I am showing hundreds of logs showing the following:
RT_FLOW: FLOW_REASSEMBLE_FAIL: FCB ageout before all fragments arrive, source 5.6.7.8 destination 1.2.3.4 ipid 7700
The destination address is our public IP but the source is always different suggesting a possible DDOS attack. Can anyone explain what this log means including the "ipid"?