[oclug] Log messsages
sandy at storm.ca
Mon Jan 29 12:30:02 EST 2001
Lafleur Maurice wrote:
> Hi everyone,
> for few days now, my logs are filled with thousands of messages like these:
> Jan 29 10:36:59 ux portmap: connect from 184.108.40.206 to
> callit(390109): request from unauthorized host
> The message pops every couple of seconds with different IP addresses. The IP
> addresses are internal addresses local to our college and belonging to NT 4
> Workstations runnning Oracle 8i server.
Methinks something is mis-configured on those machines. Are their logs giving any
messages about failed connections to something-or-other? Are they perhaps asking
for WINS info before trying real DNS, or some such oddity?
> The problem is that this fills my
> log file and it's pretty hard to find and usefull information when it's lost
> in litteratly thousands of entries.
You can filter the logs with something like:
grep -v portmap logfile
Redirect to a file if you want.
> Any idea what they are and how to make them go away (besides shutting down
> the Win machines...)
> oclug mailing list
> oclug at lists.oclug.on.ca
More information about the OCLUG