On Mon, 13 May 2002, Manuel Bouyer wrote:
> On Sat, May 11, 2002 at 11:42:54AM -0500, Lista de NetBSD Users wrote:
> >
> > It occurs aprox one time/year, and it is passing in this
> > moment. (NetBSD-1.5.2/i386).
> > It seems like syslogd failing.
> >
> Do you have ddb compiled in ? If so you can try to enter ddb and kill
> syslogd with the kill command (it uses hex numbers for PID, so you need
> to convert the ps output first).
>
> You can also have a list of file descriptors in use by syslog using
> fstat.

No, that option is under comments in the config file,
I am sorry...

Look my /var/log and /var/log/mail, the date and time are the
same like in my first message (2 days ago)

server> ls -altr /var/log
total 690
drwxr-xr-x   2 root  wheel      512 Aug 18  2001 rdist
-rw-r-----   1 root  wheel        0 Aug 18  2001 lpd-errs
-rw-r-----   1 uucp  dialer       0 Aug 18  2001 aculog
-rw-------   1 root  wheel        0 Aug 18  2001 secure
-rw-------   1 root  wheel        0 Aug 18  2001 maillog
drwxr-xr-x   2 root  wheel      512 Dec 15 14:53 mail
drwxr-xr-x   2 root  wheel      512 Dec 18 10:12 horde
drwxr-xr-x   2 root  wheel      512 Dec 18 12:05 pgsql
drwxr-xr-x  21 root  wheel      512 Jan 12 11:15 ..
-rw-r--r--   1 root  wheel    70155 Feb  4 03:00 messages.1.gz
drwxr-xr-x   2 root  wheel      512 Mar 13 18:14 httpd
-rw-r--r--   1 root  wheel    61305 Mar 27 07:00 messages.0.gz
-rw-------   1 root  wheel    10045 Apr 22 15:00 authlog.0.gz
drwxr-xr-x   7 root  wheel      512 Apr 22 15:00 .
-rw-------   1 root  wheel     7349 May  2 17:20 authlog
-rw-------   1 root  wheel     7667 May  2 17:30 xferlog
-rw-r--r--   1 root  wheel   498209 May  2 18:00 messages
-rw-r--r--   1 root  wheel      103 May 11 04:30 weekly.out
-rw-r--r--   1 root  wheel     1675 May 14 03:19 daily.out
-rw-r--r--   1 root  wheel      628 May 14 03:19 sendmail.st
-rw-r--r--   1 root  wheel    18612 May 14 18:07 wtmp
-rw-rw-r--   1 root  wheel     8540 May 14 18:07 lastlog
server> ls -latr /var/log/mail
total 154
drwxr-xr-x  2 root  wheel     512 Dec 15 14:53 .
drwxr-xr-x  7 root  wheel     512 Apr 22 15:00 ..
-rw-r--r--  1 root  wheel  143679 May  2 03:19 maillog
server>

root receives mail every night (daily insecurity
and daily output) and the events *MUST BE* written
in /var/log/mail/maillog (as I defined it in
/etc/syslog.conf and /etc/newsyslog.conf)

When I try "su root", the event must be written
in /var/log/authlog (but this process seems sleep
and after a few hours I ^C to kill it)

This problem is not new for me... I have seen it from
NetBSD-1.4.x. In april 18, one of our servers had the
same fail (i386/1.5.2) and I corrected it with the
reset button ;)

I can estimate 1 fail/year per server because we have
13+ machines with NetBSD-1.5.x and we have this situation
one time every month. All are i386 and kernel compiled
with exactly the devices and options needed for each case.

Thanks a lot for your answer, I will include DDB in the
options and I will compile new kernels. And in the next
fail, I will request for help.

Thanks again

Heron Gallegos