# UID missing **URL:** \ **Category:** Zeek\ **Created:** [June 9, 2016, 3:22pm UTC](https://community.zeek.org/t/uid-missing/4201 "2016-06-09T15:22:26Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Luis\_Jimenez](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@Luis\_Jimenez](https://community.zeek.org/u/Luis_Jimenez)\ **Post date:** [June 9, 2016, 3:22pm UTC](https://community.zeek.org/t/uid-missing/4201/1 "2016-06-09T15:22:26Z")
Hello, I’m fairly new to Bro so please excuse my ignorance. I’m looking through logs from the Tunnel::LOG analyzer and am seeing that many records do not have UIDs. I would have thought that every session would get a UID and am wondering why there would be records without them. Thank you for your help, Luis Jimenez ---
**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\ **Post date:** [June 9, 2016, 5:08pm UTC](https://community.zeek.org/t/uid-missing/4201/2 "2016-06-09T17:08:53Z")
Hello Luis, > I'm looking through logs from the Tunnel::LOG analyzer and am seeing that > many records do not have UIDs. I would have thought that every session > would get a UID and am wondering why there would be records without them. As far as I am aware, this is currently the case with Socks and HTTP tunnels. The reasoning there is, that in these case, the tunnel (from the source machine to the http or socks proxy) will use many different connections, which together form the tunnel. In this case (many connections forming a tunnel), no singular connection ID, over which the traffic is sent, can be logged. Instead, the log-file will contain the source IP address, a source port of 0, the destination IP address and the destination port to show the tunnel source (with unspecified port) and the server destination IP and port. I hope this helps, Johanna ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/uid-missing/4201/3 "2022-05-06T15:43:46Z")