PIX log messages

[jane.morris]

Can someone direct me to a document that explains what the "type" and "code" values mean that are associated with PIX log messages?

[pm]

Hello Jane,

You can look at the syslog message index in the PIX documentation:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63syslog/pixemsgs.htm

Regards

[jane.morris]

Thanks for your answer. I have already looked in this document, but I don't see any explanations for the type and code values which appear on some messages, e.g.

PIX-4-106023: Deny icmp src outside dst inside: (type3, code1) by access-group "outside"

I notice that the values for type and code change, although the message number remains 106023...just wondering what additional info the type and code values might indicate.

[nkhawaja · Accepted solution]

You can search for icmp types and codes on google.

ICMP type 3 is Destination Unreachable and code 1 is Host Unreachable

See the link below http://livenudefrogs.com/~anubis/icmp/

[jane.morris]

Aha! They are ICMP codes; I was just assuming they were Cisco codes.

Thanks for enlightening me.

Jane