I am looking at the traffic log of the firewall now,
But there is no infomation of "session ID" in this log.
However, there are basic information such as duration of session , transmit/receive packet, source/dest ip etc.
Based on this information, how can I tell which event is the communication within the same session?
↧