Screen OS

While I enjoy my logs from my firewall parsing to my Linux box, How can I make this stop?

Dec  2 20:49:10 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c WPA authentication starting, SSID: cyberwatchers. (2008-12-02 20:54:54)
Dec  2 20:49:10 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c WPA authentication negotiating, SSID: cyberwatchers. (2008-12-02 20:54:54)
Dec  2 20:49:10 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c WPA authentication passed, SSID: cyberwatchers. (2008-12-02 20:54:54)
Dec  2 21:21:21 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c timeout, SSID: cyberwatchers. (2008-12-02 21:27:04)
Dec  2 21:21:21 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: station 0014a556931c is disassociated, SSID: cyberwatchers. (2008-12-02 21:27:05)
Dec  2 21:21:21 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c Open authentication passed, SSID: cyberwatchers. (2008-12-02 21:27:05)
Dec  2 21:21:21 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: station 0014a556931c is associated, SSID: cyberwatchers. (2008-12-02 21:27:05)
Dec  2 21:21:22 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c WPA authentication starting, SSID: cyberwatchers. (2008-12-02 21:27:05)
Dec  2 21:21:22 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c WPA authentication negotiating, SSID: cyberwatchers. (2008-12-02 21:27:05)
Dec  2 21:21:22 10.1.1.1 ssg5-serial-wlan: NetScreen device_id=0162012008004720  [Root]system-notification-00564: Wireless station event: Station 0014a556931c WPA authentication passed, SSID: cyberwatchers. (2008-12-02 21:27:05)

the log just fills up with this... It seems to be when the laptop is either hybernating or closed. Any help would be appreciated. 

Hi

This can actually be turned off by going to the WebUI --->Configuration--->Report settings--->Log settings--->Uncheck the box under Notifications column for syslog

Or via the CLI: unset log modul system level notif  destination syslog

Please note that this will also disable all events classified as "notifications" from being sent to the syslog server, so you may want to consider before disabling.

Notification events basically identify events such as link status changes, load balancing server status changes, and traffic logs. 

It may be a better idea to setup something on the Linux side actually to parse and thereby filter out these events instead.

Hope this helps

I am currently using logwatch and syslog to gather the logs from the firewall. I am going to see about parsing the log entries coming from the firewall to my Linux box however I am not sure that is possible.

Hmm... Actually I don't think its the timeout setting although it may be. The laptop is in hibernation, so it should not be having these authentication reconnect attempts.

My 5cents worth on that is that you can change the "roaming aggressiveness" setting on the laptop in the Advanced settings. Or there have also been some other issues where you need to update the driver for the wireless on the latop as well... ...