Firewall Wizards mailing list archives

pix and syslog


From: Luca Berra <bluca () comedia it>
Date: Fri, 30 May 2003 19:22:04 +0200

hello,
i have a pix version 6.3.1 configured to log via syslog on an HP-UX server.
I would like to log packets permitted by a particular rule of an
access-list to see if i can tighten it. so i have

access-list sarca permit tcp any host 4.5.6.7 log 4 interval 600

in the buffer log i see something like
106100: access-list sarca permitted tcp sarca/1.2.3.4(3796) ->
        inside/4.5.6.7(80) hit-cnt 1 (first hit)

on the syslogserver i see:

..: %PIX-4-106100: access-list usi permitted tcp sarca/1.2.3.4(3796) ->

is there any known issue on newlines and syslog?

regards,
L.

-- 
Luca Berra -- bluca () comedia it

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: