show firewall log

Syntax

show firewall log 

<detail>

<interface interface-name> 

Description

Display log information about firewall filters.

Options

detail—(Optional) Display detailed information.

interface interface-name—(Optional) Display log information about a specific interface.

Required Privilege Level

view

List of Sample Output

show firewall log detail

Output Fields

Time—Time that the event occurred.

Filter—Name of a filter that has been configured with the filter statement at the [edit firewall] hierarchy level.

• A hyphen (-) indicates that the packet was handled by the Packet Forwarding Engine.
• A space (no hyphen) indicates the packet was handled by the Routing Engine.
• The notation pfe indicates packets logged by the Packet Forwarding Engine hardware filters.

Act—Filter action:

• A—Accept
• D—Discard
• R—Reject

Interface—Ingress interface for the packet.

Protocol—Packet's protocol name: egp, gre, ipip, ospf, pim, rsvp, tcp, or udp.

Src address—Packet's source address.

Dest address—Packet's destination address and port.

show firewall log detail

user@host> show firewall log detail

Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of 
interface: fxp0.0

Name of protocol: TCP, Packet Length: 50824, Source address: 172.17.22.108:829, 
Destination address: 192.168.70.66:513

Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of 
interface: fxp0.0

Name of protocol: TCP, Packet Length: 1020, Source address: 172.17.22.108:829, 
Destination address: 192.168.70.66:513

Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of 
interface: fxp0.0

Name of protocol: TCP, Packet Length: 49245, Source address: 172.17.22.108:829, 
Destination address: 192.168.70.66:513

Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of 
interface: fxp0.0

Name of protocol: TCP, Packet Length: 49245, Source address: 172.17.22.108:829, 
Destination address: 192.168.70.66:513

Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of 
interface: fxp0.0

Name of protocol: TCP, Packet Length: 49245, Source address: 172.17.22.108:829, 
Destination address: 192.168.70.66:513

Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of 
interface: fxp0.0

Name of protocol: TCP, Packet Length: 49245, Source address: 172.17.22.108:829, 
Destination address: 192.168.70.66:513.

...