If you are in an environment with a separate management server/log server,
then the cause could likely be that the firewall is unable to send the
logs to the management server, and the buffer allocated for the logging
has been filled. Thus, as new log entries keep rolling in, the older ones
are lost as it is indicating. I have experienced this before.
The cause for being unable to send the logs could be disk space or could
also be communications with the log server.
If it's local logging, then the filesystem being full would make the most
sense, as the first responder explained.
Cheers,
Samantha
On Mon, 23 Jan 2006, Tom Louis wrote:
--- Javier Lara <[EMAIL PROTECTED]> wrote:
Hi all,
The /var/log/messages of my firewall has the follow
errors:
Jan 20 01:22:57 fw-1 kernel: FW-1: Log buffer is
full
Jan 20 01:23:00 fw1 kernel: FW-1: lost 13 log/trap
messages
Jan 20 01:23:00 fw1 kernel: FW-1: Log buffer is full
Jan 20 01:23:01 fw1 kernel: FW-1: lost 4 log/trap
messages
Jan 20 01:23:01 fw1 kernel: FW-1: Log buffer is full
Jan 20 01:23:03 fw1 kernel: FW-1: lost 2 log/trap
messages
Jan 20 01:23:03 fw1 kernel: FW-1: Log buffer is full
Jan 20 01:23:05 fw1 kernel: FW-1: lost 14 log/trap
messages
Jan 20 01:23:05 fw1 kernel: FW-1: Log buffer is full
Jan 20 01:23:06 fw1 kernel: FW-1: lost 2 log/trap
messages
Jan 20 01:23:06 fw1 kernel: FW-1: Log buffer is full
This cause that the firewall is no passing packets.
Somebody have any idea how can I fix this problem?
This firewall has Linux RH 3 and checkpoint NGX R60
Tnks
Regards
Javier
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
