NAT_SESSION_CREATED

This error tag corresponds to syslog messages notifying that a new session was created

There is no YANG model available yet to map this class of messages. Please check the Structured message example section to see the structure.

Implemented for

  • junos

Syslog message example

<14>Dec 13 13:12:00 srx-firewall RT_FLOW: RT_FLOW_SESSION_CREATE: session created 172.16.0.1/23456->8.8.8.8/443 junos-https 172.16.0.2/12345->8.8.8.8/443 source rule LAN N/A N/A 6 allow-any PRIVATE PUBLIC 123456 N/A(N/A) hu-1/0/0.0 UNKNOWN UNKNOWN UNKNOWN

Structured message example

{
  "error": "NAT_SESSION_CREATED",
  "facility": 1,
  "host": "srx-firewall",
  "ip": "127.0.0.1",
  "message_details": {
      "date": "Dec 13",
      "facility": 1,
      "host": "srx-firewall",
      "hostPrefix": null,
      "message": "session created 172.16.0.1/23456->8.8.8.8/443 junos-https 172.16.0.2/12345->8.8.8.8/443 source rule LAN N/A N/A 6 allow-any PRIVATE PUBLIC 123456 N/A(N/A) hu-1/0/0.0 UNKNOWN UNKNOWN UNKNOWN",
      "pri": "14",
      "processId": null,
      "processName": "RT_FLOW",
      "severity": 6,
      "tag": "RT_FLOW_SESSION_CREATE",
      "time": "13:12:00"
  },
  "os": "junos",
  "severity": 6,
  "timestamp": 1500587040,
  "yang_message": {
      "security": {
          "flow": {
              "created": {
                  "destination_address": "8.8.8.8",
                  "destination_port": "443",
                  "misc_data": "allow-any PRIVATE PUBLIC 123456 N/A(N/A) hu-1/0/0.0 UNKNOWN UNKNOWN UNKNOWN",
                  "nat_destination_address": "8.8.8.8",
                  "nat_destination_port": "443",
                  "nat_source_address": "172.16.0.2",
                  "nat_source_port": "12345",
                  "protocol_id": "6",
                  "service_name": "junos-https",
                  "source_address": "172.16.0.1",
                  "source_port": "23456",
                  "src_nat_rule_name": "LAN"
              }
          }
      }
  },
  "yang_model": "NO_MODEL"
}