Discarded packet from peer

Discarded_packet_from_peer_1_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
The Routing Information Protocol version 2 (RIPv2) discarded packet(s) from the peer router.
 
Causes
The most common reasons for this error are:
  1. The protocol received a packet which is smaller than the minimum size allowed.
  2. The protocol received a packet with invalid version header.
  3. The protocol is not configured to receive packet(s) from the neighbor.
  4. The packet failed authentication.
 
Resolutions
  1. Make sure the router is configured to receive packets from the neighbor.
  2. Make sure the authentication settings on the router interface is correct.
 
Sample Event
Sample Event#1: IPRIPv2 received a packet which was smaller than the minimum sizeallowed for IPRIP packets. The packet has been discarded.It was received on the local interface with IP address %1,and it came from the neighboring router with IP address %2.
Sample Event#2: IPRIPv2 received a packet with an invalid version in its header.The packet has been discarded. It was received on the local interfacewith IP address %1, and it came from the neighboring routerwith IP address %2.
Sample Event#3: IPRIPv2 received a packet with an invalid header. The packet has beendiscarded. It was received on the local interface with IP address %1,and it came from the neighboring router with IP address %2.
Sample Event#4: IPRIPv2 discarded a response packet from a neighbor with IP address %1.IPRIPv2 is not configured to accept packets from the above neighbor.
Sample Event#5: IPRIPv2 discarded a version %1 packet received on the interfacewith IP address %2 from a neighbor with IP address %3.The above interface is configured to accept only version %4 packets.
Sample Event#6: IPRIPv2 discarded a packet received on the interface with IP address %1from a neighboring router with IP address %2, because the packetfailed authentication.
Sample Event#7: IPRIPv2 discarded a response packet from a neighbor with IP address %1.The packet was not sent from the standard IP RIP port (520).
 
© 2004 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.Windows.RemoteAccess.2012.Class.VPNServer
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="Discarded_packet_from_peer_1_1_Rule" Enabled="true" Target="Microsoft.Windows.RemoteAccess.2012.Class.VPNServer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(30021|30022|30023|30025|30026|30027|30053)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>ContainsSubstring</Operator>
<Pattern>IPRIP2</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SystemCenter!Microsoft.SystemCenter.CollectEvent"/>
</WriteActions>
</Rule>