syslog.log fields?

[bdm900]

Here is an exampe out of our syslog.log:

Jan 26 17:21:30 5X:"NODE" 2287: Jan 26 17:24:13.439: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/21, changed state to up.

After the date time and time there is a '5X'. Does any one know what this means and the configuration that controls this? This is causing some problems with templates and I am not sure how they started showing up. It seems to be some kind of priority and appears to match with the Cisco priority. Any ideas would be greatly appreaciated!

[Chris Wilshaw · Accepted solution]

These are the facility and severity codes for the error message.

These have been enabled by someone starting the syslogd process with the -v parameter set.

5X translates as facility type "local7", severity "notice"

The full details of facility and severity codes can be seen on the syslog man page

man 3c syslog

[Steven E. Protter]

It means due to a number of possible causes your ethernet card came down and up.

This kind of messaging can be triggered by power cycling the switch, disconnecting the cable or other physical issues.

It should not be triggered by cycling the card software with the ifconfig command.

You might want to enable EMS monitoring(available from SAM) on the network card. This will get you an email or log with more data on the event, should it repeat itself.

Last time I saw something similar it was on a D320 and was triggered by a cisco switch that power cycled.

SEP

[bdm900]

That did it. I removed the -v and restarted the syslogd and it is logging now with out the priority. Thanks!