User`s guide

Pipeline System Administration
Configuring administration options
Pipeline User’s Guide Preliminary January 30, 1998 8-7
Syslog messages
Syslog messages have a standard format that is described below. In addition to
the normal traffic logged by Syslog, information may be generated for packets
seen by the Secure Access firewall, if specified by SAM. By default, SAM will
cause a syslog message to be generated for all packets blocked by a firewall.
Syslog messages use the format:
<date> <time> <router name> ASCEND: <interface> <message>
• <date> indicates the date the message was logged by syslog.
• <time> indicates the time the message was logged by syslog.
• <router name> indicates the router this message was sent from.
• <interface> is the name of the interface (ie0, wan0, and so on) or ‘call’ if the
packet is logged by the call filter as it brings up the link.
• The <message> format has a number of fields, one or more of which may be
present:
protocol The 4 hexadecimal digit Ether Type, or the network protocol
name—“arp,” “rarp,” “ipx,” “appletalk.”
The protocol for IP protocols, is either the IP protocol number (up
to 3 decimal digits) or one of the following names:
•ip-in-ip
•tcp
• icmp—In the special case of icmp, it will also include the
ICMP Code and Type ([Code]/[Type]/icmp).
•udp
•esp
•ah