Tagged Questions

A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

-1
votes
1answer
17 views

linux server still recognizes the old domain after changing it to new one

I have some Linux servers (RHEL 6.3 and 5.4) under one domain (MS Windows server 2008R2) and every thing was working fine, but we decided to change the domain from olddomain.com to newdomain.com, now ...
0
votes
1answer
10 views

Configure logrotate to shrink file in user's folder?

All my users in /home/{user}/ have a specific error_log file in it that may grow overtime. So I was thinking about using logrotate to implement some kind of file reducing on it : when the file ...
0
votes
1answer
75 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
0
votes
1answer
16 views

How to run putty with -m command line *and* get log?

I'd like to launch putty and run my script automatically, it works, but I can't save the logs (I need them to debug)! The way I call putty: "D:\Some-Path\putty\PUTTY.EXE" -t -load "Server - ...
3
votes
3answers
195 views

tail all log files in a directory | exclude zipped files

Im trying to find the right command to tail a bunch of log files whilst excluding the zipped files in a set directory. The log files are being zipped as they become oversized. At the moment Im using: ...
0
votes
0answers
18 views

OpenVPN “rwRW” logging

When an openvpn client is configured to have a debugging level of verb 5 or higher, one will find text similar to "rWrWRwRwRwRwrWrWrWRw" in their OpenVPN log, appearing when packets transit the VPN ...
-3
votes
1answer
26 views

I have a IP address with some open services. How could I contact the owner? [closed]

After having serious problems (DNS incident) I found out an IP address of a machine. Is it in any way possible to contact the owner without knowing anything else like email, domain name or website? I ...
0
votes
1answer
30 views

Working with multi line log entries (log parsing)

Say you have logs like these Thu 2014-10-09 23:55:12: 01: Session 525229; child 0101 Thu 2014-10-09 23:55:12: 05: Accepting IMAP connection from [172.1.2.3:52337] to [1.2.3.4:143] Thu 2014-10-09 ...
0
votes
0answers
8 views

Awstats exclude Country

I have Awstats + GeoIP and I would like to exclude an entire country. Is there a way to do that? I'm not sure SkipHosts would do it, since it probably has something to do with the GeoIP plugin. ...
1
vote
1answer
91 views

Apache access.log filled with GET requests for wpad.dat [closed]

I'm running a small web-server on a Raspberry Pi Model B+ system running Rasbian from the NOOBS install image. I have apache2 running and a DDNS service providing a URL (from duckdns.org). I'm ...
0
votes
1answer
29 views

what does JYADXW mean as a HTTP verb?

Some jerk attacked my server, and I was reading the logs, when I saw "JYADXW" where the HTTP verb GET/POST/OPTIONS normally reside. What is this request? what does it mean? malicious IP Here - - ...
0
votes
0answers
26 views

What is /stop in my server logs?

Why do my server logs show GET requests to /stop? I believe this is due to modsecurity but cannot determine why or the importance.
-1
votes
2answers
83 views

Is rsync more robust than scp for connection reset?

On a big corporate firewall-ridden network, we have traditionally used scp to copy a few brand new files over from one machine to another, as part of the log-file rotation and analysis routine. ...
0
votes
1answer
33 views

Delete Apache log files once Awstats is updated

in my /var/lib/awstats, awstats creates monthly .txt files (its database). Once these files are created and I have my graphics created in Awstats, can I delete the old log files created by Apache? ...
1
vote
1answer
102 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
0
votes
1answer
38 views

What do repeating '^@' symbols in a logfile mean?

A few times I have come across this in a log file: Sep 17 09:35:57 00187d378926 ovpn-00187d378926[1701]: /sbin/ifconfig tun0 0.0.0.0 Sep 17 09:35:57 00187d378926 kernel: Kernel logging (proc) ...
0
votes
1answer
22 views

Unable to read some files on hard disk

Our server has two independent hard disks without RAID. One hard drive just for storing junk/temporary data where we generally delete temporary data using LRU algorithm. We have a 10k file in that ...
0
votes
0answers
32 views

Server log shows Visitors asking for “408” with blank referrers and user agents,

I've created a website in a similar pattern to another website I already have, and hosted it on a similar server (only on a different IP). I've noticed that about 70% of my visitors (of no certain ...
0
votes
0answers
206 views

Apache error logs are empty httpd.conf defines the error log file in /var/log/httpd/error_log

I am relatively new to server administration and log files, so I am not sure what's wrong here. But here is what's going on. I am a PHP developer and I often navigate to ...
1
vote
1answer
978 views

Managing CBS.log files on Windows 2008R2?

Whilst auditing disk space on our Windows 2008R2 farm we noticed that some servers had quite large C:\Windows\Logs\CBS\CBS.log files (~1.5GB). I was under the impression that this particular log file ...
1
vote
2answers
58 views

Difference Between Netstat and Access Log

When I was checking stats in SSH terminal for my VPS, I noticed that netstat and access log gives different results. When I used: netstat -anp I saw that one attacker having 32 concurrent ...
0
votes
0answers
41 views

Apache2 access.log interpretation

I'm pretty new to apache in general. It's a LAMP installation on Ubuntu server 14.04 and all is up to date. I'm also running a squid proxy on the same box(not transparent) with success in my ...
-2
votes
1answer
290 views

Bash Script to Compress / Transfer / Remove Log Files [closed]

I am currently using chronolog to set log file names for Apache with date. They are in the following format: /WEB/LOGS/APACHE_ACCESS_YYYY-MM-DD.log /WEB/LOGS/APACHE_ERROR_YYYY-MM-DD.log I would ...
1
vote
1answer
72 views

How to get rid of network broadcasting of port 17500

I get the following in my VPS logs Aug 11 11:29:22 sv1254 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f6:f3:49:7e:0a:54:08:00 SRC=178.162.203.19 DST=255.255.255.255 LEN=131 ...
0
votes
1answer
27 views

unknown client in my error.log

I have recently reinstalled my VPS OS and at present do not have any websites in my public_folder. In order to investigate a dovecot error which of course is not my question here, I issued tail -n 20 ...
1
vote
0answers
133 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
1
vote
3answers
70 views

network usage per user in linux [duplicate]

I am administrator of an openSUSE linux server which is used by many people in our company. Today we find out that yesterday one of the users use too much of bandwidth and its important for management ...
3
votes
2answers
507 views

How to do a reverse DNS lookup on my Apache logs?

Reverse DNS lookups are turned off inside Apache, now I want to see where IPs are from in the logs. How can I easily convert the IPs of my older Apache logs into hostnames?
2
votes
0answers
36 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
1
vote
2answers
62 views

Incremental file copy on Windows

Is there an effecient way to mirror text log files between two Windows servers? I'd like to ship the logs off a production server to another server for near real-time analysis. The log files are 1 ...
0
votes
0answers
30 views

windows GUI app open “fake log file” redirect log to tcp socket?

Lots of windows GUI application can save log to a local log file, but the log file have to be file in local driver or network mapping driver. for example: c:\log.log I want to know whether it is ...
2
votes
2answers
215 views

How to split logs according to patterns?

I would like to be able to split log files according to a pattern found in them. For example process all logs and look for /(\w+)\s to match /myresource but exclude /myresource/anythingelse, to ...
1
vote
1answer
291 views

Apache logging not working

After upgrading from 2.2.7 to Apache 2.4.9 seems that logging doesn't work properly. Only things which are logged are modsecurity and fcgid events, but nothing from Apache like file not found errors. ...
0
votes
1answer
431 views

Postfix log showing same error every 5 minutes

I have an error in my mail.log (/var/log). I'm using postfix. I am only using it to send email from my web app (Python/Django) for registration (I haven't configured for inbound, the MX isn't pointing ...
2
votes
2answers
1k views

Cloud mapping experiment. Contact research@pdrlabs.net in the access logs

54.204.131.75 - - [09/Jul/2014:17:53:43 +0100] "HEAD / HTTP/1.1" 200 283 "-" "Cloud mapping experiment. Contact research@pdrlabs.net" A new line in my access log the other day. As far as i can tell ...
1
vote
1answer
182 views

apache error and access logs are missing, what could be the cause and how can I recreate them?

I've been given a task to understand why 2 CentOS web servers running apache 2.2.3 are experiencing very high loads on specific occasions. The first thing I checked was /var/log/messages but then I ...
-3
votes
1answer
52 views

Keeping your server safe [closed]

I have a typical vps server with some custom sites on it running on port 80, a mail server, I don't have a DNS server and it is a default ubuntu 12.04. I don't have any admin panel, I am doing all the ...
1
vote
1answer
26 views

apache2: log requests from LAN to separate logfile

I would like to separate apache 2.2 log entries in 2 log files: requests from LAN (192.168.0.0/16) should go in a lan-access.log, and the rest in the default access.log How can I achieve that? I've ...
0
votes
0answers
22 views

CustomLog responds but there are no output on client

So my friend had a server that responds incorrectly, for example this request: time curl -vv 'http://x.x.x.x/~a/fsocial/json_eod_per_code/PTBA-2014-2-c.json' * Hostname was NOT found in DNS cache * ...
0
votes
2answers
105 views

Explaining postfix entries in syslog

My syslog is absolutely crammed with postfix messages like : Jun 28 10:27:07 myserver postfix/smtpd[28830]: connect from unknown[180.215.170.141] Jun 28 10:27:07 myserver postfix/smtpd[28830]: ...
0
votes
0answers
134 views

RFC 5424 Syslog Viewer

I've been looking for a log viewer that understands syslog messages, specifically in RFC 5424 format (including structured data elements), and ideally allows live monitoring (tail like) and ...
0
votes
1answer
175 views

Tomcat localhost_access_log.txt encoding

I run my web-app in Tomcat 7 and in the localhost_access_log.txt file I have the following lines 0:0:0:0:0:0:0:1 - - [25/Jun/2014:10:22:26 +0300] " Ì Èc£Ï!#ò2Tç¡$EI «àµ«]ëñʯ¯Ù (ÌÌÀ+À/ À " 400 - ...
0
votes
3answers
534 views

Tool to analyze postfix maillog [closed]

I have a mailserver running on iRedMail. Recently we have some issues that people reporting they would receive phisihing emails from us, which haven't been sent by the users they are saying the are ...
-1
votes
2answers
111 views

Parse Apache logs for specific verbiage within the last hour

I'm looking to parse my /var/log/httpd folder which contains a lot of Apache log files. I'm looking for specific events within the last hour. I've tried the below, but I didn't have any luck. grep ...
0
votes
2answers
97 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
-1
votes
3answers
69 views

Why a sed command stop my log file to be written to?

I launch on a Gnu/Linux server an application myApp: ./myApp &>myApp.log & Of course, the log file will soon become huge. I would like to use sed to reduce it (I'm aware of logrotate ...
1
vote
2answers
68 views

Revover original email from Sendmail log

I have a website the contact form has been failing silently for two weeks (Wordpress + Contact form 7). Apparently updating to Contact Form 7 made the assigned email to fail ...
1
vote
1answer
469 views

Apache log - file does not exist

I have quite a few of these in Apache logs piling up every day: [Mon Jun 09 20:42:58 2014] [error] [client 180.153.214.181] File does not exist: /home/user/public_html/ajax.googleapis.com, referer: ...
0
votes
1answer
122 views

Deleting log files from an AWS RDS Postgres instance

How can I delete logs from an RDS Postgres instance? I just noticed that my instance is displaying the message, storage-full. I can find any descriptions of how to deleted the log files, which I think ...
0
votes
1answer
871 views

SCCM 2012 R2 - OSD Task Sequence failure on physical computers

I'm trying to deploy windows 7 with SCCM 2012 R2 to physical desktops and laptops. But the task sequence keeps failing, no matter what I try. When I try it on a VM it works fine. However, when I try ...