Juniper JUNOS OS 10.3 - SYSTEM LOG MESSAGES REFERENCE 7-12-2010 User Manual

ASP_SFW_CREATE_REJECT_FLOW
System Log Message syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type
Description The packet with the indicated characteristics matched a stateful firewall rule that has
the 'reject' action, and the stateful firewall created a reject flow. The matching packet
contained the indicated information about its protocol (numerical identifier and name),
application, source (logical interface name, IP address, and port number), and destination
(IP address and port number).
Type Event: This message reports an event, not an error
Severity notice
Facility LOG_PFE
ASP_SFW_FTP_ACTIVE_ACCEPT
System Log Message syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type nat-information
Description When the stateful firewall receives PORT/EPRT commands in the control channel, it
creates a flow in anticipation of an FTP data connection from client to server. The packet
with the indicated characteristics matched such a flow. If the flow requires Network
Address Translation (NAT) services, NAT information appears at the end of the message.
The matching packet contained the indicated information about its protocol (numerical
identifier and name), application, source (logical interface name, IP address, and port
number), and destination (IP address and port number).
Type Event: This message reports an event, not an error
Severity notice
Facility LOG_PFE
ASP_SFW_FTP_PASSIVE_ACCEPT
System Log Message syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type nat-information
Description When the stateful firewall receives PASV/EPSV commands in the control channel, it
creates a flow in anticipation of an FTP data connection from server to client. The packet
with the indicated characteristics matched such a flow. If the flow requires Network
Address Translation (NAT) services, NAT information appears at the end of the message.
The matching packet contained the indicated information about its protocol (numerical
identifier and name), application, source (logical interface name, IP address, and port
number), and destination (IP address and port number).
Type Event: This message reports an event, not an error
89Copyright © 2010, Juniper Networks, Inc.
Chapter 9: ASP System Log Messages

Juniper JUNOS OS 10.3 - SYSTEM LOG MESSAGES REFERENCE 7-12-2010 Specifications

General

Brand	Juniper
Model	JUNOS OS 10.3 - SYSTEM LOG MESSAGES REFERENCE 7-12-2010
Category	Software
Language	English