repeated registrar messages in syslog

[support_5]

Hi all,

I am finding that in our syslog files, every two minutes we get a message in our syslog that is basically useless and just fills the file. The message is:
May 10 10:44:14 myserver1 inetd[23365]: registrar/tcp: Connection from myserver1 (192.168.2.102) at Wed May 10 10:44:14 2006

So that basically, the syslog has thousands of these messages. What do they mean? How can we stop them from always enterting useless information into our syslog?

Our syslog.conf file looks like this:

# @(#)B11.23_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *
#
# Local setup
#
auth.info @monitora
*.crit @monitora
kern.warn @monitorb


Any help on how to stop these messages in syslog would be much appreciated. Thanks.

- Andy

[LiPEnS · Accepted solution]

Hi
this is effect of enable the inetd logging by "inetd -l" (in /etc/rc.config.d/netdaemons INETD_ARGS="-l").
In this case each connection to host is logging to syslog.

These messages might be coming from EMS monitor tools!

Check this document for more information (TKB #A5541335):

Submitted Date: 2/11/99
Title: ServiceGuard: syslog messages - inetd[18153]: registrar/tcp:
Document ID: A5541335
Last Modified Date: 8/5/05



You may provide feedback on this document



Problem Description

I am running ServiceGuard A.10.10, which includes EMS-core. I
just started getting messages associated with /opt/reson in
syslog every 2 minutes that are similar to this one:

inetd[18153]: registrar/tcp: connection from (ip address)

What is causing these messages?

Configuration Info

Operating System - HP-UX
Version - 10.20
Hardware System - HP9000
Series - K570

Solution

The messages are from the EMS peristence client, p_client, which
checks by default every couple of minutes to see if there is an
EMS monitor that needs to be restarted.

The messages are being logged to syslog because logging is enabled
with the `inetd -l` command. You can prevent messages from going
to syslog by again executing inetd -l to toggle and disable logging.


Regards LiPEnS

[RAC_1]

The message is from EMS. What version of EMS are you using? Check it.

what /etc/opt/resmon/lbin/registrar

Upgrade it to latest version.

[support_5]

Hi,

Looks like inetd -l might do the trick.

[servera]:/root # what /etc/opt/resmon/lbin/registrar
/etc/opt/resmon/lbin/registrar:
EMS (A.04.11)
Build label: ISO_RL_1123_EMS_A.04.11