We have just recently (the weekend) change servers.. but unsure why this would of affected it.
I monitor port 514 on my computer, and then the application sends it to an sql database, where i only store the information that i need etc etc etc.
Now is does not give me a "dstname:" within the string, but only a "dst:" (see below)
<134>id=firewall sn=0017C526C0E4 time="2009-04-29 15:50:57 UTC" fw=xxx.xxx.xxx.xxx 65 pri=6 c=262144 m=98 msg="Connection Opened" n=551822 usr="admin" src=xxx.xx.xx.xxx:2768:LAN:xxxxx.xxxx.local dst=209.85.229.104:80:WAN:ww-in-f104.google.com proto=tcp/http
Can anyone offer me any advise, or should it just be like this....
Many thanks in advance.
I monitor port 514 on my computer, and then the application sends it to an sql database, where i only store the information that i need etc etc etc.
Now is does not give me a "dstname:" within the string, but only a "dst:" (see below)
<134>id=firewall sn=0017C526C0E4 time="2009-04-29 15:50:57 UTC" fw=xxx.xxx.xxx.xxx 65 pri=6 c=262144 m=98 msg="Connection Opened" n=551822 usr="admin" src=xxx.xx.xx.xxx:2768:LAN:xxxxx.xxxx.local dst=209.85.229.104:80:WAN:ww-in-f104.google.com proto=tcp/http
Can anyone offer me any advise, or should it just be like this....
Many thanks in advance.