Manual Chapter :
fw_log
Applies To:
Show VersionsBIG-IP APM
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0
BIG-IP Analytics
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0
BIG-IP LTM
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0
BIG-IP PEM
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0
BIG-IP AFM
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0
BIG-IP DNS
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0
BIG-IP ASM
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0
fw_log
Information Element (IE) | ID | Size (Bytes) | Notes |
---|---|---|---|
aclPolicyName | 12276 - 26 | Variable | This IE is omitted for NetFlow v9. |
aclPolicyType | 12276 - 25 | Variable | This IE is omitted for NetFlow v9. |
aclRuleName | 12276 - 38 | Variable | This IE is omitted for NetFlow v9. |
action | 12276 - 39 | Variable | This IE is omitted for NetFlow v9. |
bigipHostName | 12276 - 10 | Variable | This IE is omitted for NetFlow v9. |
bigipMgmtIPv4Address | 12276 - 5 | 4 | |
bigipMgmtIPv6Address | 12276 - 6 | 16 | |
contextName | 12276 - 9 | Variable | This IE is omitted for NetFlow v9. |
contextType | 12276 - 24 | Variable | This IE is omitted for NetFlow v9. |
observationTimeMilliseconds | 323 | 8 | |
destinationFqdn | 12276 - 99 | Variable | This IE is omitted for NetFlow v9. |
destinationGeo | 12276 - 43 | Variable | This IE is omitted for NetFlow v9. |
destinationIPv4Address | 12 | 4 | |
destinationIPv6Address | 28 | 16 | |
destinationTransportPort | 11 | 2 | |
deviceProduct | 12276 - 12 | Variable | This IE is omitted for NetFlow v9. |
deviceVendor | 12276 - 11 | Variable | This IE is omitted for NetFlow v9. |
deviceVersion | 12276 - 13 | Variable | This IE is omitted for NetFlow v9. |
dropReason | 12276 - 40 | Variable | This IE is omitted for NetFlow v9. |
msgName | 12276 - 14 | Variable | This IE is omitted for NetFlow v9. |
errdefsMsgNo | 12276 - 4 | 4 | |
flowId | 12276 - 3 | 8 | |
ipfixMsgNo | 12276 - 16 | 4 | |
protocolIdentifier | 4 | 1 | |
messageSeverity | 12276 - 1 | 1 | |
partitionName | 12276 - 2 | Variable | This IE is omitted for NetFlow v9. |
ingressVRFID | 234 | 4 | |
saTransPool | 12276 - 37 | Variable | This IE is omitted for NetFlow v9. |
saTransType | 12276 - 36 | Variable | This IE is omitted for NetFlow v9. |
sourceFqdn | 12276 - 98 | Variable | This IE is omitted for NetFlow v9. |
sourceGeo | 12276 - 44 | Variable | This IE is omitted for NetFlow v9. |
sourceIPv4Address | 8 | 4 | |
sourceIPv6Address | 27 | 16 | |
sourceTransportPort | 7 | 2 | |
sourceUser | 12276 - 93 | Variable | This IE is omitted for NetFlow v9. |
transDestinationIPv4Address | 12276 - 31 | 4 | |
transDestinationIPv6Address | 12276 - 32 | 16 | |
transDestinationPort | 12276 - 33 | 2 | |
transIpProtocol | 12276 - 27 | 1 | |
transRouteDomain | 12276 - 35 | 4 | |
transSourceIPv4Address | 12276 - 28 | 4 | |
transSourceIPv6Address | 12276 - 29 | 16 | |
transSourcePort | 12276 - 30 | 2 | |
transVlanName | 12276 - 34 | Variable | This IE is omitted for NetFlow v9. |
vlanName | 12276 - 15 | Variable | This IE is omitted for NetFlow v9. |
Information Element (IE) | ID | Size (Bytes) | Notes |
---|---|---|---|
action | 12276 - 39 | Variable | This IE is omitted for NetFlow v9. |
bigipHostName | 12276 - 10 | Variable | This IE is omitted for NetFlow v9. |
bigipMgmtIPv4Address | 12276 - 5 | 4 | |
bigipMgmtIPv6Address | 12276 - 6 | 16 | |
contextName | 12276 - 9 | Variable | This IE is omitted for NetFlow v9. |
observationTimeMilliseconds | 323 | 8 | |
destinationIPv4Address | 12 | 4 | |
destinationIPv6Address | 28 | 16 | |
destinationTransportPort | 11 | 2 | |
deviceProduct | 12276 - 12 | Variable | This IE is omitted for NetFlow v9. |
deviceVendor | 12276 - 11 | Variable | This IE is omitted for NetFlow v9. |
deviceVersion | 12276 - 13 | Variable | This IE is omitted for NetFlow v9. |
dosAttackEvent | 12276 - 41 | Variable | This IE is omitted for NetFlow v9. |
dosAttackId | 12276 - 20 | 4 | |
dosAttackName | 12276 - 21 | Variable | This IE is omitted for NetFlow v9. |
dosPacketsDropped | 12276 - 23 | 4 | |
dosPacketsReceived | 12276 - 22 | 4 | |
msgName | 12276 - 14 | Variable | This IE is omitted for NetFlow v9. |
errdefsMsgNo | 12276 - 4 | 4 | |
flowId | 12276 - 3 | 8 | |
ipfixMsgNo | 12276 - 16 | 4 | |
messageSeverity | 12276 - 1 | 1 | |
partitionName | 12276 - 2 | Variable | This IE is omitted for NetFlow v9. |
ingressVRFID | 234 | 4 | |
sourceIPv4Address | 8 | 4 | |
sourceIPv6Address | 27 | 16 | |
sourceTransportPort | 7 | 2 | |
vlanName | 12276 - 15 | Variable | This IE is omitted for NetFlow v9. |
Information Element (IE) | ID | Size (Bytes) | Notes |
---|---|---|---|
action | 12276 - 39 | Variable | This IE is omitted for NetFlow v9. |
attackType | 12276 - 46 | Variable | This IE is omitted for NetFlow v9. |
bigipHostName | 12276 - 10 | Variable | This IE is omitted for NetFlow v9. |
bigipMgmtIPv4Address | 12276 - 5 | 4 | |
bigipMgmtIPv6Address | 12276 - 6 | 16 | |
contextName | 12276 - 9 | Variable | This IE is omitted for NetFlow v9. |
contextType | 12276 - 24 | Variable | This IE is omitted for NetFlow v9. |
observationTimeMilliseconds | 323 | 8 | |
destinationIPv4Address | 12 | 4 | |
destinationIPv6Address | 28 | 16 | |
destinationTransportPort | 11 | 2 | |
deviceProduct | 12276 - 12 | Variable | This IE is omitted for NetFlow v9. |
deviceVendor | 12276 - 11 | Variable | This IE is omitted for NetFlow v9. |
deviceVersion | 12276 - 13 | Variable | This IE is omitted for NetFlow v9. |
msgName | 12276 - 14 | Variable | This IE is omitted for NetFlow v9. |
errdefsMsgNo | 12276 - 4 | 4 | |
flowId | 12276 - 3 | 8 | |
ipfixMsgNo | 12276 - 16 | 4 | |
ipintelligencePolicyName | 12276 - 45 | Variable | This IE is omitted for NetFlow v9. |
ipintelligenceThreatName | 12276 - 42 | Variable | This IE is omitted for NetFlow v9. |
protocolIdentifier | 4 | 1 | |
messageSeverity | 12276 - 1 | 1 | |
partitionName | 12276 - 2 | Variable | This IE is omitted for NetFlow v9. |
ingressVRFID | 234 | 4 | |
saTransPool | 12276 - 37 | Variable | This IE is omitted for NetFlow v9. |
saTransType | 12276 - 36 | Variable | This IE is omitted for NetFlow v9. |
sourceIPv4Address | 8 | 4 | |
sourceIPv6Address | 27 | 16 | |
sourceTransportPort | 7 | 2 | |
transDestinationIPv4Address | 12276 - 31 | 4 | |
transDestinationIPv6Address | 12276 - 32 | 16 | |
transDestinationPort | 12276 - 33 | 2 | |
transIpProtocol | 12276 - 27 | 1 | |
transRouteDomain | 12276 - 35 | 4 | |
transSourceIPv4Address | 12276 - 28 | 4 | |
transSourceIPv6Address | 12276 - 29 | 16 | |
transSourcePort | 12276 - 30 | 2 | |
transVlanName | 12276 - 34 | Variable | This IE is omitted for NetFlow v9. |
vlanName | 12276 - 15 | Variable | This IE is omitted for NetFlow v9. |
Information Element (IE) | ID | Size (Bytes) | Notes |
---|---|---|---|
bigipHostName | 12276 - 10 | Variable | This IE is omitted for NetFlow v9. |
bigipMgmtIPv4Address | 12276 - 5 | 4 | |
bigipMgmtIPv6Address | 12276 - 6 | 16 | |
observationTimeMilliseconds | 323 | 8 | |
deviceProduct | 12276 - 12 | Variable | This IE is omitted for NetFlow v9. |
deviceVendor | 12276 - 11 | Variable | This IE is omitted for NetFlow v9. |
deviceVersion | 12276 - 13 | Variable | This IE is omitted for NetFlow v9. |
msgName | 12276 - 14 | Variable | This IE is omitted for NetFlow v9. |
errdefsMsgNo | 12276 - 4 | 4 | |
ipfixMsgNo | 12276 - 16 | 4 | |
messageSeverity | 12276 - 1 | 1 | |
contextType | 12276 - 24 | Variable | This IE is omitted for NetFlow v9. |
contextName | 12276 - 9 | Variable | This IE is omitted for NetFlow v9. |
logprofileName | 12276 - 95 | Variable | This IE is omitted for NetFlow v9. |
logMsgName | 12276 - 97 | Variable | This IE is omitted for NetFlow v9. |
logMsgDrops | 12276 - 96 | 4 |
Information Element (IE) | ID | Size (Bytes) |
---|---|---|
destinationIPv4Address | 12 | 4 |
destinationIPv6Address | 28 | 16 |
destinationTransportPort | 11 | 2 |
ingressVRFID | 234 | 4 |
observationTimeMilliseconds | 323 | 8 |
protocolIdentifier | 4 | 1 |
sourceIPv4Address | 8 | 4 |
sourceIPv6Address | 27 | 16 |
sourceTransportPort | 7 | 2 |
Information Element (IE) | ID | Size (Bytes) |
---|---|---|
aclPolicyName | 12276 - 26 | Variable |
aclPolicyType | 12276 - 25 | Variable |
aclRuleName | 12276 - 38 | Variable |
action | 12276 - 39 | Variable |
attackType | 12276 - 46 | Variable |
bigipHostName | 12276 - 10 | Variable |
bigipMgmtIPv4Address | 12276 - 5 | 4 |
bigipMgmtIPv6Address | 12276 - 6 | 16 |
contextName | 12276 - 9 | Variable |
contextType | 12276 - 24 | Variable |
destinationFqdn | 12276 - 99 | Variable |
destinationGeo | 12276 - 43 | Variable |
deviceProduct | 12276 - 12 | Variable |
deviceVendor | 12276 - 11 | Variable |
deviceVersion | 12276 - 13 | Variable |
dosAttackEvent | 12276 - 41 | Variable |
dosAttackId | 12276 - 20 | 4 |
dosAttackName | 12276 - 21 | Variable |
dosPacketsDropped | 12276 - 23 | 4 |
dosPacketsReceived | 12276 - 22 | 4 |
dropReason | 12276 - 40 | Variable |
errdefsMsgNo | 12276 - 4 | 4 |
flowId | 12276 - 3 | 8 |
ipfixMsgNo | 12276 - 16 | 4 |
ipintelligencePolicyName | 12276 - 45 | Variable |
ipintelligenceThreatName | 12276 - 42 | Variable |
logMsgDrops | 12276 - 96 | 4 |
logMsgName | 12276 - 97 | Variable |
logprofileName | 12276 - 95 | Variable |
messageSeverity | 12276 - 1 | 1 |
msgName | 12276 - 14 | Variable |
partitionName | 12276 - 2 | Variable |
saTransPool | 12276 - 37 | Variable |
saTransType | 12276 - 36 | Variable |
sourceFqdn | 12276 - 98 | Variable |
sourceGeo | 12276 - 44 | Variable |
sourceUser | 12276 - 93 | Variable |
transDestinationIPv4Address | 12276 - 31 | 4 |
transDestinationIPv6Address | 12276 - 32 | 16 |
transDestinationPort | 12276 - 33 | 2 |
transIpProtocol | 12276 - 27 | 1 |
transRouteDomain | 12276 - 35 | 4 |
transSourceIPv4Address | 12276 - 28 | 4 |
transSourceIPv6Address | 12276 - 29 | 16 |
transSourcePort | 12276 - 30 | 2 |
transVlanName | 12276 - 34 | Variable |
vlanName | 12276 - 15 | Variable |