ZyXEL Communications ZyXEL ZyWALL 2WE User Manual page 242

ZyWALL 2 and ZyWALL 2WE
5. Firewall log
Firewall Log Message Format
SdcmdSyslogSend(SYSLOG_FIREWALL, SYSLOG_NOTICE, buf);
buf = IP[Src=xx.xx.xx.xx : spo=xxxx Dst=xx.xx.xx.xx : dpo=xxxx | prot | rule | action]
Src: Source Address
spo: Source port (empty means no source port information)
Dst: Destination Address
dpo: Destination port (empty means no destination port information)
prot: Protocol ("TCP","UDP","ICMP", "IGMP", "GRE", "ESP")
rule: <a,b> where a means "set" number; b means "rule" number.
Action: nothing(N) block (B) forward (F)
08-01-2000 11:48:41 Local1.Notice
>172.21.1.80 :137
08-01-2000 11:48:41 Local1.Notice
>192.168.77.88 :520
08-01-2000 11:48:39 Local1.Notice
|IGMP<2>|default permit:<2,0>|B
08-01-2000 11:48:39 Local1.Notice
|IGMP<2>|default permit:<2,0>|B
21.4.3 Call-Triggering Packet
Call-Triggering Packet displays information about the packet that triggered a dial-out call in an easy
readable format. Equivalent information is available in menu 24.1 in hex format. An example is shown
next.
21-10
192.168.10.10
|UDP|default permit:<2,0>|B
192.168.10.10
|UDP|default permit:<2,0>|B
192.168.10.10
192.168.10.10
RAS: FW 172.21.1.80
RAS: FW 192.168.77.88
RAS: FW 172.21.1.50
RAS: FW 172.21.1.25
System Information and Diagnosis
:137 -
:520 -
->172.21.1.50
->172.21.1.25