Subject: log file questions
To: None <netbsd-help@netbsd.org>
From: Juergen Tritthardt <juergent@mpimf-heidelberg.mpg.de>
List: netbsd-help
Date: 02/04/2003 22:05:26
Hi,

on my NetBSD 1.5.4_ALPHA machine I saw today the following messages in
/var/log/messages:

Feb  4 10:00:01 metis newsyslog[255]: log file turned over
Feb  4 10:00:01 metis syslogd: restart
Feb  4 14:50:41 metis /netbsd: duplicate IP address 149.217.52.141 sent
from link address 00:50:51:40:1d:cb
Feb  4 14:51:33 metis /netbsd: duplicate IP address 149.217.52.141 sent
from link address 00:50:51:40:1d:cb
Feb  4 16:00:00 metis syslogd: restart
Feb  4 20:51:07 metis /netbsd: set{u,g}id pid 500 (netstat) was invoked
with fd 0, 1, or 2 closed
Feb  4 21:00:01 metis syslogd: restart
Feb  4 21:00:11 metis syslogd: restart

I think the first two are OK and the "duplicate IP address" messages
means, somebody tried (on purpose or by mistake) to use my IP.

But why has syslog been restarted again three times and what does
"set{u,g}id pid 500 (netstat) was invoked with fd 0, 1, or 2 closed" mean?


=09Regards
        J=FCrgen
--=20
J=FCrgen Tritthardt              Max-Planck-Institut f=FCr med. Forschung
Tel. 06221/486279                          Abt. Biomedizinische Optik
Fax. 06221/486225                       Jahnstr. 29, 69120 Heidelberg