Firewall Log
Video
The Firewall log will show you any internet traffic that has been logged, and shows updated information in real-time. You can access the log by right-clicking the Online Armor tray icon, in the area next to your system clock in the lower right-hand corner of your screen, and selecting “Firewall Log” from the menu.
Note: This option will only be available if you have enabled logging in Options. This option is disabled by default.
You can change what type of traffic is logged by opening the Online Armor Control Panel, selecting Options from the main menu, and making your selections in the Firewall tab.
Options
The Firewall log has a toolbar at the top with the following buttons:
- Set Font – Allows you to change the font used in the Firewall log.
- Set Default Font – Returns the font used in the Firewall log to the default.
- Clear Log – Clears the log of all entries.
- Set Filter – Allows you to filter the entries shown in the log so that you only see the log entries containing the information that you specify. To set a filter simply click this button and select the information from the checklist that you wish to see log entries for.
- Navigation Point (multiple options) – Allows you to set navigation points similar to bookmarks that will allow you to jump between marked entries. Clicking the down arrow on the right side of the button will allow you to set, remove, and jump between navigation points. The main button will change according to the last action you performed using navigation points.
- Close – Closes the firewall log.
You can also right click on any log entry to Select All entries in the log, Copy the selected log entry to the clipboard (your computer’s memory), and set, remove, and jump between Navigation Points.
Log Format
The firewall log is organized in a list, with each entry using two lines of text.
The far left of the log entry shows the date and time of the connection being logged. Log entries will be color coded either green (allowed), red (denied), or blue (informational).
The most common log entries will be connections. Log entries showing connections may vary, but will contain information showing the protocol used, an arrow indicating the direction of the connection (pointing left for “In” and right for “Out”), the source address and port followed by the destination address and port (formatted as “address:port”), and the program that created the connection. Immediately following the file name and path of the program creating the connection will be the Process ID and Thread ID of the program, formatted as "(PID/TID)."
The second line of the log entry will show human readable information about how the firewall handled each event and why.