Hi All,

My fw send me the audit log below via e-mail 200-500 per day.

what could be the cause for this error?

Thanks for the supports..

For a complete listing of the events that triggered this alarm please execute the following command (All on one line):

 

___BEGIN_CMD___

acat -a -e "type AUDIT_T_CFG_CHANGE

and stime 20081215093300 and etime 20081215093300" /var/log/audit.raw ___END_CMD___

 

Note: Due to rounding error and network traffic patterns, the above command

      may produce more events than were included in this alarm.

 

The following are the last 1 events seen:

 

Dec 15 09:33:00 2008 EET  f_system a_general_area t_cfg_change p_major

pid: 10502 ruid: 0 euid: 0 pgid: 10501 fid: 0 logid: 0 cmd: 'cf'

domain: CARW edomain: CARW hostname: fw.local admin: root

information: Branch  locked by user root