This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AFC log

Hello, I was just wondering if there is a list with app id's blocked.
Because now the afc log is saying:

2015:10:20-16:24:33 WERSG01-1 ulogd[20507]: id="2017" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Alert" action="log" fwrule="2" outitf="ppp0" mark="0x207c" app="124" srcmac="7a:5b:b3:f6:8c:03" srcip="10.250.10.2" dstip="8.8.8.8" proto="17" length="88" tos="0x00" prec="0x00" ttl="127" srcport="65117" dstport="53"

I really want to know what app 124 is.

Thanks

This thread was automatically locked due to age.

Parents

0 BAlfson over 9 years ago

Thanks, Scott, you are a well-spring of knowledge!

You gave me an idea for grep:
grep ' 124$' /var/pattern/appctrl4/4.1/config/applications_ids

That returned:
DNS 124

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 9 years ago

Thanks, Scott, you are a well-spring of knowledge!

You gave me an idea for grep:
grep ' 124$' /var/pattern/appctrl4/4.1/config/applications_ids

That returned:
DNS 124

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data