When a loggable event occurs, i.e. an action is taken when a packet is received, or a message is sent by e-mail, syslog or SNMP, this event is recorded in the log table.
Viewing the log table in LANmonitor appears as follows:
Viewing the log table in WEBconfig appears as follows:
The table contains the following values:
| Element | Meaning |
|---|---|
| Idx. | Sequential index (so that the table can also be polled via SNMP) |
| System time | System time in UTC encoding (converted to cleartext for display) |
| Source address | Source address of the filtered packet |
| Destination address | Destination address of the filtered packet |
| Prot. | Protocol (TCP, UDP, etc.) of the filtered packet |
| Source port | Source port of the filtered packet (only for port related protocols). |
| Destination port | Destination port of the filtered packet (only for port related protocols) |
| Filter rule | Name of the rule that created the entry. |
| Limit | Bit field describing the exceeded limit by which the packet was filtered. The following values are currently defined:
|
| Threshold | Threshold limit value of the triggering limit |
| Action | Bit field which lists all the actions performed. The following values are currently defined:
|
Note: All firewall actions are also displayed in the IP router trace. Some models also have a firewall LED, which indicates each packet filtered.
