SRX Services Gateway
Reply
Visitor
Posts: 8
Registered: ‎09-15-2010
0

Need some clarification

From the following syslog, I like to know which one is sent bytes and which one is received bytes .Can any one help?

 

<14>Mar 11 09:46:01 RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed TCP FIN: xx.xx.xx.xx/52283->xx.xx.xx.xx/80 junos-http xx.xx.xx.xx/25612->xx.xx.xx.xx/80 source-nat-rule None 6 trust-to-untrust trust untrust 31068 52(17903) 72(63139) 11

 

Thanks in advance.

Super Contributor
Posts: 167
Registered: ‎08-02-2010
0

Re: Need some clarification

Hi, see this page:

 

http://www.juniper.net/techpubs/en_US/junos10.1/information-products/topic-collections/syslog-messag...

 

In first parenthesis is bytes from client, and in second is bytes from server

Regards,
Adam

(if my post helped solve your problem, mark it as accepted solution)
Trusted Contributor
Posts: 236
Registered: ‎06-11-2010
0

Re: Need some clarification

Are you using unstructured syslogs?  If you switch to the sd-syslog format additional fields will be present to help identify these and other statistics.

Visitor
Posts: 8
Registered: ‎09-15-2010
0

Re: Need some clarification

Hi

 

Thanks for the reply.

 

So  bytes-from-client  is sent value and bytes-from-server is received value. Is that correct?

 

Please correct me if I am wrong.Because as per the below link, the inbound value(received) is changed to bytes-from-client.

 

http://jnpr.net/techpubs/en_US/junos9.6/information-products/topic-collections/release-notes/9.6/top...

 

So I am not sure which one is sent and received.

Visitor
Posts: 8
Registered: ‎09-15-2010
0

Re: Need some clarification

Can any one help ?

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.