On Jul 26, 2019, at 8:39 AM, Beth Phillips <[email protected]> wrote:
> I'm researching why the connection to one of our servers keeps dropping and
> I've read that I should take a look at the system log to see what it says,
> but I'm not seeing anything that refers to network connections in Console
> other than WiFi and this computer is connected via ethernet. Can anyone
> please point me to where I should be looking? I'm trying to narrow down a
> timeframe of when this is happening as it seems to be after hours. Running
> Sierra. Thanks!
There’s a -w option in netstat that’ll keep running it over again at a
user-defined time interval. If you pipe this into a file, you can see when your
connection goes away.
If you’re going to do that, you might as well write a bash script to do it with
the mount command instead. This will show you what volumes are mounted and when
it changes. On most Unix systems this is easy to do, but Apple has stupidly
left out the watch command. You can work around it with cron.
There’s probably a little command-line utility to do all this magically, but I
don’t know about it. (There are an infinite number of little command-line
utilities in the system.)
Are you sure the machine isn’t just going to sleep? Some machines annoyingly
lose network connections when they sleep.
This got me experimenting. I have a server on my home network called ‘cirrus’
and one of its volumes is ‘Gondolin’. I connected to it, disconnected and
searched for ‘cirrus’ in the console:
default 11:04:06.644868 -0400 NetAuthSysAgent URL =
smb://GUEST:********@cirrus/Gondolin
default 11:04:07.411596 -0400 NetAuthSysAgent Found Server Marker for "cirrus"
default 11:04:07.467885 -0400 NetAuthSysAgent MechType session created
for host "cirrus", service "cifs".
default 11:04:07.467981 -0400 NetAuthSysAgent MechTypes were acquired for the
MechType session using credentials (
"<NetworkAuthenticationSelection: SPNEGO<NTLM>, GUEST@\\cirrus cifs@cirrus
spnego: yes>"
)
default 11:04:07.468050 -0400 NetAuthSysAgent Available MechTypes for the
MechTypes session: (
"<NetworkAuthenticationSelection: SPNEGO<NTLM>, GUEST@\\cirrus cifs@cirrus
spnego: yes>"
)
default 11:04:07.469888 -0400 NetAuthSysAgent Reference "ntlm:GUEST@\cirrus"
acquired for the MechType.
default 11:04:07.469998 -0400 NetAuthSysAgent server smb://cirrus/Gondolin
default 11:04:07.898779 -0400 NetAuthSysAgent URL =
smb://GUEST:********@cirrus/Gondolin
default 11:04:08.284519 -0400 NetAuthSysAgent Reference added to MechType
"<NetworkAuthenticationSelection: SPNEGO<NTLM>, GUEST@\cirrus cifs@cirrus
spnego: yes>" with label "fs:/Volumes/Gondolin"
default 11:04:08.287512 -0400 NetAuthSysAgent Reference removed from the
MechType with reference "ntlm:GUEST@\cirrus".
default 11:04:29.954412 -0400 NetAuthSysAgent URL = smb://cirrus
default 11:04:30.577505 -0400 NetAuthSysAgent Found Server Marker for "cirrus"
default 11:04:30.761831 -0400 NetAuthSysAgent MechType session created
for host "cirrus", service "cifs".
default 11:04:30.763298 -0400 NetAuthSysAgent MechType session created
for host "cirrus", service "cifs".
default 11:04:30.764005 -0400 NetAuthSysAgent MechType session created
for host "cirrus", service "cifs".
default 11:04:30.765493 -0400 NetAuthSysAgent MechType session created
for host "cirrus", service "cifs".
default 11:04:41.403071 -0400 NetAuthSysAgent server smb://cirrus
default 11:04:46.529515 -0400 NetAuthSysAgent URL = smb://cirrus/Gondolin
It’s pretty obvious when stuff happened.
L^2
----
Lee Larson
[email protected]
Would the people in the cheaper seats clap your hands? And the rest of you, if
you’ll just rattle your jewelry. — John Lennon
Performance for the Royal Family, November 4, 1963
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ MacGroup mailing list Posting address: [email protected] Archive: <http://www.mail-archive.com/[email protected]/> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
