Watchguard Firebox X1000 User Manual page 249

The rest of the columns vary according to the type of event
displayed. The events of most frequency and interest, how-
ever, are packet events, which display data as shown
below:
deny in eth0 339 udp 20 128 192.168.49.40
255.255.255.255 67 68 (bootpc)
The packet event fields are described here in order, from
left to right.
Disposition
- Allow – Packet was permitted by the current set
- Deny – Packet was dropped by the current set of
Direction
Interface
Total packet length
Protocol
User Guide
then computed on the log host based on the
Firebox's time zone setting. To change the Firebox
time zone, see "Setting the Time Zone" on page 55.
Default = Show. The disposition can be as follows:
of filter rules.
filter rules.
Determines whether the packet was logged when it
was received by the interface ("in") or when it was
about to be transmitted by the Firebox ("out").
Default = Hide
The name of the network interface associated with
the packet.
Default = Show
The total length of the packet in octets. Default =
Hide
Protocol name, or a number from 0 to 255. Default
= Show
Displaying and Hiding Fields
227