Juniper EX9200 Features Manual page 440

Port Mirroring Feature Guide for EX9200 Switches
Sample Output
show firewall log
show firewall log detail
424
Table 13: show firewall log Output Fields (continued)
Field Name
Filter
Filter Action
Name of Interface
Name of protocol
Packet length
Source address
Destination address
user@host>show firewall log
Time Filter Action Interface
13:10:12 pfe D
13:10:11 pfe D
user@host> show firewall log detail
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of
interface: fxp0.0Name of protocol: TCP, Packet Length: 50824, Source address:
203.0.113.108:829,
Destination address: 192.168.70.66:513
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of
interface: fxp0.0
Name of protocol: TCP, Packet Length: 1020, Source address: 203.0.113.108:829,
Destination address: 192.168.70.66:513
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of
Field Description
Displays the name of a configured firewall filter or service filter
only if the packet hit the filter's
control plane). For any traffic that reaches the Routing Engine,
the packets hit the action in the kernel.
log
For all other logged packets (packet hit the filter's
the Packet Forwarding Engine), this field displays
a configured filter name.
Filter action:
A —Accept
—Discard
D
—Reject
R
Displays a physical interface name if the packet arrived at a port
on a line card.
Displays local if the packet was generated by the device's internal
Ethernet interface, em1 or fxp1
with the router's packet-forwarding components.
Packet's protocol name: ,
egp gre
.
udp
Length of the packet.
Packet's source address.
Packet's destination address and port.
Protocol
rlsq0.902 ICMP
rlsq0.902 ICMP
action in a kernel filter (in the
log
action in
log
instead of
pfe
, which connects the Routing Engine
, , , , , ,
icmp ipip ospf pim rsvp tcp
Src Addr Dest Addr
192.0.2.2 192.0.2.1
192.0.2.2 192.0.2.1
Copyright © 2016, Juniper Networks, Inc.
, or