Bug ID 521763: Attack stopped and start messages should not have source/dst ip addresses in log messages

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF6

Opened: May 06, 2015

Severity: 3-Major

Symptoms

DoS attack start and stop messages log the source and destination IP addresses.

Impact

Attack start and stop log messages in DoS should not have srcip and destip.

Conditions

This occurs when AFM logs the DoS attack start / stop messages.

Workaround

None

Fix Information

Attack stopped and start messages are logged as NULL

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips