The PhoneBoy Blog


Simplifying Telecom, Mobile Phones, Gadgets, and More!

FireWall-1 FAQ: Log Viewer Not Displaying All Fields

Please note: This content was from when I was operating my FireWall-1 FAQ site, which I stopped operating in August 2005. For some reason people still have links to this stuff on the Internet that people are still clicking on.


I am making this information available again AS IS. Given how old this information is, it is likely wildly inaccurate. I have no plans to update this information.


If you're still running versions of Check Point VPN-1/FireWall-1 where this information is still relevant to you, do yourself a favor and upgrade to a more recent release. If you happen to be running a current release and the information is useful, it's by happenstance :)


Q:

My log viewer is treating all log entries as if I logged "short," yet I have long logging turned on for all my rules. or

'fw log' displays nothing

A:

This was a known problem in versions of FireWall-1. Check Point claims to have fixed this bug in every version of 3.0b. The problem exists on the management console and is not completely fixed until 4.0SP1.

Richard Pringle suggests you may be able to work around this problem by simply loading another log in the GUI. He keeps a rather "small" log for this purpose. He then switches back to the "current" log and sees all the fields.

If this does not work for you, the following steps also work:

    fw logswitch 
    fw kill fwd 
    rm $FWDIR/log/fw.log* 
    rm $FWDIR/log/fw.alog* 
    rm $FWDIR/log/fw.vlog* 
    rm $FWDIR/log/fw.logswitch 
    fwd

On Windows NT, these steps are:

    fw logswitch 
    fwstop 
    del %FWDIR%\log\fw.log* 
    del %FWDIR%\log\fw.alog* 
    del %FWDIR%\log\fw.vlog* 
    del %FWDIR%\log\fw.logswitch 
    fwstart

This kills and restarts fwd on Unix (NT requires a full stop). Though logging will not function momentarily, your security policy will remain in effect.

C-List #Cybersecurity Celebrity, Podcaster, #noagenda Producer, Frequenter of shiny metal tubes, Expressor of personal opinions, and of course, a coffee achiever.