Fortinet black logo

Log Message Reference

20000039

20000039

Meaning

WebSocket security violation.

Field name Description

log_id

20000039

See Log ID numbers.

main_type

WebSocket Security

subtype

  • Disallow WebSocket
  • Disallow Extensions
  • Illegal Format
  • Illegal Frame Size
  • Illegal Message Size
  • Disallow Origin
  • Parse error

Examples

date=2022-07-10 time=18:02:38 log_id=20000039 msg_id=000000180727 device_id=FVVM08TM21000756 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMTa+7" type=attack pri=alert main_type="WebSocket Security" sub_type="Illegal Format" trigger_policy="N/A" severity_level=Low proto=tcp service=http backend_service=http action=Alert_Deny policy="FWB_Policy_Default_AutoTest" src=192.168.1.8 src_port=54731 dst=10.159.27.200 dst_port=8081 http_method=get http_url="/autotest/input_rule/1.html" http_host="192.168.1.228:8090" http_agent="none" http_session_id=none msg="[policy_name=websocketsecurityPolicy] : WebSocket Disallow Plain Format" signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="Reserved" content_switch_name="none" server_pool_name="FWB_server_pool" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="1.x" dev_id="none" es=0 threat_weight=25 history_threat_weight=0 threat_level=Moderate ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="none" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="A05:2021-Security Misconfiguration" bot_info="none" client_level="Unidentified" x509_cert_subject="none"

20000039

Meaning

WebSocket security violation.

Field name Description

log_id

20000039

See Log ID numbers.

main_type

WebSocket Security

subtype

  • Disallow WebSocket
  • Disallow Extensions
  • Illegal Format
  • Illegal Frame Size
  • Illegal Message Size
  • Disallow Origin
  • Parse error

Examples

date=2022-07-10 time=18:02:38 log_id=20000039 msg_id=000000180727 device_id=FVVM08TM21000756 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMTa+7" type=attack pri=alert main_type="WebSocket Security" sub_type="Illegal Format" trigger_policy="N/A" severity_level=Low proto=tcp service=http backend_service=http action=Alert_Deny policy="FWB_Policy_Default_AutoTest" src=192.168.1.8 src_port=54731 dst=10.159.27.200 dst_port=8081 http_method=get http_url="/autotest/input_rule/1.html" http_host="192.168.1.228:8090" http_agent="none" http_session_id=none msg="[policy_name=websocketsecurityPolicy] : WebSocket Disallow Plain Format" signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="Reserved" content_switch_name="none" server_pool_name="FWB_server_pool" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="1.x" dev_id="none" es=0 threat_weight=25 history_threat_weight=0 threat_level=Moderate ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="none" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="A05:2021-Security Misconfiguration" bot_info="none" client_level="Unidentified" x509_cert_subject="none"