threat log and traffic log time not match

[Hsinyu]

Hi All, 

Same session id, see 37 entries in threat log at 9:28 and only 1 entry in traffic log at 11:16
Session ended reason is tcp-rst-from-client

There is a threat log before there is a traffic log
How to explain such a long time difference? Does anyone know what's going on?

thanks

[kiwi · Accepted solution]

Hi @Hsinyu ,

This is likely happening because you're traffic is logged at session end:

Kind regards,

-Kiwi.