Hi, Here's one to conjour with ! We have a PIX 525.........we log directlly to a KIWI syslog collector using UDP port 514 (honest, definitely not TCP !!) Today we experienced 98% CPU on the PIX, and found (by trial and error while searching for info in the logs) that the KIWI syslog daemon was down. Immediately we stared it up the CPU dropped to almost nothing !
Not believing this, we stopped & started the syslog collector a few times, and sure enough it was the cause of the high CPU ?? My first question is (obviously) has anyone else heard or seen this before ? My second question is, how the heck does the PIX know that the syslog daemon is gone when its using UDP !!!!! Is this a case for Mulder & Scully ?? Cheers, Gordon _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] For Account Management (unsubscribe, get/change password, etc) Please go to: http://lists.gnac.net/mailman/listinfo/firewalls
