Solved

What do these mean in PIX logs?

Posted on 2009-04-10
3
383 Views
Last Modified: 2012-08-14
My PIX log is as below.  

Does anybody know the mean of "20,6," and "[0x1273973, 0x297448de]" ?

There are two date and time. I guess one for log server, another for PIX. Is it correct?

If anybody would be willing to help, it would be greatly appreciated!
2009-03-17,00:00:05,172.31.1.14,20,6,Mar 17 2009 00:00:05: %PIX-6-106100: access-list acl_FGD_access permitted udp FGD/10.1.172.92(60633) -> inside/10.231.17.1(53) hit-cnt 1 first hit [0x1273973, 0x297448de]

 

2009-03-17,00:00:05,172.31.1.14,20,6,Mar 17 2009 00:00:05: %PIX-6-106100: access-list acl_FGD_access permitted udp FGD/10.1.172.92(61651) -> inside/10.231.17.1(53) hit-cnt 1 first hit [0x1273973, 0x297448de]

Open in new window

0
Comment
Question by:howruaz9
  • 2
3 Comments
 
LVL 28

Accepted Solution

by:
asavener earned 300 total points
ID: 24116832
"2009-03-17,00:00:05,172.31.1.14,20,6,"

This is all data pre-pended by your syslog server.  I think "6" refers to the severity level; I'm not sure about the "20".
0
 
LVL 28

Assisted Solution

by:asavener
asavener earned 300 total points
ID: 24116856
"[0x1273973, 0x297448de]"

I think this is data appended by your syslog server.  The message you posted should end after "first hit".
0
 
LVL 43

Assisted Solution

by:JFrederick29
JFrederick29 earned 200 total points
ID: 24117437
The 20 is the facility (Local4 in this case).  The 6 is the severity level (informational in this case).
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many useful and sometimes not well documented or forgotten IOS or ASA/PIX commands. See IPE article here , there was also one on PacketU and on Cisco Tips & Tricks. Below are my favorites. I give also a few most often used for Cisco IPS an…
When I upgraded my ASA 8.2 to 8.3, I realized that my nonat statement was failing!   The log showed the following error:     %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows It was caused by the config upgrade, because t…
Concerto provides fully managed cloud services and the expertise to provide an easy and reliable route to the cloud. Our best-in-class solutions help you address the toughest IT challenges, find new efficiencies and deliver the best application expe…
Need to grow your business through quality cloud solutions? With everything required to build a cloud platform and solution, you may feel like the distance between you and the cloud is quite long. Help is here. Spend some time learning about the Con…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now