Firewall-1

Re: [FW-1] fw logswitch failure

Subject: Re: [FW-1] fw logswitch failure
From: "Grabowski, David" <david.grabowski AT US.MIZUHO-SC DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 27 Feb 2004 13:48:55 -0500
> -----Original Message-----
> From: Not Available [mailto:not_112 AT HOTMAIL DOT COM]
> Sent: Friday, February 27, 2004 1:10 PM
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: [FW-1] fw logswitch failure
>
>
> Hi gurus,
>
> I kinda remember something similar, but couldn't sort it out of the
> archives. One of my customers have a Checkpoint NG FP1 (ok,
> it's rather old
> but works) on an IP330 (older than the software, but still
> running) with
> IPSO 3.4.2 FCS2.
> The box is running both management and enforcement point.
> In the properties for the object itself, there are settings to make it
> switch the log at midnight every night, or when the logfile reaches a
> certain size.
>
> It all has been running fine up to jan, 31. Next, it switched
> only once, for
> the filesize rule.
>
> I tried logging on the Nokia via SSH and typed: "fw logswitch" at the
> command prompt. After a rather long time (a couple of
> minutes) it returned a
> generic error, such as "log switch failed", no details,
> nothing in the logs.
>
> Checkpoint KB only says "upgrade to some newer release". But
> I'd rather not
> try this out.
>
> Any other idea?

Perhaps you don't have enough disk space. I remember back in 4.1, I ran into a 
problem where I had a logfile that had never been rotated and was almost 2GB, 
on an NT system. Couldn't log switch it, and it looked like the logswitch 
process would actually *copy* the data to another logfile before clearing the 
active logfile. There wasn't enough free space on the disk for the copy to 
occur.

#####################################################################################
CONFIDENTIAL: This e-mail, including its contents and attachments, if any, are 
confidential. It is neither an offer to buy or sell, nor a solicitation of an 
offer to buy or sell, any securities or any related financial instruments 
mentioned in it. If you are not the named recipient please notify the sender 
and immediately delete it. You may not disseminate, distribute, or forward this 
e-mail message or disclose its contents to anybody else. Unless otherwise 
indicated, copyright and any other intellectual property rights in its contents 
are the sole property of Mizuho Securities USA Inc.
     E-mail transmission cannot be guaranteed to be secure or error-free. The 
sender therefore does not accept liability for any errors or omissions in the 
contents of this message which arise as a result of e-mail transmission.  If 
verification is required please request a hard-copy version.
     Although we routinely screen for viruses, addressees should check this 
e-mail and any attachments for viruses. We make no representation or warranty 
as to the absence of viruses in this e-mail or any attachments. Please note 
that to ensure regulatory compliance and for the protection of our customers 
and business, we may monitor and read e-mails sent to and from our server(s).
#####################################################################################

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>