From owner-freebsd-questions@FreeBSD.ORG Tue Nov 27 13:34:46 2007 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6565116A418 for ; Tue, 27 Nov 2007 13:34:46 +0000 (UTC) (envelope-from ceri@submonkey.net) Received: from shrike.submonkey.net (cpc3-cdif2-0-0-cust64.cdif.cable.ntl.com [81.106.128.65]) by mx1.freebsd.org (Postfix) with ESMTP id 2172313C468 for ; Tue, 27 Nov 2007 13:34:45 +0000 (UTC) (envelope-from ceri@submonkey.net) Received: from ceri by shrike.submonkey.net with local (Exim 4.68 (FreeBSD)) (envelope-from ) id 1Ix0aJ-000KRG-G2; Tue, 27 Nov 2007 13:34:43 +0000 Date: Tue, 27 Nov 2007 13:34:43 +0000 From: Ceri Davies To: Bruce Cran Message-ID: <20071127133443.GA84516@submonkey.net> References: <20071126095833.GA6422@submonkey.net> <20071126112106.GC2283@kobe.laptop> <474B2571.7090801@cran.org.uk> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="W/nzBZO5zC0uMSeA" Content-Disposition: inline In-Reply-To: <474B2571.7090801@cran.org.uk> X-PGP: finger ceri@FreeBSD.org User-Agent: Mutt/1.5.16 (2007-06-09) Sender: Ceri Davies Cc: Giorgos Keramidas , questions@freebsd.org Subject: Re: Strange kernel log message X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2007 13:34:46 -0000 --W/nzBZO5zC0uMSeA Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Nov 26, 2007 at 07:58:41PM +0000, Bruce Cran wrote: > Giorgos Keramidas wrote: >> On 2007-11-26 09:58, Ceri Davies wrote: >> =20 >>> So I have this in my security run output: >>> kernel log messages: >>> +++ /tmp/security.hLYJI0kF Sun Nov 25 03:01:02 2007 >>> +<<<<222>2>>>NNNMNMMIII M III SIISAS SAAA 3 303,020,0 ,, EE=20 >>> IEIIESSSAIAA S A f ffffff >>> + >>> + >>> +f >>>=20 >>> WTF now? >>>=20 >>> I'm not sure if that's a real kernel message that got garbled or whether >>> I should be worried about naughtiness. >>> =20 >>=20 >> It looks like multiple messages overlapping each other. Removing 3 >> characters every 4 bytes in the output produces things which seem >> vaguely recognizable: >>=20 >> <22NNI II A ,,,EISA fff >> <<2>NMI SS 300 ISAAfff >>=20 >> There's a sysctl option which you can tweak to make this less likely to >> happen, but I am not sure about its name. Our console gurus can help >> you track it down and tune its value :) >=20 > The kernel option I've seen mentioned before to at least make this less= =20 > common is: >=20 > options PRINTF_BUFR_SIZE=3D128 # Prevent printf output being intersper= sed. Aha, thanks guys. Ceri --=20 That must be wonderful! I don't understand it at all. -- Moliere --W/nzBZO5zC0uMSeA Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (FreeBSD) iD8DBQFHTBzzocfcwTS3JF8RArfVAJ0XEXnOOFSFMg/geIHCCagmWfjMGQCfTcno jYnZNjY2VQ3QhkZ1ZAc45s0= =Nkxc -----END PGP SIGNATURE----- --W/nzBZO5zC0uMSeA--