// format of the file: event type,status code: message
// order of event type bytes: level, security, remote, VPN
// level can be 0 (info), 1 (warning/error), 2 (critical)
0000,101001: Cable OK.
2000,101002: Cable bad.
2000,101003: Cable not connected on my side.
2000,101004: Cable not connected on other side.
2000,101005: Error reading cable.
2000,102001: Power failure.
2000,103001: No response from other firewall.
0000,103002: Other firewall interface OK.
2000,103003: Other firewall interface fail.
2000,103004: Other firewall says I failed.
2000,103005: Other firewall reports other failed.
0000,104001: Switching active.
0000,104002: Switching standby.
2000,104003: Switching fail.
0000,104004: Switching OK.
2000,105001: Failover disable.
0000,105002: Failover enable.
0000,105003: Monitoring on interface waiting.
0000,105004: Monitoring on interface OK.
2000,105005: Monitoring on interface bad.
0000,105006: Link status UP - failover.
0000,105007: Link status DOWN - failover.
0000,105008: Testing interface - failover.
0000,105009: Testing interface result - failover.
0000,105010: Block allocation failed - failover.
0000,105011: Cable communication failed - failover.
0000,105020: Incomplete config replication - failover.
0000,105031: Failover LAN interface is up
2000,105032: LAN Failover interface is down
0000,105034: Receive a LAN_FAILOVER_UP message from peer.
2000,105035: Receive a LAN failover interface down msg from peer.
2000,105036: PIX dropped a LAN Failover command message.
0000,105037: The primary and standby units are switching back and forth as the active unit.
2100,106001: Deny inbound TCP.
2100,106002: Deny outbound TCP.
2100,106003: Deny TCP access from Java.
2100,106004: Deny use of network.
2100,106005: Deny send.
2100,106006: Deny inbound UDP.
2100,106007: Deny inbound UDP in DNS.
2100,106008: Translate denied by outbound ACL.
2100,106009: Translate denied by outbound ACL.
2100,106010: Inbound denied.
2100,106011: No routing to arrival interface.
2100,106012: Deny a packet with IP options.
0000,106013: Dropping echo request.
0000,106014: Deny inbound ICMP.
0000,106015: Deny TCP no connection established.
1100,106016: Deny IP spoof.
1100,106017: Deny IP due to Land Attack.
0000,106018: Deny outbound ICMP packet type.
0000,106019: Deny by access-group IP packet.
0000,106020: Deny IP teardrop fragment.
0000,106021: Deny reverse path doesn't match.
0000,106022: Deny connection spoof.
2100,106023: Deny IP packet by access-list. 
0000,107001: RIP authentication failed.
0000,107002: RIP packet failed.
1000,108001: SMTP made a no-op out of a command.
1000,108002: SMTP changed a command.
1000,108003: Bad check sum in SMTP command.
1000,108004: Bad check sum in SMTP response.
2000,108005: Out of SMTP connections.
0000,109001: Beginning an authenticated session.
2000,109002: Authentication failed due to server error.
2000,109003: Authentication failed, no server available.
2000,109004: Authentication failed due to internal error.
0000,109005: Authentication succeeded.
2100,109006: Authentication failed due to user error.
0000,109007: Authentication permitted by server.
2100,109008: Authentication denied by server.
2100,109009: Authentication denied - user not authenticated.
2000,109010: Out of slots for pending authentications.
0000,109011: Authentication session started - user.
0000,109012: Authentication session timeout - user.
0000,109013: User must authenticate.
0000,109014: Authentication request failed - server.
0000,109015: Authorization denied.
0000,109016: Access-list not found.
0000,109017: User exceeded auth proxy limit.
0000,109018: Downloaded ACL is empty.
0000,109019: Downloaded ACL has parsing error.
0000,109020: Downloaded ACL has config error.
2000,110001: No route.
2000,110002: No ARP.
2000,110003: No interface configured.
0010,111001: Configuration write to target.
0010,111002: Configuration read from target.
0010,111003: Configuration erased.
0010,111004: Configuration ended.
0010,111005: Configuration written OK.
0010,111006: Configuration login.
0010,111007: Configuration begin.
0000,111008: User executed command.
0000,112001: PIX clear complete.
0010,199001: PIX reloaded from CI.
0010,199002: PIX startup completed.
0000,199003: Reducing link MTU.
0000,199005: PIX startup begin.
2000,201001: PIX out of connections.
2000,201002: Connection slots in use.
2000,201003: Connection exceeds embryonic threshold.
2100,201004: Connection failed.
2100,201005: No FTP data connection made.
2100,201006: No rcmd back connection made.
1000,201007: Unable to allocate new UDP connection.
1000,201008: PIX is disallowing new connections - syslog.
1000,201009: TCP connection limit of host exceeded.
2100,202001: Out of translation slots.
2100,202002: No outgoing translation slot.
2100,202003: No translation made.
2100,202004: No port-mapped translation made.
2100,202005: No translate allocated.
2100,202006: No translation allowed.
2100,203001: ESP error.
2100,204001: SMTP error command.
2100,204002: SMTP error respond.
2000,208005: PIX clear error.
2000,209003: Fragment database limit exceeded.
2000,209004: Invalid IP fragment.
2000,209005: Discard IP fragment. 
2000,210001: Stateful Failover error.
2000,210002: Stateful Failover could not allocate memory.
2000,210003: Stateful Failover unknown object ID.
2000,210005: Stateful Failover allocate connection failed.
2000,210006: Stateful Failover NAT failed.
2000,210007: Stateful Failover allocate translation slot failed.
2000,210008: Stateful Failover no translation slot.
2000,210010: Stateful Failover allocate new UDP connection failed.
2000,210020: Stateful Failover PAT port reserve failed.
2000,210021: Stateful Failover create static translation failed.
2000,210022: Stateful Failover missed updates.
1000,211001: Memory allocation error.
1000,211003: CPU utilization exceeding 100%.
1000,212001: Unable to open SNMP channel.
1000,212002: Unable to open SNMP trap channel.
1000,212003: Unable to receive SNMP request.
1000,212004: Unable to send SNMP response.
1000,212005: Discarding incoming SNMP request.
1001,213001: PPTP internal socket error.
1001,213002: PPTP internal software error.
1001,213003: PPP virtual interface isn't opened. 
1001,213004: PPP client IP allocation failed.
1001,214001: Incoming encrypted data longer than limit. 
0000,302001: TCP connection started.
0000,302002: TCP connection ended.
0000,302003: H245 back connection.
0000,302004: H323 back connection.
0000,302005: UDP connection started.
0000,302006: UDP connection ended.
0000,302007: Conduit connection started.
0000,302008: Conduit connection ended.
0000,302009: TCP connection rebuilt.
0000,302010: TCP connections in use.
0000,302302: ACL deny - proxy mismatch.
0000,303001: FTP 1.
0000,303002: FTP Storeflag IP.
0000,304001: URL accessed.
2100,304002: URL access denied.
1000,304003: URL server request timed out.
1000,304004: URL server request failed.
0000,304005: URL server request pending.
0000,304006: URL server not responding.
0000,304007: URL server not responding - ENTERING ALLOW mode.
0000,304008: URL server is UP - LEAVING ALLOW mode. 
1000,304009: Ran out of buffer blocks.
0000,305001: Port-mapped translation built.
0000,305002: Translate start.
0000,305003: Translate end.
0000,305004: Translate reclaimed.
0000,305005: Translate group not found.
0000,305006: Translate creation failed.
0000,305007: Translate dropped - Orphan IP.
0000,305008: Free unallocated global IP address.
0000,306001: Ethernet status changed.
2100,307001: Telnet access denied.
0000,307002: Telnet access permitted.
2100,307003: Telnet login failed.
2100,307004: Telnet session limit exceeded. 
2100,308001: Enable password incorrect.
0000,308002: Static IP overlapped.
2110,309001: Deny manager access.
0010,309002: Permit manager access.
0010,309004: Manager session limit exceeded. 
1000,310001: Lack of CPU realtime.
0000,311001: Stateful Failover loading standby start.
0000,311002: Stateful Failover loading standby end.
0000,311003: Stateful Failover receive thread up.
0000,311004: Stateful Failover transmit thread up. 
1000,312001: RIP header failed.
0000,313001: Denied ICMP.
1000,313003: Invalid destination.
0000,314001: Opened RSTP Connection. 
0000,315001: Denied SSH session.
0000,315002: Permitted SSH session.
0000,315003: SSH login failed.
0000,315004: SSH failed - no RSA host key.
0000,315005: SSH session limit exceeded. 
0000,315011: SSH session terminated.
1001,316001: Denied new tunnel.  VPN peer limit exceeded.
0000,400000: IDS - Bad IP option list.
0000,400001: IDS - Record packet route.
0000,400002: IDS - Timestamp.
0000,400003: IDS - Security.
0000,400004: IDS - Loose source route.
0000,400005: IDS - SATNET ID.
0000,400006: IDS - Strict source route.
1000,400007: IDS - IP fragment attack.
1000,400008: IDS - Unknown IP protocol.
1000,400009: IDS - IP fragments overlap.
0000,400010: IDS - ICMP echo reply.
0000,400011: IDS - ICMP host unreachable.
0000,400012: IDS - ICMP source quench.
0000,400013: IDS - ICMP redirect.
0000,400014: IDS - ICMP echo request.
0000,400015: IDS - ICMP time exceeded.
0000,400016: IDS - ICMP parameter problem.
0000,400017: IDS - ICMP timestamp request.
0000,400018: IDS - IMCP timestamp reply.
0000,400019: IDS - ICMP information request.
0000,400020: IDS - ICMP information reply.
0000,400021: IDS - ICMP address mask request.
0000,400022: IDS - ICMP address mask reply.
1000,400023: IDS - Fragmented ICMP traffic.
1000,400024: IDS - Large ICMP traffic.
1000,400025: IDS - Ping of death attack.
1000,400026: IDS - TCP null flags.
1000,400027: IDS - TCP SYN+FIN flags.
1000,400028: IDS - TCP FIN only flags.
0000,400029: IDS - FTP improper address specified.
0000,400030: IDS - FTP improper port specified. 
1000,400031: IDS - UDP bomb attack.
1000,400032: IDS - UDP snork attack. 
1000,400033: IDS - UDP chargen DoS attack.
1000,400034: IDS - DNS HINFO request.
1000,400035: IDS - DNS zone transfer.
1000,400036: IDS - DNS zone transfer from high port.
1000,400037: IDS - DNS request for all records.
0000,400038: IDS - RPC port registration.
0000,400039: IDS - RPC port unregistration.
0000,400040: IDS - RPC dump.
1000,400041: IDS - Proxied RPC request.
0000,400042: IDS - YP server daemon portmap request.
0000,400043: IDS - YP bind daemon portmap request.
0000,400044: IDS - YP password daemon portmap request.
0000,400045: IDS - YP update daemon portmap request.
0000,400046: IDS - YP transfer daemon portmap request.
0000,400047: IDS - Mount daemon portmap request.
0000,400048: IDS - Remote execution daemon portmap request.
0000,400049: IDS - Remote execution daemon attempt.
1000,400050: IDS - Statd buffer overflow.
1000,400051: IDS - FTP retrieve password file. 
1000,401001: Shuns cleared.
1000,401002: Shun added.
1000,401003: Shun deleted.
1000,401004: Shunned packet.
1000,401005: Shun add failed.
1001,402101: IPSEC has invalid spi.
1001,402102: Packet missing.
1001,402103: Identity doesn't match.
0001,402106: Received packet not IPSec.
0001,403101: PPTP session not established - received XGRE packet. 
0001,403102: PPP received packet with invalid protocol.
1001,403103: PPP maximum connections reached.
0001,403104: PPP requires mschap for MPPE.
0001,403106: PPP requires RADIUS for MPPE.
0001,403107: PPP missing aaa server group information. 
0001,403108: PPP missing client IP address.
0001,403109: Received packet not PPTP.
0001,403110: PPP user missing MPPE key.
0001,403500: PPPoE - Service name not received in PADO.
0001,403501: PPPoE - Bad host-unique in PADO - packet dropped. 
0001,403502: PPPoE - Bad host-unique in PADS - dropping packet.
1001,403503: PPPoE:PPP link down.
1001,403504: PPPoE:No 'vpdn group' for PPPoE is created.
0001,403505: PPPoE:PPP - Unable to set default route.
0001,403506: PPPoE:failed to assign PPP.
1001,404101: ISAKMP failed to allocate Client IP.
0000,405101: Unable to allocate memory for H225.
0000,405102: Unable to allocate memory for H245.
0000,405104: H225 message received before SETUP. 
0000,406001: FTP port command low port.
0000,406002: FTP port command different address.
2000,407001: Deny traffic for local-host, license limit exceeded.
0000,407002: Embryonic limit reached.
0000,500001: ActiveX content modified.
0000,500002: Java content modified.
0000,500003: Bad TCP header.
0000,500004: Invalid transport field.
0000,501101: User transitioning priv level.
0000,502101: New user added to local dbase.
0000,502102: User deleted from local dbase.
0000,502103: User priv level changed.
0000,602101: Packet greater than effective mtu.
0001,602102: Adjusting IPSec tunnel mtu.
0001,602301: SA created.
0001,602302: SA deleted.
0001,603101: PPTP received out of sequence or duplicate packet.
0001,603102: PPP aaa authentication started - user.
0001,603103: PPP aaa authentication status - user.
0001,603104: PPTP tunnel created.
0001,603105: PPTP tunnel deleted.
0001,603106: L2TP Tunnel created.
0001,603107: L2TP Tunnel deleted.
0000,604101: DHCP client successfully obtained IP.
0000,604102: DHCP client released IP.
0000,604103: DHCP external client granted IP.
0000,604104: DHCP external client released IP.
0000,605001: HTTP daemon connection denied.
0000,605002: HTTP daemon connection limit exceeded.
0000,605003: HTTP daemon Login failed.
0000,606001: PDM session started.
0000,606002: PDM session ended.
0000,607001: Pre-allocate SIP.
0000,608001: Pre-allocate Skinny.
0000,610001: NTP daemon interface packet denied.
1000,610002: NTP daemon interface authentication failed.
0000,610101: Authorization failed.
0000,611101: User authentication succeeded.
1000,611102: User authentication failed.
0001,611103: User logged out.
0001,611301: VPNClient: NAT configured for Client Mode with no split tunneling.
0001,611302: VPNClient: NAT exemption configured for Network Extension Mode with no split tunneling.
0001,611303: VPNClient: NAT configured for Client Mode with split tunneling.
0001,611304: VPNClient: NAT exemption configured for Network Extension Mode with split tunneling: Split Tunnel Networks.
0001,611305: VPNClient: DHCP Policy installed.
0001,611306: VPNClient: Perfect Forward Secrecy Policy installed.
0001,611307: VPNClient: Head end.
0001,611308: VPNClient: Split DNS Policy installed.
0001,611309: VPNClient: Disconnecting from head end and uninstalling previously downloaded policy.
0001,611310: VNPClient: XAUTH Succeeded.
1001,611311: VNPClient: XAUTH Failed.
0000,612001: Auto Update succeeded.
1000,612002: Auto Update failed.
1000,612003: Auto Update failed.
0000,614001: Split DNS: Request patched from server.
0000,614002: Split DNS: Reverse patched back to original.
2000,701001: Out of TCP user objects.
0000,702301: SA lifetime expiring.
0000,702302: Replay rollover detected.
0001,702303: SA request.
2000,709001: Bad CI for replicate.
2000,709002: CI has no failover configured.
0010,709003: Beginning configuration replication, sending to mate.
0010,709004: End configuration replication (ACT).
0010,709005: Beginning configuration replication, receiving from mate.
0010,709006: End configuration replication (STB).
0010,709007: Configuration replication failed.
