Juniper JUNOS OS 10.3 - SYSTEM LOG MESSAGES REFERENCE 7-12-2010 Reference Manual page 153

ASP_SFW_CREATE_REJECT_FLOW
System Log Message
Description
Type
Severity
Facility
ASP_SFW_FTP_ACTIVE_ACCEPT
System Log Message
Description
Type
Severity
Facility
ASP_SFW_FTP_PASSIVE_ACCEPT
System Log Message
Description
Type
Copyright © 2010, Juniper Networks, Inc.
syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type
The packet with the indicated characteristics matched a stateful firewall rule that has
the 'reject' action, and the stateful firewall created a reject flow. The matching packet
contained the indicated information about its protocol (numerical identifier and name),
application, source (logical interface name, IP address, and port number), and destination
(IP address and port number).
Event: This message reports an event, not an error
notice
LOG_PFE
syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type nat-information
When the stateful firewall receives PORT/EPRT commands in the control channel, it
creates a flow in anticipation of an FTP data connection from client to server. The packet
with the indicated characteristics matched such a flow. If the flow requires Network
Address Translation (NAT) services, NAT information appears at the end of the message.
The matching packet contained the indicated information about its protocol (numerical
identifier and name), application, source (logical interface name, IP address, and port
number), and destination (IP address and port number).
Event: This message reports an event, not an error
notice
LOG_PFE
syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type nat-information
When the stateful firewall receives PASV/EPSV commands in the control channel, it
creates a flow in anticipation of an FTP data connection from server to client. The packet
with the indicated characteristics matched such a flow. If the flow requires Network
Address Translation (NAT) services, NAT information appears at the end of the message.
The matching packet contained the indicated information about its protocol (numerical
identifier and name), application, source (logical interface name, IP address, and port
number), and destination (IP address and port number).
Event: This message reports an event, not an error
Chapter 9: ASP System Log Messages
89