日志问题

zhwco

我使用MT_Syslog记录日志  为什么没有查找到QQ号啊  x下面是部分日志文件


<PNB0>kugoo.udp 1308299682-1308299986 10.10.90.10:17769-183.166.224.245:11282 63 0 in 17-Jun 16:38:13.46 from 219.233.45.6
<PNB0>kugoo.udp 1308299684-1308299986 10.10.90.10:17769-121.11.135.98:26968 41 0 in 17-Jun 16:38:13.46 from 219.233.45.6
<PNB0>1308299932 10.255.2.55 POST http://s340.sh.7.qq.com/dynasty/messagebroker/amf

in 17-Jun 16:38:13.46 from 219.233.45.6
<PNB0>http.tcp 1308299932-1308299932 10.255.0.76:21879-123.125.115.243:80 410 404 in 17-Jun 16:38:13.46 from 219.233.45.6
<PNB0>default.udp 1308299631-1308299932 10.255.1.80:17638-234.34.23.234:33674 20 0 in 17-Jun 16:38:13.48 from 219.233.45.6
<PNB0>default.udp 1308299685-1308299986 10.10.80.9:4399-234.34.23.234:33674 20 0 in 17-Jun 16:38:13.48 from 219.233.45.6
<PNB0>thunder.udp 1308299671-1308299932 10.255.2.34:13536-84.103.175.199:9633 547 209 in 17-Jun 16:38:13.50 from 219.233.45.6
<PNB0>1308299932 10.255.0.23 POST http://sango.qzone.qzoneapp.com/messagebroker/amf

in 17-Jun 16:38:13.50 from 219.233.45.6
<PNB0>http.tcp 1308299922-1308299986 10.10.50.242:51211-58.251.60.172:80 470 782 in 17-Jun 16:38:13.51 from 219.233.45.6
<PNB0>http.tcp 1308299922-1308299986 10.10.50.242:51210-61.55.143.80:80 314 3341 in 17-Jun 16:38:13.51 from 219.233.45.6
<PNB0>default.udp 1308298714-1308299932 10.255.1.164:1691-218.4.120.58:2788 300 0 in 17-Jun 16:38:13.53 from 219.233.45.6
<PNB0>default.udp 1308299683-1308299986 10.10.70.96:52355-234.34.23.234:33674 20 0 in 17-Jun 16:38:13.53 from 219.233.45.6
<PNB0>ppstream.udp 1308299382-1308299932 10.255.0.64:49857-182.61.129.54:8800 1304 0 in 17-Jun 16:38:13.53 from 219.233.45.6
<PNB0>360update.tcp 1308299631-1308299932 10.255.1.80:49518-182.89.95.100:8090 85 85 in 17-Jun 16:38:13.54 from 219.233.45.6
<PNB0>default.udp 1308299631-1308299932 10.255.2.34:4426-234.34.23.234:33674 20 0 in 17-Jun 16:38:13.54 from 219.233.45.6
<PNB0>1308299932 10.255.1.186 GET http://vlive.qqvideo.tc.qq.com:8 ... 672C686B1B4EB65071B

in 17-Jun 16:38:13.54 from 219.233.45.6
firewall,info out_log: out_log forward: in:<pppoe-linshi9> out:hjsz, proto TCP (ACK,FIN), 10.255.0.23:62090->112.90.244.203:80, len 20 in 17-Jun 16:38:13.54 from 219.233.45.6
firewall,info out_log: out_log forward: in:<pppoe-80001451> out:hjsz, proto TCP (ACK,FIN), 10.255.2.114:59842->123.125.104.222:80, len 20 in 17-Jun 16:38:13.54 from 219.233.45.6
firewall,info out_log: out_log forward: in:<pppoe-80001451> out:hjsz, proto TCP (ACK,FIN), 10.255.2.114:59843->123.125.104.222:80, len 20 in 17-Jun 16:38:13.54 from 219.233.45.6
firewall,info out_log: out_log forward: in:<pppoe-80001161> out:hjsz, proto TCP (ACK,FIN,PSH), 10.255.1.186:1888->61.135.172.13:80, len 432 in 17-Jun 16:38:13.54 from 219.233.45.6
<PNB0>qqwebvid.tcp 1308299923-1308299932 10.255.1.186:1888-61.135.172.13:80 412 1692 in 17-Jun 16:38:13.56 from 219.233.45.6
<PNB0>1308299986 10.10.50.183 POST http://snspt.qzone.qq.com/cgi-bin/qzshare/qzshare_imget

in 17-Jun 16:38:13.56 from 219.233.45.6
<PNB0>kugoo.udp 1308299682-1308299986 10.10.90.10:17769-222.79.219.203:1426 257 15757 in 17-Jun 16:38:13.57 from 219.233.45.6
<PNB0>kugoo.udp 1308299682-1308299986 10.10.90.10:17769-124.231.157.81:1825 41 81 in 17-Jun 16:38:13.57 from 219.233.45.6
<PNB0>qqlive.udp 1308299631-1308299932 10.255.1.232:35880-119.177.119.212:1863 65 0 in 17-Jun 16:38:13.57 from 219.233.45.6
<PNB0>http.tcp 1308299890-1308299986 10.10.70.185:3320-123.129.251.162:80 8614 36583 in 17-Jun 16:38:13.57 from 219.233.45.6
<PNB0>1308299932 10.255.0.38 GET http://stat.360safe.com/360/?stype=opentab&amp;type=tab_chajian&uid=1&pid=softmgr&m=989c94ad0a9d6361946a794096ff2454&ver=8.1.0.1001&zt=236406&funver=7.0.1.1038&from=safe

in 17-Jun 16:38:13.59 from 219.233.45.6
<PNB0>1308299932 10.255.0.76 GET http://cpro.baidu.com/cpro/ui/ui ... ault_960_90&amp;n=7k7kcom_cpr&rsi1=90&rsi0=960&rad=&ch=0&cad=1&aurl=&rss7=&cpa=1&fv=10&if=0&word=http%3A%2F%2Fwww.7k7k.com%2Ff

in 17-Jun 16:38:13.59 from 219.233.45.6
<PNB0>http.tcp 1308299854-1308299932 10.255.2.241:7899-61.135.181.167:80 934 944 in 17-Jun 16:38:13.59 from 219.233.45.6
<PNB0>1308299986 10.10.60.125 GET http://61.158.243.18/down_group1 ... f9iLkZvztFQ&amp;t=1308298811&u=121.79.147.202|881168

in 17-Jun 16:38:13.60 from 219.233.45.6

[ 本帖最后由 zhwco 于 2011-6-17 16:55 编辑 ]

Lucifer

这些是回话日志，你吐出qq日志了吗？

zhwco

QQ日志我选择是传到syslog服务器啊

Lucifer

原帖由 zhwco 于 2011-6-20 16:04 发表
QQ日志我选择是传到syslog服务器啊

那就找啊

zhwco

找不到啊,能找到就不问了 是不是MT_Syslog记录不了啊