close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

show firewall log

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
show firewall log 
<detail>
<extensive>
<interface interface-name>
<logical-system (logical-system-name | all)>

Syntax (EX Series Switches)

content_copy zoom_out_map
show firewall log 
<detail>
<interface interface-name>

Description

Display log information about firewall filters.

Options

none	Display log information about firewall filters.
detail	(Optional) Display detailed information.
extensive	(Optional) Display hex dump of packet captured by log action.
interface `interface-name`	(Optional) Display log information about a specific interface.
logical-system (`logical-system-name` \| all)	(Optional) Perform this operation on all logical systems or on a particular system.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show firewall log command. Output fields are listed in the approximate order in which they appear.

Table 1: show firewall log Output Fields
Field Name	Field Description
`Time of Log`	Time that the event occurred.
`Filter`	Displays the name of a configured firewall filter or service filter only if the packet hit the filter’s `log` action in a kernel filter (in the control plane). For any traffic that reaches the Routing Engine, the packets hit the `log` action in the kernel. For all other logged packets (packet hit the filter’s `log` action in the Packet Forwarding Engine), this field displays `pfe` instead of a configured filter name.
`Filter Action`	Filter action: `A`—Accept `D`—Discard `R`—Reject
`Name of Interface`	Displays a physical interface name if the packet arrived at a port on a line card. Displays `local` if the packet was generated by the device's internal Ethernet interface, `em1` or `fxp1`, which connects the Routing Engine with the router’s packet-forwarding components.
`Name of protocol`	Packet’s protocol name: `egp`, `gre`, `icmp`, `ipip`, `ospf`, `pim`, `rsvp`, `tcp`, or `udp`.
`Packet length`	Length of the packet.
`Source address`	Packet’s source address.
`Destination address`	Packet’s destination address and port.

show firewall log

content_copy zoom_out_map
user@host>show firewall log
Time      Filter    Action Interface     Protocol  Src Addr      Dest Addr       
13:10:12  pfe       D      rlsq0.902     ICMP      192.0.2.2   192.0.2.1                   
13:10:11  pfe       D      rlsq0.902     ICMP      192.0.2.2   192.0.2.1 

show firewall log detail

content_copy zoom_out_map
user@host> show firewall log detail
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of 
interface: fxp0.0Name of protocol: TCP, Packet Length: 50824, Source address: 203.0.113.108:829, 
Destination address: 192.168.70.66:513
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0
Name of protocol: TCP, Packet Length: 1020, Source address: 203.0.113.108:829, 
Destination address: 192.168.70.66:513
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0
Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, 
Destination address: 192.168.70.66:513
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0
Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, 
Destination address: 192.168.70.66:513
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0
Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, 
Destination address: 192.168.70.66:513
Time of Log: 2004-10-13 10:37:17 PDT, Filter: f, Filter action: accept, Name of interface: fxp0.0
Name of protocol: TCP, Packet Length: 49245, Source address: 203.0.113.108:829, 
Destination address: 192.168.70.66:513
....

show firewall log extensive

content_copy zoom_out_map
user@host> show firewall log extensive
Time of Log: 2016-01-17 22:16:21 PST, Filter: pfe, Filter action: accept, Name of interface: xe-0/0/1.0
Name of protocol: UDP, Packet Length: 98, Source address: 203.0.113.1, Destination address: 203.0.113.1
 :  00-0F: 00 01 03 ee ee ff 00 01 - 09 22 55 ee 81 00 02 58
 :  10-1F: 08 00 45 00 00 62 00 00 - 00 00 40 11 77 8a 01 00
 :  20-2F: 00 01 02 00 00 01 1c 00 - 1c 00 00 4e 19 83 00 01
 :  30-3F: 02 03 04 05 06 07 08 09 - 0a 0b 0c 0d 0e 0f 10 11
 :  40-4F: 12 13 14 15 16 17 18 19 - 1a 1b 1c 1d 1e 1f 20 21
 :  50-5F: 22 23 24 25 26 27 28 29 - 2a 2b 00 00 00 00 00 00
 :  60-6F: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
 :  70-7F: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 

Release Information

Command introduced before Junos OS Release 7.4.

extensive option introduced in Junos OS Release 16.1.

logical-system option introduced in Junos OS Release 9.3.

arrow_backward PREVIOUS show firewall filter version

NEXT arrow_forward show firewall policer

Junos CLI Reference

ON THIS PAGE

show firewall log

Syntax

Syntax (EX Series Switches)

Description

Options

Required Privilege Level

Output Fields

Sample Output

show firewall log

show firewall log detail

show firewall log extensive

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry