show firewall log
Sintaxe
show firewall log <detail> <extensive> <interface interface-name> <logical-system (logical-system-name | all)>
Sintaxe (switches da Série EX)
show firewall log <detail> <interface interface-name>
Descrição
Exibir informações de log sobre filtros de firewall.
Opções
| none | Exibir informações de log sobre filtros de firewall. |
| detail | (Opcional) Exibir informações detalhadas. |
| extensive | (Opcional) Exibir despejo hex de pacote capturado por ação de log. |
| interface interface-name | (Opcional) Exibir informações de log sobre uma interface específica. |
| logical-system (logical-system-name | all) | (Opcional) Realize essa operação em todos os sistemas lógicos ou em um sistema específico. |
Nível de privilégio exigido
Ver
Campos de saída
A Tabela 1 lista os campos de saída para o show firewall log comando. Os campos de saída estão listados na ordem aproximada em que eles aparecem.
Nome de campo |
Descrição do campo |
|---|---|
|
Hora do evento ocorrer. |
|
|
|
Filtrar a ação:
|
|
|
|
Nome do protocolo do pacote: |
|
Comprimento do pacote. |
|
Endereço fonte do packet. |
|
Endereço e porta de destino do pacote. |
Saída de amostra
mostrar log de firewall
user@host>show firewall log Time Filter Action Interface Protocol Src Addr Dest Addr 13:10:12 pfe D rlsq0.902 ICMP 192.0.2.2 192.0.2.1 13:10:11 pfe D rlsq0.902 ICMP 192.0.2.2 192.0.2.1
mostrar detalhes de log de firewall
user@host> show firewall log detail Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0Name of protocol: TCP, Packet Length: 50824, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 1020, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 ....
mostrar log de firewall extenso
user@host> show firewall log extensive Time of Log: 2016-01-17 22:16:21 PST, Filter: pfe, Filter action: accept, Name of interface: xe-0/0/1.0 Name of protocol: UDP, Packet Length: 98, Source address: 203.0.113.1, Destination address: 203.0.113.1 : 00-0F: 00 01 03 ee ee ff 00 01 - 09 22 55 ee 81 00 02 58 : 10-1F: 08 00 45 00 00 62 00 00 - 00 00 40 11 77 8a 01 00 : 20-2F: 00 01 02 00 00 01 1c 00 - 1c 00 00 4e 19 83 00 01 : 30-3F: 02 03 04 05 06 07 08 09 - 0a 0b 0c 0d 0e 0f 10 11 : 40-4F: 12 13 14 15 16 17 18 19 - 1a 1b 1c 1d 1e 1f 20 21 : 50-5F: 22 23 24 25 26 27 28 29 - 2a 2b 00 00 00 00 00 00 : 60-6F: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 : 70-7F: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Informações de versão
Comando introduzido antes do Junos OS Release 7.4.
extensive opção introduzida no Junos OS Release 16.1.
logical-system opção introduzida no Junos OS Release 9.3.