SRX

When using the screen features, rtlogd seems to log messages for every triggered event to /var/log/rtlogd.

Problem:

If, for example, icmp flood protection is triggered, a message for every blocked icmp packet is created in /var/log/rtlogd.

In case of icmp-flooding the log file grows very fast.

Is it possible to make rtlogd stop logging to /var/log/rtlogd?

Everytime I brought this issue up with JTAC, I received the answer that I should contact a sales engineer for this feature request.

We had problems about this several times where extensive logging at an actual attack situation causing router to use a lot of CPU and disk IO and become unresponsive....

So the short answer is no, there is no way, but you can try to contact with an SE for a feature request.

Hi,

In case anybody checks this thread, you can try:

set system processes security-log disable

Cheers,

Roberts