cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
764
Views
0
Helpful
2
Replies
Highlighted
Enthusiast

Syslog Sequence Numbering

Note: These messages have been extracted from Syslog Message Fields in a Wireshark trace file, so the leading numbers (e.g.: 86771, 86743) are not being pre-pended by the syslog server.

Example of a syslog message with "service sequence-numbers" NOT configured on the router:

86771: router: Oct 20 14:58:22.900 EDT: %FW-6-SESS_AUDIT_TRAIL_START: Start pop3 session: initiator (client-ip-addr:1904) -- responder (server-ip-addr:110)


Example of a syslog message with "service sequence-numbers" configured on the router:

86743: router: 087899: Oct 20 14:50:22.313 EDT: %FW-6-SESS_AUDIT_TRAIL: Stop pop3 session: initiator (client-ip-addr:1887) sent 50 bytes -- responder (server-ip-addr:110) sent 251 bytes


If "087899" is the sequence number in the above example, then what is "86743"?

Best Regards,

Mike

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Collaborator

Re: Syslog Sequence Numbering

Those are "logging message-count", as explained here:

http://ieoc.com/forums/t/10711.aspx

View solution in original post

2 REPLIES 2
Collaborator

Re: Syslog Sequence Numbering

Those are "logging message-count", as explained here:

http://ieoc.com/forums/t/10711.aspx

View solution in original post

Enthusiast

Re: Syslog Sequence Numbering

yjdabear:

Thank you for the informative response.

Best Regards,

Mike

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards