• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 444
  • Last Modified:

need to understand teh below logs lines

Hi all,

i have some logs lines from my firewall and I need to understand it can u help me on translating it:

TCP backup:x.y.z.v/22222 (x.y.z.v/22222) inside:z.z.z.z/4444 (m.m.m.m/4444), flags UIOB, idle 0s, uptime 9h1m, timeout 3h0m, bytes 477289
TCP backup:x.y.z.v/66666 (x.y.z.v/66666) inside:z.z.z.z/4444 (m.m.m.m/4444), flags UIOB, idle 0s, uptime 9h2m, timeout 3h0m, bytes 640413
TCP backup:t.t.t.t/99999 ( t.t.t.t/99999) inside:z.z.z.z/4444 (m.m.m.m/4444), flags UIOB, idle 3s, uptime 9h3m, timeout 3h0m, bytes 543126
TCP backup:t.t.t.t/88888 ( t.t.t.t/88888) inside:z.z.z.z/4444 (m.m.m.m/4444), flags UIOB, idle 2s, uptime 9h13m, timeout 3h0m, bytes 532270
0
besmile4ever
Asked:
besmile4ever
  • 4
  • 3
1 Solution
 
Zephyr ICTCloud ArchitectCommented:
This might be helpful understanding the firewall logs you're seeing.
0
 
besmile4everAuthor Commented:
well from upper lines i need to know source and dst? can u help me on that?
0
 
Zephyr ICTCloud ArchitectCommented:
It's difficult to say not knowing your config, but normally the first IP (in this case backup:xxxx) should be the outside address which connects to the inside one ...
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Zephyr ICTCloud ArchitectCommented:
Sorry, seeing your log again, it will be the other way around, connection to the outside (backup) from inside ...
0
 
besmile4everAuthor Commented:
thanks spravtek.

so you sure that there is a connection from inside to outside? not opposite?
0
 
Zephyr ICTCloud ArchitectCommented:
As far as I can tell from just seeing these log entries yes, on your firewall you could check this by performing this command:

sh conn long state data_out

Open in new window


If you have a Cisco ASA that is...
0
 
besmile4everAuthor Commented:
thnks.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now