If you have configured Screen options on your SRX device, it generates a syslog message every time the specific screen option is triggered. The message will look like below:

Oct 24 08:20:27 SRX RT_IDS: RT_SCREEN_IP: IP spoofing! source: x.x.x.x, destination: y.y.y.y, protocol-id: 6, zone name: ABDC, interface name: <interface-name>, action: drop

RT_IDS logs are being generated continuously on the SRX.

These logs are triggered whenever a particular screen option is triggered. These logs are informative only and should be ignored as long as the traffic being dropped is not legitimate traffic. 

2024-12-22 : Article Created
2026-06-03: Modified the Font and size