How to use Packet Filter option for live logs IP adress

Hi Nick KEY  If you are referring XG Live Log Viewer filter then the below option will help to add a filter as per your requirements. If below not the one which you are referring in your query then please share more info with snapshot where you are trying to search above details.

Hi Nick KEY  If you are referring XG Live Log Viewer filter then the below option will help to add a filter as per your requirements. If below not the one which you are referring in your query then please share more info with snapshot where you are trying to search above details.

I want to know which port from my machine is blocked by UTM 9

Hey Nick KEY ,
You can use the following key string to search:  dstport="8472"
ref screenshot below:

Also moved the thread to the correct forum i.e. UTM Firewall !

I dont know which ports. I have to put there my ip adress, but how can I put there IP

Hey Nick KEY ,

For IP address there are following strings:

1.)  srcip="X.X.X.X"
2.) dstip="X.X.X.X"

you mean so?

srcip="172.10.10.1"

Yes that's correct Nick KEY 

It does not show me the blocked ports

I want to connect from machine with IP 172.10.10.1 to the machine with IP 20.20.100.12  So how can be sure which ports is blocked to 10.20.100.12?

That is my issue

you'll be identify only the packets dropped and accepted ! so see if the destination port/ip packets are accepted or dropped ?

Yes I want to know which ports is dropped from 172.10.10.1 to 20.20.100.12

I put on the filtering following

srcip="172.10.10.1"  and try to connect

It show me now

 UDP 172.10.10.1:500--->20.20.100.12:500

TCP 172.10.10.1:49688--->20.20.100.12:6501

UDP 172.10.10.1:49689--->20.20.100.12:6502

TCP 172.10.10.1:49690--->20.20.100.12:6502

What should I now define as services???

In that case I'd suggest, open a putty session > login with the root
under the cd /var/log directory and execute the following cmd:
#cat /var/log/packetfilter.log | grep <srcip=x.x.x.x> | grep <dstip=xxxx>