topic Interpreting/Calculating debug timestamps in Firewall and Security Management

Interpreting/Calculating debug timestamps

Rana — Fri, 17 Sep 2021 05:44:46 GMT

Can someone explain, how to interpret the timestamps (if these are timestamps) of debug-messages. Seems not to be epoche-time or uptime counters.

For example:

@;1110845025;[cpu_4];[fw4_7];fw_log_drop_ex: Packet proto=6 x.x.x.x:56258 -> y.y.y.y:443 dropped by fw_first_packet_state_checks Reason: First packet isn't SYN;

Thanks in advance
Christian

Re: Interpreting/Calculating debug timestamps

PhoneBoy — Mon, 20 Sep 2021 03:02:17 GMT

I suppose it depends on how you interpret that number.
I don't know for certain, but it seems like "seconds since boot" or "seconds since kernel modules loaded" or even possibly "seconds since last policy install."

Re: Interpreting/Calculating debug timestamps

amoruck — Tue, 01 Oct 2024 10:40:43 GMT

I faced the same problem and I must say that this is really a bad choice because logs without a timestamp are useless in most cases.