Hi below is a log line of barracuda web application firewall logs.
First line is header and second line is actual log line.
I just want to know VIP_IP is virtual IP or anything else if VIP IP is virtual IP then this is virtual IP of what?
It will be great if someone explain me the header in detail.
"TIMESTAMP","LEVEL","VIP_IP","VIP_PORT","CLIENT_IP","CLIENT_PORT","RULE_ID","RULE_TYPE","METHOD","ACTION","FOLLOW_UP","ATTACK","URL","DETAIL","PROTOCOL","SESSION_ID","USER_AGENT","PROXY_IP","PROXY_PORT","AUTHENTICATED_USER","REFERER"
"2012-07-17 08:35:49.094","Alert","172.26.53.50","443","144.36.136.152","11892","security-policy","Global","POST","LOG","None","Content length exceeded","cahoot.edfenergy.com/VoyagerProgramme/CustomerManagement/Business%20%20Function
Thanks.
Sachin Sakpal
