface
LOG_ERROR12009There should have been 3 physical interfaces.
LOG_ERROR12009SetParameterValuesUnderPath failed !
LOG_ERROR12009in SetBoxParametersFromOrgTree. UpdateDefaultRoute failed !
LOG_ERROR12009In GetClearConfTree. SetInitValuesForCC failed !
LOG_ERROR12009In UpdateDefaultRoute. Should have matched only one route !
LOG_ERROR12009In UpdateDefaultRoute. tmpIdx.GetAggSAP failed !
LOG_ERROR12009In UpdateDefaultRoute. sapIndex.GetParamSAP failed !
LOG_ERROR12009In UpdateDefaultRoute. tmpIdx.GetParamSAP failed !
LOG_ERROR12009In UpdateDefaultRoute. tmpIdx.ModifySAP failed !
LOG_ERROR12009In GetMD5HashForFile. CheckIfValidFileToRetrieve failed
LOG_ERROR12009GetPathForUser failed !
LOG_ERROR12009in PutSAPTree. GetHomeDirForUser failed !
LOG_ERROR12009In PutSAPTree. Invalid path specified !
LOG_ERROR12009In PutSAPTree. Path not found in tmp sapIndex
LOG_ERROR12009Error. AddFromXMLStr failed !
LOG_ERROR12009in PutSAPTree. Invalid node in treediff result
LOG_ERROR12009in PutSAPTree. No acl perm
LOG_ERROR12009in PutSAPTree.ModifySAP failed
LOG_ERROR12009in PutSAPTree. Trying to modify a read-only node
LOG_ERROR12009Cannot modify a read-only node
LOG_ERROR12009Couldn't read old bind value
LOG_ERROR12009in PutSAPTree.ModifySAP failed
LOG_ERROR12009Can't replace the root / (session.cc)in PutSAPTree. GetFatherPath failed
LOG_ERROR12009in PutSAPTree.AddChildSAP failed
LOG_ERROR12009Can't replace the root /
LOG_ERROR12009in PutSAPTree.DeleteSAPTree failed
LOG_ERROR12009Error invalid operation type
LOG_ERROR12009PutRootSAPTree failed in GetAggSAP
LOG_ERROR12009No path provided
LOG_ERROR12009Failed due to insufficient user permission
LOG_ERROR12009Internal error while adding a child node!
LOG_ERROR12009Internal error: while parsing query!
LOG_ERROR12009No Parameter found for querying
LOG_ERROR12009Parameter must be specified in a Container.
LOG_ERROR12009ERROR ! No column names specified!
LOG_ERROR12009Invalid or non existent home directory found !
LOG_ERROR12009CheckPermForInterNodes failed
LOG_ERROR12009GetPathForUser failed
LOG_ERROR12009Context doesn't exist !
LOG_ERROR12009In CheckPermForQuery. AclMatchAuth failed!
LOG_ERROR12009in CheckPermForInterNodes. GetHomeDirForUser failed
LOG_ERROR12009In CheckPermForInterNodes. AclMatchAuth failed!
LOG_ERROR12009in CheckPermAndSet. GetPermissionForUser failed
LOG_ERROR12009Non-existing path corresponding to global parameters
LOG_ERROR12009Error in SystemBackUp. failed to acquire mutex.
LOG_ERROR12009in RecurAddAcl. GetRelativePath failed !
LOG_ERROR12009Session::GetCommandsForUser.
LOG_ERROR12009Empty peer gateway key
LOG_ERROR12009Setting of peer gateway key failed
LOG_ERROR12009in CheckReadPermOnParent. GetFatherPath failed
LOG_ERROR12009in GetAbsBindPath. GetHomeDirForUser failed !
LOG_ERROR12009GetWacBoxVersion failed !
LOG_ERROR12009GetInterfaceAddress failed !
LOG_ERROR12010Failed to set SetVipSSLEphemeralKey
LOG_ERROR12010Policy is bound to more than one QOS class
LOG_ERROR12010Failed to set " SERVICE_APP_PROTOCOL "
LOG_ERROR12010Failed to set " SERVICE_APP_PROTOCOL " on
LOG_ERROR12010Adding qos class
LOG_ERROR12010Setting qos class
LOG_ERROR12010Unsetting qos class
LOG_ERROR12010Duplicate application
LOG_ERROR12010Failed to find back-end server in server list
LOG_ERROR12010Failed to look up Secure Traffic Manager object
LOG_ERROR12011Couldn't add paramSAP, name:
LOG_ERROR12013Failed to allocate space for integer argument
LOG_ERROR12013Failed to allocate space for float argument
LOG_ERROR12013Failed to allocate space for long long argument
LOG_ERROR12013Failed to allocate space for char string argument
LOG_ERROR12014Unable to get import/export handle
LOG_ERROR12014Unable to set error handle
LOG_ERROR12014Couldn't get file handle
LOG_ERROR12014Set file handle failed
LOG_ERROR12014Couldn't ready curl for upload
LOG_ERROR12014Couldn't set file size
LOG_ERROR12014Unsupported method
LOG_ERROR12014Couldn't set target
LOG_ERROR12015SSL Version 3 enabled
LOG_ERROR12015TLS enabled
LOG_ERROR12015No key/cert bindings found
LOG_ERROR12015Attempt to use unsupported key type
LOG_ERROR12015Unable to extract certificate
LOG_ERROR12015Unable to extract issuer certificate
LOG_ERROR12015Unable to extract key
LOG_ERROR12015Unable to extract exchange key
LOG_ERROR12015Error extracting trusted certificate
LOG_ERROR12018Internal Error
LOG_ERROR12018Invalid Path Specified
LOG_ERROR12019Unable to allocate memory
LOG_ERROR12021in ParamCmp. Cant modify node attributes
LOG_ERROR12021Incorrect permissions given to root role
LOG_ERROR12021Cannot modify ACL for root node
LOG_ERROR12021Cannot give write permissions for a read-only node.
LOG_ERROR12021in TreeDiff::GetDiff. Invalid path passed !
LOG_ERROR12021in AggCmp. Cant modify node attributes
LOG_ERROR12021managementSystemErrorMessage
LOG_ERROR12021in GetDiff. Retrieved inv. node
LOG_ERROR12021in GetDiff.AddInterNodes fail!
LOG_ERROR12021in GetDiff. inv. node
LOG_ERROR12021In GetDiff. invalid return from SAPCmp!
LOG_ERROR12024Backup rule group cannot be the same as the primary rule group
LOG_ERROR12027Value for " CACHE_SVC_MAX_OBJECT_SIZE " too large
LOG_ERROR12028Invalid value for " NET_INTERFACE_OPERATION_STATUS " . Using default
LOG_ERROR12028Unable to set media-mode
LOG_ERROR12029Failed to create HTTP monitor
LOG_ERROR12030Failed to look up primary server
LOG_ERROR12030Failed to look up backup server
LOG_ERROR12031Failed to add route on <mgmt-port> due to: netmask doesn't match route address
LOG_ERROR12031Netmask doesn't match route address
LOG_ERROR12031Modify Route: Unsupported operation
LOG_ERROR12032Failed to add route
LOG_ERROR12033Unsupported operation
LOG_ERROR12038Unexpected REN_AGG
LOG_NOTICE12040Processing messages in the list
LOG_ERROR12041Connection NULL in NC_RemoteCaller::getResponseHandle
LOG_ERROR12049Can not parse cluster info
LOG_ERROR12049Can not send message to heartbeat. Heartbeat Socket is NULL
LOG_CRIT12049Peer IP Address is NULL. Exiting
LOG_CRIT12049$NC_HEARTBEAT_DIR not set. Exiting
LOG_NOTICE12049Processing messages in the list failed. Ignoring the error
LOG_NOTICE12049Starting main message processing loop
LOG_NOTICE12049Initiating login to Local SAPD after updating configuration
LOG_NOTICE12049Getting Cluster Information after updating configuration
LOG_NOTICE12049Configuration database versions match. Setting contactPeer flag to true
LOG_NOTICE12049Configuration database versions mismatch. Setting contactPeer flag to false.
LOG_CRIT12049Can not relogin to SAPD. Exiting
LOG_CRIT12049Going to maintenance mode
LOG_CRIT12049$NC_INSTALL_ROOT not set.
LOG_CRIT12049Failed to create cluster key. This will shutdown communication with the peer-node
LOG_CRIT12049Failed to create peer-gateway key. This will shutdown communication with the peer-node
LOG_CRIT12049Failed to create encryption keys for peer-peer communication
LOG_ERROR12050Heartbeat Client closing socket
LOG_ERROR12050Heartbeat Client can not open socket
LOG_ERROR12050Heartbeat Client can not read message from Heartbeat Server
LOG_ERROR12050Can not send message to Heartbeat
LOG_ERROR12051The account has been disabled. Please contact your admin
LOG_ERROR12051Only one more day left to expire your password. Please change your password now
LOG_ERROR12051Your password is about to expire. Please change your password
LOG_ERROR12053Failed to initialize signal handlers
LOG_ERROR12053Failed to digest initial configuration
LOG_ERROR12053Failed to bind transResponse socket on 127.0.0.1
LOG_ERROR12053Exec for switchtomaint.sh failed
LOG_ERROR12053Termination requested by the signal handler
LOG_ERROR12054GetCmdGrpXML failed
LOG_ERROR12054sapIndex.AddFromXMLStr(..., \"nc:ncRoot\") failed
LOG_ERROR12054Usage: sap_initdb xmlFile
LOG_ERROR12054Failed to initialize the sessions DB
LOG_ERROR12054Failed to initialize SAP DB
LOG_ERROR12054Failed to set System Configuration Timestamp to 0
LOG_ERROR12054Failed to set Configuration Tree Timestamp to 0
LOG_ERROR12057Can't store vhid
LOG_ERROR12057Updating virtual host id is not supported
LOG_ERROR12058Sysmon Client closing socket
LOG_ERROR12058Sysmon Client can not open socket
LOG_ERROR12058Sysmon Client: cannot bind to Socket
LOG_ERROR12058Sysmon Client can not read message
LOG_ERROR12058Can not allocate memory for sysmon event message
LOG_ERROR12058Can not allocate memory for sapd event message
LOG_ERROR12058Unknown message received from Sysmon
LOG_ERROR12058Unknown message to sysmon
LOG_ERROR12066Socket::WritePktToSocket - sockfd == -1
LOG_ERROR12067Failed to look up associated application
LOG_ERROR12067Adding Application
LOG_ERROR12067Duplicate app key
LOG_ERROR12067No app keys
LOG_ERROR12067Failed find back-end server in server list
LOG_ERROR12067No such object
LOG_ERROR12068No rules
LOG_ERROR12068Failed find back-end server in server list
LOG_ERROR12070Invalid value specified for IPS_COOKIE_MODE),
LOG_ERROR12073Duplicate User Realm name: "+authUserRealmName
LOG_ERROR12073Failed to write userRealm Name "+authUserRealmName
LOG_ERROR12073User Realm name doesn't exist
LOG_ERROR12073Failed to delete User Realm name "+ realms_.GetRealmName
LOG_ERROR12073Failed to delete User Realm conf file "+ realms_.GetRealmName
LOG_ERROR12074InterfaceDependantKey
LOG_ERROR12081Finalize succeeded!
LOG_ERROR12083Failed to look up Secure Traffic Manager object
LOG_ERROR12083No such object
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_START_URL "
LOG_ERROR12085Invalid parameter length IPS_WEBGATE_REDIRECT_URL
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_NAME
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_VALUE
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_EXPIRES
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_PATH
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_DOMAIN
LOG_ERROR12085Invalid parameter value " IPS_WEBGATE_COOKIE_SECURE
LOG_ERROR12088Invalid parameter value <IPS_REDIRECT_STATUS>
LOG_ERROR12088Invalid parameter value <IPS_REWRITE_STATUS>
LOG_ERROR12089Invalid parameter value <IPS_BLOCK_SOAP_REQ >
LOG_ERROR12090Error in ReconfigureSubPolicies mismatch in number of sub-policies
LOG_ERROR12100Invalid sessionid specified for StartPktTrace
LOG_ERROR12100Invalid port specified for Packet dump
LOG_ERROR12100Invalid sessionid specified for StartPktTrace
LOG_ERROR12102Maximum allowed groups exceeded
LOG_ERROR12109Invalid value for < ACL_PROTOCOL > (Must be an integer between 0 and 255, inclusive)
LOG_ERROR12109Unsupported operation ACL
LOG_ERROR12197Failed to start Session Recording
LOG_ERROR12197Failed to stop Session Recording
Caching (CACHE)
LOG_NOTICE6001System Low on Memory: Adjusting Cache Parameters - Current Max:<Max Size>, High:<High Water Mark>, Safe<Safe Water Mark>
LOG_NOTICE6001System Low on Memory: Adjusting Cache Parameters - New Max:<Max Size>, High:<High Water Mark>, Safe<Safe Water Mark>
LOG_NOTICE6002Cache Purged
LOG_NOTICE6003Cache purge failed: instance <Count>, thid <Thread ID>, table <Table ID>, target <Size>, collected <Freed Size>
Load Balance (LB)
LOG_ALERT7005Server <IP Address>:<Port> is enabled
LOG_ALERT7006Server <IP Address>:<Port> is disabled. New mode <Operational Mode>
LOG_NOTICE7007Server <IP Address>:<Port> is created
LOG_ALERT7008Server <IP Address>:<Port> is deleted
LOG_ALERT7012Server <IP Address>:<Port> is enabled by configuration.
LOG_ALERT7013Server <IP Address>:<Port> is disabled by configuration.
Access Logs (WEBLOG)
LOG_WARN9001Configurations for start or stop time *MAY* not be proper.
LOG_ERROR9003Error: Unable to establish control connection.
LOG_ERROR9004Error: Unable to establish data connection
LOG_ERROR9005Error: Unable to establish SSL control connection
LOG_ERROR9006Error: Unable to authenticate the user
LOG_ERROR9007Error: Unable to transfer data to ftp server: <IP Address>
LOG_ERROR9009Connection to <IP Address> failed, error code = <Error Code>
LOG_ERROR9009SSL Connection to <IP Address> failed
LOG_ERROR9010Out of memory for formatting logs
LOG_NOTICE9013Dropping logs, running low on memory
LOG_ERROR9013Error in hash generation or encryption
LOG_NOTICE9014Logging parameters are set for vip <IP Address>:<Port>
LOG_ERROR9018Unable to log the request since FTP server is slow or unreachable
LOG_ERROR9018Dropping logs since queue is full
LOG_ERROR9019Signature generation of logs failed
Shared Symmetric Key (SSKEY)
LOG_WARN41001Encryption Key is going to expire within <Number> days", REMAINING_DAYS_FOR_EXPIRY( pSharedKey->keyExpiryTimeout,curTimeInSecs)
LOG_WARN41002Encryption Key has already expired
BYPASS
LOG_ALERT46001Unit is switching to bypass mode
LOG_NOTICE46002State set to bypass: stopping heartbeat
LOG_NOTICE46003State set to normal: starting heartbeat
   
Event Manager (EVM)
LOG_ERROR11001Event Manager startup failure: could not handle signals
LOG_ERROR11007EnableSyslogService: create socket failed
LOG_ERROR11008fopen <log_filename>: <error_description>
LOG_ERROR11009<log_filename> write failed <error_description>
Heartbeat (HB)
LOG_ERROR15001Heartbeat events dropped, queue is full
LOG_ERROR15002Unable to bind to address
LOG_ERROR15003Error sending packet
LOG_ERROR15003Error receiving data From remote gateway
LOG_ERROR15004Attempting to reinitialize the Heartbeat Server before closing
LOG_ERROR15004Attempting to send data without Initialization
Certificate (CERT)
LOG_NOTICE17001<ssl-function-name>: Trusted certificate expired: CN=<Common Name>, OU=<Org Name >
LOG_NOTICE17001<ssl-function-name>: Trusted certificate expired: O=<Org Name> L=<Location> S=<State> C=<City>
LOG_NOTICE17500Cert Initialization
SSL and TLS (SSL)
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: received bad certificate signature
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: failed to verify certificate signature
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: certificate chain too long
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: failed to decode certificate
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: no certificate
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: failed to validate certificate chain
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: <Error Code>
LOG_NOTICE16004<ssl-function-name>: Base 0x<ssl-handle> - Sending alert: <Alert-desc> (<Alert Code>) from [<IP Address>:<Port>]
LOG_NOTICE16005<ssl-function-name>: Base 0x<ssl-handle> - Received alert: <Alert-desc> (<Alert Code>) from [<IP Address>:<Port>]
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - No RSA private key available
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Mismatched key size <Size> (expected <Size>)
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Failed to get authority private key
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Called on a client socket
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Called on a server
LOG_ERROR16013<ssl-function-name>: Out of memory
LOG_ERROR16013<ssl-function-name>: Base 0x<ssl-handle> - Out of memory
LOG_ERROR16013<ssl-function-name>: Socket 0x<sslsock-handle> - Out of memory
LOG_NOTICE16014<ssl-function-name>: Incorrect server name: length should be between 0 and < length >
LOG_ERROR16016<ssl-function-name>: Base 0x<ssl-handle> - Failed to schedule crypto command
LOG_NOTICE16019< ssl-function-name >: Cannot configure more than <Number> certificate policies
LOG_NOTICE16020<ssl-function-name>: Cannot configure more than <Number> trusted certificates per service
LOG_NOTICE16021<ssl-function-name>: No available SSL version for client socket
LOG_NOTICE16023<ssl-function-name>: Ephemeral Key changed
LOG_NOTICE16024<ssl-function-name>: Base 0x<ssl-handle> - No ephemeral key available
LOG_NOTICE16500SSL Initialization
HTTP Proxy (HTTPSVC)
LOG_ERROR00000HttpRequestCtxDequeue Running out of contexts
LOG_ERROR13100HttpServerParseRequest: Parse failed; Malformed version <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Unknown major number <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Unknown minor number <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Unknown method: <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Malformed URL <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Malformed line end <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Malformed version <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Unknown major number <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Unknown minor number <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Malformed status code <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Header: <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Malformed line end <request-buffer>
LOG_WARN13103OnHttpServerSockRecv: Session timed out from <Client IP:Port>
LOG_NOTICE13200Can not connect to server (< error-code >) for connection from: 0x< IP Address >
LOG_NOTICE13200SSL connection to server for connection from: 0x< IP Address > failed
LOG_NOTICE13200Error connecting to server (< error-code >) for connection from: 0x< IP Address >
LOG_NOTICE13200Error opening SSL connection to server for connection from: 0x< IP Address >
LOG_NOTICE13200SSL accept failed for connection from: 0x< IP Address >
LOG_NOTICE13200Error switching connection from: 0x< IP Address > to SSL
LOG_NOTICE13200Error accepting SSL connection from: 0x< IP Address >
Web Authentication (WEBAUTH)
LOG_ERROR18203Unable to contact the authentication server, (RPC Queue full)
LOG_ERROR18204Remote procedure call to authentication server timed out
LOG_ERROR18205Login attempt failed for user <User ID>
LOG_ERROR18206Changing password failed for user <User ID>
LOG_NOTICE18207Added a realm:<Realm ID>
LOG_ERROR18208Unable to add realm:<Realm ID>
LOG_NOTICE18209Deleted a realm:<Realm ID>
LOG_ERROR18215Error received from webauthd , <Error String>
LOG_NOTICE18216Insert into ptrie - allocation failed (flags: 0x<internal-flags-value>, mem: <internal-mem-handle>) "Creating AuthzCache - inserting into ptrie failed(nodes: <internal-node-handle>, <internal-node-handle>
LOG_NOTICE18217Client attempted to Logout without login session cookie\n
LOG_WARN18218Invalid external policy store configured, realm name = <realm-name>
Application Firewall (APS)
LOG_ERROR19003GetIpsUrlProfileLearningStats: error <Error_ID>
LOG_NOTICE19031XML Firewall error: <error-string> ( offset: <offset number>, code: <error code> )",pErr->desc,( int )pErr->offset, pErr->code
LOG_NOTICE19031XML Firewall error: Input validation
LOG_NOTICE19031XML Firewall error: Attack pattern
LOG_NOTICE19031XML Firewall error: Operation denied
LOG_NOTICE19031Received error from Web Services Firewall module: error desc (<Error Id>: <error message> )
LOG_ERROR19032Failed to allocate NCFORMINFO buffer
LOG_ERROR19032Unable to add session param to NCFORMINFO (no-name param)
LOG_ERROR19032Failed to allocate NCFORMINFO buffer(resp)
LOG_ERROR19032Unable to add session param to NCFORMINFO (multi-value)
LOG_ERROR19032Failed to allocate buffer for response URL rewrite
LOG_ERROR19032Failed to allocate buffer for form encryption
LOG_ERROR19035PfCSRFProtection: No CSRF token found
LOG_WARN19500Could not cloak match for <group name>. Value of Initial or Trailing Characters to Keep is too large
LOG_WARN19500POST request with both Content-Length and Transfer-Encoding headers [ url: <URL|Malformed URL> ], dropped
LOG_WARN19500No intrusion information for intrusion ID
Cookie Security (COOKIE)
LOG_ALERT20003Cookie expires: Client <IP Address>
LOG_ALERT20004Cookie auth failed: cookiename auth failed
LOG_ALERT20005Cookie Length Overflow: Client <IP Address>
LOG_ERROR20006Failed to allocate Shared Key context for cookie encryption
CRL Daemon (CRL)
LOG_ERROR40001CRL File Download successfull
LOG_ERROR40002CRL File Download failed
FTP Proxy (FTPSVC)
LOG_ERROR21011Error while transferring data
LOG_WARN21014<Internal Session ID> Invalid client ip-address (<IP Address>) specified with the port command, actual client ip-address is (<IP Address>)
LOG_WARN21014<Internal Session ID> Invalid port (<Port>) specified with the port command, port value must be greater than 1024
LOG_WARN21014<Internal Session ID> Invalid ip-addr (<IP Address>) used to connect to listening ftp data socket, expected from (<IP Address>)
LOG_ERROR21022Unable to allocate state control block for a session
LOG_ERROR21022Unable  to allocate memory for ftp session
LOG_ERROR21022Out of memory
LOG_ERROR21022<Service IP Address:Port>:Unable to allocate memory for PORT cmd to FTP server
LOG_ERROR21022<Service IP Address:Port>:Unable to allocate memory for  SSL verbs
LOG_ERROR21023Unable to get an active back-end server 
LOG_ERROR21024Failed to create new socket
LOG_ERROR21024Failed to create SSL socket
LOG_ERROR21024Failed to create ssl client socket for data connection
LOG_ERROR21025Unable to bind a server for data connection
LOG_ERROR21025Unable to setup data connection
LOG_ERROR21026Failed to connect to FTP server
LOG_ERROR21026Unable to establish SSL control connection with the FTP server
LOG_ERROR21026Unable to connect to FTP server <Server IP Address>
LOG_ERROR21027Unable to accept SSL connection from FTP client
LOG_ERROR21028Failed to send response to the client
LOG_ERROR21028Failed to send control data to the server, because of small TCP windows
LOG_ERROR21028Failed to send data to the FTP client on the data connection
LOG_ERROR21029Failed to receive data from the FTP client on the data connection
LOG_ERROR21029Failed to receive data from FTP server on the data connection
LOG_ERROR21030Received bad response codes from the FTP server
Compression (COMPRESS)
LOG_ERROR24001Compression request errored, <Error Code>, <Error String>
LOG_ERROR24006Failed to initialize compression, switching back to no-compression mode
Web Translation (WATREWR)
LOG_ERROR26051Rewrite Module: URL rewrite by both Url-Translation and Request Rewrite
LOG_ERROR26052Rewrite Module: HTTP header rewrite by both URL-translation and Request Rewrite. Please go over your configuration to see if this can be avoided
Network Socket (NET)
LOG_ERROR3002Failed to attach interface <Interface Name>
LOG_NOTICE3003<Interface Name>: promiscuous mode enabled
LOG_ERROR3011rn_addmask: mask impossibly already in tree
LOG_ERROR3011Mask for route not entered
LOG_ERROR3012rn_delete <node-info>: Orphaned Mask <node-info> at <node-info>
LOG_ERROR3013rn_init: radix functions require max_keylen be set
TCP (NETINET)
LOG_ERROR4033Can't find virtual host for route, dst = <IP Address>
LOG_NOTICE4034ipflow to <IP Address> reached max refs
LOG_NOTICE4034Copyright (c) 2001, 2002 Barracuda Inc.
LOG_NOTICE4034Copyright (c) 1982, 1986, 1993 The Regents of the University of California
LOG_ALERT4054Detected a SYN attack, using SYN cookies
LOG_WARN4011arp request for <IP Address> failed with no memory
LOG_ERROR4013<Host IP Address> is using my IP address <IP Address>
LOG_ERROR4014Failed to find route for arp response to client <IP Address>
LOG_WARN4015arp: <MAC Address> attempts to modify permanent entry for <IP Address> on <Interface Name>
LOG_WARN4016arp_rtrequest: bad gateway value
LOG_ERROR4017arpresolve: can't allocate info for <IP Address>, rt=<route>
LOG_ERROR4017arp_rtrequest: malloc failed
LOG_ERROR45006Socket between stm wrapper and Configuration agent failed...Cannot execute <command> command
Symmetric Encryp. Decryp. (CRYPTO)
LOG_DEBUG5004Decrypt Failed
Process Monitor (PROCMON)
LOG_WARN44001STM crash detected current state is: <STM State> state <Number> crashes in last <Time in Seconds>
LOG_NOTICE44001Checking if configuration needs to be synchronized with peer system
LOG_NOTICE44001Notifying peer system to check if configuration needs to be synchronized
LOG_WARN44002Total retries: <Number> waiting for <Time in seconds> before next restart
LOG_WARN44003Too many <Number> tries to restart unstable STM, switching to Failed state
LOG_WARN44004Too many STM crashes switching to Unstable state,  will attempt restart in <Time in seconds>
LOG_NOTICE44005Attempting to restart STM and Eventmgr
LOG_NOTICE44006Attempting to recreate the log DB
LOG_ERROR44007Error : <Error code> encountered with stm start
LOG_ERROR44008STM restart failed: switching to Failed state
LOG_ERROR44009STM restart failed: switching to Failed state
LOG_NOTICE44010STM restart succeeded: current state: Stable
LOG_WARN44011shmget failed 
LOG_WARN44012number of stm worker threads is <Number of STM Threads>"
LOG_WARN44013shmread error <Failure Error>
LOG_WARN44014STM worker thread <Number> seems to be hung. Event count <Number>
LOG_WARN44015STM seems to be hung. Killing STM
LOG_NOTICE44016STM alive: switching from <STM State> to stable state
LOG_WARN44017<Process Name> state is <Process State>
LOG_ERROR44018bypass_hbeat.pl is dead restarting gpio and bypass_hbeat
LOG_ERROR44019clamd is dead, restarting <Process Name>
LOG_ERROR44019snmpd is dead, restarting <Process Name>
LOG_ERROR44020profile agent is dead, restarting <Process Name>
LOG_ERROR44021collectd is dead, restarting <Process Name>
LOG_ERROR44022namemon is dead, restarting namemon
LOG_ERROR44023config agent is dead, restarting config_agent and stm
LOG_CRIT44024System highest temp has reached
LOG_CRIT44025System is getting real hot
LOG_CRIT44026System highest temp has reached
LOG_CRIT44027System is getting real hot
LOG_ALERT44028One of the CPU fans is dead
LOG_ALERT44029One of the System fans is dead
LOG_ALERT44030One of the System fans is dead
LOG_ALERT44031Firmware storage exceeds 85%
LOG_ALERT44032Mail storage exceeds 85%
LOG_ALERT44033One of the RAID arrays is degrading.
LOG_WARN44034<Interface Name>: link seems down
LOG_ALERT44035<Interface Name>: link is down
LOG_NOTICE44036<Interface Name>: link is up
LOG_NOTICE44001Checking if configuration needs to be synchronized with peer system
LOG_NOTICE44001Notifying peer system to check if configuration needs to be synchronized
LOG_ERROR44039heartbeat.pl is dead <Number>, restarting
LOG_ERROR44040heartbeat.pl is in state D for <Number> tick(s). Ignoring the state
LOG_ERROR44041cluster_manager is dead <Number>, restarting
LOG_ERROR44042cluster_manager is in state D for <Number> tick(s). Ignoring the state
LOG_ERROR44043Restarting spinal cord process since there may be an issue in connecting to Control Center
LOG_ERROR44043Restarting ssh
LOG_NOTICE44001Checking if configuration needs to be synchronized with peer system
LOG_ERROR44044Configuration dispatcher is dead <Number>, restarting
LOG_ERROR44045Configuration dispatcher is in state D for <Number> tick(s). Ignoring the state
LOG_ALERT44046STM seems to be running high on Memory. Please contact to Barracuda Support Center for analysis
LOG_ALERT44047Memory Usage exceeds 70%
LOG_NOTICE44048Monitoring links: <Link Name>
LOG_NOTICE44049Started monitoring
LOG_ALERT44050Log storage exceeds 85%
LOG_ALERT44051High CPU Usage
LOG_EMERG44850VNET_CONFIG' @message if $syslog ne 0;
LOG_NOTICE44201Mode change: Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44202Mode set to bypass Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44203Changing Heartbeat bit state from <Old Hearbeat bit state> to <New Hearbeat bit state>
LOG_NOTICE44204Mode set to never bypass
LOG_ALERT44301Harddisk Failure
LOG_ERROR44701Could not open pdf '<report>' because: $!\n
LOG_ERROR44702Could not open html '<report>' because: $!\n
LOG_ERROR44703Report not sent to <email address>
CLUSTER MANAGER (CLRMGR)
LOG_NOTICE43001We are not yet in cluster mode.  Could not calculate destination IP and destination Identity. Exiting
LOG_NOTICE43001Invalid Role : <PRIMARY/BACKUP:self_role> specified in cluster.conf. Could not determine self role. Exiting
LOG_ERROR43001Cluster.conf file is not existing...Exiting
LOG_ALERT43001Peer device $g_peer_ip is UP
LOG_ALERT43002Peer device $g_peer_ip is UP
LOG_ALERT43003Peer device $g_peer_ip DOWN
LOG_NOTICE43010Self assume received for <operational_mode> mode
Monitor Check (CHECK_MON_LINK)
LOG_ERROR48302Couldn't connect to NTP server: <Server Name/IP Address>
Barracuda Updates (UPDATE)
LOG_ALERT52001Energize update subscription is about to expire in <Number> days
LOG_ALERT52002New attack definition version <Number> is available
LOG_ALERT52003New firmware update is available  Current Version = <current_version>  Beta Version = <beta_version>
LOG_ALERT52004New firmware update is available  Current Version = <current_version> New Version = <new_version>
LOG_ALERT52005Attackdef downloaded and applied on the appliance
LOG_ALERT52006Attackdef downloaded and applied on the appliance
LOG_ALERT52007New Virus definition update available.Current Version = <current_version>. New Version = <new_version>
LOG_ALERT52010New Firmware update available.Current Version = <current_version>. New Version = <new_version>
LOG_ALERT52011New Attack definition update available.Current Version = <current_version>. New Version = <new_version>
LOG_ALERT52012New Virus definition update available.Current Version = <current_version>. New Version = <new_version>.
BYPASS
LOG_ALERT44221Unit is switching to bypass mode
LOG_NOTICE44222State set to bypass: stopping heartbeat
LOG_NOTICE44223State set to normal: starting heartbeat
LOG_NOTICE44201Mode change: Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44202Mode set to bypass Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44203Changing Heartbeat bit state from <Old Hearbeat Version> to <New Hearbeat Version>
LOG_NOTICE44204Mode set to never bypass
STM_WRAPPER
LOG_WARN45001Cannot execute <Command Name> Command. Exiting.
LOG_WARN45002Configuration agent is not running. Cannot monitor <Command Name> command
LOG_WARN45003command<Command Name> execution status = <Status>
LOG_WARN45004Configuration agent crashed. Failed to execute <Command Name> command
LOG_WARN45005Configuration agent is not running....Cannot execute <Command Name> command
LOG_WARN45006Socket between stm wrapper and Configuration agent failed...Cannot execute <Command Name> command
LOG_ERROR45007Failed to initialize STM
LOG_NOTICE45008Successfully initialized STM
LOG_NOTICE45008Creating db snapshot after initwac
LOG_NOTICE45009Successfully stopped STM
LOG_NOTICE45010<Failure Reason>
LOG_INFO45011Procmon rollback :Loading at <Date> from DB snapshotlast successful digest
LOG_NOTICE45012Rollback finished: success
LOG_ERROR45013Rollback failed : Failed to restart STM
LOG_NOTICE45014<Failure Reason>
LOG_WARN45016Configuration size is <Current Config Size> Bytes which exceeds the <Max Config Size> Bytes safe limit. Please check your configuration.
LOG_WARN45018System in failed state: attempting recovery for config
LOG_ERROR45019STM startup failed. Retrying with blank config
LOG_ERROR45020STM startup failed even with blank config. Exiting
LOG_NOTICE45022Committing UI configuration
LOG_NOTICE45024Killing STM for dumping core
PROCESS SCHEDULE
 LOG_WARN49001Scheduled Backup failed : System has locked key configuration
Stateful Failover (SFO)
LOG_NOTICE25050Opening System State Transfer listening socket
LOG_NOTICE25050Closing System State Transfer listening socket
LOG_NOTICE25050Accepted System State Transfer connection sock
LOG_NOTICE25100Unrecognised state pkt
LOG_NOTICE25100Calling update system state function of module
LOG_NOTICE25100Ignoring System State Transfer packet for unknown module
LOG_NOTICE25150Opening Request State Transfer listening socket
LOG_NOTICE25150Listening for Request State Transfer connections on socket
LOG_NOTICE25150Request State Transfer listening socket
Last updated on