Viewing the Traffic Log

Whenever your computer makes a connection through the network, this transaction is recorded in the Traffic Log.

Viewing the Traffic Log

To view the Traffic Log on the Personal Firewall:

1. Click the down-arrow near the Logs icon on the toolbar, and then choose Traffic Log...
   
   OR
   
   Click Tools|Logs|Traffic Log...
   
   OR
   
   Right-click the Tool Bar icon, and then click Logs|Traffic Log...

You can also click the down-arrow next to the Logs icon to choose a different log. The most recently viewed log appears by default, but you can choose any of the logs to view.

2. From the View list, select Local View, the default setting, or Source View. You can select how you view local and remote IP addresses, MAC addresses, or ports/ICMP types.

• If you select Local View from the View list, then Remote Host, Remote MAC, Remote Port/ICMP Type, and Local Host, Local MAC, Local Port/ICMP Type information appear. The Remote information always represents the attempted attacker whereas Local information always represents your local system. Your system is always considered the Local system.

• If you select Source View from the View list, then Remote Host, Remote MAC, Remote Port/ICMP Type, and Local Host, Local MAC, Local Port/ICMP Type information no longer appear. Instead, Source Host, Source MAC, Source Port/ICMP Type, and Destination Host, Destination MAC, and Destination Port/ICMP Type appear.

• If someone sends a message or attacks your system, then the originator's IP address, MAC address, and port/ICMP type are listed in the Source Host, Source MAC, and Source Port/ICMP columns whereas your IP number, MAC address, and your port are listed in the Destination Host, Destination MAC, and Destination Port/ICMP Code because you are the recipient.

• If you send a message or attack someone else's system, then your IP address, MAC address and port/ICMP code are listed in the Source Host, Source MAC, and Source Port/ICMP Code columns whereas the recipient's IP number, MAC address, and port/ICMP type are listed in the Destination Host, Destination MAC, and Destination Port/ICMP code sections.

3. Click a different log name if you wish to view a different log.

4. Click Refresh or press F5 to update the log that you are viewing.

Icons for the Traffic Log

When you open a Traffic Log, icons are displayed at the left side of the first column. They are graphical representations of the kind of traffic logged on each line and provide an easy way to scan the Traffic Log. Traffic Log includes information about incoming and outgoing traffic.

Personal Firewall Traffic Log Parameters and Description

Each row represents a logged event, and each column displays information about the event.

Description and Data Fields for the Traffic Log

Below the rows of logged events are the Description and Data fields. When you click an event row, the entire row is highlighted. A description of the event is displayed in the Description field.

Back Tracing Traffic Events for the Traffic Log

1. From the Traffic Log file, click on the event you want to back trace so that the entire row is highlighted.

2. Either right-click the row and select Back Trace from the pop-up window or click the Action menu and select Back Trace.

3. The Personal Firewall traces the event information. The Back Trace Information window is displayed with a trace route log.

4. Click Detail at the bottom of the Back Trace Information window to view detailed information about the original IP address.
   A drop panel displays detailed information about the owner of the IP Address from which the traffic event originated.

5. Click Detail again to hide the information.

Viewing the Traffic Log Events by Date

To filter the log events by date:

1. Click the View menu in the Log Viewer window.

2. Select which events you want to view from the list:

3. The log is automatically displays the requested events.