EZZ8661I

Explanation
 To prevent syslog flooding, Intrusion Detection
Services (IDS) logging was suppressed for log message EZZ9318I (QOS
exceptions). Traffic regulation (TR) support for TCP limits
the number of EZZ9324I (TCP connection refused),
EZZ9319I (TCP connection would have been refused)
and  EZZ9318I (QOS exception) log records written
in a 5-minute interval.   For a listening port, a maximum of 100 of
these log records will be written in a 5-minute interval.  Across
all ports monitored by TCP TR,  a maximum of 1000 of these log records
will be written in a 5-minute interval.    
 time is
the date and time of the first log record suppressed for the port
in the 5 minute interval. 
 lhost is the
IP address of the local host. 
 port is the
listening port for which log suppression occurred.  
 count is
the number of  EZZ9318I log messages suppressed during the 5 minute
interval. 
 scope is either:  Port
The log records were suppressed because 100 log records had already
been written for the listening port in the 5-minute interval.
TR
The log records were suppressed because the total number of  TCP
TR log records written during the 5-minute interval exceeded 1000
log records.

 probeid is the unique identifier
of the probe detection point. See the intrusion
detection services probeids in z/OS Communications Server: IP and SNA Codes for a description of the IDS probe IDs.
 sensorhostname is
the fully qualified host name of the IDS sensor.

System action
 TCP/IP processing continues. TCP TR logging resumes. 

Operator response
 None.

System programmer response
 Examine relevant syslog messages
to determine the source of the log entries and take appropriate action:
adjust the active policy to be less restrictive or investigate the
logged QOS exceptions.

Module
 EZATRMD

Procedure name
  WriteLogEntries