T

target

Shows whether the src or dst fields correspond to the target of the packet that had raised the alarm.
Values: "src" or "dst".

Example: target=src.
Available from: SNS v3.0.0.

Affected logs: l_alarm and l_filter.

Target

targetclient

Indicates whether the exploitation of the vulnerability requires the use of a client on the vulnerable host.

Values: “0” (false) or “1” (true).

Example: targetclient=1.

Affected logs: l_pvm.

Target client

Values: "Client" or " ".

targetserver

Indicates whether the exploitation of the vulnerability requires the installation of a server on the vulnerable host.

Values: “0” (false) or “1” (true).

Example: targetserver=0.

Affected logs: l_pvm.

Target server

Values: "Server" or " ".

TCPByte(i/o)

Number of TCP bytes (incoming/outgoing) that have passed through the firewall.

Example: TCPByte (i/o)=527894/528486.

Affected logs: l_filterstat.

TCPConn

Number of TCP connections that have passed through the Firewall.

Example: TCPConn=13246.

Affected logs: l_filterstat.

TCPConnNatDst

Number of TCP connections with a translated destination.

Example: TCPConnNatDst=654565.

Affected logs: l_filterstat.

TCPConnNatSrc

Number of TCP connections with a translated source.

Example: TCPConnNatSrc=3432.

Affected logs: l_filterstat.

TCPPacket

Number of TCP packets that have passed through the Firewall.

Example: TCPPacket=654364646.

Affected logs: l_filterstat.

TLSCertCacheEntriesNb

Number of entries currently in the TLS certificate cache.

Digital format.

Example: TLSCertCacheEntriesNb=3456.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

TLSCertCacheExpiredNb

Number of entries deleted from the TLS certificate cache after a TTL expired.

Digital format.

Example: TLSCertCacheExpiredNb=789.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

TLSCertCacheFlushedNb

Number of entries deleted from the TLS certificate cache after a "flush” operation.

Digital format.

Example: TLSCertCacheFlushedNb=123.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

TLSCertCacheFlushOp

Number of "flush" operations (manual deletion of entries, or after reloading signatures) performed on the TLS certificate cache.

Digital format.

Example: TLSCertCacheFlushOp=7.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

TLSCertCacheInsert

Number of entries inserted in the TLS certificate cache.

Digital format.

Example: TLSCertCacheInsert=789.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

TLSCertCacheLookup(miss/total)

Number of lookups missed/performed in the TLS certificate cache.

Digital format.

Example: TLSCertCacheLookup(miss/total)=128/136.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

TLSCertCachePurgedNb

Number of entries deleted from the TLS certificate cache after a "purge” operation.

Digital format.

Example: TLSCertCachePurgedNb=456.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

TLSCertCachePurgeOp

Number of "purge" operations (automatic deletion of a percentage of entries when the cache reaches full capacity) performed on the TLS certificate cache.

Digital format.

Example: TLSCertCachePurgeOp=4.

Available from: SNS v4.3.0.

Affected logs: l_filterstat.

totp

Indicates whether authentication required a TOTP

Values: "yes" if a TOTP was used, "no" if no TOTP was used.

Example: totp=yes

Available from: SNS v4.5.0.

Affected logs: l_auth, l_xvpn.

One-time password
tsagentname

Indicates the name of the TS agent used.

String of characters in UTF-8 format.

Example: tsagentname="agent_name_test"

Available from: SNS v4.7.0.

Affected logs: l_auth and l_system.