[FW-1] Management Station not listening on tcp/257

[Shawn Duffy <pakkit@FW1-NOSPAMCODEPIRANHA.ORG>]

All:

We have had a problem for quite a while in our environment and I am trying
desperately to fix it.  Yes, we will be upgrading to NG soon, but this is
a very vital firewall so we are taking it very slowly.

Anyway, here is the setup:

Two HiAv Nokia 530s running FireWall-1 4.1
One Windows 2000 4.1 Management station

Every four hours or so, the manager stops listening on port 257 and, of
course, starts sending RSTs to the modules when they try to log.  So we
end up restarting the manager and logging resumes.  When it crashes, I am
seeing the following messages in the Application Logs on the Manager:

FireWall-1: failed to read log header !!: The process cannot access the
file because another process has locked a portion of the file.

There are a ton of these in the Event Viewer right around the time the
logging mechanism on the manager crashes and stops listening.

Now, the firewall modules so send a TON of logs back to the manager, so is
it possible that it is simply the large amount of traffic that is crashing
the log daemon?

Or, what processes could be simultaneously trying to access the file?

Anyone seen this before?

Thanks in advance!

shawn
pakkit at codepiranha dot org

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================