News: This forum is now permanently frozen.
Pages: [1]
Topic: Log entries direction  (Read 1037 times)
« on: January 07, 2009, 15:57:12 »
markb ****
Posts: 331

I am sending my log information to Wallwatcher as a syslog server.  I have a problem though that it shows my outbound traffic as inbound, thus having the local ip address in the remote column. I think I have traced this to the monowall. If I look at the raw logs.  For instance, I have this line in the raw logs.
Code:
14:53:35.219827 xl0 @100:8 p <Local IP Address>,3421 -> <Remote Ip address>,110 PR tcp len 20 48 -S K-S IN
This is clearly traffic coming in on the LAN interface (xl0) going out.  Any ideas why it is logged as IN?
« Last Edit: January 07, 2009, 16:00:28 by markb »
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines