ftp export log

MLaden — Wed, 23 Apr 2014 20:13:36 GMT

Anyone know how to translate this show CLI command into the ftp export equivalent?

> show log traffic src in 10.0.0.0

> ftp export log traffic ?? (assuming query would work)

I would prefer not to export all logs only need a subset.

Thanks,

Monica

Re: ftp export log

goku123 — Wed, 23 Apr 2014 20:40:14 GMT

The following worked (copied the query from the query builder in Monitor >traffic log):

on PA:

> ftp export log traffic query "addr.src in 192.168.53.212" start-time equal 2014/04/23@00:00:00 end-time equal 2014/04/24@00:00:00 to user:pass@10.66.18.169

On FTP Server:

$ less 53-PA-5050_traffic_2014_04_23_00_00_00_to_2014_04_24_00_00_00_0.csv

Domain,Receive Time,Serial #,Type,Threat/Content Type,Config Version,Generate Time,Source address,Destination address,NAT Source IP,NAT Destination IP,Rule,Source User,Destination User,Application,Virtual System,Source Zone,Destination Z

one,Inbound Interface,Outbound Interface,Log Action,Time Logged,Session ID,Repeat Count,Source Port,Destination Port,NAT Source Port,NAT Destination Port,Flags,IP Protocol,Action,Bytes,Bytes Sent,Bytes Received,Packets,Start Time,Elapsed

Time (sec),Category,Padding,seqno,actionflags,Source Country,Destination Country,cpadding,pkts_sent,pkts_received

1,2014/04/23 00:00:11,0009C100708,TRAFFIC,end,1,2014/04/23 00:00:12,192.168.53.212,4.2.2.2,10.66.24.53,4.2.2.2,openrule,,,dns,vsys1,trust-L3,untrust-L3,ethernet1/4,ethernet1/3,,2014/04/23 00:00:11,250042,1,53148,53,44317,53,0x400000,udp,allow,261,82,179,2,2014/04/22 23:59:39,31,any,0,1020013,0x4000000000000000,192.168.0.0-192.168.255.255,United States,0,1,1

1,2014/04/23 00:00:18,0009C100708,TRAFFIC,end,1,2014/04/23 00:00:19,192.168.53.212,172.17.132.243,10.66.24.53,172.17.132.243,openrule,,,netbios-ns,vsys1,trust-L3,untrust-L3,ethernet1/4,ethernet1/3,,2014/04/23 00:00:18,610294,1,137,137,44313,137,0x400000,udp,allow,184,184,0,3,2014/04/22 23:59:44,33,any,0,1020014,0x4000000000000000,192.168.0.0-192.168.255.255,172.16.0.0-172.31.255.255,0,3,0

Re: ftp export log

MLaden — Wed, 23 Apr 2014 20:41:54 GMT

Cool, easy enough 😉 Thanks so much!

topic ftp export log in General Topics

ftp export log

Re: ftp export log

Re: ftp export log