Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
420 Views 2 Replies Latest reply: Nov 7, 2013 11:58 AM by sliedl RSS
viswesh1406 Newcomer 2 posts since
Oct 31, 2013
Currently Being Moderated

Oct 31, 2013 2:02 AM

sidewinder logs

Hi All,

 

            Greetings, Good Morning

 

            I have few doubts in sidewinder logs. Few of the logs are posted below

 

              <133>Oct 30 00:02:02 sw1 auditd: date="2013-10-30 05:02:02 +0000",fac=f_dns_proxy,area=a_proxy,type=t_nettraffic,pri=p_major,pid=2083,logi d=0,cmd=dnsp,hostname=sw1.dtc.local,event="session end",netsessid=686a0527092ca,srcip=10.38.1.28,srcport=61132,srczone=internal,protocol=17,dst_geo=RU,dstip=83 .xx4.xx.228,dstport=53,dstzone=external,bytes_written_to_client=185,bytes_writte n_to_server=42,rule_name="Outbound Web_4",cache_hit=1,start_time="2013-10-30 05:02:02 +0000",application=DNS

               <133>Oct 30 01:22:20 sw1 auditd: date="2013-10-30 06:22:20 +0000",fac=f_dns_proxy,area=a_proxy,type=t_nettraffic,pri=p_major,pid=2083,logi d=0,cmd=dnsp,hostname=sw1.dtc.local,event="session end",netsessid=3ea405270a59c,srcip=10.38.1.28,srcport=61132,srczone=internal,protocol=17,dst_geo=US,dstip=4. 53.58.200,dstport=53,dstzone=external,bytes_written_to_client=241,bytes_written_ to_server=41,rule_name="Outbound Web_4",cache_hit=1,start_time="2013-10-30 06:22:20 +0000",application=DNS

 

           1)    What is a netsessid in the log?

 

           2) I am not finding any session open logs in my enviornment, using sidewinder 7

 

 

Regards,

M.Viswesh.

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points