packet size too big in fsso log. Should I worry?

[zeki893]

Anything I should be concerned about?

08/11/2017 20:56:04 [13104] FortiGate:172.17.0.2 on socket (8988) disconnected 08/11/2017 20:56:04 [11392] packet size too big:1811942144

[xsilver_FTNT]

Hi,

it looks like something is trying to connect to local collector port 8988 and connection is refused and terminated by FortiGate. Any time pattern ? Any network scanner operating in your network ? Or just miss-configured app trying to use the port ?

I'd go after time patterns first, then scan/listen on the net for any other scanner activities.

Best regards,

Tomas