Syslog getting full

[Alex Hose]

I am getting the following error messages in the syslog table every minute which eventually is making my system to crash after few weeks. My question is:

1. What does this error message mean?

2. How do we make the syslog to not log this error?

3. How to trim the syslog automatically?

Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:29:04 udcpdc last message repeated 2 times
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_ACCEPT snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_PEERADDR snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_ACCEPT snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_PEERADDR snpair -> snpair
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:29:04 udcpdc last message repeated 4 times
Feb 22 02:29:04 udcpdc vmunix: TcpReq 4: PRU_ACCEPT snpair -> snpair
Feb 22 02:30:03 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair
Feb 22 02:30:03 udcpdc vmunix: TcpReq 4: PRU_CONNECT snpair -> snpair

Thanks

[Andy Monks]

These messages come from some third party software in your kernel and are not generated by hp-ux. I would contact the 3rd s/w supplier.

[John Waller]

I can't help with first 2 questions but for trimming syslog , try putting the following script in the root cron file

#!/bin/sh
cat /var/adm/syslog/syslog.log | grep -v udcpdc > /tmp/tmpsyslog
cp /tmp/tmpsyslog /var/adm/syslog.log
rm /tmp/tmpsyslog


This will display all lines which do not contain the string udcpdc to a seperate file which then can be coppied over the original syslog file.

You need to be careful not to delete the original file with the rm command as this does not delete the space just the inode entry until the systlogd process is killed.

[Rita C Workman]

Just to add to John's response. I do almost exactly the same script, except I add -v -e -e -e
So I can get rid of a few bothersome messages I don't need to read from syslog....I set this little script up and cron it in the morning before I generally do a quick check of my logs.... I cron this script every morning to keep my syslog manageable.

/rcw

[Rick Garland]

As stated previously, having a script to trim the syslog is going to work - I do it myself. But as another alternative you could go the the HP archive center and get a program called "trimlog". This will do the syslog file as well as any other log file you may have trouble with.