Re: log messages F13

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Jul 14, 2010 at 9:10 PM, Andy Blanchard <zocalo@xxxxxxxxx> wrote:
> On 14 July 2010 20:58, Frank Murphy <frankly3d@xxxxxxxxx> wrote:
>> My /var/log/messages
>>
>> seems to have started hording info.
>> It is now 112mb in size.
>> Covers 3-4 days of info.
>
> Unless this is a busy server, then that seems rather excessive to say
> the least - mine is currently 14kB, but I redirect quite a bit of
> stuff into other files.
>
> If I had to guess I'd say your log level details have been changed, or
> something is suddenly generating a lot of syslog entries/content.  The
> former can be fixed by tweaking "/etc/rsyslog.conf", the latter by
> inspecting the log file and seeing what is generating the bulk of the
> content.  If it's not immediately obvious what is broken*, posting a
> sample the log file here would be a great help.

I just checked my own after seeing this posting - and find that
several of the recent messages files are large:
-rw-------. 1 root root 264K 2010-07-14 21:39 /var/log/messages
-rw-------. 1 root root 1.0M 2010-06-20 03:21 /var/log/messages-20100620
-rw-------. 1 root root 963K 2010-06-27 03:24 /var/log/messages-20100627
-rw-------. 1 root root  29K 2010-07-04 03:11 /var/log/messages-20100704
-rw-------. 1 root root  42K 2010-07-11 03:07 /var/log/messages-20100711

When I looked at the latest I see an awful lot of lines like:
Jul 14 21:33:19 home1 named[1181]: client 127.0.0.1#38568: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:34:21 home1 named[1181]: client 127.0.0.1#52277: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:35:23 home1 named[1181]: client 127.0.0.1#55235: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:36:25 home1 named[1181]: client 127.0.0.1#44936: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:37:27 home1 named[1181]: client 127.0.0.1#41560: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:38:29 home1 named[1181]: client 127.0.0.1#41524: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:39:31 home1 named[1181]: client 127.0.0.1#47147: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:40:33 home1 named[1181]: client 127.0.0.1#41686: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:41:35 home1 named[1181]: client 127.0.0.1#57307: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:42:37 home1 named[1181]: client 127.0.0.1#52350: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa
Jul 14 21:43:39 home1 named[1181]: client 127.0.0.1#38143: RFC 1918
response from Internet for 1.122.168.192.in-addr.arpa

I have not changed anything recently and this is in f12 - mine are
only about 1MB in size but I wonder if there is anything with a common
theme in the OP's messages file that has significant numbers of very
similar lines?

-- 
mike c
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines



[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux