Question on Logging

[melbert2002]

I noticed when I do a Show log that the buffered messages are showing alot of messages logged. Approx 800000 messages. Is there a risk of logging filling up the memory space on the pix and crashing the firewall? If so, then is there a way to zero out the counters and clear all the logs?

Thanks

Mel

 

[ixleplix]

The logging buffer is 4KB in size and is non-configurable. The messages that are oldest are overwritten once the buffer is full. You can use the "clear logging" command to empty the buffer, or the "no logging buffered level " command to turn it off.

Roland


*****************

What's ADD again?

 

[melbert2002]

Cool deal thanks for the info on that. Oh do you know where it says in the documentation that the buffer is only 4kb?

Thanks

Mel

 

[ixleplix]

Cisco Secure PIX Firewalls" Edited by David W. Chapman Jr. and Andy Fox. Page 106.


*****************

What's ADD again?

 

[chicocouk]

Starting in v7 of the pix o/s you can configure size of the logging buffer, and set it to anything from 4096 to 1048476 bytes. Use the logging buffer-size [bytes] command.

Cheers.

CCNA, CCSA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP

 

[ixleplix]

That's cool!
I'm still figuring out the differences between 6.3(4) and 7.x...


*****************

What's ADD again?