TMS zl Management and Configuration Guide ST.1.1.100430

10-34
Troubleshooting
Troubleshooting the TMS zl Module in Routing Mode
■ id=[log family]
The log messages are divided into families and subfamilies. See Appendix
C, “Log Messages” for a list of log family names.
■ mid=[integer]
The message ID can help you find specific messages. Message IDs are
unique within their log family, so you will need to search for both the log
family (id=[log family]) and the message ID.
■ srcport=[integer], dstport=[integer]
To find messages by the source or destination port, replace [integer] with
the port number.
■ proto=[protocol]
To search for a protocol by name instead of by port number, replace
[protocol] with TCP, UDP, IKE, GRE, AH, ESP, and so on.
■ srczone=[zone], dstzone=[zone]
To find messages by source or destination zone, replace [zone] with the
name of the zone, such as Internal, Self, Zone3, and so on.
■ fw=[hostname]
If you are reading logs that have been collected from several network
devices (such as a syslog server or an SNMP management console that
collects SNMP traps), replace [hostname] with the name of a module to
select only the messages that the module generated.
■ ruleaction=[permit | deny]
To find log messages related to deny access policies only, you would
search for ruleaction=deny.
■ username=[manager | operator | userid]
Search for the username to see when someone logged on to the module
with that name or role.