Hi,
Whenever an transaction is started in CiscoPIX, following syslog is generated by PIX.
%PIX-6-302013: Built outbound TCP connection 31174127 for outside:213.251.133.214/80 (213.251.133.214/80) to inside:172.24.194.107/52646 (64.211.150.166/54503)
When in transaction is closed, following teardown message is generated.
%PIX-6-302014: Teardown TCP connection 31173757 for outside:213.251.133.214/80 to inside:172.24.194.107/52622 duration
0:00:39 bytes 3549 TCP FINs
Unfortunately it gives me only the bytes that are transferred. It does not give me the number of bytes coming into the firewall and number of bytes going out of my firewall.
Basically I want to calculate bytes inbound and bytes outbound. Because of this I am forced to assume all bytes are received except FTP where another message gives the details of whether the file is retrieved or stored through FTP.
regards, MSK