From owner-freebsd-stable Sat Jan 11 16:42:22 2003 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3665437B401 for ; Sat, 11 Jan 2003 16:42:21 -0800 (PST) Received: from ns.museum.rain.com (gw-ipinc.museum.rain.com [206.29.169.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id 85BAE43E4A for ; Sat, 11 Jan 2003 16:42:20 -0800 (PST) (envelope-from stable@museum.rain.com) Received: from ns.museum.rain.com (localhost [127.0.0.1]) by ns.museum.rain.com (8.12.6/8.12.6) with ESMTP id h0C0gEBf029174 for ; Sat, 11 Jan 2003 16:42:14 -0800 (PST) (envelope-from stable@ns.museum.rain.com) Received: (from stable@localhost) by ns.museum.rain.com (8.12.6/8.12.6/Submit) id h0C0gD5D029173 for freebsd-stable@freebsd.org; Sat, 11 Jan 2003 16:42:13 -0800 (PST) (envelope-from stable) Date: Sat, 11 Jan 2003 16:42:13 -0800 From: James Long To: freebsd-stable@freebsd.org Subject: Partial kernel log lines in security output Message-ID: <20030111164213.A29112@ns.museum.rain.com> Reply-To: james_mapson@museum.rain.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In the security run output notifications from most nearly every machine I monitor, I see lines in the kernel log messages section similar to: example.com kernel log messages: > .14.232:48342 506.29.618.239:80 in via dc0 That's just a reconstructed example, but the pattern is that first, the log message is not from the appropriate time frame, and has the first part of the line clipped off. Another typical example is a 'file system full' message which is several weeks old, and similarly omits the first part of the log entry. What is causing these, and how can I be rid of them? Thank you! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message