Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
04-26-2006, 04:05 AM
|
#1
|
Member
Registered: Sep 2005
Location: Indian Working in Saudi Arabia
Distribution: Redhat Linux AS 3.0
Posts: 93
Rep:
|
New Entries in /var/log/messages
Friends,
Please explain about the below lines which i am seeing in /var/log/messages for the past 1 week.
Quote:
Apr 26 04:04:33 nahildb syslogd 1.4.1: restart.
Apr 26 04:04:32 nahildb nmbd[1779]: dump workgroup on subnet 185.16.1.6: netmask= 255.255.255.0:
Apr 26 04:04:32 nahildb nmbd[1779]: ^IPLUS(35) current master browser = PLUS-DC1
Apr 26 04:04:32 nahildb nmbd[1779]: ^IWORKGROUP(2) current master browser = DVR
Apr 26 04:04:32 nahildb nmbd[1779]: ^IKCC01(1) current master browser = PLUSDB
Apr 26 04:04:32 nahildb nmbd[1779]: ^I^IPLUSDB 40049803 (Linux Server)
Apr 26 04:04:32 nahildb nmbd[1779]: [2006/04/26 04:04:32, 0] nmbd/nmbd_workgroupdb.c:dump_workgroups(266)
Apr 26 04:04:32 nahildb nmbd[1779]: dump_workgroups()
Apr 26 04:04:32 nahildb nmbd[1779]: dump workgroup on subnet 185.16.1.7: netmask= 255.255.255.0:
Apr 26 04:04:32 nahildb nmbd[1779]: ^IKCC01(1) current master browser = PLUSDB
Apr 26 04:04:33 nahildb nmbd[1779]: ^I^IPLUSDB 40049803 (Linux Server)
|
Thanks & Regards
sathyguy
|
|
|
04-26-2006, 04:31 AM
|
#2
|
Member
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430
Rep:
|
Nmbd is the daemon which runs along with smbd [Samba] daemon.
Have you changed anything in smb.conf file [like debuggin information etc]
Check the dir /var/log/samba for more details.
Cheers
Zulfi
|
|
|
04-26-2006, 04:55 AM
|
#3
|
Member
Registered: Sep 2005
Location: Indian Working in Saudi Arabia
Distribution: Redhat Linux AS 3.0
Posts: 93
Original Poster
Rep:
|
Zulfilee,
Thanks for your reply.
I didnt change anything.As Iam newbie, could you please explain me what to check inside the samba directory.
it shows all the names who are all connecting to our server with 0 bytes.
only very few samba.log files are having entries.
Thanks & Regards
sathyguy
|
|
|
04-26-2006, 05:36 AM
|
#4
|
Member
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430
Rep:
|
First thing - If you dont need samba service you can disable it by typing
chkconfig --level 35 samba off
This should disable samba once for all.[But only if you dont need it]
OR
check this file out
/etc/samba/smb.conf
See what value is given in
log file=
log level=
If possible paste the global section.
A bit of googling on the message you get may also help
Cheers
Zulfi
|
|
|
All times are GMT -5. The time now is 12:53 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|