System log messages are generated during flow creation, as shown in the following examples:
The following system log message indicates that the ASP matched an accept rule:
- Oct 25 16:11:37 (FPC Slot 3, PIC Slot 2) {svc_set}[FWNAT]:
ASP_SFW_RULE_ACCEPT: proto 6 (TCP) application: rtsp, ge-2/0/1.0:1.1.1.2:35595
-> 2.2.2.2:554, Match SFW accept rule-set: , rule: allow_rtsp, term:
0
The following system log message indicates that the AS PIC created a valid flow:
- Oct 25 16:11:37 (FPC Slot 3, PIC Slot 2) {svc_set}[FWNAT]:
ASP_SFW_CREATE_ACCEPT_FLOW: proto 6 (TCP) application: rtsp, ge-2/0/1.0:1.1.1.2:35595
-> 2.2.2.2:554, creating forward or watch flow
The following system log message indicates that the packet did not match any rule on the AS PIC:
- Oct 25 16:03:13 (FPC Slot 3, PIC Slot 2) {svc_set}[FWNAT]:
ASP_SFW_NO_RULE_DROP: proto 17 (UDP), ge-2/0/3.0:2.2.2.2:1334 -> 1.1.1.78:1334,
No matching SFW rule
If the AS PIC does not create data flows and starts receiving data, this message is logged. It represents an error condition for ALG processing.
For a complete listing of system log messages, see the JUNOS System Log Messages Reference.