My shorewall is running for over a year on a DELL PC with OpenSUSE 10.2. Logging in SUSE linux is done in the file /var/log/firewall (for all firewall messages (iptables) (see also the note "Syslog-ng" in http://www.shorewall.net/shorewall_logging.html) These logs are rotated about once a week and stored as /var/log/firewall-YYYYMMDD.bz2 files. The last log rotation took place a few hours ago. But I noticed already yesterday, that any logging to /var/log/firewall suddenly ceased yesterday at 19:37. I don''t understand why, my syslog-ng deamon is still running and logging in other files specified in its /etc/syslog-ng/syslog-ng.conf file. e.g. in /var/log/messages is still going on. (also there is nothing special to be seen in /var/log/messages that would give a clue why logging to /var/log/firewall stopped) # cat /var/run/syslog-ng.pid 2334 # ps -ef | grep 2334 root 2334 1 0 2008 ? 00:01:36 /sbin/syslog-ng -a /var/lib/dhcp/dev/log -a /var/lib/named/dev/log Why, and how to solve this ? thanks for any help ... \_______________ / Pieter Donche \____________________________________________ | Dept. Mathem. & Computer Science, University of Antwerp \ | http://www.win.ua.ac.be e-mail Pieter.Donche@ua.ac.be | | (UA) Middelheimlaan 1, B 2020 Antwerpen, BELGIUM (EU) | | room G1.16, tel +32 03.265.3870, fax +32 03.265.3777 | |____________________________________________________________| ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
Pieter Donche wrote:> > The last log rotation took place a few hours ago. > > But I noticed already yesterday, that any logging to /var/log/firewall > suddenly ceased yesterday at 19:37. > > I don''t understand why, my syslog-ng deamon is still running and > logging in other files specified in its /etc/syslog-ng/syslog-ng.conf file. > e.g. in /var/log/messages is still going on. > (also there is nothing special to be seen in /var/log/messages that would > give a clue why logging to /var/log/firewall stopped)This usually happens when klogd has stops or is ill. ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
Pieter Donche wrote:> My shorewall is running for over a year on a DELL PC with OpenSUSE 10.2. > > Logging in SUSE linux is done in the file /var/log/firewall > (for all firewall messages (iptables) > > (see also the note "Syslog-ng" in > http://www.shorewall.net/shorewall_logging.html) > These logs are rotated about once a week and stored as > /var/log/firewall-YYYYMMDD.bz2 files. > > The last log rotation took place a few hours ago. > > But I noticed already yesterday, that any logging to /var/log/firewall > suddenly ceased yesterday at 19:37. > > I don''t understand why, my syslog-ng deamon is still running and > logging in other files specified in its /etc/syslog-ng/syslog-ng.conf file. > e.g. in /var/log/messages is still going on. > (also there is nothing special to be seen in /var/log/messages that would > give a clue why logging to /var/log/firewall stopped) >This happens when klogd stops or is ill. ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com