show firewall log
List of Syntax
SyntaxSyntax (EX Series Switches)
Syntax
Syntax (EX Series Switches)
Release Information
Command introduced before Junos OS Release 7.4.
extensive option introduced in Junos OS Release 16.1.
logical-system option introduced in Junos OS Release 9.3.
Description
Display log information about firewall filters.
Options
Required Privilege Level
view
List of Sample Output
show firewall logshow firewall log detail
show firewall log extensive
Output Fields
Table 1 lists the output fields for the show firewall log command. Output fields are listed in the approximate order in which they appear.
Table 1: show firewall log Output Fields
Field Name | Field Description |
---|---|
Time of Log | Time that the event occurred. |
Filter |
|
Filter Action | Filter action:
|
Name of Interface |
|
Name of protocol | Packet’s protocol name: egp, gre, icmp, ipip, ospf, pim, rsvp, tcp, or udp. |
Packet length | Length of the packet. |
Source address | Packet’s source address. |
Destination address | Packet’s destination address and port. |
Sample Output
show firewall log
user@host>show firewall log
Time Filter Action Interface Protocol Src Addr Dest Addr 13:10:12 pfe D rlsq0.902 ICMP 192.0.2.2 192.0.2.1 13:10:11 pfe D rlsq0.902 ICMP 192.0.2.2 192.0.2.1
show firewall log detail
user@host> show firewall log detail
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0Name of protocol: TCP, Packet Length: 50824, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 1020, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0 Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, Destination address: 192.168.70.66:513 ....
show firewall log extensive
user@host> show firewall log extensive
Time of Log: 2016-01-17 22:16:21 PST, Filter: pfe, Filter action: accept, Name of interface: xe-0/0/1.0 Name of protocol: UDP, Packet Length: 98, Source address: 203.0.113.1, Destination address: 203.0.113.1 : 00-0F: 00 01 03 ee ee ff 00 01 - 09 22 55 ee 81 00 02 58 : 10-1F: 08 00 45 00 00 62 00 00 - 00 00 40 11 77 8a 01 00 : 20-2F: 00 01 02 00 00 01 1c 00 - 1c 00 00 4e 19 83 00 01 : 30-3F: 02 03 04 05 06 07 08 09 - 0a 0b 0c 0d 0e 0f 10 11 : 40-4F: 12 13 14 15 16 17 18 19 - 1a 1b 1c 1d 1e 1f 20 21 : 50-5F: 22 23 24 25 26 27 28 29 - 2a 2b 00 00 00 00 00 00 : 60-6F: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 : 70-7F: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00