Subject: Re: AGAIN: syslogd stopped, what must I do?
To: None <xs@kittenz.org>
From: Lista de NetBSD Users <list10@sepc.edu.mx>
List: netbsd-users
Date: 06/07/2002 11:00:53
On Fri, 7 Jun 2002 xs@kittenz.org wrote:

> > This time I have check the keyboard of the box and
> > I see the LED *scroll lock* is ON. I dont know why
> > the led is on.
>
> ps alx might be handy, as it would show the wchan syslog was on.

UID   PID  PPID CPU PRI  NI  VSZ  RSS WCHAN    STAT  TT    TIME COMMAND
  0     0     0   0 -18   0    0 7704 schedule DLs   ?? 0:01.05 (swapper)
  0     1     0   0  10   0  312  192 wait     Is    ?? 0:00.01 init
  0     2     0   0  10   0    0 7704 usbevt   DL    ?? 0:00.21 (usb0)
  0     3     0   0 -18   0    0 7704 daemon_s DL    ?? 0:00.01
(pagedaemon)
  0     4     0   0 -18   0    0 7704 reaper   DL    ?? 0:02.45 (reaper)
  0     5     0   0  18   0    0 7704 syncer   DL    ?? 1:20.20 (ioflush)
  0   117     1   0   4   0  104  408 ttyout   Is    ?? 0:07.25
/usr/sbin/syslogd -s
  0   168     1   0   2   0   76  352 select   Is    ?? 0:01.97
/usr/sbin/rtadvd ex1
  0   171     1   0   2   0  304  460 select   Is    ?? 0:00.06
/usr/pkg/sbin/zebra -d
  0   185     1   0  18 -12  644 3468 pause    S<s   ?? 0:50.01
/usr/sbin/ntpd
  0   205     1   0   2   0  292  632 select   Is    ?? 0:00.06
/usr/sbin/sshd
  0   208     1   0   2   0  724  628 select   Is    ?? 0:17.63 sendmail:
accepting connections
  0   212     1  23  18   0   56  380 pause    Is    ?? 0:00.00
/usr/sbin/inetd -l
  0   215     1   0  10   0  220  428 nanoslee Ss    ?? 0:05.14
/usr/sbin/cron
  0   219     1   0   2   0 1408  640 select   Ss    ?? 0:16.34
/usr/pkg/sbin/bgpd -d
  0   368   205   0   2   0  356 1220 select   S     ?? 0:43.22 sshd:
gallegos@ttyp0
  0 28164   205   0   2   0  352 1208 select   I     ?? 0:05.04 sshd:
sangar@ttyp1
  0 28582   208   0   2   0  764  900 netio    I     ?? 0:00.01 sendmail:
server [64.210.203.162
300   370   368   0  18   0  428  284 pause    Is    p0 0:00.02 -csh
  0   373   370   0  18   0  648  520 pause    S     p0 0:01.96 -csh
  0 28627   373   0  28   0  348  156 -        R+    p0 0:00.00 ps -alx
302 28165 28164   0   3   0  428  296 ttyin    Is+   p1 0:00.02 -csh
  0   221     1   0   4  -4  140    4 ttyout   I<Es+ E0 0:00.03 (login)
  0   222     1  16   3   0   48  428 ttyin    Is+   E1 0:00.01
/usr/libexec/getty Pc ttyE1
  0   223     1  16   3   0   48  428 ttyin    Is+   E2 0:00.01
/usr/libexec/getty Pc ttyE2
  0   224     1  16   3   0   48  428 ttyin    Is+   E3 0:00.01
/usr/libexec/getty Pc ttyE3

>
> Have you got a line in /etc/syslog.conf that logs to /dev/console or any
> other tty device directly? If so, have you tried removing it?

I will connect a vga monitor to the server... the servers room is small
and the servers are without monitors now.

This is my syslog.conf

#       $NetBSD: syslog.conf,v 1.6 1997/02/21 09:04:26 mikel Exp $

*.err;kern.*;auth.notice;authpriv.none;mail.crit        /dev/console
*.info;auth,authpriv,cron,ftp,kern,lpr,mail,local5.none /var/log/messages
kern.debug                                              /var/log/messages

# The authpriv log file should be restricted access; these
# messages shouldn't go to terminals or publically-readable
# files.
auth,authpriv.info                                      /var/log/authlog

cron.info                                               /var/cron/log
ftp.info                                                /var/log/xferlog
lpr.info                                                /var/log/lpd-errs
mail.info
/var/log/mail/maillog
#uucp.info
/var/spool/uucp/ERRORS

*.emerg                                                 *
*.notice;auth.debug                                     root

local5.*
/var/log/mail/uvlog

uvlog is for a small program wrote by me in C language
with the API of MySQL. This program asks to dbserver for
new webmail users. It is invoked by crontab each 15 min.
If there are new users, my program adds it to
/etc/mail/virtusertable and then rebuilds the file. At
end, the program writes to local5.info *Found X new users*

I added *local5* to the first line of syslog.conf because
I dont want these messages in the console.

I dont think my program is the problem because this situation
occurs in other servers too.

Thanks for your comment

Heron Gallegos