I am mystified at the following items appearing in /var/log/messages on
my system using RH8 server named papiha. 

First Item: This appears every hour on the hour past one minute:
LOG:
Dec  3 00:01:01 papiha kernel: RPC: sendmsg returned error 101
Dec  3 00:01:01 papiha kernel: nfs: RPC call returned error 101
...
Dec  3 01:01:02 papiha kernel: RPC: sendmsg returned error 101
Dec  3 01:01:02 papiha kernel: nfs: RPC call returned error 101
...
Dec  3 02:01:00 papiha kernel: RPC: sendmsg returned error 101
ENDLOG:

What does this mean? 

Second Item: This is again appearing every 30/60 minutes:
LOG:
Dec  3 00:23:50 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute: 1
Changed -2 
Dec  3 00:23:50 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed -2 
Dec  3 00:53:51 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute: 1
Changed 1 
Dec  3 00:53:51 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed 1 
...
Dec  3 02:23:51 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed 1 
Dec  3 02:53:51 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed -1 
...
Dec  3 03:23:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute: 1
Changed -1 
Dec  3 03:23:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed -1 
...
Dec  3 05:23:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute: 1
Changed 1 
Dec  3 05:23:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed 1
... 
Dec  3 05:53:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute: 1
Changed -1 
Dec  3 05:53:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed -1 
...
Dec  3 06:23:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute: 1
Changed 1 
Dec  3 06:23:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed 1 
Dec  3 06:53:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute: 1
Changed -1 
Dec  3 06:53:54 papiha smartd: Device: /dev/hdb, S.M.A.R.T. Attribute:
195 Changed -1 
ENDLOG:

Again what does this mean? For information /dev/hdb is containing the
partition having swap and /home We leave the server on monday through
saturday but the second NIC (eth1) is brought down every evening by
/sbin/ifdown eth1  and brought up next day morning.

Third Item: This is most mystifying as I am the users reported but at
that time I am not logged in at all and this is repeated every day!! The
number of times the entry appears is varying:
LOG:
Dec  3 06:59:02 papiha su(pam_unix)[24377]: session opened for user
sudev by (uid=0)
Dec  3 06:59:02 papiha su(pam_unix)[24377]: session closed for user
sudev
Dec  3 06:59:02 papiha su(pam_unix)[24384]: session opened for user
sudev by (uid=0)
Dec  3 06:59:02 papiha su(pam_unix)[24384]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24391]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24391]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24398]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24398]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24405]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24405]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24412]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24412]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24419]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24419]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24426]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24426]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24433]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24433]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24440]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24440]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24447]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24447]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24454]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24454]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24461]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24461]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24468]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24468]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24475]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24475]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24482]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24482]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24489]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24489]: session closed for user
sudev
Dec  3 06:59:03 papiha su(pam_unix)[24496]: session opened for user
sudev by (uid=0)
Dec  3 06:59:03 papiha su(pam_unix)[24496]: session closed for user
sudev
ENDLOG

I do not have any personal crontab file and the sessions just open and
close within the same time!! Only thing I noticed is that these entries
appear every day as soon as the eth1 is brought up.

Any help in understanding these would be welcome.
-- 
Sudev Barar

Learning Linux


_______________________________________________
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd

Reply via email to