Netscreen

[Cj B]

> lr_debug can be set using the lr_config tool. There is not much
> documentation on the use of lr_config, but it does include an on-line
> help.
>
> From your error message, it seems that the log file isn't in WELF format
> since no log lines were successfully parsed. What does your Netscreen
> log look like?

Jan  7 04:02:02 router firewall: NetScreen device_id=firewall  
[NoName]system-notification-00257(traffic): start_time="2004-01-07 04:02:01" 
duration=0 policy_id=45 service=udp/port:3163 proto=17 src zone=Untrust dst 
zone=Trust action=Deny sent=0 rcvd=0 src=216.81.128.200 dst=216.81.228.132 
src_port=53 dst_port=3163

Jan  7 04:02:02 router firewall: NetScreen device_id=firewall  
[NoName]system-notification-00257(traffic): start_time="2004-01-07 04:02:01" 
duration=0 policy_id=45 service=udp/port:3163 proto=17 src zone=Untrust dst 
zone=Trust action=Deny sent=0 rcvd=0 src=216.81.128.200 dst=216.81.228.132 
src_port=53 dst_port=3163

Here's a sample from our logs. We were previously using the Webtrends software 
to create reports, so I think this should be WELF, right? Though I admit the 
logs look nothing like the sample logs do on the website. 

Thanks, 
Cj B

-- 
To UNSUBSCRIBE, email to questions-request at logreport.org with a subject of 
"unsubscribe". Trouble? Send an email with subject "help" to 
questions-request at logreport.org