PIX 7 syslog issue

balajisri · ‎05-07-2008

Is there a way to make the "show log" output from the pix firewall not to display the nameif names in its log.

The present buffer logs are only showing the nameif names for the logs. what we need is to show the real interface name in log instead of nameif name.

smahbub · ‎05-13-2008

Try using the command "show interface" which will provide both "Nameif" name and the "Real" name.

Sample output:

hostname> show interface

Interface GigabitEthernet0/0 "outside", is up, line protocol is up

for more info on this command refer:

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s3_72.html#wp1283345

balajisri · ‎05-14-2008

The issue that I am mentioning is not for viewing the nameif names and the real interface names.

What I need is when I do a "show log" on the pix, the log messages are displaying the nameif names for the logs. Instead of this I need it to show the real interface name. See below.

Present log:

-------------

May 14 19:58:14 158.98.123.14 May 14 2008 14:28:14 in02ofw01umi1fn : %PIX-4-106023: Deny tcp src ba ckbone:hub-jac/54784 dst pod-sr:130.103.176.41/1950 by access-group "backbone-20080227"

What is needed is

-------------------

May 14 19:58:14 158.98.123.14 May 14 2008 14:28:14 in02ofw01umi1fn : %PIX-4-106023: Deny tcp src Ethernet0:hub-jac/54784 dst Ethernet1:130.103.176.41/1950 by access-group "backbone-20080227"

Please let me know is there a way to acheive this.