Hi Guys,
I am evaluating the logs in a 3600 device and came across quite a few errors recurring.
Does the error in the subject ring any bells ?
C3600> fw log -n -l
Error: Failed to read field product
31Oct2021 0:00:00 5 N/A 1 ctl cn=cp_mgmt,o=gw-9f7238..qtkfhz > daemon LogId: <max_null>; ContextNum: <max_null>; OriginSicName: cn=cp_mgmt,o=gw-9f7238..qtkfhz; log_sys_message: Log file has been switched to: 2021-10-31_000000.log;
Error: Failed to read field product_family
Below are the reference logs:
=========================
31Oct2021 0:00:00 5 N/A 3 accept cn=cp_mgmt,o=gw-9f7238..qtkfhz > eth1 LogId: 0; ContextNum: <max_null>; OriginSicName: cn=cp_mgmt,o=gw-9f7238..qtkfhz; inzone: External; outzone: Local; service_id: nbdatagram; src: 10.0.0.124; dst: 10.0.0.255; proto: udp; UP_match_table: TABLE_START; ROW_START: 0; match_id: 1; layer_uuid: 8a994dd3-993e-4c0c-92a1-a8630b153f4c; layer_name: Network; rule_uid: 60e2929c-4371-402b-bf57-3f2efca62cad; rule_name: Cleanup rule; ROW_END: 0; UP_match_table: TABLE_END; ProductName: VPN-1 & FireWall-1; svc: nbdatagram; sport_svc: nbdatagram;
Error: Failed to read field service
31Oct2021 0:00:00 5 N/A 4 drop cn=cp_mgmt,o=gw-9f7238..qtkfhz < eth1 LogId: 1; ContextNum: <max_null>; OriginSicName: cn=cp_mgmt,o=gw-9f7238..qtkfhz; TCP packet out of state: First packet isn't SYN; tcp_flags: FIN-ACK; src: 10.0.0.198; dst: 184.85.85.130; proto: tcp; ProductName: VPN-1 & FireWall-1;
Error: Failed to read field product_family
31Oct2021 0:00:00 5 N/A 5 accept cn=cp_mgmt,o=gw-9f7238..qtkfhz > eth1 LogId: 0; ContextNum: <max_null>; OriginSicName: cn=cp_mgmt,o=gw-9f7238..qtkfhz; inzone: External; outzone: Local; service_id: nbdatagram; src: 10.0.0.29; dst: 10.0.0.255; proto: udp; UP_match_table: TABLE_START; ROW_START: 0; match_id: 1; layer_uuid: 8a994dd3-993e-4c0c-92a1-a8630b153f4c; layer_name: Network; rule_uid: 60e2929c-4371-402b-bf57-3f2efca62cad; rule_name: Cleanup rule; ROW_END: 0; UP_match_table: TABLE_END; ProductName: VPN-1 & FireWall-1; svc: nbdatagram; sport_svc: nbdatagram;
Error: Failed to read field service
I see the error both in accept as well as drop rules ( cleanup rules) and would like to know why am I seeing this ?
Appreciate any directions here.
Best regards
Srini
