Solved

What do these mean in PIX logs?

Posted on 2009-04-10
3
385 Views
Last Modified: 2012-08-14
My PIX log is as below.  

Does anybody know the mean of "20,6," and "[0x1273973, 0x297448de]" ?

There are two date and time. I guess one for log server, another for PIX. Is it correct?

If anybody would be willing to help, it would be greatly appreciated!
2009-03-17,00:00:05,172.31.1.14,20,6,Mar 17 2009 00:00:05: %PIX-6-106100: access-list acl_FGD_access permitted udp FGD/10.1.172.92(60633) -> inside/10.231.17.1(53) hit-cnt 1 first hit [0x1273973, 0x297448de]
 
2009-03-17,00:00:05,172.31.1.14,20,6,Mar 17 2009 00:00:05: %PIX-6-106100: access-list acl_FGD_access permitted udp FGD/10.1.172.92(61651) -> inside/10.231.17.1(53) hit-cnt 1 first hit [0x1273973, 0x297448de]

Open in new window

0
Comment
Question by:howruaz9
  • 2
3 Comments
 
LVL 28

Accepted Solution

by:
asavener earned 300 total points
ID: 24116832
"2009-03-17,00:00:05,172.31.1.14,20,6,"

This is all data pre-pended by your syslog server.  I think "6" refers to the severity level; I'm not sure about the "20".
0
 
LVL 28

Assisted Solution

by:asavener
asavener earned 300 total points
ID: 24116856
"[0x1273973, 0x297448de]"

I think this is data appended by your syslog server.  The message you posted should end after "first hit".
0
 
LVL 43

Assisted Solution

by:JFrederick29
JFrederick29 earned 200 total points
ID: 24117437
The 20 is the facility (Local4 in this case).  The 6 is the severity level (informational in this case).
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Netgear switch to Cisco switch VLAN not passing traffic 8 52
Help with ASA config smtp traffic 10 39
logging buffered 8 48
clear arp 1 30
This is about downgrading PIX Version 8.0(4) & ASDM 6.1(5) to PIX 7.2(4) and ASDM 5.2(4) but with only 64MB RAM and 16MB flash. Background: You have a Cisco Pix 515E which was running on PIX 7.2(4) and its supporting ASDM 5.2(4) without any i…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question