Firewall-1

Re: [FW-1] Getting file log list.... taking too long.

Subject: Re: [FW-1] Getting file log list.... taking too long.
From: "Tucker, Fredrik M" <fred AT KU DOT EDU>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 18 May 2006 14:43:47 -0500
>From my experience, minimizing the size of the log that you are searching 
>greatly improves the operation more than anything else.   I do not have the 
>interface in front of me but you can set up a log to be created for each day, 
>week, month etc. depending on your needs. they are then stored in $FWDIR/log/ 
>.  Look up log switching.  That way when you open SmartView Tracker all you 
>see is the last two weeks or days instead of every record since day one (or 
>when the 2GB file limit is reached and the application automatically starts a 
>new log).

________________________________

From: Mailing list for discussion of Firewall-1 on behalf of Alex S.
Sent: Thu 5/18/2006 5:09 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Getting file log list.... taking too long.



Sorry.. I don't get it. What do you mean?


Tucker, Fredrik M wrote:
> Not practicing log rotation results in a similar "eternity" to open and 
> navigate in SmartView Tracker.  The recommendation is 100K entries.   with 3 
> million entries when viewing over the wire it is painfully slow... on the 
> same box as the logs, nearly as slow.  100K entries - instantaneous.  -all 
> with "reasonable\current" hardware.  Filtering and resolving of names, 
> addresses, and services seems to have no impact.



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>