LogAnalysis
[logs] "session" messages in Cisco FWSM logs? Mar 14 2008 01:46PM
Andrew Hay (andrewsmhay gmail com)
Hey All,

I've been struggling to find some sort of documentation on the Cisco site
(or elsewhere) that tell me why, all of a sudden, Cisco FWSM logs now have
the string "session" where there was no "session" string before :)

Example:

%FWSM-session-6-305011

For as far back as I can remember the format has always been
%FWSM-<facility>-<unique cisco id> (e.g. %FWSM-6-305011). Does anyone know
why/when this has changed and if there is any associated documentation
referencing it....anywhere?

--
Andrew Hay
blog: http://www.andrewhay.ca
email: andrewsmhay || at || gmail.com
LinkedIn Profile: http://www.linkedin.com/in/andrewhay
OSSEC Book: http://preview.tinyurl.com/2oy63f
Hey All,<br><br>I've been struggling to find some sort of documentation on the Cisco site (or elsewhere) that tell me why, all of a sudden, Cisco FWSM logs now have the string "session" where there was no "session" string before :)<br>
<br>Example:<br><br>%FWSM-session-6-305011<br><br>For as far back as I can remember the format has always been %FWSM-<facility>-<unique cisco id> (e.g. %FWSM-6-305011). Does anyone know why/when this has changed and if there is any associated documentation referencing it....anywhere?<br clear="all">
<br>-- <br>Andrew Hay<br>blog: <a href="http://www.andrewhay.ca">http://www.andrewhay.ca</a><br>email: andrewsmhay || at || <a href="http://gmail.com">gmail.com</a><br>LinkedIn Profile: <a href="http://www.linkedin.com/in/andrewhay">http://www.linkedin.com/in/a
ndrewhay</a><br>
OSSEC Book: <a href="http://preview.tinyurl.com/2oy63f">http://preview.tinyurl.com/2oy6
3f</a>
_______________________________________________
LogAnalysis mailing list
LogAnalysis (at) loganalysis (dot) org [email concealed]
http://www.loganalysis.org/mailman/listinfo/loganalysis

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus