David,
I'm afraid that's not the point. I have plenty of space, and I just
tar-gzipped some old logs to have less files to manipulate. By the way, the
problem started before I removed the old logs, and is getting on after I did
that.
Funny enough, I discovered that I can switch logs without problems, simply
using log viewer's menu...
Thanks anyway
NA
----- Original Message -----
From: "Grabowski, David" <david.grabowski AT US.MIZUHO-SC DOT COM>
To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Sent: Friday, February 27, 2004 7:48 PM
Subject: Re: [FW-1] fw logswitch failure
> > -----Original Message-----
> > From: Not Available [mailto:not_112 AT HOTMAIL DOT COM]
> > Sent: Friday, February 27, 2004 1:10 PM
> > To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> > Subject: [FW-1] fw logswitch failure
> >
> >
> > Hi gurus,
> >
> > I kinda remember something similar, but couldn't sort it out of the
> > archives. One of my customers have a Checkpoint NG FP1 (ok,
> > it's rather old
> > but works) on an IP330 (older than the software, but still
> > running) with
> > IPSO 3.4.2 FCS2.
> > The box is running both management and enforcement point.
> > In the properties for the object itself, there are settings to make it
> > switch the log at midnight every night, or when the logfile reaches a
> > certain size.
> >
> > It all has been running fine up to jan, 31. Next, it switched
> > only once, for
> > the filesize rule.
> >
> > I tried logging on the Nokia via SSH and typed: "fw logswitch" at the
> > command prompt. After a rather long time (a couple of
> > minutes) it returned a
> > generic error, such as "log switch failed", no details,
> > nothing in the logs.
> >
> > Checkpoint KB only says "upgrade to some newer release". But
> > I'd rather not
> > try this out.
> >
> > Any other idea?
>
> Perhaps you don't have enough disk space. I remember back in 4.1, I ran
into a problem where I had a logfile that had never been rotated and was
almost 2GB, on an NT system. Couldn't log switch it, and it looked like the
logswitch process would actually *copy* the data to another logfile before
clearing the active logfile. There wasn't enough free space on the disk for
the copy to occur.
>
>
############################################################################
#########
> CONFIDENTIAL: This e-mail, including its contents and attachments, if any,
are confidential. It is neither an offer to buy or sell, nor a solicitation
of an offer to buy or sell, any securities or any related financial
instruments mentioned in it. If you are not the named recipient please
notify the sender and immediately delete it. You may not disseminate,
distribute, or forward this e-mail message or disclose its contents to
anybody else. Unless otherwise indicated, copyright and any other
intellectual property rights in its contents are the sole property of Mizuho
Securities USA Inc.
> E-mail transmission cannot be guaranteed to be secure or error-free.
The sender therefore does not accept liability for any errors or omissions
in the contents of this message which arise as a result of e-mail
transmission. If verification is required please request a hard-copy
version.
> Although we routinely screen for viruses, addressees should check
this e-mail and any attachments for viruses. We make no representation or
warranty as to the absence of viruses in this e-mail or any attachments.
Please note that to ensure regulatory compliance and for the protection of
our customers and business, we may monitor and read e-mails sent to and from
our server(s).
>
############################################################################
#########
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
