Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 01-31-2004, 12:19 AM
Junior Member
 
Join Date: Sep 2002
Posts: 16
Default following process is bringin ASL to a crawl

root 7025 58.6 34.6 34176 32848 ? SN 00:13 2:12 | \_ /usr/local/bin/fwlogwatch -D -f /var/log/kernel-20040

how can I slow it down? Can I kill it?
Reply With Quote
  #2 (permalink)  
Old 01-31-2004, 01:50 PM
Wizard
 
Join Date: Jul 2003
Location: U.S.
Posts: 1,265
Default Re: following process is bringin ASL to a crawl

I am not sure of fwlogwatch, but excessive logging will make Astaro drag. Check your logs and see if you have many entries being made. If so, make Drop rules for the packet activity in question...
Reply With Quote
  #3 (permalink)  
Old 01-31-2004, 04:53 PM
Senior Member
 
Join Date: Oct 2003
Location: Germany
Posts: 371
Default Re: following process is bringin ASL to a crawl

Sargam,
the fwlogwatch handles your kernel logfile every night. If your log is very large, the fwlogwatch process needs very much of your cpu. Define as SecApp said, drop rules in your packet filter. Drop all broadcasts and enquiries to port 135 on your external interface. That should help you. Maybe you can drop all netbios (135-139) enquiries to your external nic.

Bagira
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 11:15 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.