Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Nov 2007 19:58:41 +0000
From:      Bruce Cran <bruce@cran.org.uk>
To:        Giorgos Keramidas <keramida@ceid.upatras.gr>
Cc:        Ceri Davies <ceri@submonkey.net>, questions@freebsd.org
Subject:   Re: Strange kernel log message
Message-ID:  <474B2571.7090801@cran.org.uk>
In-Reply-To: <20071126112106.GC2283@kobe.laptop>
References:  <20071126095833.GA6422@submonkey.net> <20071126112106.GC2283@kobe.laptop>

next in thread | previous in thread | raw e-mail | index | archive | help
Giorgos Keramidas wrote:
> On 2007-11-26 09:58, Ceri Davies <ceri@submonkey.net> wrote:
>   
>> So I have this in my security run output:
>> kernel log messages:
>> +++ /tmp/security.hLYJI0kF	Sun Nov 25 03:01:02 2007
>> +<<<<222>2>>>NNNMNMMIII M  III SIISAS SAAA  3 303,020,0 ,,  EE IEIIESSSAIAA S A f ffffff
>> +
>> +
>> +f
>>
>> WTF now?
>>
>> I'm not sure if that's a real kernel message that got garbled or whether
>> I should be worried about naughtiness.
>>     
>
> It looks like multiple messages overlapping each other.  Removing 3
> characters every 4 bytes in the output produces things which seem
> vaguely recognizable:
>
>     <22NNI II A ,,,EISA  fff
>     <<2>NMI  SS 300  ISAAfff
>
> There's a sysctl option which you can tweak to make this less likely to
> happen, but I am not sure about its name.  Our console gurus can help
> you track it down and tune its value :)
>
>   

The kernel option I've seen mentioned before to at least make this less 
common is:

options PRINTF_BUFR_SIZE=128    # Prevent printf output being interspersed.

--
Bruce




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?474B2571.7090801>