Just in case anyone was interested.... I have now got the script running to my satisfaction, that invokes "fw log" at regular intervals and sends the textual log data off to a syslog daemon on another platform. The key factor was (thanks again to Jan Marsman of Nokia !) that I needed to run as a c-shell script for the benefit of "cron". Cron under IPSO only supports csh ! The script is quite simple and basically (i check for files existing and switch logs once a day as well) just issues the "fw log" command, piping the output to "logger". Via Voyager, I set logging to a remote host (in this case a remote NT PC with Kiwi syslogd). Then I edited /config/db/initial to add three lines (name t ; name:timeinterval time ; name:command /var/....etc) to that file with a type of "cron". After a reboot, this ensures that an entry exists to "kick off" my script. So now I have all logs, for all platforms (FW-1, IPSO, and my Cisco PIX) received at one collector !. Thanks to all, Gordon _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
