[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Reset logging?
Title: RE: [FW-1] Reset logging?
If they haven't started logging to the management server again, then there is still a problem (they will start logging to the mgmt server automatically when connectivity is restored). Check the following:
* $FWDIR/log/fwd.elg on modules and mgmt server
* netstat -an on mgmt server. Ensure "*.257" appears in the list (I have seen this die before, which breaks logging). The listener is opened by fwd, so you actually need to fwstop/fwstart to get it back if it isn't in the list
* fwm.elg on the mgmt server
HTH
Dan Hitchcock
CCNP, CCSE, MCSE
Security Operations Technical Lead
Breakwater Security Associates, Inc.
"Safe Harbor for E-Business"
dhitchcock (at) breakwatersecurity (dot) com
http://www.breakwatersecurity.com
work
The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think you have received this email message in error, please email the sender at dhitchcock (at) breakwatersecurity (dot) com
-----Original Message-----
From: James Schnack [mailto:[email protected]]
Sent: Sunday, April 07, 2002 12:45 PM
To: [email protected]
Subject: Re: [FW-1] Reset logging?
Just a thought: would a 'kill -HUP' issued to the fwm process do it ?
Let us know.
J.
>I have a cluster of boxes running 4.1 Sp4 on Solaris 2.6.
>Recently we had a slight network problem that caused the firewalls to lose
>contact with the management station, and therefore switched to local
>logging.
>Is there any way to switch back without restarting the firewall itself, and
>hence avoiding any outage?
_________________________________________________________________
Join the world's largest e-mail service with MSN Hotmail.
http://www.hotmail.com
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
