[Youngy]

More updates.

Uri from checkpoint suggested I run a cpstop and cpstart just before running the logswitch:

Check these results out:

C:\>cpstop
The Check Point SmartView Monitor service is stopping..
The Check Point SmartView Monitor service was stopped successfully.

The Check Point FireWall-1 service is stopping.
The Check Point FireWall-1 service was stopped successfully.

The Check Point SVN Foundation service is stopping..........
The Check Point SVN Foundation service was stopped successfully.


C:\>cpstart

cpstart: Starting product - SVN Foundation

The Check Point SVN Foundation service is starting.
The Check Point SVN Foundation service was started successfully.


cpstart: Starting product - VPN-1

The Check Point FireWall-1 service is starting.
The Check Point FireWall-1 service was started successfully.


cpstart: Starting product - SmartView Monitor

The Check Point SmartView Monitor service is starting.
The Check Point SmartView Monitor service was started successfully.


C:\>fw logswitch paul.log
Log file has been switched to: paul.log

C:\>

Now the cool thing is that it created a file called paul.log which is the same size as the log file was roughly before the logswitch. This is how I expect the command to react and expected outputs:

paul.log
paul.loginitial_ptr
paul.logptr
paul.logaccount_ptr

Now to see what happens when I logswitch without doing a start stop.

Again feel free to add your own experience or thoughts