Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 21 Jan 2001 16:10:10 +0000
From:      David Goddard <goddard@acm.org>
To:        stable@freebsd.org
Subject:   dmesg/security check output wierdness
Message-ID:  <3A6B09E2.EA269488@acm.org>

next in thread | raw e-mail | index | archive | help
Hi,

I've recently noticed some odd entries in my security check output mail
from a couple of 4.2-STABLE machines, so I did some digging.  The
following is one example:

[Date: Sun, 21 Jan 2001 03:18:15 +0000]
	cassium.mydomain.com kernel log messages:
	> 06 cleared.


On one machine (buildworld on 2001-01-18, not rebooted since then) I
see:

  dmg@cassium% ls -la /var/log/dmesg.*
  -rw-r-----  1 root  wheel  12 Jan 21 03:18 /var/log/dmesg.today
  -rw-r-----  1 root  wheel  42 Jan 20 03:13 /var/log/dmesg.yesterday
  dmg@cassium% 
  dmg@cassium% cat /var/log/dmesg.today
  06 cleared.
  dmg@cassium% 
  dmg@cassium% dmesg
  
  dmg@cassium% 
  dmg@cassium% cat /var/log/dmesg.yesterday
  <118> setup
  xl0: promiscuous mode enabled
  dmg@cassium% 

The 06 cleared bit looks like it is a corruption of an entry that I
usually see in /var/log/messages and /var/log/security:
  Jan 21 13:59:08 cassium /kernel: ipfw: Entry 306 cleared. 
(I use ipfw for traffic counting)

The <118> setup line does not seem to be in /var/log/messages or
anywhere else I looked.

On another machine (buildworld on 2001-01-14, also not rebooted since
then), I get similarly odd content:

  root@cerebus% ls -la /var/log/dmesg.*
  -rw-r-----  1 root  wheel  1454 Jan 21 03:10 /var/log/dmesg.today
  -rw-r-----  1 root  wheel  3470 Jan 14 03:09 /var/log/dmesg.yesterday
  root@cerebus%
  root@cerebus% dmesg
  scuous mode enabled
  root@cerebus%
  root@cerebus% head /var/log/dmesg.today
  4 on atapci0
  [normal entries snipped]
  root@cerebus%
  root@cerebus% grep scuous /var/log/dmesg.today
  tun0: promiscuous mode enabled
  ed0: promiscuous mode enabled
  root@cerebus%
  root@cerebus% grep scuous /var/log/dmesg.yesterday
  tun0: promiscuous mode enabled
  ed0: promiscuous mode enabled
  root@cerebus%
  root@cerebus% grep src /etc/security
  # $FreeBSD: src/etc/security,v 1.36.2.7 2000/10/30 10:40:11 obrien Exp
$

Neither system has any old _secure* files hanging around in /var/run/.

My assumption is that it is connected to the diff that goes on in
/etc/security but I can't see anything obvious to me (although that
isn't saying much).

I'm hoping that it's not a hardware thing otherwise I have two machines
to fix :-)

Any ideas?

Thanks,

Dave


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A6B09E2.EA269488>