Future start log entry

cancel
Showing results for 
Search instead for 
Did you mean: 

Future start log entry

L1 Bithead

Noticed a lot of traffic from one machine, went to investigate and found a LOT of traffic.

2111 Petabytes.

Strange glitch?  Or does one of my users have a time machine?

Capture.JPG

3 REPLIES 3

L6 Presenter

Hi Hotcg,

I have never seen future date, better open a case for future date issue.

Byte Rec/sent are calculated at the end of session. Lets say if there is a GRE tunnel passing through firewall and it was up for 1 year and then went down. In this circumstance firewall considered all packet exchange through out year between source/destination.

May be something similar is happening here.

Regards,

Hardik Shah

L7 Applicator

Hello Holtcg,

It's a known software issue on PAN OS 6.0.0 and few other releases: Bug 54347 - Traffic log for ping bytes count incorrect.

Please refer below mentioned Document for more detail information: PAN-OS 5.0.8: Addressed Issues

Bug 54347:- Extremely large amounts of traffic (Exabytes, or Billions of Gigabytes) were showing up in the ACC tab and logs for users. An issue where the date of record showed as starting in 2031 caused the incorrect counter of traffic, due to the date being set in the future. Date verification is now supported to prevent this from occurring.

Hope this helps.

Thanks

Hello Holtcg,

You might still continue to see this as it is still being investigated, probably one of the upcoming versions should have a fix for it.

Regards,

Dileep

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!