Re: Strange occurrence in /var/log/messages
Spiros Bousbouras <spibou@gmail.com> wrote:
>Jul 1 07:35:01 home kernel: imklog 3.18.6, log source = /proc/kmsg started.
>Jul 1 07:35:01 home rsyslogd: [origin software="rsyslogd"
>swVersion="3.18.6" x-pid="2103" x-info="http://www.rsyslog.com";]
>restart
>Jul 1 07:35:01 home kernel: imklog 3.18.6, log source = /proc/kmsg started.
>Jul 1 07:35:01 home rsyslogd: [origin software="rsyslogd"
>swVersion="3.18.6" x-pid="2103" x-info="http://www.rsyslog.com";]
>restart
>
>(Some wraparound may have occurred in the above)
>
>The same pair of messages is repeated. First time I notice such a
>thing. In /var/log/kern.log I see at the bottom
>
>Jul 1 07:35:01 home kernel: imklog 3.18.6, log source = /proc/kmsg started.
>Jul 1 07:35:01 home kernel: imklog 3.18.6, log source = /proc/kmsg started.
>
>Once again a duplication.
>
>Is there any legitimate reason this might have happened or is it a
>kernel bug ? Neither file has anything else I haven't seen before.
How many instances of rsyslog or comparable daemons are running on
your system? Do you use logrotate or something similiar that restarts
logging daemons? Check crontab -l and /etc/crontab for the tasks that
usually run at 07:35, and then check either these tasks, or, if it is
something like cron-daily, check /etc/cron.daily.
If you indeed use logrotate, check /etc/logrotate.d
and /etc/logrotate.conf if you have two lines saying that rsyslog
should be restarted (maybe grep for rsyslog in the above-mentioned
directories).
Best regards,
Claudius
--
New systems generate new problems.
Please use GPG: ECB0C2C7 4A4C4046 446ADF86 C08112E5 D72CDBA4
http://chubig.net/ http://nightfall.org
Reply to: