SRX Services Gateway
Reply
Visitor
sathya
Posts: 8
Registered: ‎09-15-2010
0

Need some clarification

From the following syslog, I like to know which one is sent bytes and which one is received bytes .Can any one help?

 

<14>Mar 11 09:46:01 RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed TCP FIN: xx.xx.xx.xx/52283->xx.xx.xx.xx/80 junos-http xx.xx.xx.xx/25612->xx.xx.xx.xx/80 source-nat-rule None 6 trust-to-untrust trust untrust 31068 52(17903) 72(63139) 11

 

Thanks in advance.

Super Contributor
AdamLin
Posts: 167
Registered: ‎08-02-2010
0

Re: Need some clarification

Hi, see this page:

 

http://www.juniper.net/techpubs/en_US/junos10.1/information-products/topic-collections/syslog-messag...

 

In first parenthesis is bytes from client, and in second is bytes from server

Regards,
Adam

(if my post helped solve your problem, mark it as accepted solution)
Trusted Contributor
mawr
Posts: 236
Registered: ‎06-11-2010
0

Re: Need some clarification

Are you using unstructured syslogs?  If you switch to the sd-syslog format additional fields will be present to help identify these and other statistics.

Visitor
sathya
Posts: 8
Registered: ‎09-15-2010
0

Re: Need some clarification

Hi

 

Thanks for the reply.

 

So  bytes-from-client  is sent value and bytes-from-server is received value. Is that correct?

 

Please correct me if I am wrong.Because as per the below link, the inbound value(received) is changed to bytes-from-client.

 

http://jnpr.net/techpubs/en_US/junos9.6/information-products/topic-collections/release-notes/9.6/top...

 

So I am not sure which one is sent and received.

Visitor
sathya
Posts: 8
Registered: ‎09-15-2010
0

Re: Need some clarification

Can any one help ?

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.