topic Re: Syslog message in Operating System - HP-UX

Syslog message

wvsa — Fri, 14 Mar 2003 01:09:54 GMT

Greetings,

Getting hundreds of the following messages in our syslog file:
Mar 13 00:01:10 hosea inetd[12433]: registrar/tcp: Connection from hosea (89.0.0
.123) at Thu Mar 13 00:01:10 2003

Any ideas as to what is causing these messages.

Thankyou for your input.

Re: Syslog message

Michael Tully — Fri, 14 Mar 2003 01:23:59 GMT

Are there a series of EMS messages following this? These will be disk related messages.

Also you could have 'inetd' logging enabled.
# ps -ef | grep inetd

Could you provide a little more of the message please?

Re: Syslog message

KCS_1 — Fri, 14 Mar 2003 01:32:41 GMT

hi,

Just in my opinion, your message are created by inetd daemon when your user were connection to the host.

The message means internet daemon(inetd) is received internet connection from hosea(89.0.0.123)

if, you have a problem in your computer's system, please post more message .

thanks.

Re: Syslog message

Steven E. Protter — Fri, 14 Mar 2003 01:53:49 GMT

The messages are normal. Simply logging connections. Could prove useful if somethign nefarious happens. Keep the logging at this level.

SEP

Re: Syslog message

Ian Kidd_1 — Fri, 14 Mar 2003 02:37:18 GMT

you're probably running inetd with the -l option (although it might not show this with a ps -ef | grep inetd).

This was either done by another admin (using /usr/sbin/inetd -l) or it has been configured at startup.

Extra logging is always beneficial, but if want to turn this off for some reason, try issuing /usr/sbin/inetd -l again. This will toggle it off.

Re: Syslog message

T G Manikandan — Fri, 14 Mar 2003 03:29:54 GMT

There are messages from the EMS where it monitors whether the EMS monitor is running.

These messages arise as you have a inetd -l option specified which logs messages into syslog.log file.

As suggested just do a

/usr/sbin/inetd -l
to switch it off.