https://community.cisco.com/t5/network-security/decoding-ips-logs/m-p/2027625#M54623 <P>Hi,</P><P></P><P>Need guidance on decoding IPS syslogs(alerts). We monitor IPS logs and there we could see some decoded messages appearing for cid.context.cid:fromTarget, cid.context.cid.fromAttacket, cid.triggerPacket fields. Would like to understand what these fields are, how to decode these messages (any tools/url for decoding), why cisco has made these contents to appear decoded (any specific reason), how this will help us in analyzing such alerts.</P><P></P><P>Thanks!</P><P></P><P>-Jag.</P><P></P> Sun, 10 Mar 2019 12:46:56 GMT jagadeeshan.s 2019-03-10T12:46:56Z https://community.cisco.com/t5/network-security/decoding-ips-logs/m-p/2027625#M54623 <P>Hi,</P><P></P><P>Need guidance on decoding IPS syslogs(alerts). We monitor IPS logs and there we could see some decoded messages appearing for cid.context.cid:fromTarget, cid.context.cid.fromAttacket, cid.triggerPacket fields. Would like to understand what these fields are, how to decode these messages (any tools/url for decoding), why cisco has made these contents to appear decoded (any specific reason), how this will help us in analyzing such alerts.</P><P></P><P>Thanks!</P><P></P><P>-Jag.</P><P></P> Sun, 10 Mar 2019 12:46:56 GMT https://community.cisco.com/t5/network-security/decoding-ips-logs/m-p/2027625#M54623 jagadeeshan.s 2019-03-10T12:46:56Z https://community.cisco.com/t5/network-security/decoding-ips-logs/m-p/2027626#M54624 <P>Please use the below guide for message fields</P><P>http://www.cisco.com/c/en/us/td/docs/security/ips/7-0/configuration/guide/cli/cliguide7/cli_packets.html</P> Mon, 10 Mar 2014 07:53:11 GMT https://community.cisco.com/t5/network-security/decoding-ips-logs/m-p/2027626#M54624 Saurav Lodh 2014-03-10T07:53:11Z