D-Link DFL-260E Log Reference Guide for DFL-260E - Page 32

1.2. Context Parameters Chapter 1. Introduction ipproto ipdatalen [srcport] [destport] [tcphdrlen] [udptotlen] [[tcpflag]=1] [icmptype] [echoid] [echoseq] [unreach] [redirect] [icmpcode] The IP Protocol. The IP data length. The source port. Valid if the protocol is TCP or UDP. The destination port. Valid if the protocol is TCP or UDP. The TCP header length. Valid if the protocol is TCP. The total UDP data length. Valid if the protocol is UDP. The specific TCP flag is set. Valid if the protocol is TCP. Possible values for tcpflag: syn, rst, ack, psh, fin, urg, ece, cwr and ns. The ICMP sub-protocol name. Valid if the protocol is ICMP. The ICMP echo ID. Valid if the protocol is ICMP and sub-protocol is echo. The ICMP echo sequence number. Valid if the protocol is ICMP and sub-protocol is echo. The ICMP destination unreachable code. Valid if the protocol is ICMP and sub-protocol is destination unreachable. The ICMP redirect code. Valid if the protocol is ICMP and sub-protocol is redirect. The ICMP sub-protocol code. Valid if the protocol is ICMP and sub-protocol is not echo, destination unreachable or redirect. Connection Additional information about a connection. Certain parameters may or may not be included depending on the type and status of the connection. For example, the number of bytes sent by the originator and terminator is only included if the connection is closed. conn The status of the connection. Possible values: open, close, closing and unknown. connipproto The IP protocol used in this connection. connrecvif The name of the receive interface. connsrcip The source IP address. [connsrcport] The source port. Valid if the protocol is TCP or UDP. [connsrcidt] The source ID. Valid if the protocol is not TCP or UDP. conndestif The name of the destination interface. conndestip The destination IP address. [conndestport] The destination port. Valid if the protocol is TCP or UDP. [conndestidt] The destination ID. Valid if the protocol is not TCP or UDP. [origsent] The number of bytes sent by the originator in this connection. Valid if the connection is closing or closed. [termsent] The number of bytes sent by the terminator in this connection. Valid if the 32