Looks like your accounting logging options were reset to the default level
(less verbose) when you made the change. They can be reset at the command
line or from the Log Viewer in the Windows GUI (choose View then Hide/Unhide
in the drop down menus.)
-Howie
-----Original Message-----
From: Slawomir Gorniak [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 12, 1999 8:00 AM
To: [EMAIL PROTECTED]
Subject: FW-1 logging
Hello,
I use the FW-1 and I process every day its accounting logs, issuing the
command fw logexport -i fw.alog -o log.ascii -n. It has been working well
till May 1st. We had to change our external addresses - I got the new
license, I re-managed all network objects, but the acoounting logs look
quite different..
before:
num;date;time;orig;type;action;alert;i/f_name;i/f_dir;proto;src;dst;service;
s_port;rule;elapsed;packets;bytes;sys_msgs
0;25Apr99;23:16:12;193.59.6.1;account;accept;;daemon;inbound;udp;172.16.7.1;
192.36.143.150;ntp-udp;ntp-udp;22;0:00:42;2;152;
1;25Apr99;23:16:12;193.59.6.1;account;accept;;daemon;inbound;udp;172.16.7.1;
192.36.143.151;ntp-udp;ntp-udp;22;0:00:41;2;152;
after:
num;date;time;orig;type;action;alert;i/f_name;i/f_dir;sys_msgs
0;10May99;23:16:04;195.187.95.1;log;accept;;daemon;inbound;
1;10May99;23:16:27;195.187.95.1;log;accept;;daemon;inbound;
Any ideas?..
Thanks in advance,
Slawek
____________________________________________________________________________
__
S l a w o m i r G o r n i a k [EMAIL PROTECTED] | Mieux vaut vivre avec
des
PGP->http://toja.itl.waw.pl GSM:+48(601)35.29.39 |remords qu'avec des
regrets
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
