Where is logging for interface negotiation history?

Hi John,

Syslog.log will show disconnect of interface and speed changes. You can also check networkd.log to see what is the speed when interface has come up.

Thanks,

John,

check in the applog.log if you have interface up and down. From advanced shell type:

cat applog.log | grep "Interface=Port2"

Port2 is my WAN port. Adapt it in your case.

In addition, use the command from advanced shell:

ethtool -r Port2

to force the negotiation to occur and see if the WAN interface goes down from the applog file.

Regards

I would suggest to check via across all logs in the first place: 

https://community.sophos.com/kb/en-us/132211 

grep 'timeframe' /log/*.log | less 

Or spice those command a little bit up and check, what is going on. 

Thanks for the replies, I will check on that - for some reason notification of replies to email is not working.  That's disappointing.

As well, I see every reply says to check the CLI.

Interesting - every other SMB firewall has this information in the GUI and does not require advanced knowledge of *nix to get simple information.  Duly noted for future reference.

I don't know what 'timeframe' is, or how to format it.

Can you advise?

(and as the customer has not been very helpful in providing evidence of this "flapping", I don't have a timeframe - so while I would love to narrow it down, I dont have that information)

Please advise how to read the log or filter the log to find the relevant information.

I have next to no experience on this.

Thanks,

John

None of the recommendations allowed me to find the information I requested.

Please advise.

Sophos Support, are you available to advise?

Hi John Woodall 

Please login to advanced shell execute below given command.

cd /log

tail -f applog.log or cat applog.log | grep "interface=port2"

Please share the output to check