Viewing Syslog Messages - AudioCodes Mediant 800B User Manual

User's Manual
Wireshark-like filtering expressions for your IP trace. The following Wireshark-like
expressions are supported:
Supported Wireshark-like Expressions for 'Value' Parameter
Expression
ip.src, ip.dst
ip.addr
ip.proto
udp, tcp, icmp, sip, ldap, http, https
udp.port, tcp.port
udp.srcport, tcp.srcport
udp.dstport, tcp.dstport
and, &&, ==, <, >
Below are examples of configured expressions for the 'Value' parameter:

udp && ip.addr==10.8.6.55

ip.src==10.8.6.55 && udp.port>=5000 and udp.port<6000

ip.dst==10.8.0.1/16

ip.addr==10.8.6.40
For conditions requiring the "or" / "||" expression, add multiple table rows. For example, the
Wireshark condition "(ip.src == 1.1.1.1 or ip.src == 2.2.2.2) and ip.dst == 3.3.3.3" can be
configured using the following two table row entries:
1. ip.src == 1.1.1.1 and ip.dst == 3.3.3.3
2. ip.src == 2.2.2.2 and ip.dst == 3.3.3.3
Note:
46.5

Viewing Syslog Messages

You can use the following tools to view the Syslog messages sent by the device:

Web interface's Message Log page (see below).

Any third-party Syslog server (e.g., Wireshark).
The procedure below describes how to view Syslog messages in the Web interface.
Notes:
Version 6.6
Source and destination IP address
IP address - up to two IP addresses can be entered
IP protocol type (PDU) entered as an enumeration value
(e.g., 1 is ICMP, 6 is TCP, 17 is UDP)
Single expressions for protocol type
Transport layer
Transport layer for source port
Transport layer for destination port
Between expressions
If the 'Value' field is left empty, the device will record all IP traffic types.

It's not recommended to keep a Message Log session open for a
prolonged period. This may cause the device to overload. For prolonged
(and detailed) debugging, use an external Syslog server.

You can select the Syslog messages in this page, and copy and paste
them into a text editor such as Notepad. This text file (txt) can then be
sent to AudioCodes Technical Support for diagnosis and troubleshooting.
‎ 4 6. Syslog and Debug Recordings
Description
619 Mediant 800B GW & E-SBC