Bug 9321 - sysklogd produces unwanted -- MARK -- messages and switches to GMT
sysklogd produces unwanted -- MARK -- messages and switches to GMT
Status: CLOSED NOTABUG
Product: Red Hat Linux
Classification: Retired
Component: sysklogd (Show other bugs)
6.0
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Bill Nottingham
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2000-02-10 17:36 EST by Adi Linden
Modified: 2014-03-16 22:12 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2000-06-10 19:43:43 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Adi Linden 2000-02-10 17:36:30 EST
Upgraded to sysklogd-1.3.31-14.i386.rpm. After several days of running just
fine syslogd will start putting -- MARK -- messages into the log at 30
minute intervals. After the next logrotate syslogd will put -- MARK --
messages into the log every 30 seconds and switch to report the mark
messages in UTC instead of local time.

This problem is occuring on 2 machines running RedHat Linux 6.1. Both
machines run webservers, mailservers and name servers and are publicly
available. Firewalling prevents access to port 'syslog 514/udp' on both
system. I cannot reproduce the same problem on 2 other machines which are
workstations and behind a IPmasq firewall.

Could this be a security problem?
Comment 1 Bill Nottingham 2000-02-10 18:53:59 EST
Normal behavior - use '-m 0' as args to syslogd to turn it off.
Comment 2 Adi Linden 2000-02-10 19:58:59 EST
I confirmed that syslogd is running with the -m 0 switch. The problem occurs
regardless. Manually restarting syslogd does not resolve the problem.
Reinstalling the RPM with 'rpm -Uvh --force sysklogd-...' and subsequent
rebooting the system will result in normal and expected syslogd operation for a
few days.
Comment 3 Bill Nottingham 2000-02-16 16:22:59 EST
What does rpm -V sysklogd say on a broken system?
Comment 4 Bill Nottingham 2000-06-10 19:43:42 EDT
closed, lack of input.

Note You need to log in before you can comment on or make changes to this bug.