topic Re: Exporting Events to Excel Where do the Flags Come From? in General Topics https://live.paloaltonetworks.com/t5/general-topics/exporting-events-to-excel-where-do-the-flags-come-from/m-p/45339#M33323 <HTML><HEAD></HEAD><BODY><P>Not sure what Events your looking at but the flag fields for traffic logs are explained here.</P><P></P><P><A class="jive-link-external-small" href="https://live.paloaltonetworks.com/docs/DOC-1712">https://live.paloaltonetworks.com/docs/DOC-1712</A></P><P></P><P>Threat may be different and I believe are related to the action.</P><P></P><P>Dominic</P></BODY></HTML> Wed, 03 Aug 2011 02:09:03 GMT dburns 2011-08-03T02:09:03Z Exporting Events to Excel Where do the Flags Come From? https://live.paloaltonetworks.com/t5/general-topics/exporting-events-to-excel-where-do-the-flags-come-from/m-p/45338#M33322 <HTML><HEAD></HEAD><BODY><P>I exported some events to Excel and all of the events either have 0x0 or 0x8000 as a value in the flags column. If I look at the pcap for one of these events in WireShark I see different flags. What flags are being referenced in this column?</P></BODY></HTML> Tue, 02 Aug 2011 13:20:17 GMT https://live.paloaltonetworks.com/t5/general-topics/exporting-events-to-excel-where-do-the-flags-come-from/m-p/45338#M33322 heathedwards 2011-08-02T13:20:17Z Re: Exporting Events to Excel Where do the Flags Come From? https://live.paloaltonetworks.com/t5/general-topics/exporting-events-to-excel-where-do-the-flags-come-from/m-p/45339#M33323 <HTML><HEAD></HEAD><BODY><P>Not sure what Events your looking at but the flag fields for traffic logs are explained here.</P><P></P><P><A class="jive-link-external-small" href="https://live.paloaltonetworks.com/docs/DOC-1712">https://live.paloaltonetworks.com/docs/DOC-1712</A></P><P></P><P>Threat may be different and I believe are related to the action.</P><P></P><P>Dominic</P></BODY></HTML> Wed, 03 Aug 2011 02:09:03 GMT https://live.paloaltonetworks.com/t5/general-topics/exporting-events-to-excel-where-do-the-flags-come-from/m-p/45339#M33323 dburns 2011-08-03T02:09:03Z