LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 04-26-2006, 04:05 AM   #1
sathyguy
Member
 
Registered: Sep 2005
Location: Indian Working in Saudi Arabia
Distribution: Redhat Linux AS 3.0
Posts: 93

Rep: Reputation: 15
New Entries in /var/log/messages


Friends,

Please explain about the below lines which i am seeing in /var/log/messages for the past 1 week.

Quote:
Apr 26 04:04:33 nahildb syslogd 1.4.1: restart.

Apr 26 04:04:32 nahildb nmbd[1779]: dump workgroup on subnet 185.16.1.6: netmask= 255.255.255.0:

Apr 26 04:04:32 nahildb nmbd[1779]: ^IPLUS(35) current master browser = PLUS-DC1

Apr 26 04:04:32 nahildb nmbd[1779]: ^IWORKGROUP(2) current master browser = DVR

Apr 26 04:04:32 nahildb nmbd[1779]: ^IKCC01(1) current master browser = PLUSDB

Apr 26 04:04:32 nahildb nmbd[1779]: ^I^IPLUSDB 40049803 (Linux Server)

Apr 26 04:04:32 nahildb nmbd[1779]: [2006/04/26 04:04:32, 0] nmbd/nmbd_workgroupdb.c:dump_workgroups(266)

Apr 26 04:04:32 nahildb nmbd[1779]: dump_workgroups()

Apr 26 04:04:32 nahildb nmbd[1779]: dump workgroup on subnet 185.16.1.7: netmask= 255.255.255.0:

Apr 26 04:04:32 nahildb nmbd[1779]: ^IKCC01(1) current master browser = PLUSDB

Apr 26 04:04:33 nahildb nmbd[1779]: ^I^IPLUSDB 40049803 (Linux Server)
Thanks & Regards
sathyguy
 
Old 04-26-2006, 04:31 AM   #2
zulfilee
Member
 
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430

Rep: Reputation: 39
Nmbd is the daemon which runs along with smbd [Samba] daemon.

Have you changed anything in smb.conf file [like debuggin information etc]

Check the dir /var/log/samba for more details.

Cheers
Zulfi
 
Old 04-26-2006, 04:55 AM   #3
sathyguy
Member
 
Registered: Sep 2005
Location: Indian Working in Saudi Arabia
Distribution: Redhat Linux AS 3.0
Posts: 93

Original Poster
Rep: Reputation: 15
Zulfilee,
Thanks for your reply.
I didnt change anything.As Iam newbie, could you please explain me what to check inside the samba directory.
it shows all the names who are all connecting to our server with 0 bytes.
only very few samba.log files are having entries.

Thanks & Regards
sathyguy
 
Old 04-26-2006, 05:36 AM   #4
zulfilee
Member
 
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430

Rep: Reputation: 39
First thing - If you dont need samba service you can disable it by typing
chkconfig --level 35 samba off

This should disable samba once for all.[But only if you dont need it]

OR

check this file out
/etc/samba/smb.conf

See what value is given in
log file=
log level=

If possible paste the global section.

A bit of googling on the message you get may also help

Cheers
Zulfi
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
/var/log/messages weird entries blizunt7 Linux - Security 5 11-01-2005 05:56 PM
Redirecting the kernel messages to file other than /var/log/messages jyotika_b83 Linux - General 3 04-28-2005 06:39 PM
/var/log/auth.log entries buehler Linux - Security 1 04-23-2005 04:45 PM
Understanding var/log entries Boss Hoss Linux - Hardware 14 10-14-2004 02:20 PM
/var/log/messages full of these messages. Should I be concerned? mdavis Linux - Security 5 04-16-2004 10:08 AM


All times are GMT -5. The time now is 10:48 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration