On Fri, 20 Mar 2009 10:22:03 +0100 "ronny.raudstein" ronny.raudstein@kvinnherad.kommune.no wrote:
Here is an example syslog:
Mar 20 10:27:26 sw_1 607977: Mar 20 2009 10:20:06: %SEC-6-IPACCESSLOGP: list fraVLAN800 denied tcp x.x.x.x(1380) -> 64.94.137.105(80), 2 packets
What's that number doing there? 607977? Logengine doesn't expect that between the originating switch name and the colon...
(oh, and please don't forget to reply-to-all, let's remember to keep nav-users on the Cc list)