On Tue Feb 02 1999 at 09:38, Anders Eriksson wrote:
> I have a strange problem with syslogd. Every now and then
> (weeks apart) I get this messages on all my xterms:
> >
> Message from syslogd@heaven at Tue Feb 2 08:31:02 1999 ...
> heaven
syslog does that when some process is issuing a log message that is
too large for syslog's buffers.
For network daemons, it can be an indication that someone is
attempting to find buffer overruns to gain access to your machine.
> ----/var/log/messsages
> Feb 2 08:31:00 heaven identd[5936]: from: 10.1.10.103 ( heaven ) for: 12373, 25
> Feb 2 08:31:00 heaven identd[5936]: Successful lookup: 12373 , 25 : root.root
> Feb 2 08:31:02 heaven
> Feb 2 08:31:02 heaven syslogd: Cannot glue message parts together
> Feb 2 08:31:03 heaven 22>Feb 2 08:31:02 fetchmail[28329]: reading message 1 of 1
>(169385 bytes)
>...........................................................................................................................................................................................................................................................................................................
>
>.............................................................................................................................................................................................................................................................................................................................................................................................................
>
>.....................................................................................................................................................................................................!
> !
> .......................................................
> Feb 2 08:31:03 heaven
>...........................................................................................................................................................................................
> flushed
> Feb 2 08:32:07 heaven automount[5953]: expired /home/ander
> ----/var/log/messages
In your case, it seems that you have fetchmail logging to syslog (do
it to a file instead, or don't do it at all), and with very long
messages, the line is getting broken like that.
> Why is 'heaven' wall`ed ??? I have a
> *.emerg *
> entry in my syslogd.conf file but this isn't/shouldn't
> be interpreted as an emerg message, right?
With `*' as the target, IIRC then this will write messages to
/dev/console (which is why you are seeing this).
Syslog is probably doing the "right thing" to complain about something
like this at "emerg" level as it is a very unusual situation.
Cheers
Tony
