topic Re: Report Destination port diferent in General Topics https://live.paloaltonetworks.com/t5/general-topics/report-destination-port-diferent/m-p/24019#M17502 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 10pt; line-height: 1.5em;">You will see port 0 if the protocol has no concept of port number. For example with ICMP. </SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">You can compare the traffic/threat logs and check kind of traffic triggered this threat. </SPAN></P></BODY></HTML> Fri, 30 May 2014 07:50:59 GMT nchong 2014-05-30T07:50:59Z Report Destination port diferent https://live.paloaltonetworks.com/t5/general-topics/report-destination-port-diferent/m-p/24018#M17501 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I have a doubt about this inform. I dont know why in my report depending on the source the detination port appears in the right column or not.</P><P>All those connections in this screeshot are in the port 161(SNMP) but only appears if the source ip is 172.16.29.151. If the souce ip 172.16.29.132 appears 0 in port destination,why??????? it should be appear 161 too??? the security rule is the same for both ip...</P><P></P><P><IMG alt="log.jpg" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/13705_log.jpg" style="height: 362px; width: 620px;" /></P><P></P><P>Thanks.</P></BODY></HTML> Thu, 29 May 2014 11:29:20 GMT https://live.paloaltonetworks.com/t5/general-topics/report-destination-port-diferent/m-p/24018#M17501 SOC_CSG 2014-05-29T11:29:20Z Re: Report Destination port diferent https://live.paloaltonetworks.com/t5/general-topics/report-destination-port-diferent/m-p/24019#M17502 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 10pt; line-height: 1.5em;">You will see port 0 if the protocol has no concept of port number. For example with ICMP. </SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">You can compare the traffic/threat logs and check kind of traffic triggered this threat. </SPAN></P></BODY></HTML> Fri, 30 May 2014 07:50:59 GMT https://live.paloaltonetworks.com/t5/general-topics/report-destination-port-diferent/m-p/24019#M17502 nchong 2014-05-30T07:50:59Z