https://community.hpe.com/t5/operating-system-linux/regarding-quot-bad-line-received-quot-message/m-p/3828936#M24291 Hello, <BR /><BR />At the customer site, the following messages has appeared:<BR /><BR />Jul 22 11:26:01 dbplsrv04 xinetd[21145]: Bad line received from identity server at 133.217.201.72: 1021 , 514 : ERROR :root<BR /><BR />[ENVIRONMENT] <BR />RHEL 4 AS update1 <BR /><BR />[QUESTION] <BR />- What does the message mean ? <BR />- Why does the message appear ? <BR />- If there is possibility to any trouble, please let me know <BR /><BR />Thank you for support and advice.<BR />Best Regards.<BR />/Minoru.Asano<BR /> Mon, 24 Jul 2006 02:42:27 GMT Minoru Asano 2006-07-24T02:42:27Z https://community.hpe.com/t5/operating-system-linux/regarding-quot-bad-line-received-quot-message/m-p/3828936#M24291 Hello, <BR /><BR />At the customer site, the following messages has appeared:<BR /><BR />Jul 22 11:26:01 dbplsrv04 xinetd[21145]: Bad line received from identity server at 133.217.201.72: 1021 , 514 : ERROR :root<BR /><BR />[ENVIRONMENT] <BR />RHEL 4 AS update1 <BR /><BR />[QUESTION] <BR />- What does the message mean ? <BR />- Why does the message appear ? <BR />- If there is possibility to any trouble, please let me know <BR /><BR />Thank you for support and advice.<BR />Best Regards.<BR />/Minoru.Asano<BR /> Mon, 24 Jul 2006 02:42:27 GMT https://community.hpe.com/t5/operating-system-linux/regarding-quot-bad-line-received-quot-message/m-p/3828936#M24291 Minoru Asano 2006-07-24T02:42:27Z https://community.hpe.com/t5/operating-system-linux/regarding-quot-bad-line-received-quot-message/m-p/3828937#M24292 I would guess that the server on 133.217.201.72 is trying to remsh,rexec to your redhat server. <BR />R-command as disabled by default so xinetd daemon is bonucing it. I have also seen this line when someone is running nessus against a server so be sure that the ip address 133.217.201.72 is a valid customer ip and grep -i /var/log/messages for "nessus". If its there raise the issue with customer. Mon, 24 Jul 2006 04:46:23 GMT https://community.hpe.com/t5/operating-system-linux/regarding-quot-bad-line-received-quot-message/m-p/3828937#M24292 Derek Whigham_1 2006-07-24T04:46:23Z https://community.hpe.com/t5/operating-system-linux/regarding-quot-bad-line-received-quot-message/m-p/3828938#M24293 Hello, <BR />Thank you for reply and suggestion.<BR /><BR />The '133.217.201.72' is Oracle RAC machine.<BR />And according to messages I attached, rsh is enable and <BR />there are many rsh session for service.<BR /><BR />And I could not find "nessus" in messages file.<BR />So I guess there is another reason for the message.<BR /><BR />[ADDITIONAL INFORMATION] <BR />According to the customer, the message has appeared several times in past time.<BR /><BR /># cat messages* | grep Bad <BR />Jul 22 116:26:01 dbplsrv04 xinetd[21145]: Bad line received from identity server at 133.217.201.72: 1021 , 514 : ERROR :root <BR />Jul 15 22:08:57 dbplsrv04 xinetd[10229]: Bad line received from identity server at 133.217.201.75: 1023 , 514 : ERROR :root <BR />Jun 26 12:57:33 dbplsrv04 xinetd[21367]: Bad line received from identity server at 133.217.201.72: 1021 , 514 : ERROR :root <BR />Jun 27 01:02:33 dbplsrv04 xinetd[13276]: Bad line received from identity server at 133.217.201.72: 1021 , 514 : ERROR :root<BR /><BR />Is there any idea ? <BR /><BR />Thank you for advice.<BR />Best Regards.<BR />/Minoru.Asano<BR /> Tue, 25 Jul 2006 05:30:06 GMT https://community.hpe.com/t5/operating-system-linux/regarding-quot-bad-line-received-quot-message/m-p/3828938#M24293 Minoru Asano 2006-07-25T05:30:06Z