Tnks Jeff for your answer, I´ll change the log buffer size.
I found a documentation that explains the same as you said. See the chapter 6.1 and 6.4 of the follow link. http://searchsecurity.techtarget.com/searchSecurity/downloads/CheckPoint-Ch0 6.pdf Tnks again Regard Javier -----Mensaje original----- De: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] En nombre de Samantha Fetter Enviado el: Lunes, 23 de Enero de 2006 07:09 p.m. Para: [email protected] Asunto: Re: [FW-1] log buffer is full If you are in an environment with a separate management server/log server, then the cause could likely be that the firewall is unable to send the logs to the management server, and the buffer allocated for the logging has been filled. Thus, as new log entries keep rolling in, the older ones are lost as it is indicating. I have experienced this before. The cause for being unable to send the logs could be disk space or could also be communications with the log server. If it's local logging, then the filesystem being full would make the most sense, as the first responder explained. Cheers, Samantha On Mon, 23 Jan 2006, Tom Louis wrote: > --- Javier Lara <[EMAIL PROTECTED]> wrote: > >> Hi all, >> >> The /var/log/messages of my firewall has the follow >> errors: >> >> Jan 20 01:22:57 fw-1 kernel: FW-1: Log buffer is >> full >> Jan 20 01:23:00 fw1 kernel: FW-1: lost 13 log/trap >> messages >> Jan 20 01:23:00 fw1 kernel: FW-1: Log buffer is full >> Jan 20 01:23:01 fw1 kernel: FW-1: lost 4 log/trap >> messages >> Jan 20 01:23:01 fw1 kernel: FW-1: Log buffer is full >> Jan 20 01:23:03 fw1 kernel: FW-1: lost 2 log/trap >> messages >> Jan 20 01:23:03 fw1 kernel: FW-1: Log buffer is full >> Jan 20 01:23:05 fw1 kernel: FW-1: lost 14 log/trap >> messages >> Jan 20 01:23:05 fw1 kernel: FW-1: Log buffer is full >> Jan 20 01:23:06 fw1 kernel: FW-1: lost 2 log/trap >> messages >> Jan 20 01:23:06 fw1 kernel: FW-1: Log buffer is full >> >> This cause that the firewall is no passing packets. >> >> Somebody have any idea how can I fix this problem? >> >> This firewall has Linux RH 3 and checkpoint NGX R60 >> >> Tnks >> Regards >> Javier >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [EMAIL PROTECTED] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [EMAIL PROTECTED] >> ================================================= >> > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
