WatchGuard Firebox System 4.6 User Guide

Displaying and hiding fieldsDisplaying and hiding fieldsUse the Preferences dialog box to show or hide columns displayed in LogViewer.From LogViewer:1 Select View => Preferences. Click the Filter Data tab.2 Enable the checkboxes of the fields you would like to display. Disable thecheckboxes of those columns you would like to hide.To hide columns, point the mouse at the right edge of the column heading in the main window andclick and drag the edge to the left until the column disappears.LogViewer displays log entries across several columns. Log entries sent to theWatchGuard log have a time stamp, host name, process name, and the process IDbefore the log summary. The following describes each column and its default status:NumberThe sequence number in the file. Default = HideDateThe date the record entered the log file. Default = ShowTimeThe time the record entered the log file. Default = ShowThe rest of the columns vary according to the type of event displayed. The events ofmost frequency and interest, however, are packet events, which would display dataas shown below:deny in eth0 339 udp 20 128 192.168.49.40 255.255.255.255 67 68(bootpc)The packet event fields are described here in order, from left to right.DispositionDefault = Show. The disposition can be allow, deny, or log, as follows:- Allow – Packet was permitted by the current set of filter rules.- Deny – Packet was dropped by the current set of filter rules.- Log – The eventual disposition of the current packet was unknown when theoutput was generated.DirectionDetermines whether the packet was logged when it was received by the interface(“in”) or when it was about to be transmitted by the Firebox (“out”). Default =HideInterfaceThe name of the network interface associated with the packet.Default = ShowTotal packet lengthThe total length of the packet in octets. Default = HideProtocolProtocol name, or a number from 0 to 255. Default = ShowVPN Manager Guide 105