According to the session query result, the session log time does not match the session end time by several hours.
1. Change the time zone on the firewall to that on the log server.
2. Change the time on the firewall to that of the log server. For example, set the current date on the firewall to 00:00:00 on November 1, 2005.clock datetime 0:0:0 2005/11/01
3. After the device time is changed, if the fault persists, contact Huawei Symantec Engineers.
The time zone and time on the log server do not match those on the firewall.