Debug log, 6 debug log – Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual

Page 271

Advertising
background image

22.6 Debug Log

271

[18/Apr/2008 10:22:47]

— date and time when the event was logged (note: Con-

nection logs are saved immediately after a disconnection).

[ID] 613181

WinRoute connection identification number

[Rule] NAT

— name of the traffic rule which has been used (a rule by which the traffic

was allowed or denied).

[Service] HTTP

— name of a corresponding application layer service (recognized by

destination port).

If the corresponding service is not defined in WinRoute (refer to chapter

14.3

), the

[Service]

item is missing in the log.

[User] james

name of the user connected to the firewall from a host which partici-

pates in the traffic.

If no user is currently connected from the corresponding host, the [User] item is

missing in the log.

[Connection] TCP 192.168.1.140:1193 -> hit.top.com:80

— protocol, source

IP address and port, destination IP address and port. If an appropriate log is found in

the DNS module cache (see chapter

8.1

), the host’s DNS name is displayed instead of

its IP address. If the log is not found in the cache, the name is not detected (such DNS

requests would slow WinRoute down).

[Duration] 121 sec

— duration of the connection (in seconds)

[Bytes] 1575/1290/2865

— number of bytes transferred during this connection

(transmitted /accepted /total).

[Packets] 5/9/14

— number of packets transferred through this connection

(transmitted/accepted/total).

22.6 Debug Log

Debug (debug information) is a special log which can be used to monitor certain kinds of

information, especially for problem-solving. Too much information could be confusing and

impractical if displayed all at the same time. Usually, you only need to display information

relating to a particular service or function. In addition, displaying too much information slows

WinRoute’s performance. Therefore, it is strongly recommended to monitor an essential part

of information and during the shortest possible period only.

Selection of information monitored by the Debug log

The window’s context menu for the Debug log includes (see chapter

22.2

) further options for

advanced settings of the log and for an on-click one-time view of status information.

Note: These options are available only to users with full administration rights for WinRoute

(see chapter

15.1

).

IP Traffic

This function enables monitoring of packets according to the user defined log expression.

Advertising