ASP_SFW_RULE_ACCEPT
System Log Message syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type rule-set: rule-set-name, rule: rule-name,
term: term-name
Description The packet with the indicated characteristics matched the indicated term in the indicated
stateful firewall rule, which has an 'accept' action. If the rule belongs to a rule set, the
rule set name is also displayed. The stateful firewall accepted the flow to which the
packet belongs. The matching packet contained the indicated information about its
protocol (numerical identifier and name), application, source (logical interface name, IP
address, and port number), and destination (IP address and port number).
Type Event: This message reports an event, not an error
Severity info
Facility LOG_PFE
ASP_SFW_RULE_DISCARD
System Log Message syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type rule-set: rule-set-name, rule: rule-name,
term: term-name
Description The packet with the indicated characteristics matched the indicated term in the indicated
stateful firewall rule, which has a 'discard' action. If the rule belongs to a rule set, the rule
set name is also displayed. The stateful firewall discarded the packet. The matching
packet contained the indicated information about its protocol (numerical identifier and
name), application, source (logical interface name, IP address, and port number), and
destination (IP address and port number).
Type Event: This message reports an event, not an error
Severity notice
Facility LOG_PFE
ASP_SFW_RULE_REJECT
System Log Message syslog-prefix error-code: proto protocol-id (protocol-name) application: application,
source-interface-nameseparatorsource-address:source-port ->
destination-addressdestination-port, event-type rule-set: rule-set-name, rule: rule-name,
term: term-name
Description The packet with the indicated characteristics matched the indicated term in the indicated
stateful firewall rule, which has a 'reject' action. If the rule belongs to a rule set, the rule
set name is also displayed. If the packet used the User Datagram Protocol (UDP), the
stateful firewall generated an Internet Control Message Protocol (ICMP) error message.
If the packet used the Transmission Control Protocol (TCP), the stateful firewall generated
an RST packet. The matching packet contained the indicated information about its
Copyright © 2010, Juniper Networks, Inc.98
Junos 10.3 System Log Messages Reference
To Next Page
Loading...