LinuxQuestions.org - New Entries in /var/log/messages

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - New Entries in /var/log/messages (https://www.linuxquestions.org/questions/linux-security-4/new-entries-in-var-log-messages-438916/)

New Entries in /var/log/messages

Friends,

Please explain about the below lines which i am seeing in /var/log/messages for the past 1 week.

Quote:

Apr 26 04:04:33 nahildb syslogd 1.4.1: restart.

Apr 26 04:04:32 nahildb nmbd[1779]: dump workgroup on subnet 185.16.1.6: netmask= 255.255.255.0:

Apr 26 04:04:32 nahildb nmbd[1779]: ^IPLUS(35) current master browser = PLUS-DC1

Apr 26 04:04:32 nahildb nmbd[1779]: ^IWORKGROUP(2) current master browser = DVR

Apr 26 04:04:32 nahildb nmbd[1779]: ^IKCC01(1) current master browser = PLUSDB

Apr 26 04:04:32 nahildb nmbd[1779]: ^I^IPLUSDB 40049803 (Linux Server)

Apr 26 04:04:32 nahildb nmbd[1779]: [2006/04/26 04:04:32, 0] nmbd/nmbd_workgroupdb.c:dump_workgroups(266)

Apr 26 04:04:32 nahildb nmbd[1779]: dump_workgroups()

Apr 26 04:04:32 nahildb nmbd[1779]: dump workgroup on subnet 185.16.1.7: netmask= 255.255.255.0:

Apr 26 04:04:32 nahildb nmbd[1779]: ^IKCC01(1) current master browser = PLUSDB

Apr 26 04:04:33 nahildb nmbd[1779]: ^I^IPLUSDB 40049803 (Linux Server)

Thanks & Regards
sathyguy

Nmbd is the daemon which runs along with smbd [Samba] daemon.

Have you changed anything in smb.conf file [like debuggin information etc]

Check the dir /var/log/samba for more details.

Cheers
Zulfi

Zulfilee,
Thanks for your reply.
I didnt change anything.As Iam newbie, could you please explain me what to check inside the samba directory.
it shows all the names who are all connecting to our server with 0 bytes.
only very few samba.log files are having entries.

Thanks & Regards
sathyguy

First thing - If you dont need samba service you can disable it by typing
chkconfig --level 35 samba off

This should disable samba once for all.[But only if you dont need it]

OR

check this file out
/etc/samba/smb.conf

See what value is given in
log file=
log level=

If possible paste the global section.

A bit of googling on the message you get may also help

Cheers
Zulfi