[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Strange entries in apache/access.log



Andrew Alsup wrote:

> Is it normal to see 'ypbind' and 'sudo' entries in the
> /var/log/apache/access.log file?  I have tcpspy enabled and I see entries
> for it as well.  Here's a sample of what I've got:

> Jan 27 15:32:48 localhost ypbind[434]: broadcast: RPC: Timed out.
> Jan 27 15:32:54 localhost sudo: andy : TTY=pts/2 ; PWD=/var/log/apache ;
> USER=root ; COMMAND=/usr/bin/vi access.log

> These are things I would expect to see the the syslog file, not in the
> apache access.log.  I think I've got something dorked up somewhere.  I'm
> trying to get webalizer working, and when it choked and said 'No valid log
> entries', I decided to look at the contents of the file.  Yuck.

Do you also see any normal access.log entries in the same file? If not, I'd
suspect a filesystem issue - try unmounting and fscking the file
system /var/log is on.

Out of curiosity, what is in /var/log/syslog?

Adam



Reply to: