From owner-freebsd-questions@FreeBSD.ORG Sun Oct 21 20:33:41 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 65D9116A417 for ; Sun, 21 Oct 2007 20:33:41 +0000 (UTC) (envelope-from ml@t-b-o-h.net) Received: from vjofn.tucs-beachin-obx-house.com (vjofn-pt.tunnel.tserv1.fmt.ipv6.he.net [IPv6:2001:470:1f00:ffff::5e5]) by mx1.freebsd.org (Postfix) with ESMTP id 2306313C4A6 for ; Sun, 21 Oct 2007 20:33:41 +0000 (UTC) (envelope-from ml@t-b-o-h.net) Received: from himinbjorg.tucs-beachin-obx-house.com (cpe-68-175-8-11.hvc.res.rr.com [68.175.8.11]) (authenticated bits=0) by vjofn.tucs-beachin-obx-house.com (8.12.9/8.12.9) with ESMTP id l9LKXeRB069464; Sun, 21 Oct 2007 16:33:40 -0400 (EDT) Received: from himinbjorg.tucs-beachin-obx-house.com (localhost.tucs-beachin-obx-house.com [127.0.0.1]) by himinbjorg.tucs-beachin-obx-house.com (8.13.8/8.13.6) with ESMTP id l9LKXY7T046288; Sun, 21 Oct 2007 16:33:34 -0400 (EDT) (envelope-from ml@t-b-o-h.net) Received: (from tbohml@localhost) by himinbjorg.tucs-beachin-obx-house.com (8.13.8/8.13.6/Submit) id l9LKXY7X046287; Sun, 21 Oct 2007 16:33:34 -0400 (EDT) (envelope-from tbohml) From: "Tuc at T-B-O-H.NET" Message-Id: <200710212033.l9LKXY7X046287@himinbjorg.tucs-beachin-obx-house.com> To: freebsd-questions@freebsd.org Date: Sun, 21 Oct 2007 16:33:34 -0400 (EDT) In-Reply-To: X-Mailer: ELM [version 2.5 PL8] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: Subject: Re: syslog marking sendmail output as "kernel:" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Oct 2007 20:33:41 -0000 > So something IS sending it twice, once at pri 22, no flags, then once > at 166 flags 17. (Unless by some configuration flukeyness its "reprocessing" > the line). So IMHO its not getting something improperly terminated. Its > getting the line twice at different pri/flags causing it to prepend the > "Oct 16 00:00:25 valhalla kernel:" to the already formatted > "Oct 16 21:29:00 valhalla sm-mta[31804]: l9H1Srwd031804: SYSERR(root): collect: > I/O error on connection from [61.177.142.218], from= > The question is is it because of some weird syslog config, or > is it sendmail (8.13.1)? > I found the answer, now I just need to know if there is something I can do about. I found out through trail/error/LOTS of Googling that it ISN'T sendmail thats the problem. AND its not syslogd... Its apparently the kernel. On the ARCH list, about a year+1/2 ago, they were talking about things, and PHK made the following comment : "Spitting things out on /dev/console today will more likely than not, print stuff on a syscons or serial port which nobody looks at. For that reason, we added a hack to the kernel to make all stuff that went to /dev/console be sent to syslogd(8)" So, its the kernel forwarding things BACK to syslogd. Anyone know how to write to the console WITHOUT this happening, or without syslog repeating it? Thanks, Tuc