Expert event log columns
The following table describes the columns in the Event Log tab of the Expert.
Column
|
Description
|
---|---|
Severity Icon
|
The severity of the event, as set in the Expert EventFinder Settings window.
|
Date/Time
|
The date and time this event occurred.
|
Layer
|
The network layer to which events of this type belong.
|
Event
|
The EventFinder definition which identified this packet as an event. The description may be modified to show additional information.
|
Source Addr
|
The source address for this packet. The node is identified by its logical address or by the symbolic name for that address if one exists in the Name Table.
|
Dest Addr
|
The destination address for this packet. The node is identified by its logical address or by the symbolic name for that address if one exists in the Name Table.
|
Source Port
|
The source port for this packet. If the port is a well known port, the protocol or application name will be shown instead of the port number.
|
Dest Port
|
The destination port for this packet. If the port is a well known port, the protocol or application name will be shown instead of the port number.
|
Packet
|
The packet number, as assigned in the Packets view of the capture window or capture file.
|
Flow ID
|
The ID (or call number, or flow index) of the flow (or call) to which the event pertains.
|
Request ID
|
Unique ID assigned to this individual HTTP request.
|
Call Number
|
Internally generated call ID. First captured call is call 1, second is call 2, and so on. Note: Do not confuse this with the “phone number” string that often appears in the gateway-assigned “Call ID” column.
|
Flow Index
|
Internally generated index for a single flow within a call. The first flow is index 1, second is 2, and so on. Signaling and control flows also consume index numbers, so it is rare that a call's media flows will occupy indices 1 and 2.
|