[oclug] Log messsages

Sandy Harris sandy at storm.ca
Mon Jan 29 12:30:02 EST 2001


Lafleur Maurice wrote:
> 
> Hi everyone,
> 
> for  few days now, my logs are filled with thousands of messages like these:
> 
> ===
> Jan 29 10:36:59 ux portmap[21878]: connect from 206.167.123.124 to
> callit(390109): request from unauthorized host
> ===
> 
> The message pops every couple of seconds with different IP addresses. The IP
> addresses are internal addresses local to our college and belonging to NT 4
> Workstations runnning Oracle 8i server.

Methinks something is mis-configured on those machines. Are their logs giving any
messages about failed connections to something-or-other? Are they perhaps asking
for WINS info before trying real DNS, or some such oddity?

> The problem is that this fills my
> log file and it's pretty hard to find and usefull information when it's lost
> in litteratly thousands of entries.

You can filter the logs with something like:

grep -v portmap logfile

Redirect to a file if you want.
 
> Any idea what they are and how to make them go away (besides shutting down
> the Win machines...)
> 
> Thanks,
> 
> MGL
> _______________________________________________
> oclug mailing list
> oclug at lists.oclug.on.ca
> http://www.oclug.on.ca/mailman/listinfo/oclug



More information about the OCLUG mailing list