Tnks Jeff for your answer,
I´ll change the log buffer size.
I found a documentation that explains the same as you said.
See the chapter 6.1 and 6.4 of the follow link.
http://searchsecurity.techtarget.com/searchSecurity/downloads/CheckPoint-Ch0
6.pdf
Tnks again
Regard
Javier
-----Mensaje original-----
De: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] En nombre de Samantha
Fetter
Enviado el: Lunes, 23 de Enero de 2006 07:09 p.m.
Para: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Asunto: Re: [FW-1] log buffer is full
If you are in an environment with a separate management server/log server,
then the cause could likely be that the firewall is unable to send the
logs to the management server, and the buffer allocated for the logging
has been filled. Thus, as new log entries keep rolling in, the older ones
are lost as it is indicating. I have experienced this before.
The cause for being unable to send the logs could be disk space or could
also be communications with the log server.
If it's local logging, then the filesystem being full would make the most
sense, as the first responder explained.
Cheers,
Samantha
On Mon, 23 Jan 2006, Tom Louis wrote:
> --- Javier Lara <jlara AT ICAVE.COM DOT MX> wrote:
>
>> Hi all,
>>
>> The /var/log/messages of my firewall has the follow
>> errors:
>>
>> Jan 20 01:22:57 fw-1 kernel: FW-1: Log buffer is
>> full
>> Jan 20 01:23:00 fw1 kernel: FW-1: lost 13 log/trap
>> messages
>> Jan 20 01:23:00 fw1 kernel: FW-1: Log buffer is full
>> Jan 20 01:23:01 fw1 kernel: FW-1: lost 4 log/trap
>> messages
>> Jan 20 01:23:01 fw1 kernel: FW-1: Log buffer is full
>> Jan 20 01:23:03 fw1 kernel: FW-1: lost 2 log/trap
>> messages
>> Jan 20 01:23:03 fw1 kernel: FW-1: Log buffer is full
>> Jan 20 01:23:05 fw1 kernel: FW-1: lost 14 log/trap
>> messages
>> Jan 20 01:23:05 fw1 kernel: FW-1: Log buffer is full
>> Jan 20 01:23:06 fw1 kernel: FW-1: lost 2 log/trap
>> messages
>> Jan 20 01:23:06 fw1 kernel: FW-1: Log buffer is full
>>
>> This cause that the firewall is no passing packets.
>>
>> Somebody have any idea how can I fix this problem?
>>
>> This firewall has Linux RH 3 and checkpoint NGX R60
>>
>> Tnks
>> Regards
>> Javier
>>
>> =================================================
>> To set vacation, Out-Of-Office, or away messages,
>> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http://www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> fw-1-owner AT ts.checkpoint DOT com
>> =================================================
>>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
