RE: [FW1] FW1 Log file management

[John Horn <jhorn1@FW1-NOSPAMdesperate.ci.tucson.az.us>]

We run our FW LOGSWITCH from cron at 23:59 and have a 57 second sleep
command in our logswitch.sh script to ensure the switch takes place at
23:59:58 or 23:59:59 for the purpose Jeff states below. Being lazy
however, we don't want to have to strip out a lot of log file entries
from the previous day. Switching at the last second or two before
midnight works well - on average only one log file entry from the last
second before midnight will show up in the next days log.

Since our log files are relatively tiny, seldom much more than a 
million lines per day, these techniques work well for us.

Also, we try to keep the number of tasks running on our firewall box
to a reasonable number, usually less than 60 or 70 tasks at any given
time.

On Wed, 11 Oct 2000, Jarmoc, Jeff wrote:

> 
> I'd suggest running it instead at around 11:50pm.  That way the log files
> date is the same date as the information contained in the log.  If you run
> it at or after midnight, the log will be named with the new date which is a
> day later than the information contained therein.
> 
> -----Original Message-----
> From: David C. Diemer [mailto:ddiemer@doas.state.ga.us]
> Sent: Wednesday, October 11, 2000 12:14 PM
> To: claudio.lupi@elsag.it; fw-1-mailinglist@lists.us.checkpoint.com
> Subject: Re: [FW1] FW1 Log file management
> 
> 
> 
> Doesn't Windows NT have type of AT command to perform an FW LOGSWITCH
> command?  If not that, how about the task scheduler?
> 
> In either case, we run an FW LOGSWITCH every night at midnight so the log is
> fresh for the day.
> 
> 
> David C. Diemer, CCSA, CNE
> Enterprise Security Firewall Engineer
> Georgia Department of Administrative Services (DOAS)
> ddiemer@doas.state.ga.us
>> 
> >>> "Claudio Lupi" <claudio.lupi@elsag.it> 10/11/00 09:47AM >>>
> 
> My problem is managing of  the FW1 log file, I have FW1 4.1 on NT4.0 SP6a
> I can't find any command to implement circular log or open newlog file at
> specific time.
> If I don't manualy manage the file  increases indefinitely (and the disk
> space decreeses).
> 
>  any idea or suggest
> 
> 
> Thanks in advance,
> 
> Claudio
> 
> 
> ============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html 
> ============================================================================
> ====
> 
> 
> 
> ============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 



Regards:
-----------------------------------------------------------------------
John Horn                       |"Those who do not understand Unix
City of Tucson, IT Dept.        |are condemned to reinvent it, poorly."
jhorn1@desperate.ci.tucson.az.us|                         Henry Spencer
-----------------------------------------------------------------------




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================