Can Logwatch Files Be Deleted
May 24, 2008My /var partition is getting full and most of the problem seems to be with the files in /var/cache/logwatch/ using up all the space. Can those be deleted?
View 4 Replies
ADVERTISEMENT
Files Deleted With FTP Still Show Up In SSH
May 4, 2008I just deleted several large files via FTP, but when I go in to SSH they still appear. Is there some sort of lag or something?
View 1 Replies View RelatedWhich Of This Files In /boot Is Safe To Be Deleted
Dec 4, 2007After installing Kernels seems /boot is boing to be full soon. Which files can be safely deleted ? Mean lets say to keep the latest Kernel and previous version:
root@[/boot]# ls -la
total 70317
drwxr-xr-x 4 root root 3072 Dec 4 11:28 ./
drwxr-xr-x 22 root root 4096 Sep 29 10:41 ../
-rwxr--r-- 1 root root 6144 Nov 9 2006 aquota.user*
-rw-r--r-- 1 root root 48736 Sep 28 2005 config-2.4.21-37.EL
-rw-r--r-- 1 root root 48851 Sep 28 2005 config-2.4.21-37.ELsmp
-rw-r--r-- 1 root root 48951 Oct 19 2006 config-2.4.21-47.0.1.EL
-rw-r--r-- 1 root root 49066 Oct 19 2006 config-2.4.21-47.0.1.ELsmp
-rw-r--r-- 1 root root 49066 Aug 1 2006 config-2.4.21-47.ELsmp
-rw-r--r-- 1 root root 48951 Jun 11 18:29 config-2.4.21-50.EL
-rw-r--r-- 1 root root 49066 Jun 11 18:21 config-2.4.21-50.ELsmp
-rw-r--r-- 1 root root 48951 Aug 16 17:11 config-2.4.21-51.EL
-rw-r--r-- 1 root root 49066 Aug 16 17:03 config-2.4.21-51.ELsmp
-rw-r--r-- 1 root root 48951 Sep 27 18:38 config-2.4.21-52.EL
-rw-r--r-- 1 root root 49066 Sep 27 18:30 config-2.4.21-52.ELsmp
-rw-r--r-- 1 root root 48951 Dec 3 13:51 config-2.4.21-53.EL
-rw-r--r-- 1 root root 49066 Dec 3 13:42 config-2.4.21-53.ELsmp
drwxr-xr-x 2 root root 1024 Dec 4 11:28 grub/
-rw-r--r-- 1 root root 276201 May 5 2006 initrd-2.4.21-37.EL.img
-rw-r--r-- 1 root root 283119 May 5 2006 initrd-2.4.21-37.ELsmp.img
-rw-r--r-- 1 root root 282640 Apr 10 2007 initrd-2.4.21-47.0.1.EL.img
-rw-r--r-- 1 root root 289544 Oct 21 2006 initrd-2.4.21-47.0.1.ELsmp.img
-rw-r--r-- 1 root root 289539 Sep 23 2006 initrd-2.4.21-47.ELsmp.img
-rw-r--r-- 1 root root 282779 Jun 26 22:04 initrd-2.4.21-50.EL.img
-rw-r--r-- 1 root root 289656 Jun 26 22:03 initrd-2.4.21-50.ELsmp.img
-rw-r--r-- 1 root root 282783 Aug 21 05:32 initrd-2.4.21-51.EL.img
-rw-r--r-- 1 root root 289652 Aug 21 05:32 initrd-2.4.21-51.ELsmp.img
-rw-r--r-- 1 root root 282781 Sep 28 08:22 initrd-2.4.21-52.EL.img
-rw-r--r-- 1 root root 289649 Sep 28 08:23 initrd-2.4.21-52.ELsmp.img
-rw-r--r-- 1 root root 282778 Dec 4 11:27 initrd-2.4.21-53.EL.img
-rw-r--r-- 1 root root 289653 Dec 4 11:28 initrd-2.4.21-53.ELsmp.img
-rw-r--r-- 1 root root 547 May 5 2006 kernel.h
drwx------ 2 root root 12288 May 5 2006 lost+found/
-rw-r--r-- 1 root root 10213 Jan 4 2005 message
-rw-r--r-- 1 root root 10213 Jan 4 2005 message.ja
-rwxr--r-- 1 root root 32 Nov 9 2006 quota.user*
lrwxrwxrwx 1 root root 26 Sep 29 09:37 System.map -> System.map-2.4.21-52.ELsmp
-rw-r--r-- 1 root root 578588 Sep 28 2005 System.map-2.4.21-37.EL
-rw-r--r-- 1 root root 606073 Sep 28 2005 System.map-2.4.21-37.ELsmp
-rw-r--r-- 1 root root 580154 Oct 19 2006 System.map-2.4.21-47.0.1.EL
-rw-r--r-- 1 root root 607622 Oct 19 2006 System.map-2.4.21-47.0.1.ELsmp
-rw-r--r-- 1 root root 607622 Aug 1 2006 System.map-2.4.21-47.ELsmp
-rw-r--r-- 1 root root 580321 Jun 11 18:29 System.map-2.4.21-50.EL
-rw-r--r-- 1 root root 607789 Jun 11 18:21 System.map-2.4.21-50.ELsmp
-rw-r--r-- 1 root root 580321 Aug 16 17:11 System.map-2.4.21-51.EL
-rw-r--r-- 1 root root 607789 Aug 16 17:03 System.map-2.4.21-51.ELsmp
-rw-r--r-- 1 root root 580321 Sep 27 18:38 System.map-2.4.21-52.EL
-rw-r--r-- 1 root root 607789 Sep 27 18:30 System.map-2.4.21-52.ELsmp
-rw-r--r-- 1 root root 580321 Dec 3 13:51 System.map-2.4.21-53.EL
-rw-r--r-- 1 root root 607789 Dec 3 13:42 System.map-2.4.21-53.ELsmp
-rwxr-xr-x 1 root root 2908624 Sep 28 2005 vmlinux-2.4.21-37.EL*
-rwxr-xr-x 1 root root 3543696 Sep 28 2005 vmlinux-2.4.21-37.ELsmp*
-rwxr-xr-x 1 root root 2912724 Oct 19 2006 vmlinux-2.4.21-47.0.1.EL*
-rwxr-xr-x 1 root root 3551892 Oct 19 2006 vmlinux-2.4.21-47.0.1.ELsmp*
-rwxr-xr-x 1 root root 3551888 Aug 1 2006 vmlinux-2.4.21-47.ELsmp*
-rwxr-xr-x 1 root root 2912720 Jun 11 18:29 vmlinux-2.4.21-50.EL*
-rwxr-xr-x 1 root root 3551888 Jun 11 18:21 vmlinux-2.4.21-50.ELsmp*
-rwxr-xr-x 1 root root 2912720 Aug 16 17:11 vmlinux-2.4.21-51.EL*
-rwxr-xr-x 1 root root 3551888 Aug 16 17:03 vmlinux-2.4.21-51.ELsmp*
-rwxr-xr-x 1 root root 2912720 Sep 27 18:38 vmlinux-2.4.21-52.EL*
-rwxr-xr-x 1 root root 3551888 Sep 27 18:30 vmlinux-2.4.21-52.ELsmp*
-rwxr-xr-x 1 root root 2912720 Dec 3 13:51 vmlinux-2.4.21-53.EL*
-rwxr-xr-x 1 root root 3551888 Dec 3 13:42 vmlinux-2.4.21-53.ELsmp*
-rw-r--r-- 1 root root 1252609 Sep 28 2005 vmlinuz-2.4.21-37.EL
-rw-r--r-- 1 root root 1363969 Sep 28 2005 vmlinuz-2.4.21-37.ELsmp
-rw-r--r-- 1 root root 1260075 Oct 19 2006 vmlinuz-2.4.21-47.0.1.EL
-rw-r--r-- 1 root root 1368141 Oct 19 2006 vmlinuz-2.4.21-47.0.1.ELsmp
-rw-r--r-- 1 root root 1367751 Aug 1 2006 vmlinuz-2.4.21-47.ELsmp
-rw-r--r-- 1 root root 1260875 Jun 11 18:29 vmlinuz-2.4.21-50.EL
-rw-r--r-- 1 root root 1370368 Jun 11 18:21 vmlinuz-2.4.21-50.ELsmp
-rw-r--r-- 1 root root 1260877 Aug 16 17:11 vmlinuz-2.4.21-51.EL
-rw-r--r-- 1 root root 1370369 Aug 16 17:03 vmlinuz-2.4.21-51.ELsmp
-rw-r--r-- 1 root root 1260879 Sep 27 18:38 vmlinuz-2.4.21-52.EL
-rw-r--r-- 1 root root 1370369 Sep 27 18:30 vmlinuz-2.4.21-52.ELsmp
-rw-r--r-- 1 root root 1260893 Dec 3 13:51 vmlinuz-2.4.21-53.EL
-rw-r--r-- 1 root root 1370450 Dec 3 13:42 vmlinuz-2.4.21-53.ELsmp
root@[/boot]#
This is the /etc/grub.conf
# grub.conf generated by anaconda
#
# Note that you do not have to rerun grub after making changes to this file
# NOTICE: You have a /boot partition. This means that
# all kernel and initrd paths are relative to /boot/, eg.
# root (hd0,0)
# kernel /vmlinuz-version ro root=/dev/sda2
# initrd /initrd-version.img
#boot=/dev/sda
default=0
timeout=10
splashimage=(hd0,0)/grub/splash.xpm.gz
title CentOS (2.4.21-53.ELsmp)
root (hd0,0)
kernel /vmlinuz-2.4.21-53.ELsmp ro root=LABEL=/
initrd /initrd-2.4.21-53.ELsmp.img
title CentOS (2.4.21-53.EL)
root (hd0,0)
kernel /vmlinuz-2.4.21-53.EL ro root=LABEL=/
initrd /initrd-2.4.21-53.EL.img
title CentOS (2.4.21-52.ELsmp)
root (hd0,0)
kernel /vmlinuz-2.4.21-52.ELsmp ro root=LABEL=/
initrd /initrd-2.4.21-52.ELsmp.img
title CentOS (2.4.21-52.EL)
root (hd0,0)
kernel /vmlinuz-2.4.21-52.EL ro root=LABEL=/
initrd /initrd-2.4.21-52.EL.img
title CentOS (2.4.21-51.ELsmp)
root (hd0,0)
kernel /vmlinuz-2.4.21-51.ELsmp ro root=LABEL=/
initrd /initrd-2.4.21-51.ELsmp.img
title CentOS (2.4.21-51.EL)
root (hd0,0)
kernel /vmlinuz-2.4.21-51.EL ro root=LABEL=/
initrd /initrd-2.4.21-51.EL.img
title CentOS (2.4.21-50.EL)
root (hd0,0)
kernel /vmlinuz-2.4.21-50.EL ro root=LABEL=/
initrd /initrd-2.4.21-50.EL.img
title CentOS (2.4.21-50.ELsmp)
root (hd0,0)
kernel /vmlinuz-2.4.21-50.ELsmp ro root=LABEL=/
initrd /initrd-2.4.21-50.ELsmp.img
title CentOS (2.4.21-47.0.1.EL)
root (hd0,0)
kernel /vmlinuz-2.4.21-47.0.1.EL ro root=LABEL=/
initrd /initrd-2.4.21-47.0.1.EL.img
title CentOS (2.4.21-47.0.1.ELsmp)
root (hd0,0)
kernel /vmlinuz-2.4.21-47.0.1.ELsmp ro root=LABEL=/
initrd /initrd-2.4.21-47.0.1.ELsmp.img
title CentOS (2.4.21-47.ELsmp)
root (hd0,0)
kernel /vmlinuz-2.4.21-47.ELsmp ro root=LABEL=/
initrd /initrd-2.4.21-47.ELsmp.img
title CentOS-3 (2.4.21-37.ELsmp)
root (hd0,0)
kernel /vmlinuz-2.4.21-37.ELsmp ro root=LABEL=/
initrd /initrd-2.4.21-37.ELsmp.img
title CentOS-3-up (2.4.21-37.EL)
root (hd0,0)
kernel /vmlinuz-2.4.21-37.EL ro root=LABEL=/
initrd /initrd-2.4.21-37.EL.img
Sleuthkit + Autopsy :: Recover Deleted Files And More
Aug 19, 2008A life-saver for naive admins who have inadvertently deleted files and are groping in the dark for help.
View 0 Replies View RelatedLogwatch Is Offline - Alternative Logwatch
Jun 5, 2008i cant seem to download logwatch anymore
is there any site keeping archive of logwatch available for download?
or is there any alternative to logwatch?
Plesk 12.x / Linux :: After Upgrade To 12.0.18 - PHP Session Files Are No Longer Being Deleted
Sep 21, 2014I recently updated from 11.5 to 12. After the update, my PHP session files are no longer being deleted.
I followed the steps in article 119500 [URL] ..... I was able to run the steps manually but cron does not seem to able to run them automatically.
The PHP sessions folder permissions seem correct:
drwx-wx-wt 2 root root 548864 Sep 21 12:12 session
The "/etc/php.ini" file seems reasonable and the session file path seems correct:
session.save_path = "/var/lib/php/session"
But the session files never get deleted automatically. The session folder fills up quickly and I have been deleting session files manually while trying to resolve the problem. How can I verify that the default Plesk cron jobs are set up and running properly?
Plesk 12.x / Linux :: What Happens To Site Backup Files When Deleted From Panel
Dec 15, 2014When you delete a site backup from its "Backup Manager" Panel, it is removed and no longer displayed in the Panel. However, I cannot tell if this action actually does anything with the real site backup files in "/var/lib/psa/dumps". Does this action merely remove it from PSA's database but not touch any actual files? If this is true, then how are site backup files supposed to be managed if this action doesn't actually delete them?
View 3 Replies View RelatedDeleted "ifstate Files"
May 28, 2007I've had some recurring problems with my host, VPSLink. For some reason startup scripts and init files keep on being deleted and I can't reach my site. I am indeed a bit of an amateur at maintaining a site but I haven't messed with these files or deleted them. What could be going on? An attack from someone on the web? Or some kind of VPSLink related problem?
This is part of the latest reply I got from VPSLink:We have managed to get your VPS back online. It appears some Ubuntu package changed the way networking is started/shut down which removes the /var/run/network directory completely. This directory contains the 'ifstate' file, which OpenVZ uses to set up the network interfaces.
The site is indeed up and running again so I'm not desperate, but I would very much like to understand what's going on here.
Logwatch
Jun 1, 2008i am getting these in Logwatch 7.3.2
--------------------- Named Begin ------------------------
**Unmatched Entries**
client 193.220.62.4 error sending response: host unreachable: 1 Time(s)
client 200.4.59.195 error sending response: host unreachable: 3 Time(s)
client 201.143.242.67 error sending response: host unreachable: 1 Time(s)
client 208.254.9.236 error sending response: host unreachable: 1 Time(s)
client 213.85.189.1 error sending response: host unreachable: 8 Time(s)
client 222.113.142.168 error sending response: host unreachable: 1 Time(s)
client 61.109.163.138 error sending response: host unreachable: 1 Time(s)
client 61.4.218.51 error sending response: host unreachable: 1 Time(s)
client 62.179.104.208 error sending response: host unreachable: 1 Time(s)
client 67.210.12.107 error sending response: host unreachable: 1 Time(s)
client 78.4.45.16 error sending response: host unreachable: 4 Time(s)
client 80.237.128.135 error sending response: host unreachable: 1 Time(s)
client 85.106.233.213 error sending response: host unreachable: 1 Time(s)
client 91.121.143.168 error sending response: host unreachable: 1 Time(s)
---------------------- Named End -------------------------
i have apf firewall installed
Logwatch
Feb 22, 2007I am thinking of installing Logwatch on my cPanel/WHM VPS
Does it take a lot of resources to run?
Does it run once a day only or is it running all the time?
Logwatch
Apr 15, 2007I recentlt receive this log from server:
--------------------- httpd Begin ------------------------
0.00 MB transfered in 20 responses (1xx 0, 2xx 6, 3xx 0, 4xx 14, 5xx
0)
14 Content pages (0.00 MB),
6 Other (0.00 MB)
A total of 1 unidentified 'other' records logged
GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1 with response code(s) 6
400 responses
--------------------- Named Begin ------------------------
**Unmatched Entries**
client 209.200.168.66 bad zone transfer request: './IN':
non-authoritative zone (NOTAUTH): 1 Time(s)
notify question section contains no SOA: 1 Time(s)
Does that mean someone was trying break into the server or something?
Logwatch Best Practices
Apr 3, 2009I've been tasked with developing a default Logwatch configuration for a few dozen servers that will email their findings to a ticketing system. I was hoping to find insight here from users who are using Logwatch similarly. If you have Logwatch emailing a ticket system, I'd love to hear about your custom configs...
View 4 Replies View RelatedLogwatch, What The Heck
Aug 2, 2008Quote:
Requests with error response codes
400 Bad Request
200: 1 Time(s)
400: 1 Time(s)
401 Unauthorized
/: 2 Time(s)
404 Not Found
/user/soapCaller.bs: 2 Time(s)
I am a bit confused about this. Is logwatch telling me a 400 request also served a 200?
Logwatch Install
Oct 29, 2007Just got logwatch installed but config file appears to be blank?
wget ftp://ftp.kaybee.org/pub/redhat/RPMS...6-1.noarch.rpm
rpm -Uvh logwatch-7.3.6-1.noarch.rpm
rm -rf logwatch-7.3.6-1.noarch.rpm
pico -w /etc/logwatch/conf/logwatch.conf
This is what the config file shows:
# Local configuration options go here (defaults are in /usr/share/logwatch/defa$
I then look at that file and it's empty too.
Isnt there suppose to be config lines a file that I can alter to set my email address and stuff?
Logwatch Results
Jul 26, 2007##################################################################
--------------------- Selinux Audit Begin ------------------------
Number of audit daemon stops: 4
**Unmatched Entries**
Error sending failure mode request (Connection refused)
Unable to set audit pid, exiting
Cannot daemonize (Success)
Error sending failure mode request (Connection refused)
Error sending failure mode request (Connection refused)
Unable to set audit pid, exiting
Cannot daemonize (Success)
Error sending failure mode request (Connection refused)
---------------------- Selinux Audit End -------------------------
--------------------- Cron Begin ------------------------
Commands Run:
User *system*:
personal crontab reloaded: 2 Time(s)
User agadirnet:
personal crontab listed: 1 Time(s)
User dafatir:
personal crontab listed: 1 Time(s)
User drweb:
/opt/drweb/update.pl: 37 Time(s)
User kari:
personal crontab listed: 1 Time(s)
User karicom:
personal crontab listed: 1 Time(s)
User kastala:
personal crontab listed: 1 Time(s)
User mailman:
/usr/lib/mailman/cron/checkdbs: 1 Time(s)
/usr/lib/mailman/cron/disabled: 1 Time(s)
/usr/lib/mailman/cron/gate_news: 223 Time(s)
/usr/lib/mailman/cron/nightly_gzip: 1 Time(s)
User root:
/opt/php51/bin/php5
/usr/local/sitebuilder/utils/clear_trial_sites.php > /dev/null 2>&1: 19
Time(s)
/opt/php51/bin/php5 /usr/local/sitebuilder/utils/sip1.php >
/dev/null 2>&1: 1 Time(s)
/opt/php51/bin/php5 /usr/local/sitebuilder/utils/sip2.php >
/dev/null 2>&1: 1 Time(s)
/opt/php51/bin/php5 /usr/local/sitebuilder/utils/update_key.php >
/dev/null 2>&1: 1 Time(s)
/usr/local/psa/admin/sbin/backupmng >/dev/null 2>&1: 74 Time(s)
/usr/local/psa/libexec/modules/watchdog/cp/clean-events: 1
Time(s)
/usr/local/psa/libexec/modules/watchdog/cp/clean-sysstats: 1
Time(s)
/usr/local/psa/libexec/modules/watchdog/cp/pack-sysstats day: 1
Time(s)
/usr/local/rtm/bin/rtm 40 >/dev/null 2>/dev/null: 1116 Time(s)
/usr/local/sbin/bfd -q: 112 Time(s)
/usr/sbin/ntpdate -b -s 213.186.33.99: 1 Time(s)
run-parts /etc/cron.daily: 1 Time(s)
run-parts /etc/cron.hourly: 18 Time(s)
CRON Restarted 2 Time(s)
---------------------- Cron End -------------------------
--------------------- httpd Begin ------------------------
0.07 MB transferred in 211 responses (1xx 0, 2xx 26, 3xx 173, 4xx 12,
5xx 0)
148 Images (0.00 MB),
62 Content pages (0.07 MB),
1 Other (0.00 MB)
Requests with error response codes
400 Bad Request
/vb/Juice/images/editor/bold.gif: 1 Time(s)
/w00tw00t.at.ISC.SANS.DFind: 1 Time(s)
404 Not Found
/admin/phpmyadmin/main.php: 1 Time(s)
[url]
---------------------- httpd End -------------------------
--------------------- Kernel Begin ------------------------
2 Time(s): PrefPort:A RlmtMode:Check Link State
2 Time(s): Virtual Wire compatibility mode.
2 Time(s): autonegotiation: yes
2 Time(s): duplex mode: full
2 Time(s): flowctrl: none
2 Time(s): ide0: BM-DMA at 0xfc00-0xfc07, BIOS settings: hda:pio,
hdb:pio
2 Time(s): ide1: BM-DMA at 0xfc08-0xfc0f, BIOS settings: hdc:pio,
hdd:pio
2 Time(s): irq moderation: disabled
2 Time(s): rx-checksum: disabled
2 Time(s): scatter-gather: disabled
2 Time(s): speed: 100
2 Time(s): tx-checksum: disabled
1 Time(s): pIII_sse : 4821.000 MB/sec
1 Time(s): pIII_sse : 4822.000 MB/sec
2 Time(s): IO window: e000-efff
2 Time(s): MEM window: fbf00000-fbffffff
2 Time(s): PREFETCH window: 20000000-200fffff
2 Time(s): Type: Direct-Access ANSI SCSI
revision: 05
2 Time(s): Vendor: ATA Model: Hitachi HDS72168 Rev: P21O
2 Time(s): BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
2 Time(s): BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
2 Time(s): BIOS-e820: 00000000000e6000 - 0000000000100000 (reserved)
2 Time(s): BIOS-e820: 0000000000100000 - 000000001f7b0000 (usable)
2 Time(s): BIOS-e820: 000000001f7b0000 - 000000001f7c0000 (ACPI data)
2 Time(s): BIOS-e820: 000000001f7c0000 - 000000001f7f0000 (ACPI NVS)
2 Time(s): BIOS-e820: 000000001f7f0000 - 000000001f800000 (reserved)
2 Time(s): BIOS-e820: 00000000ffb80000 - 0000000100000000 (reserved)
2 Time(s): sda: sda1 sda2 sda3
2 Time(s): ..TIMER: vector=0x31 apic1=0 pin1=2 apic2=0 pin2=0
2 Time(s): 0MB HIGHMEM available.
2 Time(s): 3ware 9000 Storage Controller device driver for Linux
v2.26.02.007.
2 Time(s): 3ware Storage Controller device driver for Linux
v1.26.02.001.
2 Time(s): 503MB LOWMEM available.
2 Time(s): ATA: abnormal status 0x7F on port 0xD407
2 Time(s): Adding 522104k swap on /dev/sda3. Priority:-1 extents:1
across:522104k
2 Time(s): Allocating PCI resources starting at 20000000 (gap:
1f800000:e0380000)
2 Time(s): BIOS-provided physical RAM map:
2 Time(s): Brought up 1 CPUs
2 Time(s): Built 1 zonelists. Total pages: 128944
2 Time(s): CPU0: Intel P4/Xeon Extended MCE MSRs (24) available
2 Time(s): CPU0: Intel(R) Pentium(R) 4 CPU 3.00GHz stepping 09
2 Time(s): CPU: L2 cache: 1024K
2 Time(s): CPU: Physical Processor ID: 0
2 Time(s): CPU: Trace cache: 12K uops, L1 D cache: 16K
1 Time(s): Calibrating delay using timer specific routine.. 5989.49
BogoMIPS (lpj=11978986)
1 Time(s): Calibrating delay using timer specific routine.. 5989.50
BogoMIPS (lpj=11979013)
2 Time(s): Checking 'hlt' instruction... OK.
2 Time(s): Checking if this processor honours the WP bit even in
supervisor mode... Ok.
2 Time(s): Compat vDSO mapped to ffffe000.
2 Time(s): Console: colour VGA+ 80x25
2 Time(s): Copyright (c) 1999-2005 LSI Logic Corporation
2 Time(s): Copyright (c) 1999-2006 Intel Corporation.
2 Time(s): DMI 2.3 present.
2 Time(s): Dentry cache hash table entries: 65536 (order: 6, 262144
bytes)
1 Time(s): Detected 2992.767 MHz processor.
1 Time(s): Detected 2992.772 MHz processor.
2 Time(s): Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
2 Time(s): ENABLING IO-APIC IRQs
2 Time(s): EXT3 FS on sda1, internal journal
2 Time(s): EXT3 FS on sda2, internal journal
2 Time(s): EXT3-fs: INFO: recovery required on readonly filesystem.
4 Time(s): EXT3-fs: mounted filesystem with ordered data mode.
2 Time(s): EXT3-fs: recovery complete.
1 Time(s): EXT3-fs: sda1: 4 orphan inodes deleted
1 Time(s): EXT3-fs: sda1: orphan cleanup on readonly fs
2 Time(s): EXT3-fs: write access will be enabled during recovery.
2 Time(s): Enabling APIC mode: Flat. Using 1 I/O APICs
2 Time(s): Enabling fast FPU save and restore... done.
2 Time(s): Enabling unmasked SIMD FPU exception support... done.
2 Time(s): ExtINT not setup in hardware but reported by MP table
2 Time(s): Freeing SMP alternatives: 20k freed
2 Time(s): Freeing unused kernel memory: 220k freed
2 Time(s): Fusion MPT SAS Host driver 3.04.01
2 Time(s): Fusion MPT SPI Host driver 3.04.01
2 Time(s): Fusion MPT base driver 3.04.01
2 Time(s): Fusion MPT misc device (ioctl) driver 3.04.01
2 Time(s): I/O APIC #2 Version 32 at 0xFEC00000.
2 Time(s): ICH5: IDE controller at PCI slot 0000:00:1f.1
2 Time(s): ICH5: chipset revision 2
2 Time(s): ICH5: not 100% native mode: will probe irqs later
2 Time(s): IP route cache hash table entries: 4096 (order: 2, 16384
bytes)
2 Time(s): IPv4 over IPv4 tunneling driver
2 Time(s): Initializing CPU#0
2 Time(s): Initializing Cryptographic API
2 Time(s): Inode-cache hash table entries: 32768 (order: 5, 131072
bytes)
2 Time(s): Intel MultiProcessor Specification v1.4
2 Time(s): Intel machine check architecture supported.
2 Time(s): Intel machine check reporting enabled on CPU#0.
2 Time(s): Intel(R) PRO/1000 Network Driver - version 7.1.9-k4-NAPI
2 Time(s): Kernel command line: auto BOOT_IMAGE=linux ro root=801 nousb
2 Time(s): Linux agpgart interface v0.101 (c) Dave Jones
2 Time(s): Linux version 2.6.18.1-xxxx-grs-ipv4-32
(root@kernel-32.ovh.net) (version gcc 3.3.5 (Debian 1:3.3.5-13)) #2 SMP
Fri Nov 3 23:04:19 CET 2006
2 Time(s): Memory: 506412k/515776k available (2860k kernel code, 8896k
reserved, 1080k data, 220k init, 0k highmem)
2 Time(s): Mount-cache hash table entries: 512
2 Time(s): NET: Registered protocol family 1
2 Time(s): NET: Registered protocol family 16
2 Time(s): NET: Registered protocol family 17
2 Time(s): NET: Registered protocol family 2
2 Time(s): Netfilter messages via NETLINK v0.30.
2 Time(s): OEM ID: ASUSTeK Product ID: APIC at: 0xFEE00000
2 Time(s): PCI quirk: region 0480-04bf claimed by ICH4 GPIO
2 Time(s): PCI quirk: region 0800-087f claimed by ICH4 ACPI/GPIO/TCO
2 Time(s): PCI->APIC IRQ transform: 0000:00:02.0[A] -> IRQ 16
2 Time(s): PCI->APIC IRQ transform: 0000:00:1f.1[A] -> IRQ 18
2 Time(s): PCI->APIC IRQ transform: 0000:00:1f.2[A] -> IRQ 18
2 Time(s): PCI->APIC IRQ transform: 0000:01:0d.0[A] -> IRQ 23
2 Time(s): PCI: Bridge: 0000:00:1e.0
2 Time(s): PCI: Enabling device 0000:00:1f.1 (0005 -> 0007)
2 Time(s): PCI: Ignore bogus resource 6 [0:0] of 0000:00:02.0
2 Time(s): PCI: Ignoring BAR0-3 of IDE controller 0000:00:1f.1
2 Time(s): PCI: PCI BIOS revision 2.10 entry at 0xf0031, last bus=1
2 Time(s): PCI: Probing PCI hardware
2 Time(s): PCI: Transparent bridge - 0000:00:1e.0
2 Time(s): PCI: Using IRQ router PIIX/ICH [8086/24d0] at 0000:00:1f.0
2 Time(s): PCI: Using configuration type 1
2 Time(s): PID hash table entries: 2048 (order: 11, 8192 bytes)
2 Time(s): Processor #0 15:4 APIC version 20
2 Time(s): Processors: 1
2 Time(s): Real Time Clock Driver v1.12ac
4 Time(s): SCSI device sda: 160836480 512-byte hdwr sectors (82348 MB)
4 Time(s): SCSI device sda: drive cache: write back
2 Time(s): SCSI subsystem initialized
2 Time(s): SGI XFS with large block numbers, no debug enabled
2 Time(s): SMP alternatives: switching to UP code
2 Time(s): Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ
sharing disabled
2 Time(s): Setting up standard PCI resources
2 Time(s): Software Watchdog Timer: 0.07 initialized. soft_noboot=0
soft_margin=60 sec (nowayout= 0)
2 Time(s): TCP bic registered
2 Time(s): TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
2 Time(s): TCP established hash table entries: 16384 (order: 5, 131072
bytes)
2 Time(s): TCP reno registered
2 Time(s): TCP: Hash tables configured (established 16384 bind 8192)
2 Time(s): Time: tsc clocksource has been installed.
1 Time(s): Total of 1 processors activated (5989.49 BogoMIPS).
1 Time(s): Total of 1 processors activated (5989.50 BogoMIPS).
2 Time(s): Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
2 Time(s): Using IPI Shortcut mode
2 Time(s): VFS: Disk quotas dquot_6.5.1
2 Time(s): VFS: Mounted root (ext3 filesystem) readonly.
2 Time(s): ata1: SATA max UDMA/133 cmd 0xD400 ctl 0xD002 bmdma 0xC000
irq 18
2 Time(s): ata2.00: ATA-7, max UDMA/133, 160836480 sectors: LBA48 NCQ
(depth 0/32)
2 Time(s): ata2.00: ata2: dev 0 multi count 16
2 Time(s): ata2.00: configured for UDMA/133
2 Time(s): ata2: SATA max UDMA/133 cmd 0xC800 ctl 0xC402 bmdma 0xC008
irq 18
2 Time(s): ata_piix 0000:00:1f.2: MAP [ P0 -- P1 -- ]
2 Time(s): device-mapper: ioctl: 4.7.0-ioctl (2006-06-24) initialised:
dm-devel@redhat.com
2 Time(s): drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
2 Time(s): e100: Copyright(c) 1999-2005 Intel Corporation
2 Time(s): e100: Intel(R) PRO/100 Network Driver, 3.5.10-k2-NAPI
2 Time(s): eth0: Yukon Gigabit Ethernet 10/100/1000Base-T Adapter
2 Time(s): eth0: network connection up using port A
2 Time(s): floppy0: no floppy controllers found
2 Time(s): found SMP MP-table at 000ff780
2 Time(s): ide: Assuming 33MHz system bus speed for PIO modes; override
with idebus=xx
2 Time(s): io scheduler anticipatory registered (default)
2 Time(s): io scheduler cfq registered
2 Time(s): io scheduler deadline registered
2 Time(s): io scheduler noop registered
2 Time(s): ip_conntrack version 2.4 (4029 buckets, 32232 max) - 224
bytes per conntrack
2 Time(s): ip_tables: (C) 2000-2006 Netfilter Core Team
4 Time(s): kjournald starting. Commit interval 5 seconds
2 Time(s): klogd 1.4.1, log source = /proc/kmsg started.
2 Time(s): loop: loaded (max 8 devices)
4 Time(s): md: ... autorun DONE.
4 Time(s): md: Autodetecting RAID arrays.
4 Time(s): md: autorun ...
2 Time(s): md: bitmap version 4.39
2 Time(s): md: linear personality registered for level -1
2 Time(s): md: md driver 0.90.3 MAX_MD_DEVS=256, MD_SB_DISKS=27
2 Time(s): md: multipath personality registered for level -4
2 Time(s): md: raid0 personality registered for level 0
2 Time(s): md: raid1 personality registered for level 1
2 Time(s): md: raid4 personality registered for level 4
2 Time(s): md: raid5 personality registered for level 5
2 Time(s): md: raid6 personality registered for level 6
2 Time(s): megasas: 00.00.03.01 Sun May 14 22:49:52 PDT 2006
2 Time(s): mice: PS/2 mouse device common for all mice
2 Time(s): migration_cost=0
2 Time(s): monitor/mwait feature present.
2 Time(s): mptctl: /dev/mptctl @ (major,minor=10,220)
2 Time(s): mptctl: Registered with Fusion MPT base driver
2 Time(s): raid5: automatically using best checksumming function:
pIII_sse
1 Time(s): raid5: using function: pIII_sse (4821.000 MB/sec)
1 Time(s): raid5: using function: pIII_sse (4822.000 MB/sec)
1 Time(s): raid6: int32x1 862 MB/s
1 Time(s): raid6: int32x1 863 MB/s
2 Time(s): raid6: int32x2 795 MB/s
2 Time(s): raid6: int32x4 708 MB/s
1 Time(s): raid6: int32x8 543 MB/s
1 Time(s): raid6: int32x8 544 MB/s
1 Time(s): raid6: mmxx1 1831 MB/s
1 Time(s): raid6: mmxx1 1840 MB/s
2 Time(s): raid6: mmxx2 2122 MB/s
2 Time(s): raid6: sse1x1 1057 MB/s
1 Time(s): raid6: sse1x2 1208 MB/s
1 Time(s): raid6: sse1x2 1210 MB/s
1 Time(s): raid6: sse2x1 2099 MB/s
1 Time(s): raid6: sse2x1 2101 MB/s
1 Time(s): raid6: sse2x2 2252 MB/s
1 Time(s): raid6: sse2x2 2254 MB/s
1 Time(s): raid6: using algorithm sse2x2 (2252 MB/s)
1 Time(s): raid6: using algorithm sse2x2 (2254 MB/s)
2 Time(s): scsi0 : ata_piix
2 Time(s): scsi1 : ata_piix
2 Time(s): sd 1:0:0:0: Attached scsi disk sda
4 Time(s): sda: Write Protect is off
2 Time(s): serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
2 Time(s): serio: i8042 AUX port at 0x60,0x64 irq 12
2 Time(s): serio: i8042 KBD port at 0x60,0x64 irq 1
2 Time(s): tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
2 Time(s): tun: Universal TUN/TAP device driver, 1.6
2 Time(s): using mwait in idle threads.
---------------------- Kernel End -------------------------
Logwatch For My Host
Jan 8, 2007I've been getting this log watch from my server emailed to me on a daily basis. It gives me a list of all the authentification failures via SSH and other protocols. Should I be actively concerned that there's specific IP addresses consistantly trying to access my SSH account? Likewise, for any type of failed login. Should I actively block their IP address from accessing the server at all?
I've also noticed in the Connections group, there's a lot of monitoringservice.net connections -- is this normal?
Just want to make sure I'm taking an active effort on preventing my server being brought down. I mean, I have 2000+ SSHd authentication failures... seems really high.
Getting More Out Of LogWatch On A CPanel/WHM Server
May 5, 2009I was searching for something else the other day and came across this (search for LogWatch on the page).
It changes the default paths for some of the log files so that they work on a cPanel/WHM server.
This will give you more reports in your daily LogWatch email - specifically, it adds exim, apache, courier and PureFTP logs.
Most tutorials only show you how to change the detail level or the email address in logwatch.conf.
So, I thought I'd share this piece of information.
I found that a few changes were necessary for my system.
So, I'll give all the steps I followed below:
1) After you have installed LogWatch, change the following in /usr/share/logwatch/default.conf/logwatch.conf :
Code:
Detail = High
MailTo = <your email address>
You can use Detail = Med if you want to reduce the details you get.
2) Add the following to /etc/logwatch/conf/override.conf (you may have to create the file):
Code:
logfiles/exim: LogFile = exim_mainlog
logfiles/http: LogFile = /usr/local/apache/logs/access_log
services/pop3: *OnlyService = cpanelpop
services/pop3: *RemoveHeaders = 1
services/pureftpd: LogFile = messages
services/pureftpd: $show_logins = 1
services/pureftpd: $show_logouts = 1
services/pureftpd: $show_new_connections = 1
So, if you are not bored reading LogWatch's daily logs and would like to increase your workload, you now know how to
How have you configured your LogWatch installation ? Or do you use something other than LogWatch?
Logwatch Broke Today
Jul 28, 2008I logged into my email to check for my nightly logwatch report (at 12am).
Nothing.
So I log into ssh and manually run it, get greeted with this:
You have old files in your logwatch tmpdir (/var/cache/logwatch):
logwatch.zcTV3hC0
The directories listed above were most likely created by a
logwatch run that failed to complete successfully. If so, you
may delete these directories.
I last ran logwatch around 10:30pm, it worked fine.
I try to run logwatch again, same error.. except now there's another temp file showing beneath the first.
I go ahead and delete both of them, run logwatch again...it worked. I also got the other reports from when I tried running logwatch manually and was stopped with this error.
I've never had this happen before, so I'm curious as to what caused it? Logwatch is in cron.daily and has never missed a single report.
Just typical data corruption (as can happen with any computer file) or could something have interfered with its processing at 12?
Is Logwatch Important? Can I Remove It
May 9, 2007I'm running out of disk space on /var and it seem /var/cache/logwatch has almost 4GB of space. Can I remove everything inside and uninstall logwatch? How do I remove logwatch from the system and any affect of the system functionality.
DirectAdmin
CentOS4.4
Logwatch Huge Report
Oct 29, 2007I have been receivig a huge logwatch report, seems that logwatch is not parsing the /var/log/secure file, but sending the log entries instead of any resume of it. I got thousands of lines like
Cp-Wrap: Pushing "47 GETDISKUSED pvargas lights.com.co" to '/usr/local/cpanel/bin/eximadmin' for UID: 47 : 25 Time(s)
Cp-Wrap: Pushing "47 GETDISKUSED r.perez konecrans.com" to '/usr/local/cpanel/bin/eximadmin' for UID: 47 : 69 Time(s)
Cp-Wrap: Pushing "47 GETDISKUSED r.rodriguez konecrans.com" to '/usr/local/cpanel/bin/eximadmin' for UID: 47 : 114 Time(s)
I have upgraded to the most recent version of Logwatch with default configuration. Any ideas on what could be wrong?
Logwatch Quite A Few Unmatched Entries
May 14, 2007Is this someone trying to gain access to the server and just trying different password or ways? The server is new with no websites hosted yet but already getting this.
Will Brute Force not take care of this?
Is this common? Any ideas?
**Unmatched Entries**
sendto(72.64.118.118): Operation not permitted: 72 time(s)
sendto(69.182.190.97): Operation not permitted: 73 time(s)
sendto(66.93.44.19): Operation not permitted: 72 time(s)
Logwatch Install Instructions
Apr 16, 2007Does anyone have a link to some Logwatch installation instructions. There nothing on the logwatch website and not manage to find anything on here or on google.
I jusy want to set it up and have it email me every day.
I have never used rpm installs before.
Logwatch Installation Permission Denied
Jul 17, 2007# cd /usr/src
# wget ftp://ftp.kaybee.org/pub/linux/logwatch-7.3.6.tar.gz
# tar -xvzf logwatch-7.3.6.tar.gz
# cd logwatch*
# ./install_logwatch.sh
-bash: ./install_logwatch.sh: Permission denied
Logwatch Showing Unmatched Entries
May 14, 2007Posts have been disappearing the last 2 days on WHT. Let me try this again.
The server is new and do not have any websites setup yet. It's already getting these entries. Is this normal? Should we move to a different SSH port?
**Unmatched Entries**
sendto(72.64.118.118): Operation not permitted: 72 time(s)
sendto(69.182.190.97): Operation not permitted: 73 time(s)
sendto(66.93.44.19): Operation not permitted: 72 time(s)
Apache :: Logwatch 404 And 503 Errors To External URLs
Mar 11, 2015I used a little vServer with ubuntu (turnkey) and use logwatch to be informed by email about any errors. I'm confused about the following errors from Apache:
--------------------- httpd Begin ------------------------
Requests with error response codes
404 Not Found
http://translate.google.com/gen204: 1 Time(s)
http://www.teddybrinkofski.com/ip_json.php: 1 Time(s)
503 Service Unavailable
http://www.google.com/: 1 Time(s)
---------------------- httpd End -------------------------
These errors are definetly not from my own code. I have checked that mod_proxy is disabled and i disabled also CONNECT like here described: [URL] ....
What does these errors mean and how can i disabled this?
Cron Job Deleted - Is Their A Log?
Jul 4, 2009We are running cpanel on one of our servers. Several cron jobs were deleted from the cron panel of one acct. I have no idea of the paths to re-enter these jobs. Is their a log file on the server that will show cron job history from previous runs so I can recover the proper paths?
View 4 Replies View RelatedDirectory In /tmp Deleted
May 8, 2008the caching directory I created for eaccelerator deleted by itself. There are 2 copies of eaccelerator, one for apache and one for litespeed. The one for Apache got deleted today. Could it be due to the fact that the directory hasn't been modified or accessed in nearly 2 weeks? It's been that long since Apache was used.
View 4 Replies View RelatedRestore A Deleted LVM
Nov 18, 2008I've come into a bind here.
I need to restore a deleted VPS. Problem is that another VPS was created right after the VPS was deleted. This is on a Xen hypervm slave.
I tried running vgcfgrestore -f /etc/lvm/archive/VolGroup00_01381.vg VolGroup00
but its not bringing back the files.
Any ideas at all at on how to recover? Is this even possible? I just need to salvage some files from /home from the old setup.
Perhaps delete the new VPS and then do a restore?
Deleted /etc/named.conf?
May 30, 2008i have cpanel running on my dedicated server and i have accidentally deleted /etc/named.conf
how to recover it? will cpanel maintain backup or of some sort? i havent stopped bind so my sites are working till now.