M500 shows traffic log coming from Firewall but

cancel
Showing results for 
Search instead for 
Did you mean: 

M500 shows traffic log coming from Firewall but

Cyber Elite
Cyber Elite

Strange issue here

 

Log collector M500  shows traffic logs from Firewall

But show logging status on Firewall does not show logs

 

show logging-status

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

-----------------------------------------------------------------------------------------------------------------------------
Type Last Log Created Last Log Fwded Last Seq Num Fwded Last Seq Num Acked Total Logs Fwded
-----------------------------------------------------------------------------------------------------------------------------
Log Collector : CMS 0
Connection IP : cms0
Conn Source IP : MS - def, LR - def
High speed mode : Disabled
Connection Status : MS - Inactive, LR - Inactive
Rate : 0 logs/sec

traffic Not Available Not Available 0 0 0
threat Not Available Not Available 0 0 0
hipmatch Not Available Not Available 0 0 0
gtp-tunnel Not Available Not Available 0 0 0
auth Not Available Not Available 0 0 0
userid Not Available Not Available 0 0 0
config Not Available Not Available 0 0 0
system Not Available Not Available 0 0 0

Log Collector : CMS 1
Connection IP : cms1
Conn Source IP : MS - def, LR - def
High speed mode : Disabled
Connection Status : MS - Inactive, LR - Inactive
Rate : 0 logs/sec

traffic Not Available Not Available 0 0 0
threat Not Available Not Available 0 0 0
hipmatch Not Available Not Available 0 0 0
gtp-tunnel Not Available Not Available 0 0 0
auth Not Available Not Available 0 0 0
userid Not Available Not Available 0 0 0
config Not Available Not Available 0 0 0
system Not Available Not Available 0 0 0

Log Collector : 007307001117
Connection IP : eocdc
Conn Source IP : MS - def, LR - def
High speed mode : Disabled
Connection Status : MS - Inactive, LR - Inactive
Rate : 0 logs/sec

traffic Not Available Not Available 0 0 0
threat Not Available Not Available 0 0 0
hipmatch Not Available Not Available 0 0 0
gtp-tunnel Not Available Not Available 0 0 0
auth Not Available Not Available 0 0 0
userid Not Available Not Available 0 0 0
config Not Available Not Available 0 0 0
system Not Available Not Available 0 0 0

 

 

debug log-receiver statistics

Logging statistics
------------------------------ -----------
Log incoming rate: 1671/sec
Log written rate: 1671/sec
Corrupted packets: 0
Corrupted URL packets: 0
Corrupted HTTP HDR packets: 0
Corrupted EMAIL HDR packets: 0
Logs discarded (queue full): 0
Traffic logs written: 4349657
GTP logs written: 0
Tunnel logs written: 0
Auth logs written: 0
Userid logs written: 126434
URL logs written: 3394818
Wildfire logs written: 0
Anti-virus logs written: 0
Widfire Anti-virus logs written: 0
Spyware logs written: 10352
Spyware-DNS logs written: 0
Attack logs written: 0
Vulnerability logs written: 14816
Fileext logs written: 8905
Fileext logs URL not written: 7549
Fileext logs URL not written (timedout): 0
URL cache age out count: 0
URL cache full count: 3277861
URL cache key exist count: 20252
URL cache wrt incomplete http hdrs count: 0
URL cache rcv http hdr before url count: 0
URL cache full drop count(url log not received): 0
URL cache age out drop count(url log not received): 0
Email hdr cache count: 0
Email hdr cache hit count: 0
Traffic alarms dropped due to sysd write failures: 0
Traffic alarms dropped due to global rate limiting: 0
Traffic alarms dropped due to each source rate limiting: 0
Traffic alarms generated count: 0
Netflow incoming count: 4857159
Log Forward count: 13
Log Forward discarded (queue full) count: 0
Log Forward discarded (send error) count: 0
Total logs not written due to disk unavailability: 0
Logs not written since disk became unavailable: 0

Summary Statistics:
Num current drop entries in trsum:0
Num cumulative drop entries in trsum:1329169
Num current drop entries in thsum:0
Num cumulative drop entries in thsum:228990
Num current drop entries in gtpsum:0
Num cumulative drop entries in gtpsum:0

External Forwarding stats:
Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min)
syslog 12128205 12128205 0 0 111636
snmp 0 0 0 0 0
email 0 0 0 0 0
raw 0 7778548 0 0 71727
http 0 0 0 0 0
autotag 0 0 0 0 0

MP
0 REPLIES 0
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!