NSX-T Logs in Log Insight(VMware Aria Operations for Logs)

frozenbanana — Tue, 07 Nov 2023 01:44:51 GMT

I have a question about logs in VMware Aria Operations for Logs.

What does each field mean in these event logs? (refer to attached image file)

are there any links or guides for reference?

NSX-T log source port

frozenbanana — Tue, 07 Nov 2023 00:00:36 GMT

Hi
When I checked vRealize Log Insight, I found that some logs have the same source ports and some logs have different source ports each other.
What's the difference between these following cases?

--------------------------------------------------------------------------------------

2023. 11. 6. 10:15:9.659 FIREWALL-PKTLOG: INET match PASS 9642 OUT 52 TCP 00.00.43.72/5614->00.00.145.11/343 S
2023. 11. 6. 10:15:9.106 FIREWALL-PKTLOG: INET match PASS 9642 OUT 52 TCP 00.00.43.72/5614->00.00.145.11/343 S
2023. 11. 6. 10:15:8.602 FIREWALL-PKTLOG: INET match PASS 9642 OUT 52 TCP 00.00.43.72/5614->00.00.145.11/343 S

2023. 11. 6. 10:15:42.055 FIREWALL-PKTLOG: INET TERM PASS 9642 OUT TCP RST 00.00.43.72/5616->00.00.145.11/343 1/1 52/40
2023. 11. 6. 10:15:33.077 FIREWALL-PKTLOG: INET TERM PASS 9642 OUT TCP RST 00.00.43.72/5615->00.00.145.11/343 1/1 52/40
2023. 11. 6. 10:15:32.065 FIREWALL-PKTLOG: INET TERM PASS 9642 OUT TCP RST 00.00.43.72/5614->00.00.145.11/343 1/1 52/40
2023. 11. 6. 10:15:32.065 FIREWALL-PKTLOG: INET TERM PASS 9642 OUT TCP RST 00.00.43.72/5613->00.00.145.11/343 1/1 52/40

frozenbanana Tracker

NSX-T Logs in Log Insight(VMware Aria Operations for Logs)

NSX-T log source port