topic Re: Abnormal display of traffic log BYTES filed in Next-Generation Firewall Discussions

Abnormal display of traffic log BYTES filed

Felixcao — Sun, 20 Aug 2023 01:40:29 GMT

The customer found that some traffic logs have extremely large bytes, reaching 281.5T,

Looking at the log details, it was found that:

Question 1：

Details:

Type end

Bytes 281474976579754 ---- I think this is an incorrect display?

Bytes Received 2147483647

Bytes Sent 170

Repeat CountPackets1

Packets Sent 2

Bytes= Bytes sent + Bytes Received

=2147483647+170

=2147483817 This is the correct value

Question 2：

Generated Time 2023/08/17 15.07:55

start Time 2023/08/17 15:07:20

Receive Time 2023/08/17 15:07:55

The session lasts for 35 seconds and transmits 281.5T Bytes, which is too exaggerated.

The device is vm-300, version 10.2.4-h3

Do you have any suggestions? Can you determine the bugs in the version

Re: Abnormal display of traffic log BYTES filed

ozheng — Wed, 23 Aug 2023 09:54:55 GMT

Hello Felixcao,

The issue is currently under investigation.

You can open a case to TAC for an updated status.

Olivier

Re: Abnormal display of traffic log BYTES filed

Andreikin — Fri, 19 Jan 2024 21:12:34 GMT

Hello @Felixcao and @ozheng - is there any news on this case? We are having similar issue.

Re: Abnormal display of traffic log BYTES filed

ozheng — Sat, 20 Jan 2024 09:12:02 GMT

on which version are you running?

Maybe time to upgrade.

Re: Abnormal display of traffic log BYTES filed

renzanjo11 — Tue, 23 Jan 2024 10:18:40 GMT

HI @ozheng ,

I just encountered this issue with lots of GBs and Tb's in the traffic logs. I just want to ask if you have any idea whether this issue is confirmed to be a bug?

I am running PANOS 10.1.8

Regards,

Renz

Re: Abnormal display of traffic log BYTES filed

renzanjo11 — Wed, 24 Jan 2024 08:27:36 GMT

Hi,

Anyone has resolution for this issue?

Regards,

Renz

Re: Abnormal display of traffic log BYTES filed

ozheng — Thu, 25 Jan 2024 03:26:37 GMT

Hello Renzanjo11,

Please open a case to TAC to get formal confirmation.

Thank you.

Olivier

Re: Abnormal display of traffic log BYTES filed

Felixcao — Mon, 19 Feb 2024 04:44:10 GMT

Hi, Renzanjo11:

I opened a case before and TAC confirmed that it was a bug, but at that time, there was no plan to fix it, so I am not sure which version to fix,

1: This does not affect usage and can be ignored.

2: Try updating to the latest recommended version.

3: Open a case and confirm the fixed version with TAC.

Re: Abnormal display of traffic log BYTES filed

Marcin_Szy — Wed, 29 Oct 2025 07:11:25 GMT

Hi,

Our customer has the same behavior on 11.1.10-h1. TAC confirmed a bug that should be fixed in 11.1.14. It affects only log entries.