Christo,
I haven't had these kinds of problems, but I did suffer through some of this
early on while learning the software.
Do you by any chance have a cron job rotating your logs at/near the same
time as the last entry? I have noticed that if I rotate my logs, while
WebTrends is up, then it appears to stop receiving logs(I will be contacting
WebTrends today about this.) Usually all I need to do stop/start WebTrends
or reboot box(yes you'll loose a few logs while doing this.)
If you restart WebTrends, manually rotate logs, then check connection
status, you'll notice that it stills says 'Established'. WebTrends does
not receive any more logs at this point(I'll also be sniffing this to see what
is being sent - if anything??)
Also, are leaving the "Monitor LEA & Syslog" window open to view the
entries? If so, I have found this to be a problem. I use this windows to
verify that it is still receiving and is alive, then I close it(leaving the main
window open only.)
What version/build of WebTrends are you using? What order did you install
software and service packs in? I don't think WebTrends 'supports' SP6
yet??
Robert
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> Christo Van Jaarsveld <[EMAIL PROTECTED]> 6/6/00 2:16:32 AM >>>
>Hi,
>
>I have a problem with Webtrends Firewall Suite utilizing OPSEC LEA for
>Checkpoint Firewall-1. The Webtrends machine stops getting the logs from the
>firewall after a certain time - it only works for about a day or so. Usually
>the last log reported on the Webtrends machine gets recorded early in the
>morings(e.g. 4:00 am) and nothing from then onwards. Checking the ports on
>the firewall reviels that it is listening on port 18184 and there is
>actually an "ESTABLISHED" connection between the Webtrends machine and the
>firewall. The only way of getting it working again is to deinstall Webtrends
>and to reinstall it again! What could be wrong here? Is there a fix to this
>problem? Here are the operating environment details:
>
>Firewall: Firewall-1 version 4.0
> Solaris 2.6
> SUN Ultra5
>
>Webtrends: Windows NT4 SP6
> x86
>
>Please help. I've tried Webtrend's support but have'nt recieved any
>response...
>
>Regards,
>
>Christo
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================