Administrator's Guide - Kerio Software Archive

Logs
If the corresponding service is not defined in Kerio Control (refer to chapter 15.3), the
[Service] item is missing in the log.
• [User] james name of the user connected to the firewall from a host which
participates in the traffic.
If no user is currently connected from the corresponding host, the [User] item is
missing in the log.
• [Connection] TCP 192.168.1.140:1193 -> hit.top.com:80 — protocol, source
IP address and port, destination IP address and port. If an appropriate log is found in
the DNS module cache (see chapter 9.1), the host’s DNS name is displayed instead of
its IP address. If the log is not found in the cache, the name is not detected (such DNS
requests would slow Kerio Control down).
• [Duration] 121 sec — duration of the connection (in seconds)
• [Bytes] 1575/1290/2865 — number of bytes transferred during this connection
(transmitted /accepted /total).
• [Packets] 5/9/14 — number of packets transferred through this connection
(transmitted/accepted/total).
22.6 Debug Log
Debug (debug information) is a special log which can be used to monitor certain kinds of
information, especially for problem-solving. Too much information could be confusing and
impractical if displayed all at the same time. Usually, you only need to display information
relating to a particular service or function. In addition, displaying too much information slows
Kerio Control’s performance. Therefore, it is strongly recommended to monitor an essential
part of information and during the shortest possible period only.
Selection of information monitored by the Debug log
The window’s context menu for the Debug log includes (see chapter 22.2) further options for
advanced settings of the log and for an on-click one-time view of status information.
These options are available only to users with full administration rights for Kerio Control (see
chapter 16.1)..
IP Traffic
This function enables monitoring of packets according to the user defined log expression.
Figure 22.8
Expression for traffic monitored in the debug log
292