Juniper JUNOS OS 10.3 - SYSTEM LOG MESSAGES REFERENCE 7-12-2010 Reference Manual page 162

Junos 10.3 System Log Messages Reference
ASP_SFW_RULE_ACCEPT
System Log Message
Description
Type
Severity
Facility
ASP_SFW_RULE_DISCARD
System Log Message
Description
Type
Severity
Facility
ASP_SFW_RULE_REJECT
System Log Message
Description
98
syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type rule-set: rule-set-name, rule: rule-name,
term: term-name
The packet with the indicated characteristics matched the indicated term in the indicated
stateful firewall rule, which has an 'accept' action. If the rule belongs to a rule set, the
rule set name is also displayed. The stateful firewall accepted the flow to which the
packet belongs. The matching packet contained the indicated information about its
protocol (numerical identifier and name), application, source (logical interface name, IP
address, and port number), and destination (IP address and port number).
Event: This message reports an event, not an error
info
LOG_PFE
syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type rule-set: rule-set-name, rule: rule-name,
term: term-name
The packet with the indicated characteristics matched the indicated term in the indicated
stateful firewall rule, which has a 'discard' action. If the rule belongs to a rule set, the rule
set name is also displayed. The stateful firewall discarded the packet. The matching
packet contained the indicated information about its protocol (numerical identifier and
name), application, source (logical interface name, IP address, and port number), and
destination (IP address and port number).
Event: This message reports an event, not an error
notice
LOG_PFE
syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type rule-set: rule-set-name, rule: rule-name,
term: term-name
The packet with the indicated characteristics matched the indicated term in the indicated
stateful firewall rule, which has a 'reject' action. If the rule belongs to a rule set, the rule
set name is also displayed. If the packet used the User Datagram Protocol (UDP), the
stateful firewall generated an Internet Control Message Protocol (ICMP) error message.
If the packet used the Transmission Control Protocol (TCP), the stateful firewall generated
an RST packet. The matching packet contained the indicated information about its
Copyright © 2010, Juniper Networks, Inc.