WIRED: different logs from diff SRX with the same config and Junos version...

WIRED: different logs from diff SRX with the same config and Junos version...

Hi There,

I got wired behavior on two SRX100’es with syslog configured in the same way, running JUNOS 12.1X47-D30.4 built 2015-11-13:

set system syslog archive size 100k
set system syslog archive files 3
set system syslog user * any emergency
set system syslog host 192.168.111.22 any any
set system syslog host 192.168.111.22 authorization any
set system syslog host 192.168.111.22 security any
set system syslog host 192.168.111.22 firewall any
set system syslog host 192.168.111.22 port 514
set system syslog host 192.168.111.22 source-address 192.168.111.1
set system syslog host 192.168.111.22 structured-data

good results
Sep 11 18:12:03 fw1 RT_FLOW: APPTRACK_SESSION_CREATE: AppTrack session created 192.168.111.31/46012->192.168.2.111/161 None SNMP UNKNOWN 192.168.111.31/46012->192.168.2.111/161 N/A N/A 17 trust-2-vpn trust DMZ 11564 N/A N/A No
Sep 11 18:12:03 fw1 RT_FLOW: APPTRACK_SESSION_CREATE: AppTrack session created 192.168.111.31/43719->192.168.2.254/161 None SNMP UNKNOWN 192.168.111.31/43719->192.168.2.254/161 N/A N/A 17 trust-2-vpn trust DMZ 25073 N/A N/A No
Sep 11 18:12:03 fw1 RT_FLOW: APPTRACK_SESSION_CREATE: AppTrack session created 192.168.111.31/41732->192.168.2.111/161 None SNMP UNKNOWN 192.168.111.31/41732->192.168.2.111/161 N/A N/A 17 trust-2-vpn trust DMZ 26138 N/A N/A No

bad results
Sep 11 19:11:36 fw2 RT_FLOW AppTrack session created 192.168.1.31/34977->192.168.2.1/161 None SNMP-VERSION-2U UNKNOWN 192.168.1.31/34977->192.168.2.1/161 N/A N/A 17 vpn-2-trust DMZ trust 13407 N/A N/A No
Sep 11 19:11:36 fw2 RT_FLOW AppTrack session created 192.168.1.31/54984->192.168.2.1/161 None SNMP-VERSION-2U UNKNOWN 192.168.1.31/54984->192.168.2.1/161 N/A N/A 17 vpn-2-trust DMZ trust 11915 N/A N/A No
Sep 11 19:11:36 fw2 RT_FLOW AppTrack session created 192.168.1.31/44822->192.168.2.1/161 None SNMP-VERSION-2U UNKNOWN 192.168.1.31/44822->192.168.2.1/161 N/A N/A 17 vpn-2-trust DMZ trust 11945 N/A N/A No


Can anyone  tell me what’s going on ???

THA

Rrr