[ previous ] [ next ] [ threads ]
 
 From:  =?iso-8859-1?Q?Lasse_=D6sterberg?= <lasse at blirp dot net>
 To:  "Francisco Reyes" <lists at natserv dot com>, "M0N0Wall firewall" <m0n0wall at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall] Logs
 Date:  Wed, 7 Jan 2004 23:56:43 +0100
In a response to a good link to read the logs of IPF I recommend
http://www.obfuscation.org/ipf/ipf-howto.html#TOC_42

 - Lasse

-----Original Message-----
From: Francisco Reyes [mailto:lists at natserv dot com] 
Sent: den 7 januari 2004 12:12
To: M0N0Wall firewall
Subject: [m0n0wall] Logs


Except for remote loggin I am done. I am, however, still trying to better
understand the logs.

For instance. Some samples:
10:28:44.207050 sis0 @0:9 B 10.0.0.2,138 -> 10.0.0.255,138 PR udp len 20
229 IN

Was that accepted or rejected?
What is the long number after the seconds? Fractions of a second? Seems
like overkill if so..so many decimal places...

If these logs are straight as reported from ipf could anyone recommend a
link that would explain ipf's logs? I have found many links and great info
on ipf, but nothing on how to read it's logs.

---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch