topic Re: Future start log entry in General Topics

Future start log entry

holtcg — Fri, 25 Jul 2014 13:36:28 GMT

Noticed a lot of traffic from one machine, went to investigate and found a LOT of traffic.

2111 Petabytes.

Strange glitch? Or does one of my users have a time machine?

Re: Future start log entry

hshah — Fri, 25 Jul 2014 14:34:08 GMT

Hi Hotcg,

I have never seen future date, better open a case for future date issue.

Byte Rec/sent are calculated at the end of session. Lets say if there is a GRE tunnel passing through firewall and it was up for 1 year and then went down. In this circumstance firewall considered all packet exchange through out year between source/destination.

May be something similar is happening here.

Regards,

Hardik Shah

Re: Future start log entry

HULK — Fri, 25 Jul 2014 16:00:57 GMT

Hello Holtcg,

It's a known software issue on PAN OS 6.0.0 and few other releases: Bug 54347 - Traffic log for ping bytes count incorrect.

Please refer below mentioned Document for more detail information: PAN-OS 5.0.8: Addressed Issues

Bug 54347:- Extremely large amounts of traffic (Exabytes, or Billions of Gigabytes) were showing up in the ACC tab and logs for users. An issue where the date of record showed as starting in 2031 caused the incorrect counter of traffic, due to the date being set in the future. Date verification is now supported to prevent this from occurring.

Hope this helps.

Thanks

Re: Future start log entry

dreputi — Fri, 25 Jul 2014 16:51:13 GMT

Hello Holtcg,

You might still continue to see this as it is still being investigated, probably one of the upcoming versions should have a fix for it.

Regards,

Dileep