From owner-freebsd-questions@FreeBSD.ORG Wed Nov 26 15:57:37 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4284E16A4CE; Wed, 26 Nov 2003 15:57:37 -0800 (PST) Received: from mail.kristal.ru (mail.kristal.ru [195.161.155.118]) by mx1.FreeBSD.org (Postfix) with ESMTP id 792F643FAF; Wed, 26 Nov 2003 15:57:33 -0800 (PST) (envelope-from ivk@kristal.ru) Received: by mail.kristal.ru (8.9.3/8.9.3, from userid 426) id 9536E8C; Thu, 27 Nov 2003 08:57:29 +0900 (YAKT) Received: from 127.0.0.1 (c1110101.crystall.local [192.168.1.6]) by mail.kristal.ru (8.9.3/8.9.3) with ESMTP id EE55967; Thu, 27 Nov 2003 08:57:28 +0900 (YAKT) X-AntiVirus: Checked by Dr.Web (http://www.drweb.net) Date: Thu, 27 Nov 2003 08:57:00 +0900 From: Kulemzin Igor X-Mailer: The Bat! (v1.45) Personal Organization: Amursky Crystall X-Priority: 3 (Normal) Message-ID: <81690476656.20031127085700@kristal.ru> To: freebsd-security@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: syslogd crashed with signal 11 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Kulemzin Igor List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Nov 2003 23:57:37 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Today's morning I noticed that syslogd crashed with signal 11. Is this security issue or syslogd code error? I ran make world/kernel about two weeks ago. And syslogd never crashed before. Yesterday I ran killall -HUP syslogd. Also syslogd configured for dublicating all messages to another host and this second host was disconnected from network yesterday for about 2 hours at 16:50. There is part of /var/log/messages file: Nov 26 17:05:45 mail syslogd: sendto: Host is down Nov 26 17:05:45 mail last message repeated 5 times Nov 26 17:08:16 mail last message repeated 56 times Nov 27 07:46:41 mail /kernel: pid 178 (syslogd), uid 0: exited on signal 11 (core dumped) Computer runned as proxy, mail server between our local network and internet. syslogd started with command "/usr/sbin/syslogd -s". UDP protocol and ICMP protocols disabled in out(internet) network. Only DNS and ntpd queries with keep-state flag: 05300 302498 32284215 allow udp from OUT-IP to any 53 keep-state 05400 6853 520828 allow udp from OUT-IP to any 123 keep-state I'm off the list. - -- Best regards, Amursky Crystall, Kulemzin Igor mailto:ivk@kristal.ru -----BEGIN PGP SIGNATURE----- Version: PGP 6.5i iQA/AwUBP8S/WbWx9WD2HWjnEQJXewCg9/4yhk7r9vUqSmlR0CT3TVt7XFQAoNDs b1w6W0HdlIlUbcEBQjOZeJCO =T4W9 -----END PGP SIGNATURE-----