54601 - LOG_ID_DNS_BOTNET_DOMAIN
Message ID: 54601
Message Description: LOG_ID_DNS_BOTNET_DOMAIN
Message Meaning: Domain blocked by DNS botnet C&C (Domain)
Type: DNS
Category: DNS-RESPONSE
Severity: Warning
Log Field Name |
Description |
Data Type |
Length |
---|---|---|---|
action |
string |
16 |
|
botnetdomain |
string |
256 |
|
botnetip |
ip |
39 |
|
date |
string |
10 |
|
dstintf |
string |
32 |
|
dstintfrole |
string |
10 |
|
dstip |
ip |
39 |
|
dstport |
uint16 |
5 |
|
eventtime |
uint64 |
20 |
|
fctuid |
string |
32 |
|
group |
string |
64 |
|
level |
string |
11 |
|
logid |
string |
10 |
|
msg |
string |
512 |
|
policyid |
uint32 |
10 |
|
profile |
string |
64 |
|
proto |
uint8 |
3 |
|
qclass |
string |
32 |
|
qname |
string |
256 |
|
qtype |
string |
32 |
|
qtypeval |
uint16 |
5 |
|
sessionid |
uint32 |
10 |
|
srcintf |
string |
32 |
|
srcintfrole |
string |
10 |
|
srcip |
ip |
39 |
|
srcmac |
string |
17 |
|
srcport |
uint16 |
5 |
|
subtype |
string |
20 |
|
time |
string |
8 |
|
type |
string |
16 |
|
tz |
string |
5 |
|
unauthuser |
string |
66 |
|
unauthusersource |
string |
66 |
|
user |
string |
256 |
|
vd |
string |
32 |
|
xid |
uint16 |
5 |