RE: help needed: clogged console

RE: help needed: clogged console

[bmcdowell]

Search for 'dmesg -n 1' - I think that's what you're after.


Bob

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Slawomir
Orlowski
Sent: Tuesday, December 23, 2003 12:32 PM
To: shrike-list@redhat.com; redhat-list@redhat.com
Cc: netfilter@lists.netfilter.org
Subject: help needed: clogged console


Hello,

I have Linux RH 9.0 configured as filtering firewall, and getting a lot of
(kernel, iptables) messages on active consoles.
I have thought that putting in /etc/syslog.conf:

# *.kern /dev/console
kern.* /var/log/kernel
kern.* /dev/tty8

would free me from this, but it did not.
How can I force kernel message to appear only in /var/log/kernel log and on
tty8 only?

Best Regards
I hope that somebody will be able to help me.
When  I'm getting a lot of dropped packages it is not possible even to log.

Slawomir Orlowski

RE: help needed: clogged console

[John A. Sullivan III]

On Fri, 2004-01-02 at 10:15, bmcdowell@coxhealthplans.com wrote:
> Search for 'dmesg -n 1' - I think that's what you're after.
> 
> 
> Bob
> 
> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Slawomir
> Orlowski
> Sent: Tuesday, December 23, 2003 12:32 PM
> To: shrike-list@redhat.com; redhat-list@redhat.com
> Cc: netfilter@lists.netfilter.org
> Subject: help needed: clogged console
> 
> 
> Hello,
> 
> I have Linux RH 9.0 configured as filtering firewall, and getting a lot of
> (kernel, iptables) messages on active consoles.
> I have thought that putting in /etc/syslog.conf:
> 
> # *.kern /dev/console
> kern.* /var/log/kernel
> kern.* /dev/tty8
> 
> would free me from this, but it did not.
> How can I force kernel message to appear only in /var/log/kernel log and on
> tty8 only?
> 
> Best Regards
> I hope that somebody will be able to help me.
> When  I'm getting a lot of dropped packages it is not possible even to log.
> 
> Slawomir Orlowski

I've been really confused by this issue.  I am also running iptables on
RedHat 9.0.  /etc/syslog.conf shows nothing being logged to the
console.  Yet, ever since applying the netfilter patch-o-matic
tcp-window patch, all of its messages appear on my console.  The
netfilter mail lists say this is a misconfiguration of syslog but it
sure looks correctly configured to me.  No other iptables messages go to
the console - just the tcp-window messages. How do I stop them!!! Thanks
- John
-- 
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@nexusmgmt.com
---
If you are interested in helping to develop a GPL enterprise class
VPN/Firewall/Security device management console, please visit
http://iscs.sourceforge.net 

RE: help needed: clogged console

[Jozsef Kadlecsik]

On Fri, 2 Jan 2004, John A. Sullivan III wrote:

> > Search for 'dmesg -n 1' - I think that's what you're after.
                ^^^^^
> I've been really confused by this issue.  I am also running iptables on
> RedHat 9.0.  /etc/syslog.conf shows nothing being logged to the
> console.  Yet, ever since applying the netfilter patch-o-matic
> tcp-window patch, all of its messages appear on my console.  The
> netfilter mail lists say this is a misconfiguration of syslog but it
> sure looks correctly configured to me.  No other iptables messages go to
> the console - just the tcp-window messages. How do I stop them!!! Thanks

Default the tcp-window-tracking patch uses extensive kernel logging,
while the other parts of netfilter keeps mouth shut. You can easily
disable the logging by

echo 0 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_log_invalid

Back to the console logging: klogd uses the console to display the kernel
log messages. You can alter it's default behaviour by issuing dmesg like
above or setting the proper command line switches for klogd. If you want
to send the kernel logs to other places (file/remote machine etc.), *then*
you have to configure syslogd properly.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

RE: help needed: clogged console

[John A. Sullivan III]

On Mon, 2004-01-05 at 07:31, Jozsef Kadlecsik wrote:
> On Fri, 2 Jan 2004, John A. Sullivan III wrote:
> 
> > > Search for 'dmesg -n 1' - I think that's what you're after.
>                 ^^^^^
> > I've been really confused by this issue.  I am also running iptables on
> > RedHat 9.0.  /etc/syslog.conf shows nothing being logged to the
> > console.  Yet, ever since applying the netfilter patch-o-matic
> > tcp-window patch, all of its messages appear on my console.  The
> > netfilter mail lists say this is a misconfiguration of syslog but it
> > sure looks correctly configured to me.  No other iptables messages go to
> > the console - just the tcp-window messages. How do I stop them!!! Thanks
> 
> Default the tcp-window-tracking patch uses extensive kernel logging,
> while the other parts of netfilter keeps mouth shut. You can easily
> disable the logging by
> 
> echo 0 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_log_invalid
> 
> Back to the console logging: klogd uses the console to display the kernel
> log messages. You can alter it's default behaviour by issuing dmesg like
> above or setting the proper command line switches for klogd. If you want
> to send the kernel logs to other places (file/remote machine etc.), *then*
> you have to configure syslogd properly.
> 
> Best regards,
> Jozsef
> -
> E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
>           H-1525 Budapest 114, POB. 49, Hungary

Thanks.  Would you kindly confirm the /proc file.  I do not see
ip_conntrack_tcp_log_invalid.  I see ip_conntrack_tcp_invalid_scale and
ip_conntrack_tcp_log_out_of_window - John
-- 
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@nexusmgmt.com
---
If you are interested in helping to develop a GPL enterprise class
VPN/Firewall/Security device management console, please visit
http://iscs.sourceforge.net 

RE: help needed: clogged console

[Jozsef Kadlecsik]

On Mon, 5 Jan 2004, John A. Sullivan III wrote:

> > echo 0 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_log_invalid
>
> Thanks.  Would you kindly confirm the /proc file.  I do not see
> ip_conntrack_tcp_log_invalid.  I see ip_conntrack_tcp_invalid_scale and
> ip_conntrack_tcp_log_out_of_window - John

You use an old version of the tcp-window-tracking patch.

ip_conntrack_tcp_log_invalid_scale and ip_conntrack_tcp_log_out_of_window
were integrated into the single ip_conntrack_tcp_log_invalid (besides
bugfixes and robustness improvements in the new release).

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

help needed: clogged console

[Slawomir Orlowski]

Hello,

I have Linux RH 9.0 configured as filtering firewall, and getting a lot of
(kernel, iptables) messages on active consoles.
I have thought that putting in /etc/syslog.conf:

# *.kern /dev/console
kern.* /var/log/kernel
kern.* /dev/tty8

would free me from this, but it did not.
How can I force kernel message to appear only in /var/log/kernel log and on
tty8 only?

Best Regards
I hope that somebody will be able to help me.
When  I'm getting a lot of dropped packages it is not possible even to log.

Slawomir Orlowski

RE: help needed: clogged console

[involved]

Hi,

I also had that problem.. I use "dmesg -n 1" to avoid getting those kernel
messages on active consoles

Bye
i.

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org] On Behalf Of Slawomir Orlowski
Sent: terça-feira, 23 de Dezembro de 2003 18:32
To: shrike-list@redhat.com; redhat-list@redhat.com
Cc: netfilter@lists.netfilter.org
Subject: help needed: clogged console

Hello,

I have Linux RH 9.0 configured as filtering firewall, and getting a lot of
(kernel, iptables) messages on active consoles.
I have thought that putting in /etc/syslog.conf:

# *.kern /dev/console
kern.* /var/log/kernel
kern.* /dev/tty8

would free me from this, but it did not.
How can I force kernel message to appear only in /var/log/kernel log and on
tty8 only?

Best Regards
I hope that somebody will be able to help me.
When  I'm getting a lot of dropped packages it is not possible even to log.

Slawomir Orlowski