gw-world:/> logsnoop -on -rate=5
This will limit displayed log messages to a maximum of 5 per second.
• Limit by total number:
gw-world:/> logsnoop -on -num=100
This will show only the first 100 log messages. After that, logsnoop is switched off.
Examining Memlog History
Memlog is the name of the local memory buffer that NetDefendOS uses to store a given number
of the most recent log messages generated. It is enabled by default. When using logsnoop,
examining memlog is done using the special parameter -source=memlog.
For example, the entire contents of the memlog buffer can be examined using the command:
gw-world:/> logsnoop -on -source=memlog
Even though the -on parameter must be used, this command does not switch on real-time
logging and a matching command with the -off parameter is therefore not needed later.
Examining Memlog Plus New Log Messages
It is possible to examine the log history in memlog as well as switch on real-time log snooping at
the same time. This is done with the command:
gw-world:/> logsnoop -on -source=both
This will display the contents of memlog and all subsequently generated messages. It is
recommended to add further filtering parameters to the command.
If -source=both is used, a second command with the -off parameter will be needed later to switch
off real-time logging.
Specifying a Time Range
The displayed log messages can be limited to those generated after a certain time with the
parameter -starttime and/or those generated before a certain time with the -endtime parameter.
The time value itself can be specified in the following formats:
• Using Date and Time
The date and time together takes the format "yyyy-mm-dd hh.mm.ss" where the surrounding
quotes are mandatory. For example: 2014-01-12 18:30:00. To look at log messages from 18:30
on the 12th of January onwards, the command would be:
gw-world:/> logsnoop -on -starttime="2014-01-12 18:30:00"
Note that the parameter value must be enclosed by quotes when both date and time are
entered.
• Using Date Only
The date may be specified without the time and this takes the format yyyy-mm-dd, this time
Chapter 2: Management and Maintenance
101
To Next Page
Loading...
