Cisco 3110 Message Manual page 111

Chapter 2 Message and Recovery Procedures
Error Message SW_DAI-4-DHCP_SNOOPING_DENY: [dec] Invalid ARPs ([chars]) on [chars],
vlan [dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Explanation
packets are erroneous, and their presence might show attempted man-in-the-middle attacks in the
network. This log message appears when the sender's IP and MAC address binding for the received
VLAN is not present in the DHCP snooping database. The first [dec] is the number of invalid ARP
packets. The first [chars] is either Req (request) or Res (response), and the second [chars] is the short
name of the ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action
Error Message SW_DAI-6-DHCP_SNOOPING_PERMIT: [dec] ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Explanation
and MAC address match the DHCP snooping database for the received VLAN. The first [dec] is the
number of valid ARP packets. The first [chars] is either Req (request) or Res (response), and the
second [chars] is the short name of the ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action
Error Message SW_DAI-4-INVALID_ARP: [dec] Invalid ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Explanation
packets do not pass one or more validation checks of the source or destination MAC address or the
IP address. The first [dec] is the number of invalid ARP packets. The first [chars] is either Req
(request), Res (response), or Invalid Opcode. The second [chars] is the short name of the ingress
interface. The second [dec] is the ingress VLAN ID. [enet]/[chars]/[enet]/[chars]/[time-of-day] is
the MAC address of the sender, the IP address of the sender, the MAC address of the target, the IP
address of the target, and the time of day.
Recommended Action
Error Message SW_DAI-4-PACKET_BURST_RATE_EXCEEDED: [dec] packets received in [dec]
seconds on [chars].
Explanation
The interface is in the error-disabled state when the switch receives packets at a higher rate than the
configured packet rate every second over the configured burst interval. The message is logged just
before the interface is error disabled and if the configured burst interval is more than a second. The
first [dec] is the number of packets, the second [dec] is the number of seconds, and [chars] is the
affected interface.
Recommended Action
OL-12191-01
The switch has received ARP packets considered invalid by ARP inspection. The
No action is required.
The switch has received ARP packets that have been permitted because the sender's IP
No action is required.
The switch has received ARP packets considered invalid by ARP inspection. The
No action is required.
The switch has received the given number of ARP packets in the specified burst interval.
No action is required.
Cisco Catalyst Switch Module 3110 and 3012 for IBM BladeCenter System Message Guide
SW_DAI Messages
2-95