Hi, You may get strange behaviours b/w Smartcenter server and Enforcement module when they are NOT Synchronised on Date and Time.
May be this helps to you. Regards Rajveer > -----Original Message----- > From: Joachim Bassmann [SMTP:[EMAIL PROTECTED] > Sent: Wednesday, January 14, 2004 3:15 PM > To: [EMAIL PROTECTED] > Subject: [FW-1] NG AI R55 local log server creates insane high load > > Hi guys, > > yesterday I installed a combined NG AI R55 (from Dec 23rd) enforcement > module and log server on a E220R running Solaris 8. > > At first everything worked fine until I changed the fw's object to log > locally instead of to the central management. At this point the system > load > went from 0.hardlyanything to 1.3 and the fw process drew between 55% and > 95% CPU (up from a one-figure percentage). > > Due to high load the box was from time to time no longer able to log to > itself which it stated in the firewall logs. Strangely a second remote > enforcement module which was also configured to log to this log server > worked always flawlessly. > > Furthermore when the box was logging it repeated certain old log entries > over and over (yes it was the same entry including the long passed > time-stamp). I guess that these logs were created when it had problems to > log to itself and went into some internal buffer. > > As soon as I switched the logging back to the central management > everything > worked fine again. > > Has anyone seen this behaviour before? > > thanks > > Joachim Bassmann, DELOS AG, Stuttgart, Germany > ------------------------------------------------------------ > Erst wenn das letzte Counterstrike indiziert, der letzte Videofilm > verboten, > und das Internet geschlossen ist, werdet Ihr merken, da� Ihr Eure Kinder > doch erziehen m�sst. - [EMAIL PROTECTED] > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
