Hi Jason

At 21:31 05/02/02 -0800, Jason C. Leach wrote:
>If I have an entry:
>Packet log: remote DENY eth0 PROTO=6 208.181.x.y:3254 208.181.x.y:80 L=48 
>S=0x00 I=63245 F=0x4000 T=121 SYN (#15)
>
>What does the
>PROTO=6
><snip>
>SYN
>#15
>
>Mean.

There's a really handy one-sheet PDF file about interpreting these log entries:
http://leaf.sourceforge.net/devel/msensney/packetlog.pdf

There's also an automatic tool that extracts all the important information 
for you:
http://www.echogent.com/cgi-bin/fwlog.pl

cheers

Julian

-- 
[EMAIL PROTECTED]
www.ljchurch.co.uk


_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to