CISCO WAAS TCP PROXY
Sawmill is a Cisco WAAS TCP Proxy log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in Cisco WAAS TCP Proxy format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Cisco WAAS TCP Proxy logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Cisco WAAS TCP Proxy log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Cisco WAAS TCP Proxy, generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
| date/time | | date_time |
| day of week | | day_of_week |
| hour of day | | hour_of_day |
| action | | action |
| AO CFGD policy | | ao_cfgd_policy |
| AO DRVD policy | | ao_drvd_policy |
| AO final policy | | ao_final_policy |
| AO reject reason | | ao_reject_reason |
| SSL reject reason | | ssl_reject_reason |
| Application classifier name | | app_classifier_name |
| application map name | | app_map_name |
| application name | | app_name |
| CFGD policy | | cfgd_policy |
| connection ID | | connection_id |
| connection type | | connection_type |
| destination IP | | destination_ip |
| destination port | | destination_port |
| DIRM | | dirm |
| DRVD policy | | drvd_policy |
| dscp | | dscp |
| duration | | duration |
| final policy | | final_policy |
| applied policy | | applied_policy |
| link_rtt | | link_rtt |
| Non-optimized bytes read | | non_optimized_bytes_read |
| Non-optimized bytes written | | non_optimized_bytes_written |
| operation | | operation |
| Optimized bytes read | | optimized_bytes_read |
| Optimized bytes written | | optimized_bytes_written |
| peer policy | | peer_policy |
| source IP | | source_ip |
| source port | | source_port |
| TCP RST reason | | tcp_rst_reason |
| TFO reject reason | | tfo_reject_reason |
| Pass through reason | | pass_through_reason |
| WAE IP | | wae_ip |
| WAE peer id | | wae_peer_id |
Sawmill stores the following numerical fields in its database for Cisco WAAS TCP Proxy, aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
| events | | events |
| Connections started | | connections_started |
| Connections ended (OT) | | connections_ended_ot |
| Connections ended (SODRE) | | connections_ended_sodre |
| Pass throughs | | pass_throughs |
| duration | | duration |
| Non-optimized bytes read | | non_optimized_bytes_read |
| Optimized bytes written | | optimized_bytes_written |
| Optimized bytes read | | optimized_bytes_read |
| Non-optimized bytes written | | non_optimized_bytes_written |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Cisco WAAS TCP Proxy reports.
Sawmill also supports 1021 other log formats.