[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: newsyslog errors



It seems the problem is with cron, as *everything* is running twice.  It

Dec 28 14:00:01 firebox2 cron[10812]: (root) CMD (/usr/libexec/spamd-setup)
Dec 28 14:00:01 firebox2 cron[22702]: (root) CMD (/usr/bin/newsyslog)
Dec 28 14:00:01 firebox2 cron[16755]: (root) CMD (/usr/sbin/sendmail
-L sm-msp-queue -Ac -q)
Dec 28 14:00:01 firebox2 cron[8537]: (root) CMD (/usr/bin/newsyslog)
Dec 28 14:00:01 firebox2 cron[8626]: (root) CMD (/usr/sbin/sendmail -L
sm-msp-queue -Ac -q)

out of curiosity I checked up on another system that I installed from
the same exact CD as I used to build that firewall (the system I'm
typing this from) and everything is duplicate twice in that system
also.

time for a dmesg!
# cat /var/run/dmesg.boot
OpenBSD 3.6 (GENERIC) #59: Fri Sep 17 12:32:57 MDT 2004
    deraadt_(_at_)_i386_(_dot_)_openbsd_(_dot_)_org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(TM) XP 1600+ ("AuthenticAMD" 686-class) 1.06 GHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem  = 268001280 (261720K)
avail mem = 237527040 (231960K)
using 3297 buffers containing 13504512 bytes (13188K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(46) BIOS, date 09/13/02, BIOS32 rev. 0 @ 0xf17b0
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x1e62
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf1d90/208 (11 entries)
pcibios0: PCI Interrupt Router at 000:17:0 ("VIA VT82C586 ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0xcc00
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT8366 PCI" rev 0x00
ppb0 at pci0 dev 1 function 0 "VIA VT8366 AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "Nvidia GeForce2 MX" rev 0xb2
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
cmpci0 at pci0 dev 5 function 0 "C-Media Electronics CMI8738/C3DX
Audio" rev 0x10: irq 10
audio0 at cmpci0
uhci0 at pci0 dev 9 function 0 "VIA VT83C572 USB" rev 0x50: irq 9
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 9 function 1 "VIA VT83C572 USB" rev 0x50: irq 11
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 9 function 2 "VIA VT6202 USB 2.0" rev 0x51: irq 10
ehci0: EHCI version 0.95
ehci0: companion controllers, 2 ports each: uhci0 uhci1
usb2 at ehci0: USB revision 2.0
uhub2 at usb2
uhub2: VIA EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 4 ports with 4 removable, self powered
xl0 at pci0 dev 13 function 0 "3Com 3c905C 100Base-TX" rev 0x78: irq
11, address 00:04:75:ab:bf:aa
exphy0 at xl0 phy 24: 3Com internal media interface
xl1 at pci0 dev 14 function 0 "3Com 3c905C 100Base-TX" rev 0x78: irq
10, address 00:04:75:ab:bc:f6
exphy1 at xl1 phy 24: 3Com internal media interface
xl2 at pci0 dev 15 function 0 "3Com 3c905C 100Base-TX" rev 0x78: irq
5, address 00:04:75:ab:bd:97
exphy2 at xl2 phy 24: 3Com internal media interface
xl3 at pci0 dev 16 function 0 "3Com 3c905C 100Base-TX" rev 0x78: irq
9, address 00:04:75:ab:bf:8a
exphy3 at xl3 phy 24: 3Com internal media interface
pcib0 at pci0 dev 17 function 0 "VIA VT8233 ISA" rev 0x00
pciide0 at pci0 dev 17 function 1 "VIA VT82C571 IDE" rev 0x06: ATA133,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: <WDC WD800JB-00CRA1>
wd0: 16-sector PIO, LBA, 76319MB, 156301488 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <CyberDrv, CW078D CD-R/RW, 120D> SCSI0
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
uhci2 at pci0 dev 17 function 2 "VIA VT83C572 USB" rev 0x23: irq 9
usb3 at uhci2: USB revision 1.0
uhub3 at usb3
uhub3: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
uhci3 at pci0 dev 17 function 3 "VIA VT83C572 USB" rev 0x23: irq 9
usb4 at uhci3: USB revision 1.0
uhub4 at usb4
uhub4: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub4: 2 ports with 2 removable, self powered
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ef45 netmask ef65 ttymask ffe7
pctr: user-level cycle counter enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302





--Bryan


On Tue, 28 Dec 2004 14:12:48 -0800, Bryan Irvine <sparctacus_(_at_)_gmail_(_dot_)_com> wrote:
> Info from the 2PM (PSD) run of newsyslog.
> 
> first off, the errors that I received from the system via email
> 
> email1:
> newsyslog: can't chmod /var/cron/log.3.gz: No such file or directory
> newsyslog: can't chown /var/cron/log.3.gz: No such file or directory
> newsyslog: can't chmod /var/log/daemon.1.gz: No such file or directory
> newsyslog: can't chown /var/log/daemon.1.gz: No such file or directory
> gzip: /var/cron/log.0: No such file or directory
> gzip: input: /var/log/daemon.0: No such file or directory
> gzip: /var/log/messages.0: No such file or directory
> gzip: /var/log/spamd.0: No such file or directory
> 
> email2:
> newsyslog: can't chmod /var/cron/log.0: No such file or directory
> newsyslog: can't chown /var/cron/log.0: No such file or directory
> newsyslog: can't mv /var/log/daemon.2.gz to /var/log/daemon.3.gz: No
> such file or directory
> 
> Yup, I got *2* emails, and this is pretty normal.  Does this mean
> newsyslog is running itself twice? simultaneously?  I see that the
> daemon and the cron log is listed in both of them.
> 
> here is an ls of the /var/log/ dir
> adduser         lpd-errs.2.gz   pflog.1         spamd.14.gz     spamd.8.gz
> authlog         lpd-errs.3.gz   pflog.2.gz      spamd.15.gz     spamd.9.gz
> authlog.0.gz    lpd-errs.4.gz   pflog.3.gz      spamd.16.gz     weekly.out
> authlog.1.gz    maillog         rdist           spamd.17.gz     wtmp
> authlog.2.gz    maillog.0.gz    secure          spamd.18.gz     wtmp.0.gz
> authlog.3.gz    maillog.1.gz    secure.0.gz     spamd.19.gz     wtmp.1.gz
> authlog.4.gz    maillog.2.gz    secure.1.gz     spamd.2.gz      wtmp.2.gz
> authlog.5.gz    maillog.3.gz    secure.2.gz     spamd.20.gz     wtmp.3.gz
> authlog.6.gz    maillog.4.gz    secure.3.gz     spamd.21.gz     wtmp.4.gz
> daemon          maillog.5.gz    secure.4.gz     spamd.22.gz     wtmp.5.gz
> daemon.0.gz     maillog.6.gz    secure.5.gz     spamd.23.gz     wtmp.6.gz
> daemon.2.gz     maillog.7.gz    secure.6.gz     spamd.24.gz     wtmp.7.gz
> daemon.3.gz     messages        secure.7.gz     spamd.25.gz     xferlog
> daemon.5.gz     messages.0.gz   sendmail.st     spamd.26.gz     xferlog.0.gz
> daily.out       messages.1      snmpd           spamd.27.gz     xferlog.1.gz
> failedlogin     messages.2.gz   spamd           spamd.28.gz     xferlog.2.gz
> ftpd            messages.3.gz   spamd.0.gz      spamd.29.gz     xferlog.3.gz
> lastlog         messages.4.gz   spamd.1         spamd.3.gz      xferlog.4.gz
> lpd-errs        messages.5.gz   spamd.11.gz     spamd.30.gz
> lpd-errs.0.gz   monthly.out     spamd.12.gz     spamd.5.gz
> lpd-errs.1.gz   pflog           spamd.13.gz     spamd.6.gz
> 
> as you can see some are missing the .gz extension.
> 
> 
> On Tue, 28 Dec 2004 13:43:10 -0800, Bryan Irvine <sparctacus_(_at_)_gmail_(_dot_)_com> wrote:
> > I added an entry for spamd.  This started happening before I enabled
> > spamd though.
> >
> > crontab:
> > 0       *       *       *       *       /usr/bin/newsyslog
> >
> > newsyslog.conf:
> > /var/cron/log           root:wheel      600  3     10   *     Z
> > /var/log/aculog         uucp:dialer     660  7     *    24    Z
> > /var/log/authlog        root:wheel      640  7     *    168   Z
> > /var/log/daemon                         640  5     30   *     Z
> > /var/log/lpd-errs                       640  7     10   *     Z
> > /var/log/maillog                        600  7     *    24    Z
> > /var/log/messages                       644  5     30   *     Z
> > /var/log/secure                         600  7     *    168   Z
> > /var/log/wtmp                           644  7     *    168   ZB
> > /var/log/xferlog                        640  7     250  *     Z
> > /var/log/ppp.log                        640  7     250  *     Z
> > /var/log/pflog                          600  3     250  *     ZB
> > /var/run/pflogd.pid
> > /var/log/spamd                          640  30    500  *     Z
> >
> >
> > On Tue, 28 Dec 2004 16:38:36 -0500, Garance A Drosihn <drosih_(_at_)_rpi_(_dot_)_edu> wrote:
> > > At 9:22 AM -0800 12/27/04, Bryan Irvine wrote:
> > > >I recently installed 3.6 and I am getting swamped with errors
> > > >from newsyslog.
> > > >
> > > >They are all similar to this one.
> > > >
> > > >newsyslog: can't mv /var/cron/log to /var/cron/log.0:
> > > >                            No such file or directory
> > > >gzip: /var/cron/log.0: No such file or directory
> > > >
> > > >Sometimes it's the daemon log, or one of the many others, but it's
> > > >always the same problem.
> > > >
> > > >Ideas?
> > >
> > > Have you added a lot of lines to your newsyslog.conf, or are you
> > > running with just the standard entries?  Do these errors happen
> > > every time newsyslog runs?  Is there any chance that you have
> > > newsyslog running multiple times per hour?  (I once helped someone
> > > who had a problem because they had mistakenly changed /etc/crontab
> > > to run newsyslog once-per-minute, instead of once-per-hour...).
> > >
> > > --
> > > Garance Alistair Drosehn            =   gad_(_at_)_gilead_(_dot_)_netel_(_dot_)_rpi_(_dot_)_edu
> > > Senior Systems Programmer           or  gad_(_at_)_freebsd_(_dot_)_org
> > > Rensselaer Polytechnic Institute    or  drosih_(_at_)_rpi_(_dot_)_edu



Visit your host, monkey.org