ZyWALL 5/35/70 Series User’s Guide

Table 298 Syslog Logs (continued)

LOG MESSAGE

DESCRIPTION

 

 

Event Log: <Facility*8 +

This message is sent by the device ("RAS" displays as the

Severity>Mon dd hr:mm:ss

system name if you haven’t configured one) at the time

hostname src="<srcIP:srcPort>"

when this syslog is generated. The facility is defined in the

dst="<dstIP:dstPort>"

web MAIN MENU, LOGS, Log Settings page. The severity

ob="<01>" ob_mac="<mac

is the log’s syslog class. The definition of messages and

address>" msg="<msg>"

notes are defined in the IDP log descriptions.

note="<note>" devID="<mac

 

address>" cat="IDP"

 

class="<idp class>" sid="<idp

 

sid> act="<idp action>"

 

count="1"

 

Event Log: <Facility*8 +

This message is sent by the device ("RAS" displays as the

Severity>Mon dd hr:mm:ss

system name if you haven’t configured one) at the time

hostname src="<srcIP:srcPort>"

when this syslog is generated. The facility is defined in the

dst="<dstIP:dstPort>"

web MAIN MENU, LOGS, Log Settings page. The severity

ob="<01>" ob_mac="<mac

is the log’s syslog class. 1stReIP is the IP address of the

first mail relay server. The definition of messages and notes

address>" msg="<msg>"

are defined in the Anti-Spam log descriptions.

note="<note>" devID="<mac

 

address>" cat="Anti Spam"

 

1stReIP="<IP>"

 

The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type.

Table 299 RFC-2408 ISAKMP Payload Types

LOG DISPLAY

PAYLOAD TYPE

 

 

SA

Security Association

PROP

Proposal

TRANS

Transform

KE

Key Exchange

ID

Identification

CER

Certificate

CER_REQ

Certificate Request

HASH

Hash

SIG

Signature

NONCE

Nonce

NOTFY

Notification

DEL

Delete

VID

Vendor ID

791

Appendix S Log Descriptions