WSM Reference Guide - WatchGuard Technologies

Traffic Logsttl="63"The packet “time to live”, in seconds.log_type="tr"The type of log message. All traffic logs use the “tr” log type.Traffic logs showing NATA traffic log can also include fields that show how NAT (network address translation) was handled forthis packet. An example log showing the ports the Firebox used to apply NAT to a packet is:Proxy LogsWhen the Firebox processes an event that is handled by a proxy, it writes more than one log message.The first entry shows the same information as a packet filter log, but includes two more fields:proxy_actThe name of the proxy action handling this packet. A proxy action is a set of rules for a proxythat can be applied to more than one policy.rule_nameThe name of the specific proxy rule handling this packet.content_typeThe type of content in the packet that is filtered by the proxy rule.Other log messages that the Firebox writes when an event is handled by a proxy contain a variable numberof fields. Here is an example of a group of log messages created by a user request handled by aproxy: