threat log and traffic log time not match

Hsinyu — Fri, 23 Dec 2022 09:59:25 GMT

Hi All,

Same session id, see 37 entries in threat log at 9:28 and only 1 entry in traffic log at 11:16
Session ended reason is tcp-rst-from-client

There is a threat log before there is a traffic log
How to explain such a long time difference? Does anyone know what's going on?

thanks

Re: threat log and traffic log time not match

kiwi — Fri, 23 Dec 2022 12:24:22 GMT

This is likely happening because you're traffic is logged at session end:

Kind regards,

-Kiwi.