Troubleshooting guide

190
Appendix C: Log Viewer "info" Messages
In This Chapter:
Messages in the 'info' column of the log viewer.........................................................................................190
More Information............................................................................................................................................192
HTTP Security Server "Reason" Messages .................................................................................................192
Log Encryption Error Messages ...................................................................................................................192
SecuRemote Error Messages ......................................................................................................................192
Messages in the 'info' column of the log viewer
The 'info' column of the log viewer includes all the fields which do not belong in any other column of the log
file. Some of the VPN-1/FireWall--1 log fields do not have a matching column in the log viewer. If such a field
is empty, it will not be displayed, but if it is not empty it will be displayed in the ‘info’ column of the log
viewer.
Therefore, the info column could look as follows:
"len 44 resource http://www.checkpoint.com/"
Which means that the 'len' field contains the value '44', and the 'resource' field contains the value
'http://www.checkpoint.com/'.
The following Log fields do not have matching columns:
Log fields which do not have matching columns
FIELD MEANING
Agent The name of the mail server from which SMTP mail has been received.
Alert The type of alert generated:
"alert", "snmptrap", "mail", "useralert", "spoofalert" or "userauthalert".
cat_server The name of the UFP server.
Category The UFP category which matches a certain URL.
Decryption failure: Message with the reason why decryption failed. The list of possible messages
appears on pages 259-267 of the VPN Guide, Check Point 2000 (pages 133-
139 of the VPN-1 User Guide, version 4.0)
Encryption failure: Message with the reason why encryption failed. The list of possible messages
appears on pages 259-267 of the VPN Guide, Check Point 2000 (pages 133-
139 of the VPN-1 User Guide, version 4.0)
Expire The SAM request will expire at this time
File In FTP account logs, the name of the file downloaded/uploaded by FTP.
From The "from" address of the SMTP mail message, after a possible translation.
h_len The length of the IP header.
Icmp-type The ICMP type of an ICMP packet.
Icmp-code The icmp code of an icmp packet.