Description

This article describes the issue of the time stamp in the firewall log messages being different than the system time.

Symptoms

The firewall log detail entries contain wrong time stamps in comparison with the current system time:

user@switch > show firewall log detail

Time of Log: 1970-01-01 00:08:47 UTC , Filter: pfe, Filter action:
accept, Name of interface: ge-0/0/1
Name of protocol: ICMP, Packet Length: 84, Source address: 10.200.0.1,
Destination address: 10.200.0.2

The time stamp in firewall logs is strange - 1970-01-01 00:08:47 UTC :

user@switch > show log messages

Jun 8 14:49:00 T1600-re0 clear-log[5276]: logfile cleared
Jun 8 14:49:06 T1600-re0 fpc3 PFE_FW_SYSLOG_IP: %FIREWALL-6-FW:
ge-0/0/1 A icmp 10.200.0.1 10.200.0.2 8 0 (10 packets)

The system time is Jun 8 14:49:00 .

Solution

If the NTP server is configured, the firewall logs will not display the incorrect time stamp:

user@switch # set interfaces lo0 unit 0 family inet address 127.0.0.1/32

user@switch # set system ntp boot-server 127.0.0.1

user@switch # set system ntp server 127.0.0.1

user@switch # commit sync