Generated, start and receive time detailed log view

Reply
L6 Presenter

Generated, start and receive time detailed log view

Hello Guys,

 

How to interpret generated, start and receive time under the detailed log view for the particular session:

 

DT.PNG

 

Thank you,

Myky


Accepted Solutions
L7 Applicator

start time is when the session itself (SYN packet) started

generated is when the dataplane started building a log entry

receive is when the management plane (or panorama if you're forwarding) received the log to be written in the logdb

 

 

hope this helps :)

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post


All Replies
L7 Applicator

start time is when the session itself (SYN packet) started

generated is when the dataplane started building a log entry

receive is when the management plane (or panorama if you're forwarding) received the log to be written in the logdb

 

 

hope this helps :)

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post

L6 Presenter

Nice. I guess for UDP communication the first packet received by PA will logged as a start session entry. Thanks as always

L7 Applicator

yes, for UDP it's when the first packet of a session is received :)

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!