certego / fw1-loggrabber

FW1-Loggrabber is a command-line tool to grab logfiles from remote Checkpoint devices using OPSEC LEA (Log Export API)
GNU General Public License v2.0
52 stars 35 forks source link

continuous session suspension issue #54

Open VatsalJagani opened 5 years ago

VatsalJagani commented 5 years ago

We are continuously getting

LEA suspended session handler was invoked

logs and then utility stops collecting data until we re-run the utility to collect data.

We are running below command: lea_loggrabber --debug_level 3 --lea_server_ip <lea-server-ip> --lea_server_auth_port <lea-server-port> --lea_server_auth_type sslca --opsec_sslca_file <file-location> --opsec_sic_name CN=<connection_name>,O=<network-object> --opsec_entity_sic_name CN=cp_mgmt,O=<network-object> --no_online --resolve

Our data collection is running every 30 seconds. Is that something that might cause the issue?

@ahoying , @jvm3487 - Could you please check if you can help with the issue?

ahoying commented 5 years ago

Sorry, I no longer have access to any checkpoint devices, so I cannot help testing.

jvm3487 commented 5 years ago

Unfortunately, I do not know what could cause the problem you are seeing.