Typical Syslog Data


2007-05-11 13:00:01 Local7.Notice 10.100.0.3 FW: NetScreen device_id=FW [Root]system-notification-00257(traffic): start_time="2007-05-11 13:09:15" duration=1 policy_id=26 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=816 rcvd=703 src=___.168.7.166 dst=___.62.182.190 src_port=44816 dst_port=20480 src-xlated ip=___.243.61.234 port=16377 dst-xlated ip=___.62.182.190 port=80 session_id=127790 reason=Close - TCP FIN<000>2007-05-11 13:00:01 Local7.Notice 10.100.0.3 FW: NetScreen device_id=FW [Root]system-notification-00257(traffic): start_time="2007-05-11 13:09:15" duration=1 policy_id=26 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=832 rcvd=851 src=___.168.7.166 dst=___.62.182.190 src_port=45328 dst_port=20480 src-xlated ip=___.243.61.234 port=23956 dst-xlated ip=___.62.182.190 port=80 session_id=127964 reason=Close - TCP FIN<000>2007-05-11 13:00:01 Local7.Notice 10.100.0.3 FW: NetScreen device_id=FW [Root]system-notification-00257(traffic): start_time="2007-05-11 13:09:13" duration=3 policy_id=20 service=smtp (tcp) proto=6 src zone=Trust dst zone=Untrust action=Permit sent=36596 rcvd=2754 src=___.168.0.66 dst=___.229.154.12 src_port=50450 dst_port=6400 src-xlated ip=___.243.61.88 port=4805 dst-xlated ip=___.229.154.12 port=25 session_id=127207 reason=Close - TCP FIN<000>2007-05-11 13:00:01 Local7.Notice 10.100.0.3 FW: NetScreen device_id=FW [Root]system-notification-00257(traffic): start_time="2007-05-11 13:08:14" duration=62 policy_id=26 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=3976 rcvd=74849 src=___.168.7.166 dst=___.28.122.160 src_port=40976 dst_port=20480 src-xlated ip=___.243.61.234 port=18304 dst-xlated ip=___.28.122.160 port=80 session_id=127770 reason=Close - AGE OUT<000>2007-05-11 13:00:01 Local7.Notice 10.100.0.3 FW: NetScreen device_id=FW [Root]system-notification-00257(traffic): start_time="2007-05-11 13:09:13" duration=3 policy_id=26 service=https proto=6 src zone=Trust dst zone=Untrust action=Permit sent=1608 rcvd=1797 src=___.168.8.56 dst=___.68.24.132 src_port=61456 dst_port=47873 src-xlated ip=___.243.61.234 port=20010 dst-xlated ip=___.68.24.132 port=443 session_id=127178 reason=Close - TCP FIN<000>2007-05-11 13:00:01 Local7.Notice 10.100.0.3 FW: NetScreen device_id=FW [Root]system-notification-00257(traffic): start_time="2007-05-11 13:09:15" duration=1 policy_id=26 service=https proto=6 src zone=Trust dst zone=Untrust action=Permit sent=130 rcvd=62 src=___.168.8.56 dst=___.68.24.132 src_port=61712 dst_port=47873 src-xlated ip=___.243.61.234 port=21177 dst-xlated ip=___.68.24.132 port=443 session_id=127267 reason=Close - AGE OUT<000>



NOTE: Due to security issues IP and DNS addresses have been changed.