I installed kiwi on my own computer at the first time, and configured PIX to forward syslogs to it. It worked fine till I rebooted my computer. Whenever I rebooted my computer, PIX got crashed and I had to power it off and back on manually. So, right now, my kiwi is running on a seperated server, and we keep it up and running 7/24 as seriously as our mail server.
Fei. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 14, 2002 2:05 PM To: [EMAIL PROTECTED] Subject: PIX high-cpu when logging stops Hi, Here's one to conjour with ! We have a PIX 525.........we log directlly to a KIWI syslog collector using UDP port 514 (honest, definitely not TCP !!) Today we experienced 98% CPU on the PIX, and found (by trial and error while searching for info in the logs) that the KIWI syslog daemon was down. Immediately we stared it up the CPU dropped to almost nothing ! Not believing this, we stopped & started the syslog collector a few times, and sure enough it was the cause of the high CPU ?? My first question is (obviously) has anyone else heard or seen this before ? My second question is, how the heck does the PIX know that the syslog daemon is gone when its using UDP !!!!! Is this a case for Mulder & Scully ?? Cheers, Gordon _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] For Account Management (unsubscribe, get/change password, etc) Please go to: http://lists.gnac.net/mailman/listinfo/firewalls _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] For Account Management (unsubscribe, get/change password, etc) Please go to: http://lists.gnac.net/mailman/listinfo/firewalls
