On Fri, 7 Jun 2002, Manuel Bouyer wrote:
> On Fri, Jun 07, 2002 at 11:00:53AM -0500, Lista de NetBSD Users wrote:
> > On Fri, 7 Jun 2002 xs@kittenz.org wrote:
> >
> > > > This time I have check the keyboard of the box and
> > > > I see the LED *scroll lock* is ON. I dont know why
> > > > the led is on.
> > >
> > > ps alx might be handy, as it would show the wchan syslog was on.
> >
> > UID   PID  PPID CPU PRI  NI  VSZ  RSS WCHAN    STAT  TT    TIME COMMAND
> >   0   117     1   0   4   0  104  408 ttyout   Is    ?? 0:07.25
> > /usr/sbin/syslogd -s
>
> Yes, almost sure that syslogd is hung trying to write to /dev/console.

YES, in my problem of may 2002, syslogd has the *ttyout* like this event.

I got a monitor and connected to my server, this is the screen:
----------------------------------------------------
May 23 10:18:29 myserver sshd[16369]: fatal: Timeout before authentication for 172.16.1.63.
May 23 12:38:23 myserver su: xxx to root on /dev/ttyp1
May 23 13:09:17 myserver su: xxx to root on /dev/ttyp1
May 24 08:28:09 myserver su: BAD SU xxx to root on /dev/ttyp1
May 24 08:28:14 myserver su: xxx to root on /dev/ttyp1
May 24 11:18:42 myserver sendmail[19743]: g4OGIgg19743: SYSERR: putoutmsg ([210.125.134.127]): error on output channel sending "220 myserver.mydom.com ESMTP Sendmail 8.11.3nb1/8.11.3; Fri, 24 May 2002 11:18:42 -0500 (CDT)": Broken pipe
May 25 05:58:02 myserver sendmail[22039]: g4PAi9g22039: from=<yrjzpt@yahoo.com>, size=425, class=0, nrcpts=1, proto=SMTP, daemon=MTA, relay=ip-64-5-104-50.biz.dsl-cu.soltec.net [64.5.104.50]
May 27 09:40:59 myserver su: BAD SU xxx to root on /dev/ttyp1
May 27 09:41:03 myserver su: BAD SU xxx to root on /dev/ttyp1
May 27 09:41:08 myserver su: xxx to root on /dev/ttyp1
May 27 14:39:41 myserver su: xxx to root on /dev/ttyp1
May 28 09:28:24 myserver su: xxx to root on /dev/ttyp1
May 28 12:42:40 myserver su: xxx to root on /dev/ttyp1
```````````````

NetBSD/i386 (myserver) (ttyE0)

Login: ```````````````[2~[C*/E5
^[[7~Password:_
-----------------------------------------------------
The number of messages is not high... 2 or 3 each day

There are a lot of keystrokes in the login row...

I will check more servers of the room.


Heron Gallegos