22.6 Debug Log
271
•
[18/Apr/2008 10:22:47]
— date and time when the event was logged (note: Con-
nection logs are saved immediately after a disconnection).
•
[ID] 613181
—
WinRoute
connection identification number
•
[Rule] NAT
— name of the traffic rule which has been used (a rule by which the traffic
was allowed or denied).
•
[Service] HTTP
— name of a corresponding application layer service (recognized by
destination port).
If the corresponding service is not defined in
WinRoute
(refer to chapter
), the
[Service]
item is missing in the log.
•
[User] james
name of the user connected to the firewall from a host which partici-
pates in the traffic.
If no user is currently connected from the corresponding host, the
[User]
item is
missing in the log.
•
[Connection] TCP 192.168.1.140:1193 -> hit.top.com:80
— protocol, source
IP address and port, destination IP address and port. If an appropriate log is found in
the
DNS
module cache (see chapter
), the host’s DNS name is displayed instead of
its IP address. If the log is not found in the cache, the name is not detected (such DNS
requests would slow
WinRoute
down).
•
[Duration] 121 sec
— duration of the connection (in seconds)
•
[Bytes] 1575/1290/2865
— number of bytes transferred during this connection
(transmitted /accepted /total).
•
[Packets] 5/9/14
— number of packets transferred through this connection
(transmitted/accepted/total).
22.6 Debug Log
Debug
(debug information) is a special log which can be used to monitor certain kinds of
information, especially for problem-solving. Too much information could be confusing and
impractical if displayed all at the same time. Usually, you only need to display information
relating to a particular service or function. In addition, displaying too much information slows
WinRoute’s
performance. Therefore, it is strongly recommended to monitor an essential part
of information and during the shortest possible period only.
Selection of information monitored by the Debug log
The window’s context menu for the
Debug
log includes (see chapter
) further options for
advanced settings of the log and for an on-click one-time view of status information.
Note:
These options are available only to users with full administration rights for
WinRoute
(see chapter
IP Traffic
This function enables monitoring of packets according to the user defined log expression.
Summary of Contents for KERIO WINROUTE FIREWALL 6
Page 1: ...Kerio WinRoute Firewall 6 Administrator s Guide Kerio Technologies s r o...
Page 157: ...12 3 Content Rating System Kerio Web Filter 157 Figure 12 7 Kerio Web Filter rule...
Page 247: ...19 4 Alerts 247 Figure 19 14 Details of a selected event...
Page 330: ...Chapter 23 Kerio VPN 330 Figure 23 55 The Paris filial office VPN server configuration...
Page 368: ...368...
