I see this performance issue as a potential security risk.
(Why ?!) - The log viewer performs so badly that it is tempting to only use
it when looking for known issues that have been raised or when testing
rather than using it proactively and for regular security reviews.
Now, sure, there are tools such as SecureView (which isn't great anyway) to
report on logs but these are impeded by the general log performance and do
not give live or 'almost live' feedback. I certainly review reports but you
shouldn't even need such a tool if Log Viewer worked just a bit better and
had some half-decent reporting element.
So - come on CP sort it out.
Tim Higgins
Joe Voisin <[EMAIL PROTECTED]>
Sent by: To: "'Simon Guo'"
<[EMAIL PROTECTED]>, Joe Voisin
[EMAIL PROTECTED]
<[EMAIL PROTECTED]>, [EMAIL PROTECTED]
kpoint.com cc:
Subject: RE: [FW1]
logviewer slow response
14/08/00 15:37
Besides switching to Gauntlet? (kidding)
Clear out your log directory? it's in $FWLOG/log
What I do is create another volume just for Logs. I mounted it in
/var/log/fw1
I then do this:
fwstop
mv $FWDIR/log/* /var/log/fw1
fwstart
I find that the log viewer is then ALOT more acceptable, but it still is a
pain.
I don't exactly know where the problem is. I had this call in at
checkpoint
for about 2 months before I gave up on them. I had it escalated to the
test
bench and then all the way to Israel but they were unable to help.
What version of FW1 are you running?
> -----Original Message-----
> From: Simon Guo [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 14, 2000 10:56 AM
> To: 'Joe Voisin'; Simon Guo; [EMAIL PROTECTED]
> Subject: RE: [FW1] logviewer slow response
>
>
> Joe,
>
> I tried your trick. I turn off the "Resolve Addresses" option from the
> logviewer, log off, login again. The phenomena persist.
> The error: "Slow response from server. Abort?"
>
> Any other idea?
>
> Simon
>
> -----Original Message-----
> From: Joe Voisin [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 14, 2000 10:34 AM
> To: 'Simon Guo'; [EMAIL PROTECTED]
> Subject: RE: [FW1] logviewer slow response
>
>
>
> Yeah, I'm used to this problem...
>
> Turn off name resolution in options and reload the log
> viewer.. it should be
> a bit better.
>
> Joe
>
> > -----Original Message-----
> > From: Simon Guo [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, August 14, 2000 9:59 AM
> > To: [EMAIL PROTECTED]
> > Subject: [FW1] logviewer slow response
> >
> >
> >
> > Please help! I opened the logviewer and no log shows up. The
> > message, no
> > response. The logviewser looks fine before yesterday. Now the
> > status is
> > "getting date from server ..." and hang on this forever.
> >
> > What's worng? I can telnet to the server, and the utilization
> > is low (on
> > uptime, average is 0.8 user).
> >
> > Simon
> >
> >
> > ==============================================================
> > ==================
> > To unsubscribe from this mailing list, please see the
> > instructions at
> > http://www.checkpoint.com/services/mailing.html
> > ==============================================================
> > ==================
> >
>
>
> ==============================================================
> ==============
> ====
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==============
> ====
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
#**********************************************************************
This message is intended solely for the use of the individual
or organisation to whom it is addressed. It may contain
privileged or confidential information. If you have received
this message in error, please notify the originator immediately.
If you are not the intended recipient, you should not use,
copy, alter, or disclose the contents of this message. All
information or opinions expressed in this message and/or
any attachments are those of the author and are not
necessarily those of Hughes Network Systems Limited,
including its European subsidiaries and affiliates. Hughes
Network Systems Limited, including its European
subsidiaries and affiliates accepts no responsibility for loss
or damage arising from its use, including damage from virus.
#**********************************************************************
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
