Re: [Swan] How to let pluto write little log ? We have 312 IPSec connections

[Nick Howitt]

That seems excessive. I am getting about 70kB/d/conn for a LAN-LAN connection with key lives of 1h and 8h. What do you have in "conn setup" in ipsec.conf? As a secondary question, does your system use rsyslog? Nick On 22/12/2015 22:46, ChenHao wrote: We have 312 IPSec connections. Unfortunately, pluto write about 45G data every day. Is there any parameter to disable the writing? I have cleared all debug option from /etc/sysconfig/pluto ? Thanks [root@pa6 log]# df -h Filesystem                     Size  Used Avail Use% Mounted on /dev/mapper/vg_-vg_root   30G  1.8G   27G   7% / devtmpfs                        32G     0   32G   0% /dev tmpfs                           32G   54M   32G   1% /dev/shm tmpfs                           32G  3.2G   29G  10% /run tmpfs                           32G     0   32G   0% /sys/fs/cgroup /dev/mapper/vg_-vg_home  9.8G  2.2G  7.1G  24% /home /dev/sda1                      477M   82M  366M  19% /boot /dev/mapper/vg_-vg_temp  2.0G  6.1M  1.8G   1% /tmp /dev/sda2                      500M     0  500M   0% /boot/efi /dev/mapper/vg_-vg_var   113G   68G   40G  64% /var [root@pa6 log]#     [root@pa6 ~]# cd /var/log [root@pa6 log]# ls -ltr secure* -rw------- 1 root root  2159190212 Dec 20 04:15 secure-20151220.gz -rw------- 1 root root 21283501386 Dec 22 11:51 secure [root@pa6 log]# ls -lh secure -rw------- 1 root root 20G Dec 22 11:52 secure [root@pa6 log]# ls -ltr pluto* -rw-r--r-- 1 root root        1129 Dec 16 17:09 pluto.log-20151216.gz -rw-r--r-- 1 root root        1129 Dec 17 03:28 pluto.log-20151217.gz -rw-r--r-- 1 root root     4447840 Dec 18 03:32 pluto.log-20151218.gz -rw-r--r-- 1 root root   648411592 Dec 19 03:28 pluto.log-20151219.gz -rw-r--r-- 1 root root           0 Dec 21 03:16 pluto.log-20151220.gz -rw-r--r-- 1 root root 47953328593 Dec 22 03:46 pluto.log-20151222 -rw-r--r-- 1 root root 47955774844 Dec 22 11:52 pluto.log   pluto: total 4 drwx------ 2 root root 4096 Dec 16 07:53 peer [root@pa6 log]# ls -lh pluto.log-20151222 -rw-r--r-- 1 root root 45G Dec 22 03:46 pluto.log-20151222 _______________________________________________ Swan mailing list Swan@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan

_______________________________________________
Swan mailing list
Swan@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan