[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Log Question


Another note on log files. If you use the Log Viewer Gui, in the upper left
corner you will see which log you are using. If you change the view to
Active or Account, look at the top and you will see what log is open...
Simple.

Zoran Rankovich
OSD Network Engineer
[email protected]

	-----Original Message-----
	From:	Jarrett Goetz [SMTP:[email protected]]
	Sent:	Thursday, December 28, 2000 11:44 AM
	To:	'[email protected]'
	Cc:	'[email protected]'
	Subject:	RE: [FW1] Log Question

	Layne, keep in my mind that using the accounting logging feature can
take small performance hit, in addition to taking a slightly larger amount
of memory for each connection.

	Jarrett 

	-----Original Message----- 
	From: Layne Meier [ mailto:[email protected] <mailto:[email protected]> ] 
	Sent: Thursday, December 28, 2000 07:59 
	To: fw-1-mailinglist 
	Subject: Re: [FW1] Log Question 



	Thanks to those who answered my question.  I realized late
yesterday/early this 
	morning that if I had either RTFM or looked over my notes from FW-1
class I would 
	have seen that I had not set up my Log to track any of the rules by
Accounting. 
	Now that I have turned on Accounting, my fw.alog file is now
growing. 

	Thank you, 
	Layne Meier 
	Network/Internet Analyst 
	Atlanta Newspaeprs 

	Layne Meier wrote: 

	> I'm running CP FW-1 v4.0 on a Sun UE 250 under Solaris 2.6. 
	> 
	> I've noticed in my /var/opt/CKPfw/logs directory that there is a
fw.log 
	> and an fw.alog file.  However, only the fw.log file is updated and
the 
	> fw.alog file shows a 0K file size. 
	> 
	> With the size of our organization we had to perform an fw
logswitch on a 
	> nightly basis and we still end up with an archived log file
somewhere 
	> around 200 Mb + in size.  I only get an exported fw.log but no
fw.alog 
	> file.  Anyone might have a clue as to why there is no *.alog goin'
on 
	> here? 
	> 
	> Layne Meier 
	> Network/Internet Analyst 
	> Atlanta Newspapers 
	> 
	>
============================================================================
==== 
	>      To unsubscribe from this mailing list, please see the
instructions at 
	>                http://www.checkpoint.com/services/mailing.html
<http://www.checkpoint.com/services/mailing.html>  
	>
============================================================================
==== 



	
============================================================================
==== 
	     To unsubscribe from this mailing list, please see the
instructions at 
	               http://www.checkpoint.com/services/mailing.html
<http://www.checkpoint.com/services/mailing.html>  
	
============================================================================
==== 
	


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================