Log Help

Your router will log security-related events such as denied incoming service requests, hacker probes, and administrator logins, according to your settings on this screen.

If you have set up content filtering on the Block Sites page, you can also log when someone on your network tried to access a blocked site.

If you have E-mail notification on, you'll receive these logs in an E-mail message. If you don't have E-mail notification set up, you can view the logs here.

To delete all log entries:

• Click Clear Log.

To see the most recent entries:

• Click Refresh.

To E-mail the log now:

• Click Send Log.

Include in Log

Use these checkboxes to determine which events are included in the log. Checking all options will increase the size of the log, so it is good practice to disable any events which are not really required.

• Known DoS attacks and Port Scans - If checked, Denial of Service attacks, as well as port scans, will be logged.
• Attempted access to blocked sites - If checked, the router will log attempts to access sites which are blocked by the "Block Sites" filter.
• All Websites and news groups visited - If checked, all visited websites and newsgroups are logged.
• All Incoming TCP/UDP/ICMP traffic - If checked, all incoming TCP/UDP/ICMP connections and traffic is logged.
• All Outgoing TCP/UDP/ICMP traffic - If checked, all outgoing TCP/UDP/ICMP connections and traffic is logged.
• Other IP traffic - If checked, all other traffic (IP packets which are not TCP, UDP, or ICMP) is logged.
• Router operation (start up, get time, etc) - If checked, Router operations, such as starting up and getting the time from the Internet Time Server, are logged.
• Connection to the Web-based interface of this Router - If checked, Admininistrator connections to the Web-based interface will be logged.
• Other connections and traffic to this Router - If checked, this will log traffic sent to this Router (rather than through this Router to the Internet).

• Allow duplicate log entries - If checked, then events or packets which fall within more than one (1) category above will have a log entry for each category in which they belong. This will generate a large number of log entries.
  If unchecked, then events or packets will only be logged once. Usually, this should be left unchecked.

Syslog

Enable one of these three options, as required:

• Disable - Select this if you don't have a Syslog server.
• Broadcast on LAN - the Syslog data is broadcast, rather than sent to a specific Syslog server. Use this if your Syslog Server does not have a fixed IP address, or different PCs may act as the Syslog server.
• Send to this Syslog server - If your Syslog server has a fixed IP address, select this option, and enter the IP address of your Syslog server.