Logging issue in PIX 6.3

manoj-wadhwa · ‎10-30-2009

Hi Champs,

I have configured timestamp logging on PIX 506E version 6.3(5). However the output of the log message does not give the timestamp. Let me know if i am missing out of anything. Thanks in advance.

show log

Syslog logging: enabled

Facility: 20

Timestamp logging: enabled

Standby logging: disabled

Console logging: disabled

Monitor logging: disabled

Buffer logging: level debugging, 49191709 messages logged

Trap logging: level informational, 40287472 messages logged

302013: Built outbound TCP connection 16430543 for outside:A.B.C.D/443 (A.B.C.D/443) to inside:172.16.150.99/46579 (A.B.C.D/46579)

302013: Built outbound TCP connection 16430544 for outside:A.B.C.D/443 (A.B.C.D/443) to inside:172.16.150.99/46580 (A.B.C.D/46580)

302013: Built outbound TCP connection 16430545 for outside:A.B.C.D/443 (A.B.C.D/443) to inside:172.16.150.99/46581 (v/46581)

Best Regards,

Manoj

Collin Clark · ‎10-30-2009

Can you post your logging config?

service timestamps log datetime msec should enable time stamping

manoj-wadhwa · ‎10-31-2009

Hi Collin,

Thanks for the reply, however PIX does not seem to have this sort of command. Below is the output

PIXFW(config)# service timestamps log datetime msec

Usage: service {resetinbound|resetoutside}

PIXFW(Config)(config)#

We do have ASA in other locations, however with only "logging timestamp", it does show the timestamp in the logging. Any further thoughts on this? Thanks again.

Regards,

Manoj

Collin Clark · ‎11-02-2009

Manoj-

Sorry about that, I went into a router that I thought was a PIX. After looking in the command reference for 6.3, it states

Specify that syslog messages sent to the syslog server should have a time stamp value on each message.

Looks like you can't time stamp in the local buffer.

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/gl.html#wp1028090