Chapter 31 Logs Screens
ZyWALL 5/35/70 Series User’s Guide
573
31.4 Syslog Logs
There are two types of syslog: event logs and traffic logs. The device generates an event log
when a system event occurs, for example, when a user logs in or the device is under attack.
The device generates a traffic log when a "session" is terminated. A traffic log summarizes the
session's type, when it started and stopped the amount of traffic that was sent and received and
so on. An external log analyzer can reconstruct and analyze the traffic flowing through the
device after collecting the traffic logs.
Table 196
Syslog Logs
LOG MESSAGE
DESCRIPTION
Event Log: <Facility*8 +
Severity>Mon dd hr:mm:ss
hostname src="<srcIP:srcPort>"
dst="<dstIP:dstPort>"
msg="<msg>" note="<note>"
devID="<mac address>"
cat="<category>"
This message is sent by the system ("RAS" displays as the
system name if you haven’t configured one) when the
router generates a syslog. The facility is defined in the web
MAIN MENU
,
LOGS
,
Log Settings
page. The severity is
the log’s syslog class. The definition of messages and
notes are defined in the other log tables. The “devID” is the
MAC address of the router’s LAN port. The “cat” is the
same as the category in the router’s logs.
Traffic Log: <Facility*8 +
Severity>Mon dd hr:mm:ss
hostname src="<srcIP:srcPort>"
dst="<dstIP:dstPort>"
msg="Traffic Log"
note="Traffic Log" devID="<mac
address>" cat="Traffic Log"
duration=seconds
sent=sentBytes
rcvd=receiveBytes
dir="<from:to>"
protoID=IPProtocolID
proto="serviceName"
trans="IPSec/Normal"
This message is sent by the device when the connection
(session) is closed. The facility is defined in the Log
Settings screen. The severity is the traffic log type. The
message and note always display "Traffic Log". The "proto"
field lists the service name. The "dir" field lists the incoming
and outgoing interfaces ("LAN:LAN", "LAN:WAN",
"LAN:DMZ", "LAN:DEV" for example).
Event Log: <Facility*8 +
Severity>Mon dd hr:mm:ss
hostname src="<srcIP:srcPort>"
dst="<dstIP:dstPort>"
ob="<0|1>" ob_mac="<mac
address>" msg="<msg>"
note="<note>" devID="<mac
address>" cat="<category>"
This message is sent by the device ("RAS" displays as the
system name if you haven’t configured one) at the time
when this syslog is generated. The facility is defined in the
web
MAIN MENU
,
LOGS
,
Log Settings
page. The
severity is the log’s syslog class. The definition of
messages and notes are defined in the other log tables. OB
is the Out Break flag and the mac address of the Out Break
PC.
Event Log: <Facility*8 +
Severity>Mon dd hr:mm:ss
hostname src="<srcIP:srcPort>"
dst="<dstIP:dstPort>"
ob="0|1" ob_mac="<mac
address>" msg="<msg>"
note="<note>" devID="<mac
address>" cat="Anti Virus"
encode="< uu | b64 >"
This message is sent by the device ("RAS" displays as the
system name if you haven’t configured one) at the time
when this syslog is generated. The facility is defined in the
web
MAIN MENU
,
LOGS
,
Log Settings
page. The
severity is the log’s syslog class. The "encode" message
indicates the mail attachments encoding method. The
definition of messages and notes are defined in the Anti-
Virus log descriptions.
Содержание ZyWALL 35 Series
Страница 2: ......
Страница 8: ...Safety Warnings ZyWALL 5 35 70 Series User s Guide 8 ...
Страница 52: ...List of Tables ZyWALL 5 35 70 Series User s Guide 52 ...
Страница 54: ...54 ...
Страница 60: ...Chapter 1 Getting to Know Your ZyWALL ZyWALL 5 35 70 Series User s Guide 60 ...
Страница 86: ...Chapter 2 Introducing the Web Configurator ZyWALL 5 35 70 Series User s Guide 86 ...
Страница 126: ...Chapter 4 Tutorials ZyWALL 5 35 70 Series User s Guide 126 Figure 57 SECURITY VPN VPN Rules IKE Add Network Policy ...
Страница 140: ...Chapter 4 Tutorials ZyWALL 5 35 70 Series User s Guide 140 ...
Страница 146: ...Chapter 5 Registration ZyWALL 5 35 70 Series User s Guide 146 ...
Страница 147: ...147 PART II Network LAN Screens 149 Bridge Screens 161 WAN Screens 167 DMZ Screens 203 WLAN 213 ...
Страница 148: ...148 ...
Страница 160: ...Chapter 6 LAN Screens ZyWALL 5 35 70 Series User s Guide 160 ...
Страница 173: ...Chapter 8 WAN Screens ZyWALL 5 35 70 Series User s Guide 173 Figure 93 NETWORK WAN General ...
Страница 202: ...Chapter 8 WAN Screens ZyWALL 5 35 70 Series User s Guide 202 ...
Страница 212: ...Chapter 9 DMZ Screens ZyWALL 5 35 70 Series User s Guide 212 ...
Страница 242: ...242 ...
Страница 262: ...Chapter 11 Firewall ZyWALL 5 35 70 Series User s Guide 262 Figure 146 SECURITY FIREWALL Rule Summary Edit ...
Страница 274: ...Chapter 11 Firewall ZyWALL 5 35 70 Series User s Guide 274 ...
Страница 294: ...Chapter 13 Configuring IDP ZyWALL 5 35 70 Series User s Guide 294 ...
Страница 320: ...Chapter 15 Anti Spam ZyWALL 5 35 70 Series User s Guide 320 ...
Страница 342: ...Chapter 16 Content Filtering Screens ZyWALL 5 35 70 Series User s Guide 342 ...
Страница 350: ...Chapter 17 Content Filtering Reports ZyWALL 5 35 70 Series User s Guide 350 ...
Страница 363: ...Chapter 18 IPSec VPN ZyWALL 5 35 70 Series User s Guide 363 Figure 210 SECURITY VPN VPN Rules IKE Edit Gateway Policy ...
Страница 373: ...Chapter 18 IPSec VPN ZyWALL 5 35 70 Series User s Guide 373 Figure 213 SECURITY VPN VPN Rules IKE Edit Network Policy ...
Страница 424: ...Chapter 19 Certificates ZyWALL 5 35 70 Series User s Guide 424 ...
Страница 430: ...430 ...
Страница 448: ...Chapter 21 Network Address Translation NAT ZyWALL 5 35 70 Series User s Guide 448 ...
Страница 474: ...Chapter 24 Bandwidth Management ZyWALL 5 35 70 Series User s Guide 474 ...
Страница 514: ...Chapter 26 Remote Management ZyWALL 5 35 70 Series User s Guide 514 ...
Страница 533: ...533 PART V Reports Logs and Maintenance Reports 535 Logs Screens 547 Maintenance 575 ...
Страница 534: ...534 ...
Страница 551: ...Chapter 31 Logs Screens ZyWALL 5 35 70 Series User s Guide 551 Figure 334 LOGS Log Settings ...
Страница 592: ...Chapter 32 Maintenance ZyWALL 5 35 70 Series User s Guide 592 ...
Страница 594: ...594 Troubleshooting 751 Product Specifications 757 ...
Страница 602: ...Chapter 33 Introducing the SMT ZyWALL 5 35 70 Series User s Guide 602 ...
Страница 622: ...Chapter 35 WAN and Dial Backup Setup ZyWALL 5 35 70 Series User s Guide 622 ...
Страница 628: ...Chapter 36 LAN Setup ZyWALL 5 35 70 Series User s Guide 628 ...
Страница 634: ...Chapter 37 Internet Access ZyWALL 5 35 70 Series User s Guide 634 ...
Страница 638: ...Chapter 38 DMZ Setup ZyWALL 5 35 70 Series User s Guide 638 ...
Страница 642: ...Chapter 39 Route Setup ZyWALL 5 35 70 Series User s Guide 642 ...
Страница 658: ...Chapter 41 Remote Node Setup ZyWALL 5 35 70 Series User s Guide 658 ...
Страница 662: ...Chapter 42 IP Static Route Setup ZyWALL 5 35 70 Series User s Guide 662 ...
Страница 700: ...Chapter 45 Filter Configuration ZyWALL 5 35 70 Series User s Guide 700 ...
Страница 738: ...Chapter 50 Remote Management ZyWALL 5 35 70 Series User s Guide 738 ...
Страница 746: ...Chapter 51 IP Policy Routing ZyWALL 5 35 70 Series User s Guide 746 ...
Страница 766: ...766 ...
Страница 770: ...Appendix A Hardware Installation ZyWALL 5 35 70 Series User s Guide 770 ...
Страница 778: ...Appendix B Pop up Windows JavaScripts and Java Permissions ZyWALL 5 35 70 Series User s Guide 778 ...
Страница 780: ...Appendix C Removing and Installing a Fuse ZyWALL 5 35 70 Series User s Guide 780 ...
Страница 802: ...Appendix D Setting up Your Computer s IP Address ZyWALL 5 35 70 Series User s Guide 802 ...
Страница 816: ...Appendix F Common Services ZyWALL 5 35 70 Series User s Guide 816 ...
Страница 852: ...Appendix J Importing Certificates ZyWALL 5 35 70 Series User s Guide 852 ...
Страница 856: ...Appendix K Legal Information ZyWALL 5 35 70 Series User s Guide 856 ...
Страница 862: ...Appendix L Customer Support ZyWALL 5 35 70 Series User s Guide 862 ...