GEN:SID 1:410
Message ICMP Fragment Reassembly Time Exceeded
Summary This event is generated when a network host generates an ICMP Fragment Reassembly Time Exceeded message.
Impact This could be an indication of an improperly configured routing device or networked host.  
Detailed Information ICMP Type 11 Code 1 is the RFC defined messaging type for ICMP Fragment Reassembly Time exceeded datagrams.  If a host fails to reassemble a fragmented datagram before the TTL of the datagram is expires an ICMP Fragment Reassembly Time Exceeded datagram is generated.
Affected Systems  
Attack Scenarios None known
Ease of Attack Numerous tools and scripts can generate this type of ICMP datagram.
Corrective Action Fragment reassembly Time Exceeded messages are normally and indication of improperly configured hosts or routing equipment.  The configurations of the devices causing these ICMP datagrams to be created should be checked for errors.
Additional References None