[logs] regarding %PIX-6-302006:

Previous message: Brian Ford: "Re: [logs] Seeking suggestions for a syslog tutorial"
In reply to: Jean-Baptiste Marchand: "[logs] [Windows] Private objects security auditing"
Next in thread: Matt Shirilla: "RE: [logs] regarding %PIX-6-302006:"
Reply: Matt Shirilla: "RE: [logs] regarding %PIX-6-302006:"
Reply: Brian Ford: "Re: [logs] regarding %PIX-6-302006:"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

wrehmanat_private

Hello all,

I am trying to analyze PIX (6.1) logs. I am facing a problem regarding the
following:

%PIX-6-302006: Teardown UDP connection for faddr faddr/fport gaddr
gaddr/gport laddr laddr/lport

Explanation   This is a connection-related message. This message is logged
when a UDP connection is terminated. The duration and byte count for the
session are reported. If the connection required authentication, the
username is also reported in the last field of the message. This message is
used by the PIX Firewall Manager to generate reports.

The explanation says, that it logs the duration and bytes as well but in my
logs, i dont find even a single entry with duration and bytes. Any help
would be greatly appreciated.

Best Regards
Wajih-ur-Rehman

_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis