Cfp does not write events to firewall o D+ logs

My CFP is working quite well, but I have one annoying problem. Cfp does not write events to log files.
I do have logging enabled, max log size is 2 MBs. I recorded cfp behaviour with sysinternal’s filemonitor. Here are results:

12:31:00 cfp.exe:3908 LOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Excl: Yes Offset: 1073741824 Length: 1
12:31:00 cfp.exe:3908 LOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Excl: No Offset: 1073741826 Length: 510
12:31:00 cfp.exe:3908 UNLOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Offset: 1073741824 Length: 1
12:31:00 cfp.exe:3908 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb-journal NOT FOUND Attributes: Error
12:31:00 cfp.exe:3908 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Length: 1024
12:31:00 cfp.exe:3908 READ C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Offset: 24 Length: 16
12:31:00 cfp.exe:3908 UNLOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Offset: 1073741826 Length: 510
12:31:00 cfp.exe:3908 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
12:31:00 cfp.exe:3908 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
12:31:00 cfp.exe:3908 QUERY INFORMATION C:\ SUCCESS FileNameInformation
12:31:00 cfp.exe:3908 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
12:31:00 cfp.exe:3908 CLOSE C:\ SUCCESS
12:31:00 cfp.exe:3908 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
12:31:00 cfp.exe:3908 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 4
12:31:00 cfp.exe:3908 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
12:31:00 cfp.exe:3908 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS

As you can see, it displays error NOT_FOUND when accessing file cfplogdb.sdb-journal.
Any Ideas? I tried to search forums for information about this problem, but could not find any.
???

My system information:

  • IBM Thinkpad R52 1846, 1GB RAM, 120 GB HD
  • Windows XP SP 3
  • Comodo Internet Security 3.5.57173.439 (only Firewall and Defense+ active, not antivirus)
  • Internet connection is 3G USB stick
  • miscellaneous office software running same time

My system specs are:
P4 HT 3 GHz and over 1gb ram available and XP sp3 32bit, HW DEP Optout.
Other apps: Comodo Safesurf, Unlocker assistant, Speedfan, Daemon tools 4.30.2 , CIS 3.5.57173.439, COMODO Vulnerability Analyzer 1.1.4, Logitech Setpoint 4.70.213, Symantec Software Virtualization 2.1.3062

Hallo makinjr,

cfplogdb.sdb-journal NOT FOUND happens here too but logging works.

It may prove useful to provide some more details.

Do the missing events pertain also D+ (eg changing Defense+ security level from the tray icon)?

Did you try to run %programfiles%\COMODO\COMODO Internet Security\cfplogvw.exe to use Flle\Clear\All or deleting C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb after closing CIS from the tray icon?

I did all that, but still no logs.

Ok.

Maybe there is an issue during event writing.

There is a way to trigger a Log writing at will using CIS tray icon and switching Defense+ Security level.
Using filemon to log what happens when switching D+ mode may provide some additional info about cfplogdb.sdb and cfplogdb.sdb-journal writing process.

This is what happens when I change D+ mode:

15:56:23 cfp.exe:2616 READ C:\WINDOWS\system32\config\SYSTEM SUCCESS Offset: 3104768 Length: 4096
15:56:23 cfp.exe:2616 READ C:\WINDOWS\system32\config\SYSTEM SUCCESS Offset: 3108864 Length: 4096
15:56:23 cfp.exe:2616 SET INFORMATION C:\WINDOWS\system32\config\system.LOG SUCCESS Length: 8192
15:56:23 cfp.exe:2616 SET INFORMATION C:\WINDOWS\system32\config\system.LOG SUCCESS Length: 8192
15:56:23 cfp.exe:2616 SET INFORMATION C:\WINDOWS\system32\config\system.LOG SUCCESS Length: 16384
15:56:23 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\system.LOG SUCCESS Offset: 0 Length: 512
15:56:23 cfp.exe:2616 FLUSH C:\WINDOWS\system32\config\system.LOG SUCCESS
15:56:23 cfp.exe:2616 WRITE C:$Directory SUCCESS Offset: 4096 Length: 4096
15:56:23 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\system.LOG SUCCESS Offset: 512 Length: 2048
15:56:23 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\system.LOG SUCCESS Offset: 2560 Length: 4096
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\system.LOG SUCCESS Offset: 6656 Length: 4096
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\system.LOG SUCCESS Offset: 10752 Length: 4096
15:56:24 cfp.exe:2616 FLUSH C:\WINDOWS\system32\config\system.LOG SUCCESS
15:56:24 cfp.exe:2616 WRITE C:$Directory SUCCESS Offset: 4096 Length: 4096
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\system.LOG SUCCESS Offset: 0 Length: 512
15:56:24 cfp.exe:2616 FLUSH C:\WINDOWS\system32\config\system.LOG SUCCESS
15:56:24 cfp.exe:2616 WRITE C:$Directory SUCCESS Offset: 4096 Length: 4096
15:56:24 cfp.exe:2616 FLUSH C:\WINDOWS\system32\config\SYSTEM SUCCESS
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\SYSTEM SUCCESS Offset: 0 Length: 16384
15:56:24 cfp.exe:2616 FLUSH C:\WINDOWS\system32\config\SYSTEM SUCCESS
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\SYSTEM SUCCESS Offset: 3096576 Length: 16384
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\SYSTEM SUCCESS Offset: 0 Length: 16384
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\SYSTEM SUCCESS Offset: 3211264 Length: 16384
15:56:24 cfp.exe:2616 FLUSH C:\WINDOWS\system32\config\SYSTEM SUCCESS
15:56:24 cfp.exe:2616 WRITE C:\WINDOWS\system32\config\SYSTEM SUCCESS Offset: 0 Length: 4096
15:56:24 cfp.exe:2616 FLUSH C:\WINDOWS\system32\config\SYSTEM SUCCESS
15:56:24 cfp.exe:2616 SET INFORMATION C:\WINDOWS\system32\config\system.LOG SUCCESS Length: 1024
15:56:24 cfp.exe:2616 LOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Excl: Yes Offset: 1073741824 Length: 1
15:56:24 cfp.exe:2616 LOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Excl: No Offset: 1073741826 Length: 510
15:56:24 cfp.exe:2616 UNLOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Offset: 1073741824 Length: 1
15:56:24 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb-journal NOT FOUND Attributes: Error
15:56:24 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Length: 0
15:56:24 cfp.exe:2616 UNLOCK C:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb SUCCESS Offset: 1073741826 Length: 510
15:56:24 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:24 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:24 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:24 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:24 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:24 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:24 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:24 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:24 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:29 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:29 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:29 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:29 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:29 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:29 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:29 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:29 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:29 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:29 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:29 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:29 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:29 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:29 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:29 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:29 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:29 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:29 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:29 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:29 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:29 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:29 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:29 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:29 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:29 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:29 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:29 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:29 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:29 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:29 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:29 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS
15:56:34 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\ SUCCESS Attributes: D
15:56:34 cfp.exe:2616 OPEN C:\ SUCCESS Options: Open Directory Access: 00100001
15:56:34 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileNameInformation
15:56:34 cfp.exe:2616 QUERY INFORMATION C:\ SUCCESS FileFsAttributeInformation
15:56:34 cfp.exe:2616 CLOSE C:\ SUCCESS
15:56:34 cfp.exe:2616 OPEN C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Options: OpenIf Access: 0012019F
15:56:34 cfp.exe:2616 QUERY INFORMATION C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Length: 13962
15:56:34 cfp.exe:2616 READ C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS Offset: 0 Length: 4096
15:56:34 cfp.exe:2616 CLOSE C:\Documents and Settings\All Users\Application Data\Comodo\Common\Pending\PendingList.txt SUCCESS

As You can see, it does access log file but does not write, does not even try to write anything to it.
What might be wrong?
“Security” dialog (explorer) shows that “Everyone” has access to this file. So it should not be matter of invalid security descriptor. Cfp should be able to write into it.

Not a clue here but maybe devs will be able to guess a possible reason.
Only thing I would try in this scenario is to switch CIS configuration on the tray icon to Proactive security (if it set to internet security) or to Internet security (if it is set to Proactive security) to possibly sort ount the chance of a corrupt config.

Sorry If I was of no help :-[

I have changed configuration (now Proactive) and tried every single setting in Cfp, but no success. Logs are still empty. I posted a bug ticket, but have had no answer from Comodo. ???