R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)

137
2 -rw- 1747 Aug 07 2009 04:05:38 vrpcfg.cfg
3 -rw- 524288 Aug 13 2009 01:27:40 basicbtm.bin
4 -rw- 524288 Aug 13 2009 01:27:40 extendbtm.bin
249852 KB total (232072 KB free)
File system type of cf: FAT32
<DeviceA> cd logfile
<DeviceA> more logfile.log
……omitted……
%@250005%Jul 7 04:20:04:72 2005 DeviceA USERLOG/7/NAT:
ICMP; 192.168.1.6:768--->1.1.1.1:12288; 2.2.2.2:768;
[2005/07/07 04:20:03-0000/00/00 00:00:00];
Operator 8: Data flow created
%@250006%Jul 7 04:20:10:72 2005 DeviceA USERLOG/7/NAT:
ICMP; 192.168.1.6:768--->1.1.1.1:12288; 2.2.2.2:768;
[2005/07/07 04:20:03-2005/07/07 04:20:09];
Operator 1: Normal over
%@250007%Jul 7 04:20:30:72 2005 DeviceA USERLOG/7/NAT:
ICMP; 192.168.1.6:768--->1.1.1.1:12288; 2.2.2.2:768;
[2005/07/07 04:20:29-0000/00/00 00:00:00];
Operator 8: Data flow created
……omitted……
Besides NAT logs, the log file includes other system logs. Table 6 explains the NAT logs:
Table 6 Description on NAT logs
Field Description
ICMP ICMP.
192.168.1.6:768 Source IP address and port number before translation.
1.1.1.1:12288 Source IP address and port number after translation.
2.2.2.2:768 Destination IP address and port number.
2005/07/07 04:20:03
2005/07/07 04:20:29
Start time of the NAT session (in this example, the time displayed is the device's
system time). When the logs are exported in UDP packet, the UDP packet
records the interval in seconds between the current system time and Greenwich
time 0 AM, Jan 1
st
, 1970. The log server, based on its own system time, converts
this interval and exports it.
2005/07/07 04:20:09
0000/00/00 00:00:00
End time of the NAT session.
0000/00/00 00:00:00 means that this time is uncertain.