Annoying logging from registrar

[Mihails Nikitins]

Hi,

On a host I got a lot of messages from registrar (EMS daemon) every 2 minute

inetd[4113]: registrar/tcp: Connection from srv1(1.2.3.4) at Thu Oct 24 15:19:37 2002

My inetd runs with logging option
TCP Wrappers allow registrar from 127.0.0.1

On other hosts inetd logging is on too, but there is no TCP Wrappers.

Thanks and points in advance for keeping my logs clear!

BR,
Mihails

[Ray Carlson]

These messages are from EMS. The only solution that I have found is to change the parameter: MonitorRestartInterval from 2:00 to 60:00, in the file /etc/opt/resmon/config. This reduces the messages to 1 an hour. Hope that helps.
Ray

[Mihails Nikitins]

Hi Ray,

Thanks for sharing your knowledge, but I suppose that increasing the parameter is very risky.

Manyals state the following.
Monitor daemons automatically start when you create a monitoring request. Because monitoring is designed to work in a high-availability
environment, monitors are written to automatically restart if anything
causes them to fail.

BR,
Mihails

[Mihails Nikitins]

Hi,

I found the reason. If inetd is running with logging option '-l', registrar will put messages in syslog.log. My other systems run network daemons with their own logging options and inetd without logging.

So, I am not happy about it, but I do not see nothing better than switching on logging for each daemon separately.

BR,
Mihails

[Rita C Workman]

Yes, when you turn on the logging it puts in those somewhat annoying 'registrar' statements every 2 minutes. Last time I checked...it's just the way it is.

What I did was write a very simple script to check the syslog a few times a day (at quiet times )and remove those statements..

cat ~/syslog/syslog.log | grep -v registrar > ~/syslog/syslog.tmp
mv ~/syslog/syslog.tmp ~ /syslog/syslog.log

Just a thought,
Rita