X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: by onstor-exch02.onstor.net 
	id <01C8548A.79120A96@onstor-exch02.onstor.net>; Fri, 11 Jan 2008 12:45:09 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-class: urn:content-classes:message
Subject: RE: log messages
Date: Fri, 11 Jan 2008 12:45:08 -0700
Message-ID: <BB375AF679D4A34E9CA8DFA650E2B04E079AC3AC@onstor-exch02.onstor.net>
In-Reply-To: <BB375AF679D4A34E9CA8DFA650E2B04E056C92AA@onstor-exch02.onstor.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: log messages
Thread-Index: AchUieKhprSWIhX+SJaqcuVy3m1o8AAACUjAAAAXBsA=
References: <20080111114057.3c6b9afd@ripper.onstor.net> <BB375AF679D4A34E9CA8DFA650E2B04E056C92AA@onstor-exch02.onstor.net>
From: "John Keiffer" <john.keiffer@onstor.com>
To: "Larry Scheer" <larry.scheer@onstor.com>,
	"Andy Sharp" <andy.sharp@onstor.com>
Cc: "Vikas Saini" <vikas.saini@onstor.com>

It's kind of nice (although somewhat busy) having most of the messages
seen from one tail'ed file...

-----Original Message-----
From: Larry Scheer=20
Sent: Friday, January 11, 2008 11:44 AM
To: Andy Sharp; John Keiffer
Cc: Vikas Saini
Subject: RE: log messages

I need to check the ssh code to see if Onstor redirected the log output
from the place the Open SSH community directedt it.

-----Original Message-----
From: Andy Sharp=20
Sent: Friday, January 11, 2008 11:41 AM
To: John Keiffer
Cc: Vikas Saini; Larry Scheer
Subject: Re: log messages

Are these all on the same machine?

/var/log/messages is the standard place for system log messages, like
from the kernel and from rcon (which is sort of the kernel).  The sshd
logs shouldn't be there.  Larry, is that a bug?  Shouldn't they go
in /var/log/auth, or the onstor messages file?  I'm pretty sure that ntp
daemon messages should go in /var/log/daemon.log in Cougar (bob/coug).


On Fri, 11 Jan 2008 11:21:43 -0800 "John Keiffer"
<john.keiffer@onstor.com> wrote:

> # tail /var/log/messages
>=20
> Jan 11 10:23:14 g1r5 sshd[15220]: Server listening on 0.0.0.0 port 22.
>=20
> Jan 11 10:23:18 g1r5 ntpdate[19627]: step time server 10.0.0.18 offset
> -0.189046 sec
>=20
> Jan 11 10:23:19 g1r5 ntpd[3014]: ntpd 4.1.0 Tue Nov 13 13:44:47 PST
> 2007 (10)
>=20
> Jan 11 10:23:19 g1r5 ntpd[3014]: precision =3D 6 usec
>=20
> Jan 11 10:23:19 g1r5 ntpd[3014]: kernel time discipline status 0040
>=20
> Jan 11 10:23:20 g1r5 ntpd[3014]: frequency initialized -1.886 from
> /var/ntp/drift
>=20
> Jan 11 10:23:27 g1r5 syslogd: restart
>=20
> Jan 11 10:26:44 g1r5 ntpd[3014]: kernel time discipline status change
> 41
>=20
> Jan 11 10:35:07 g1r5 sshd[7262]: Accepted password for root from
> 10.0.0.41 port 1890 ssh2
>=20
> Jan 11 10:36:35 g1r5 sshd[26736]: Accepted password for root from
> 10.0.0.41 port 1903 ssh2
>=20
> =20
>=20
> # tail /var/log/onstor/messages
>=20
> Jan 11 10:38:38 g1r5 : 1:1:nfs:INFO: 21: Created mount entry
> 0x1000fde600, centry=3D0x100255e480, raddr=3D0x1501020a, =
share_id=3D0x2715,
> mnt_inum_snap=3D0x2, gennum=3D0x1 minAuth=3D0, maxAuth=3D1
>=20
> Jan 11 10:39:05 g1r5 : 0:0:nfxsh:NOTICE: cmd[17]: system show
> version  : status[0]
>=20
> Jan 11 10:41:16 g1r5 : 0:0:nfxsh:NOTICE: cmd[18]: system show
> chassis  : status[0]
>=20
> Jan 11 10:41:20 g1r5 : 0:0:nfxsh:NOTICE: cmd[19]: useraccount show  :
> status[0]
>=20
> Jan 11 10:41:37 g1r5 : 0:0:nfxsh:NOTICE: cmd[20]: useraccount add
> jkeiffer  : status[0]
>=20
> Jan 11 10:41:41 g1r5 : 0:0:nfxsh:NOTICE: cmd[21]: useraccount show  :
> status[0]
>=20
> Jan 11 10:41:57 g1r5 : 0:0:nfxsh:NOTICE: cmd[22]: useraccount add
> johnr : status[0]
>=20
> Jan 11 10:41:59 g1r5 : 0:0:nfxsh:NOTICE: cmd[23]: useraccount show  :
> status[0]
>=20
> Jan 11 10:42:13 g1r5 : 0:0:nfxsh:NOTICE: cmd[24]: useraccount add
> raj : status[0]
>=20
> Jan 11 10:42:14 g1r5 : 0:0:nfxsh:NOTICE: cmd[25]: useraccount show  :
> status[0]
>=20
> =20
>=20
> # tail /var/agile/messages
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 25661
> (/usr/local/agile/bin/snmpd) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 29457
> (/usr/local/agile/bin/cluster_contrl) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 8981
> (/usr/local/agile/bin/cluster_server) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 9106
> (/usr/local/agile/bin/evm_cfgd) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 28531
> (/usr/local/agile/bin/sdm_cfgd) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 23347
> (/usr/local/agile/bin/chassisd) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 29241
> (/usr/local/agile/bin/timekeeper) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 15008
> (/usr/local/agile/bin/eventd) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 31552
> (/usr/local/agile/bin/ncmd) terminated
>=20
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 30042
> (/usr/local/agile/bin/elog) terminated
>=20
> =20
>=20
> -----Original Message-----
> From: Vikas Saini=20
> Sent: Friday, January 11, 2008 11:15 AM
> To: Andy Sharp
> Cc: John Keiffer
> Subject: RE: log messages
>=20
> =20
>=20
> John,
>=20
>    Check what we get in /var/log/messages on bobcat... I doubt if
> there is anything on that file.
>=20
> =20
>=20
> Vikas
>=20
> =20
>=20
> =20
>=20
> -----Original Message-----
>=20
> From: Andy Sharp=20
>=20
> Sent: Friday, January 11, 2008 11:05 AM
>=20
> To: Vikas Saini
>=20
> Cc: John Keiffer
>=20
> Subject: Re: log messages
>=20
> =20
>=20
> On Fri, 11 Jan 2008 11:00:49 -0800 "Vikas Saini"
>=20
> <vikas.saini@onstor.com> wrote:
>=20
> =20
>=20
> > Correction=20
>=20
> >=20
>=20
> > =20
>=20
> >=20
>=20
> > 1.  On Cougar HW platform we should
>=20
> > use /var/log/onstor/messages. 2.  On Bobcat HW running Cougar
>=20
> > we should use /var/agile/messages.
>=20
> >=20
>=20
> > =20
>=20
> >=20
>=20
> > We don't have a equivalent of /var/log/messages on bobcat.
>=20
> =20
>=20
> Clarification:
>=20
> =20
>=20
> Any software built from the same tree should have the log files in the
>=20
> same place regardless of which hardware it's running on, or even which
>=20
> operating system.  Linux/OpenBSD; Cougar/Bobcat.  It makes no
>=20
> difference.
>=20
