Re: tracking down the cause of an entry in syslog?
On Sat, 23 Jun 2001 01:41:52 -0300, Henrique wrote:
> On Fri, 22 Jun 2001, Eric G. Miller wrote:
> > On Fri, Jun 22, 2001 at 05:30:29PM -0400, Paul Wright wrote:
> > > I've been getting an irritating recurring syslog entry that I'd like to
> > > track down and stifle, but I'm at a loss as to discover what process is
> > > causing the entry.
> > >
> > > Jun 22 16:02:02 ICMP message type destination unreachable - bad port from 127.0.0.1 (127.0.0.1->127.0.0.1)
>
> "Bad port"? That's one I've not seen before.
>
Paul T. Wright <paul@cvanet.com>
-currently seeking employment-
> > Using fetchmail by chance? Annoying isn't it.
>
> What is annoying is that nobody reported the bug to me.
>
> > > How can I log (or discover) which port is being sought?
> >
> > None apparently. That's probably the problem...
>
> And it is a big one if this is true :( If you guys track it down to
> fetchmail, please submit a bug report, and be warned that it'll probably
> require gdb traces to find the problem unless I manage to duplicate the
> problem here.
>
> > Stop fetchmail and see if they disappear ;)
>
> And by all means tell me if they do disappear.
>
Hi there,
I found the cause on my system a few minutes ago.
>From /var/log/ippl/all.log:
Jun 23 02:02:02 ICMP message type destination unreachable...
>From a mail (logcheck report):
Subject: j001 2001/06/23 02:02 system check
From: <root@j001.june.home>
Date: Sat, 23 Jun 2001 02:02:02 -0400
On my system, this only occurs when local mail is delivered. Maybe
because I use masqmail instead of fetchmail. IIRC, fetchmail passes the
mauil to procmail for delivery, and masqmail delivers the mail directly to
/var/spool/mail/user. Please correct me if I'm wrong.
I'm going to read up on procmail in hopes of finding out what port it is
looking for, etc. I'm not convinced it's a bug as yet, but then I'm not
convinced it's not.
You can check this by sending a mail to:somebody@localhost
sending a mail off host does not cause the entry on my machine.
Any ideas?
Thanks for all the help. I'll post again when I know more.
-ptw
Reply to: