topic Syslog getting full in Operating System - HP-UX

Syslog getting full

Alex Hose — Thu, 22 Feb 2001 20:03:16 GMT

I am getting the following error messages in the syslog table every minute which eventually is making my system to crash after few weeks. My question is:

1. What does this error message mean?

2. How do we make the syslog to not log this error?

3. How to trim the syslog automatically?

Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:29:04 udcpdc last message repeated 2 times
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_ACCEPT snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_PEERADDR snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_ACCEPT snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_PEERADDR snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:29:04 udcpdc last message repeated 4 times
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_ACCEPT snpair -> snpair
Feb 22 02:30:03 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:30:03 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair

Thanks

Re: Syslog getting full

Andy Monks — Thu, 22 Feb 2001 23:56:39 GMT

These messages come from some third party software in your kernel and are not generated by hp-ux. I would contact the 3rd s/w supplier.

Re: Syslog getting full

John Waller — Fri, 23 Feb 2001 11:37:30 GMT

I can't help with first 2 questions but for trimming syslog , try putting the following script in the root cron file

#!/bin/sh
cat /var/adm/syslog/syslog.log | grep -v udcpdc > /tmp/tmpsyslog
cp /tmp/tmpsyslog /var/adm/syslog.log
rm /tmp/tmpsyslog

This will display all lines which do not contain the string udcpdc to a seperate file which then can be coppied over the original syslog file.

You need to be careful not to delete the original file with the rm command as this does not delete the space just the inode entry until the systlogd process is killed.

Re: Syslog getting full

Rita C Workman — Fri, 23 Feb 2001 14:38:49 GMT

Just to add to John's response. I do almost exactly the same script, except I add -v -e -e -e
So I can get rid of a few bothersome messages I don't need to read from syslog....I set this little script up and cron it in the morning before I generally do a quick check of my logs.... I cron this script every morning to keep my syslog manageable.

/rcw

Re: Syslog getting full

Rick Garland — Fri, 23 Feb 2001 15:50:51 GMT

As stated previously, having a script to trim the syslog is going to work - I do it myself. But as another alternative you could go the the HP archive center and get a program called "trimlog". This will do the syslog file as well as any other log file you may have trouble with.