too many net msgs to console and logs
 

Hi All,

I've got RedHat linux 8.0 box (kernel 2.4.20-20.8) where I'm getting bogged down with console messages and LOTs of messages in the /var/log/messages file of the type:

Oct 28 11:34:48 cjge455fy35c4 kernel: IN=eth0 OUT= MAC=00:20:78:11:b8:b2:00:03:42:75:c0:45:08:00 ...

and

Oct 28 11:36:11 cjge455fy35c4 kernel: ipt_unclean: (embedded packet) UDP len too long 18 vs 120 ...

I thought that these might be martian headers, so I disabled log_martians in the proc directory. This didn't get rid of them.

Can anyone tell me how to get rid of these?

Thanks in Advance!
Corey.

Have you looked at your /etc/syslog.conf file? You may be logging more than you need. You can get by pretty well just logging like this:
*.err;kern.debug;daemon.notice /var/log/messages
mail.debug;*.info /var/log/syslog
auth.debug /var/log/syslog
*.crit *

There may be other entries in your /etc/syslog.conf, but this will get pretty much all you need. Also, if you have logging to /var/log/secure, or an security logging, I'd suggest leaving it alone. But if there is logging that is to echo directly to the console (i.e., mail.err console) you can probably comment it out so you won't get anything but *.crit (critical) messages echoed to the console screen.

d3funct,

I checked my syslog.conf:

#kern.* /dev/console
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* /var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log

As you can see any kernel messages are comments out. But I noticed the *.emerg messages go everywhere. Would these messages be *.emerg messages?

I'd tried making these (*.emerg) messages go to a custom messages file but I still see those network messages going to /var/log/messages.


Thanks for the reply.
C.

I'm having an almost identical problem on Red Hat 9 (kernel 2.4.20-8) after setting up a custom iptables rule set. All my iptables log messages (and there are lots of them) go to /var/log/messages as well as to the console, even though my /etc/syslog.conf doesn't specify to send anything to the console. How can I stop these log messages from going to the console? Very annoying! Much thanks to anyone who can help with this problem.