LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 10-28-2003, 01:05 PM   #1
coreyw
LQ Newbie
 
Registered: Oct 2003
Posts: 3

Rep: Reputation: 0
too many net msgs to console and logs


Hi All,

I've got RedHat linux 8.0 box (kernel 2.4.20-20.8) where I'm getting bogged down with console messages and LOTs of messages in the /var/log/messages file of the type:

Oct 28 11:34:48 cjge455fy35c4 kernel: IN=eth0 OUT= MAC=00:20:78:11:b8:b2:00:03:42:75:c0:45:08:00 ...

and

Oct 28 11:36:11 cjge455fy35c4 kernel: ipt_unclean: (embedded packet) UDP len too long 18 vs 120 ...

I thought that these might be martian headers, so I disabled log_martians in the proc directory. This didn't get rid of them.

Can anyone tell me how to get rid of these?

Thanks in Advance!
Corey.
 
Old 10-28-2003, 01:26 PM   #2
d3funct
Member
 
Registered: Jun 2001
Location: Centralia, WA
Posts: 274

Rep: Reputation: 31
Have you looked at your /etc/syslog.conf file? You may be logging more than you need. You can get by pretty well just logging like this:
*.err;kern.debug;daemon.notice /var/log/messages
mail.debug;*.info /var/log/syslog
auth.debug /var/log/syslog
*.crit *

There may be other entries in your /etc/syslog.conf, but this will get pretty much all you need. Also, if you have logging to /var/log/secure, or an security logging, I'd suggest leaving it alone. But if there is logging that is to echo directly to the console (i.e., mail.err console) you can probably comment it out so you won't get anything but *.crit (critical) messages echoed to the console screen.
 
Old 10-28-2003, 05:35 PM   #3
coreyw
LQ Newbie
 
Registered: Oct 2003
Posts: 3

Original Poster
Rep: Reputation: 0
d3funct,

I checked my syslog.conf:

#kern.* /dev/console
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* /var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log

As you can see any kernel messages are comments out. But I noticed the *.emerg messages go everywhere. Would these messages be *.emerg messages?

I'd tried making these (*.emerg) messages go to a custom messages file but I still see those network messages going to /var/log/messages.


Thanks for the reply.
C.

Last edited by coreyw; 10-28-2003 at 05:38 PM.
 
Old 11-02-2003, 05:20 PM   #4
scorbett
Member
 
Registered: May 2002
Location: Canada
Distribution: Slackware, Mandriva, RedHat
Posts: 46

Rep: Reputation: 15
I'm having an almost identical problem on Red Hat 9 (kernel 2.4.20-8) after setting up a custom iptables rule set. All my iptables log messages (and there are lots of them) go to /var/log/messages as well as to the console, even though my /etc/syslog.conf doesn't specify to send anything to the console. How can I stop these log messages from going to the console? Very annoying! Much thanks to anyone who can help with this problem.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
logs sent to /dev/console appear on /dev/tty1 lfur Linux - General 3 01-08-2008 01:19 PM
Console error/warning messages not in logs sixerjman Linux - Software 7 11-08-2005 08:16 AM
Etch net install kernel panic no dev/console raku Debian 1 08-13-2005 05:28 PM
usb log msgs dcody Linux - General 0 11-08-2004 06:35 PM
i-net via console 2047 Linux - Networking 2 09-12-2001 10:53 AM


All times are GMT -5. The time now is 03:15 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration