LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > MEPIS
User Name
Password
MEPIS This forum is for the discussion of MEPIS Linux.

Notices


Reply
  Search this Thread
Old 09-30-2007, 01:08 PM   #1
wonderboy1999
LQ Newbie
 
Registered: Jun 2004
Location: The Center of the Universe
Distribution: SimplyMEPIS 6.5
Posts: 20

Rep: Reputation: 0
Log stuff showing up in other consoles


Hi all,

I'm getting strange log references, which from doing some searching is apparently guarddog noting a contact rejection from another computer. I'm getting quite a few of these, which I guess I shouldn't be surprised since I'm running rTorrent.

Problem is, I've got a couple of things running in text-only consoles (tty3, and tty4 although tty4 is idle at the moment) and when I go to these consoles, the system will dump lines here and there, just like what I'm getting in my logs from guarddog right into the terminal on top of what I'm working on. As you can imagine, this is a little frustrating.

Anyone know how to get this dern'ed machine to stop raining log entries on my parade?

Here's some of the log entries:

[17244215.324000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=212.65.136.101 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=107 ID=20168 DF PROTO=TCP SPT=46885 DPT=52719 SEQ=3004886990 ACK=2461830576 WINDOW=0 RES=0x00 ACK RST URGP=0
[17244224.692000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=13007 PROTO=TCP SPT=56502 DPT=52719 SEQ=473321342 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244230.412000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=14419 PROTO=TCP SPT=56510 DPT=52719 SEQ=1864151647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244240.636000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=82.199.172.120 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=3082 PROTO=TCP SPT=2641 DPT=52719 SEQ=3856407282 ACK=3856407282 WINDOW=0 RES=0x00 RST URGP=0
[17244306.460000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=80.216.32.135 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=12121 DF PROTO=TCP SPT=52850 DPT=52719 SEQ=3813293910 ACK=3369527529 WINDOW=0 RES=0x00 ACK RST URGP=0
[17244312.612000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=979 PROTO=TCP SPT=56626 DPT=52719 SEQ=474195441 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244317.432000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=2197 PROTO=TCP SPT=56640 DPT=52719 SEQ=1133107737 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244354.344000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=78.106.98.159 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=110 ID=56123 DF PROTO=TCP SPT=28083 DPT=5214 SEQ=2826930964 ACK=698488413 WINDOW=0 RES=0x00 ACK RST URGP=0
[17244365.228000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=213.95.27.115 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=443 DPT=3580 SEQ=725009013 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244371.328000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=80.216.32.135 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=15747 DF PROTO=TCP SPT=52922 DPT=52719 SEQ=817141705 ACK=3431222879 WINDOW=0 RES=0x00 ACK RST URGP=0
[17244378.772000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=24.4.169.154 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x40 TTL=113 ID=36365 DF PROTO=TCP SPT=2240 DPT=52719 SEQ=2399167885 ACK=0 WINDOW=10240 RES=0x28 RST URGP=0
[17244381.412000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=16748 PROTO=TCP SPT=56711 DPT=52719 SEQ=1656282109 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244391.180000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=206.81.136.131 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=61324 DF PROTO=TCP SPT=443 DPT=1310 SEQ=243744305 ACK=0 WINDOW=24820 RES=0x00 RST URGP=0
[17244391.180000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=206.81.136.131 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=48161 PROTO=TCP SPT=443 DPT=1310 SEQ=243744267 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244391.804000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=206.81.136.131 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=61335 DF PROTO=TCP SPT=443 DPT=1311 SEQ=244560073 ACK=0 WINDOW=24820 RES=0x00 RST URGP=0
[17244392.188000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=206.81.136.131 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=61344 DF PROTO=TCP SPT=443 DPT=1312 SEQ=245104311 ACK=0 WINDOW=24820 RES=0x00 RST URGP=0
[17244392.188000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=206.81.136.131 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=48236 PROTO=TCP SPT=443 DPT=1312 SEQ=245104311 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244392.624000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=206.81.136.131 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=61350 DF PROTO=TCP SPT=443 DPT=1313 SEQ=245504565 ACK=0 WINDOW=24820 RES=0x00 RST URGP=0
[17244397.576000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=82.199.172.120 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=24046 PROTO=TCP SPT=2937 DPT=52719 SEQ=2182139055 ACK=2182139055 WINDOW=0 RES=0x00 RST URGP=0
[17244409.620000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=217.198.224.140 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=20 ID=29687 PROTO=TCP SPT=3562 DPT=52719 SEQ=1907593490 ACK=1907593490 WINDOW=0 RES=0x00 RST URGP=0
[17244410.124000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=213.95.27.115 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=443 DPT=5367 SEQ=773697856 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244460.092000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=3195 PROTO=TCP SPT=56811 DPT=52719 SEQ=2487595245 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244460.096000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=3196 PROTO=TCP SPT=56817 DPT=52719 SEQ=2111012459 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244482.364000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=80.216.32.135 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=21959 DF PROTO=TCP SPT=53017 DPT=52719 SEQ=3872524782 ACK=3571136654 WINDOW=0 RES=0x00 ACK RST URGP=0
[17244497.416000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=75.73.120.35 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x40 TTL=114 ID=25876 DF PROTO=TCP SPT=2279 DPT=52719 SEQ=572487907 ACK=0 WINDOW=10240 RES=0x28 RST URGP=0
[17244497.580000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=75.73.120.35 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x40 TTL=114 ID=25876 DF PROTO=TCP SPT=2279 DPT=52719 SEQ=572487907 ACK=0 WINDOW=10240 RES=0x20 RST URGP=10815
[17244497.584000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=75.73.120.35 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x40 TTL=114 ID=25876 DF PROTO=TCP SPT=2279 DPT=52719 SEQ=572487907 ACK=0 WINDOW=10240 RES=0x20 RST URGP=10785
[17244523.468000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=18332 PROTO=TCP SPT=56908 DPT=52719 SEQ=3198540033 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244547.660000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=89.27.13.63 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=105 ID=44789 PROTO=TCP SPT=2019 DPT=52719 SEQ=873052486 ACK=873052486 WINDOW=0 RES=0x00 RST URGP=0
[17244591.872000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=2206 PROTO=TCP SPT=56994 DPT=52719 SEQ=2963522087 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244606.840000] agpgart: Found an AGP 3.5 compliant device at 0000:00:00.0.
[17244606.840000] agpgart: Putting AGP V3 device at 0000:00:00.0 into 4x mode
[17244606.840000] agpgart: Putting AGP V3 device at 0000:01:00.0 into 4x mode
[17244606.840000] [drm] Loading R200 Microcode
[17244676.580000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=74.132.219.234 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=23724 PROTO=TCP SPT=57103 DPT=52719 SEQ=1506442649 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
[17244696.104000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=75.73.120.35 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x40 TTL=114 ID=27878 DF PROTO=TCP SPT=2385 DPT=52719 SEQ=1564366544 ACK=0 WINDOW=10240 RES=0x28 RST URGP=0
[17244696.216000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=75.73.120.35 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x40 TTL=114 ID=27878 DF PROTO=TCP SPT=2385 DPT=52719 SEQ=1564365835 ACK=0 WINDOW=10240 RES=0x00 RST URGP=0
[17244696.216000] ABORTED IN=eth1 OUT= MAC=00:50:22:b9:22:84:00:15:05:1b:de:3c:08:00 SRC=75.73.120.35 DST=192.168.0.3 LEN=40 TOS=0x00 PREC=0x40 TTL=114 ID=27878 DF PROTO=TCP SPT=2385 DPT=52719 SEQ=1564366544 ACK=0 WINDOW=10240 RES=0x00 RST URGP=0


As always, your kind help will be appreciated. Thx!!

-A

Last edited by wonderboy1999; 09-30-2007 at 01:11 PM. Reason: failure to proofread (derh..)
 
Old 09-30-2007, 01:46 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
run dmesg -n0 (or -n1... can't remember) on startup.
 
Old 09-30-2007, 10:47 PM   #3
wonderboy1999
LQ Newbie
 
Registered: Jun 2004
Location: The Center of the Universe
Distribution: SimplyMEPIS 6.5
Posts: 20

Original Poster
Rep: Reputation: 0
Thumbs up

Quote:
Originally Posted by acid_kewpie View Post
run dmesg -n0 (or -n1... can't remember) on startup.
A-ha! You've got me pointed in the right direction now. I don't think that command has completely solved the problem, but may have helped to reduce the flood at least.

While man-ing dmesg, I learned a little about syslogd. I took a look at my syslog.conf file, and discovered a section that may have a lot to do with my problem:
#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
# news.=crit;news.=err;news.=notice;\
# *.=debug;*.=info;\
# *.=notice;*.=warn /dev/tty8

# The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
# you must invoke `xconsole' with the `-file' option:
#
# $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
# busy site..
#
daemon.*;mail.*;\
news.crit;news.err;news.notice;\
*.=debug;*.=info;\
*.=notice;*.=warn |/dev/tty5
Now, this does seem accurate because most of the gobbldeegook has been output to tty5. But it seems to spill over onto tty3, tty2, and tty1 although less on it than the others for some reason. I'm wondering if there's something else, such as guarddog or something, that is also outputting to the console.
Is it possible for a program to send its output to just 'console', so that irritatingly enough, it just dumps it into whichever tty I'm working on at the time?

Burning questions. Thank you for responding so quickly!
 
Old 10-01-2007, 02:09 PM   #4
fpd
Member
 
Registered: Aug 2004
Distribution: Mepis
Posts: 70

Rep: Reputation: 15
Quote:
Originally Posted by wonderboy1999 View Post
A-ha! ...
My syslog.conf looks exactly like yours. Doesn't look like anyone edited your .conf.

I think C console apps tend to use stderr as an output, and is stderr not the current tty?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
ftp logins not showing in last log lawadm1 Linux - Software 1 01-03-2007 01:22 PM
iptables LOG consoles? phsythax Linux - Security 4 06-14-2006 06:06 PM
weird stuff in /var/log/auth.log bschiett Linux - Security 3 03-12-2005 08:29 AM
When installing new stuff in suse 9.1, do you uninstall old stuff first? randon SUSE / openSUSE 1 12-25-2004 04:37 PM
How do i stop stuff from popping up on log in gonus Linux - Newbie 2 06-04-2002 02:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > MEPIS

All times are GMT -5. The time now is 04:35 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration