VPN 3030 syslog format issue

Unanswered Question

It seems in the hostname field of the syslog I am getting some sort of a random generated number, (see below). The confoguration is set as syslog "Original" format and we have removed facility ID. Anyone run across this before?

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin;}

May 28 00:06:13 19259262 05/27/2010 17:06:12.300 SEV=4 IKE/123 RPT=11788

XXX.XXX.XXX.XXX Group [XXXXXXXXXX] User [XXXXXXXXXX] IKE lost contact with remote peer, deleting connection (keepalive type: DPD)

May 28 00:06:13 19259264 05/27/2010 17:06:12.300 SEV=5 IKE/194 RPT=43154

XXX.XXX.XXX.XXX Group [XXXXXXXXXX] User [XXXXXXXXXX] Sending IKE Delete With Reason

message: Connectivity to Client Lost.

May 28 00:06:40 19259291 05/27/2010 17:06:39.990 SEV=5 IKE/25 RPT=68826

XXX.XXX.XXX.XXX Group [XXXXXXXXXX] User [XXXXXXXXXX] Received remote Proxy Host data in ID Payload: Address XXX.XXX.XXX.XXX, Protocol 0, Port 0

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jennifer Halim Wed, 06/02/2010 - 04:20

That is actually the sequence number on VPN3030 for logging messages, not the hostname field.

Jennifer Halim Thu, 06/03/2010 - 03:50

Unfortunately you can't remove the sequence number and change it to the hostname/ip address.

There are 2 syslog formats for VPN Concentrator:

1) Original

2) Cisco IOS Compatible

However, unfortunately both doesn't include the hostname/ip address.

1) Original sample syslog:

3 11/04/2004 14:37:06.680 SEV=4 HTTP/47 RPT=17 New administrator login: admin.

2) Cisco IOS Compatible sample syslog:

3 2004 Nov 04 14:37:06.680 EDT -4:00 %HTTP-5-47:RPT=17 New administrator login: admin.


This Discussion