On Wed, Jul 14, 2010 at 9:10 PM, Andy Blanchard <zocalo@xxxxxxxxx> wrote: > On 14 July 2010 20:58, Frank Murphy <frankly3d@xxxxxxxxx> wrote: >> My /var/log/messages >> >> seems to have started hording info. >> It is now 112mb in size. >> Covers 3-4 days of info. > > Unless this is a busy server, then that seems rather excessive to say > the least - mine is currently 14kB, but I redirect quite a bit of > stuff into other files. > > If I had to guess I'd say your log level details have been changed, or > something is suddenly generating a lot of syslog entries/content. The > former can be fixed by tweaking "/etc/rsyslog.conf", the latter by > inspecting the log file and seeing what is generating the bulk of the > content. If it's not immediately obvious what is broken*, posting a > sample the log file here would be a great help. I just checked my own after seeing this posting - and find that several of the recent messages files are large: -rw-------. 1 root root 264K 2010-07-14 21:39 /var/log/messages -rw-------. 1 root root 1.0M 2010-06-20 03:21 /var/log/messages-20100620 -rw-------. 1 root root 963K 2010-06-27 03:24 /var/log/messages-20100627 -rw-------. 1 root root 29K 2010-07-04 03:11 /var/log/messages-20100704 -rw-------. 1 root root 42K 2010-07-11 03:07 /var/log/messages-20100711 When I looked at the latest I see an awful lot of lines like: Jul 14 21:33:19 home1 named[1181]: client 127.0.0.1#38568: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:34:21 home1 named[1181]: client 127.0.0.1#52277: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:35:23 home1 named[1181]: client 127.0.0.1#55235: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:36:25 home1 named[1181]: client 127.0.0.1#44936: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:37:27 home1 named[1181]: client 127.0.0.1#41560: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:38:29 home1 named[1181]: client 127.0.0.1#41524: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:39:31 home1 named[1181]: client 127.0.0.1#47147: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:40:33 home1 named[1181]: client 127.0.0.1#41686: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:41:35 home1 named[1181]: client 127.0.0.1#57307: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:42:37 home1 named[1181]: client 127.0.0.1#52350: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa Jul 14 21:43:39 home1 named[1181]: client 127.0.0.1#38143: RFC 1918 response from Internet for 1.122.168.192.in-addr.arpa I have not changed anything recently and this is in f12 - mine are only about 1MB in size but I wonder if there is anything with a common theme in the OP's messages file that has significant numbers of very similar lines? -- mike c -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
