Logwatch for berlin.mcs.anl.gov (Linux)
################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Fri Sep 7 04:02:02 2012 Date Range Processed: yesterday ( 2012-Sep-06 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- Selinux Audit Begin ------------------------ Number of audit daemon stops: 1 ---------------------- Selinux Audit End ------------------------- --------------------- Automount Begin ------------------------ **Unmatched Entries** key "pro" not found in map source(s).: 2 Time(s) key ".hg" not found in map source(s).: 6 Time(s) key "p" not found in map source(s).: 1 Time(s) key ".bzr" not found in map source(s).: 6 Time(s) key "_MTN" not found in map source(s).: 6 Time(s) key ".git" not found in map source(s).: 6 Time(s) key "{arch}" not found in map source(s).: 6 Time(s) key "m" not found in map source(s).: 1 Time(s) key "dolson" not found in map source(s).: 3 Time(s) ---------------------- Automount End ------------------------- --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 2 Time(s) /ControlManager/default.htm: 2 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 2 Time(s) /admin.back: 2 Time(s) /cgi-bin/haypRO15u9ns.asp: 1 Time(s) /cgi-bin/haypRO15u9ns.cfm: 1 Time(s) /cgi-bin/haypRO15u9ns.cgi: 1 Time(s) /cgi-bin/haypRO15u9ns.html: 1 Time(s) /cgi-bin/haypRO15u9ns.inc: 1 Time(s) /cgi-bin/haypRO15u9ns.php: 1 Time(s) /cgi-bin/haypRO15u9ns.php3: 1 Time(s) /cgi-bin/haypRO15u9ns.pl: 1 Time(s) /cgi-bin/haypRO15u9ns.sh: 1 Time(s) /cgi-bin/haypRO15u9ns.shtml: 1 Time(s) /cgi-bin/vxWneJKDkejT.asp: 1 Time(s) /cgi-bin/vxWneJKDkejT.cfm: 1 Time(s) /cgi-bin/vxWneJKDkejT.cgi: 1 Time(s) /cgi-bin/vxWneJKDkejT.html: 1 Time(s) /cgi-bin/vxWneJKDkejT.inc: 1 Time(s) /cgi-bin/vxWneJKDkejT.php: 1 Time(s) /cgi-bin/vxWneJKDkejT.php3: 1 Time(s) /cgi-bin/vxWneJKDkejT.pl: 1 Time(s) /cgi-bin/vxWneJKDkejT.sh: 1 Time(s) /cgi-bin/vxWneJKDkejT.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 2 Time(s) /file: 2 Time(s) /haypRO15u9ns.asp: 1 Time(s) /haypRO15u9ns.cfm: 1 Time(s) /haypRO15u9ns.cgi: 1 Time(s) /haypRO15u9ns.html: 1 Time(s) /haypRO15u9ns.inc: 1 Time(s) /haypRO15u9ns.php: 1 Time(s) /haypRO15u9ns.php3: 1 Time(s) /haypRO15u9ns.pl: 1 Time(s) /haypRO15u9ns.sh: 1 Time(s) /haypRO15u9ns.shtml: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 2 Time(s) /login.htm: 2 Time(s) /robots.txt: 2 Time(s) /scripts/haypRO15u9ns.asp: 1 Time(s) /scripts/haypRO15u9ns.cfm: 1 Time(s) /scripts/haypRO15u9ns.cgi: 1 Time(s) /scripts/haypRO15u9ns.html: 1 Time(s) /scripts/haypRO15u9ns.inc: 1 Time(s) /scripts/haypRO15u9ns.php: 1 Time(s) /scripts/haypRO15u9ns.php3: 1 Time(s) /scripts/haypRO15u9ns.pl: 1 Time(s) /scripts/haypRO15u9ns.sh: 1 Time(s) /scripts/haypRO15u9ns.shtml: 1 Time(s) /scripts/vxWneJKDkejT.asp: 1 Time(s) /scripts/vxWneJKDkejT.cfm: 1 Time(s) /scripts/vxWneJKDkejT.cgi: 1 Time(s) /scripts/vxWneJKDkejT.html: 1 Time(s) /scripts/vxWneJKDkejT.inc: 1 Time(s) /scripts/vxWneJKDkejT.php: 1 Time(s) /scripts/vxWneJKDkejT.php3: 1 Time(s) /scripts/vxWneJKDkejT.pl: 1 Time(s) /scripts/vxWneJKDkejT.sh: 1 Time(s) /scripts/vxWneJKDkejT.shtml: 1 Time(s) /sdk: 2 Time(s) /sitemap.xml: 2 Time(s) /vxWneJKDkejT.asp: 1 Time(s) /vxWneJKDkejT.cfm: 1 Time(s) /vxWneJKDkejT.cgi: 1 Time(s) /vxWneJKDkejT.html: 1 Time(s) /vxWneJKDkejT.inc: 1 Time(s) /vxWneJKDkejT.php: 1 Time(s) /vxWneJKDkejT.php3: 1 Time(s) /vxWneJKDkejT.pl: 1 Time(s) /vxWneJKDkejT.sh: 1 Time(s) /vxWneJKDkejT.shtml: 1 Time(s) /wavemaster.internal: 2 Time(s) 501 Not Implemented /: 2 Time(s) ---------------------- httpd End ------------------------- --------------------- OpenVPN Begin ------------------------ Version Information: OpenVPN 2.1.4 x86_64-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Apr 24 2011 **Unmatched Entries** allow_pull_fqdn = DISABLED: 1 Time(s) auth_user_pass_file = '[UNDEF]': 1 Time(s) auth_user_pass_verify_script = '[UNDEF]': 1 Time(s) auth_user_pass_verify_script_via_file = DISABLED: 1 Time(s) authname = 'SHA1': 1 Time(s) authname_defined = ENABLED: 1 Time(s) bind_defined = DISABLED: 1 Time(s) bind_local = ENABLED: 1 Time(s) ca_file = 'keys/ca.crt': 1 Time(s) ca_path = '[UNDEF]': 1 Time(s) ccd_exclusive = DISABLED: 1 Time(s) cd_dir = '/etc/openvpn': 1 Time(s) cert_file = 'keys/berlin.crt': 1 Time(s) cf_max = 0: 1 Time(s) cf_per = 0: 1 Time(s) chroot_dir = '[UNDEF]': 1 Time(s) cipher_list = '[UNDEF]': 1 Time(s) ciphername = 'BF-CBC': 1 Time(s) ciphername_defined = ENABLED: 1 Time(s) client = DISABLED: 1 Time(s) client_config_dir = '[UNDEF]': 1 Time(s) client_connect_script = '[UNDEF]': 1 Time(s) client_disconnect_script = '[UNDEF]': 1 Time(s) config = 'openvpn.conf': 1 Time(s) connect_retry_max = 0: 1 Time(s) connect_retry_seconds = 5: 1 Time(s) connect_timeout = 10: 1 Time(s) crl_file = '[UNDEF]': 1 Time(s) daemon = ENABLED: 1 Time(s) dev = 'tun': 1 Time(s) dev_node = '[UNDEF]': 1 Time(s) dev_type = '[UNDEF]': 1 Time(s) dh_file = 'keys/dh1024.pem': 1 Time(s) down_pre = DISABLED: 1 Time(s) down_script = '[UNDEF]': 1 Time(s) duplicate_cn = ENABLED: 1 Time(s) enable_c2c = ENABLED: 1 Time(s) engine = DISABLED: 1 Time(s) explicit_exit_notification = 0: 1 Time(s) fast_io = DISABLED: 1 Time(s) fragment = 0: 1 Time(s) genkey = DISABLED: 1 Time(s) gremlin = 0: 1 Time(s) groupname = 'users': 1 Time(s) handshake_window = 60: 1 Time(s) ifconfig_local = '172.16.100.1': 1 Time(s) ifconfig_noexec = DISABLED: 1 Time(s) ifconfig_nowarn = DISABLED: 1 Time(s) ifconfig_pool_defined = ENABLED: 1 Time(s) ifconfig_pool_end = 172.16.101.251: 1 Time(s) ifconfig_pool_netmask = 0.0.0.0: 1 Time(s) ifconfig_pool_persist_filename = 'ipp.txt': 1 Time(s) ifconfig_pool_persist_refresh_freq = 600: 1 Time(s) ifconfig_pool_start = 172.16.100.4: 1 Time(s) ifconfig_remote_netmask = '172.16.100.2': 1 Time(s) inactivity_timeout = 0: 1 Time(s) inetd = 0: 1 Time(s) ipchange = '[UNDEF]': 1 Time(s) keepalive_ping = 10: 1 Time(s) keepalive_timeout = 120: 1 Time(s) key_direction = 0: 1 Time(s) key_method = 2: 1 Time(s) key_pass_file = '[UNDEF]': 1 Time(s) keysize = 0: 1 Time(s) learn_address_script = '[UNDEF]': 1 Time(s) link_mtu = 1500: 1 Time(s) link_mtu_defined = DISABLED: 1 Time(s) lladdr = '[UNDEF]': 1 Time(s) local = '[UNDEF]': 1 Time(s) local_port = 1194: 1 Time(s) log = DISABLED: 1 Time(s) lzo = 7: 1 Time(s) management_addr = '[UNDEF]': 1 Time(s) management_client_group = '[UNDEF]': 1 Time(s) management_client_user = '[UNDEF]': 1 Time(s) management_echo_buffer_size = 100: 1 Time(s) management_flags = 0: 1 Time(s) management_log_history_cache = 250: 1 Time(s) management_port = 0: 1 Time(s) management_user_pass = '[UNDEF]': 1 Time(s) management_write_peer_info_file = '[UNDEF]': 1 Time(s) max_clients = 1024: 1 Time(s) max_routes = 100: 1 Time(s) max_routes_per_client = 256: 1 Time(s) mlock = DISABLED: 1 Time(s) mode = 1: 1 Time(s) mssfix = 1450: 1 Time(s) mtu_discover_type = -1: 1 Time(s) mtu_test = 0: 1 Time(s) mute = 0: 1 Time(s) mute_replay_warnings = DISABLED: 1 Time(s) n_bcast_buf = 256: 1 Time(s) nice = 0: 1 Time(s) ns_cert_type = 0: 1 Time(s) occ = ENABLED: 1 Time(s) packet_id_file = '[UNDEF]': 1 Time(s) passtos = DISABLED: 1 Time(s) persist_config = DISABLED: 1 Time(s) persist_key = ENABLED: 1 Time(s) persist_local_ip = DISABLED: 1 Time(s) persist_mode = 1: 1 Time(s) persist_remote_ip = DISABLED: 1 Time(s) persist_tun = ENABLED: 1 Time(s) ping_rec_timeout = 240: 1 Time(s) ping_rec_timeout_action = 2: 1 Time(s) ping_send_timeout = 10: 1 Time(s) ping_timer_remote = DISABLED: 1 Time(s) pkcs11_cert_private = DISABLED: 7 Time(s) pkcs11_id = '[UNDEF]': 1 Time(s) pkcs11_id_management = DISABLED: 1 Time(s) pkcs11_pin_cache_period = -1: 1 Time(s) pkcs11_private_mode = 00000000: 14 Time(s) pkcs11_protected_authentication = DISABLED: 13 Time(s) pkcs12_file = '[UNDEF]': 1 Time(s) port_share_host = '[UNDEF]': 1 Time(s) port_share_port = 0: 1 Time(s) priv_key_file = 'keys/berlin.key': 1 Time(s) prng_hash = 'SHA1': 1 Time(s) prng_nonce_secret_len = 16: 1 Time(s) proto = tcp-server: 1 Time(s) pull = DISABLED: 1 Time(s) push_entry = 'ping 10': 1 Time(s) push_entry = 'ping-restart 120': 1 Time(s) push_entry = 'route 140.221.76.7 255.255.255.255': 1 Time(s) push_entry = 'route 140.221.8.60 255.255.255.255': 1 Time(s) push_entry = 'route 172.16.100.0 255.255.254.0': 1 Time(s) push_entry = 'topology p2p': 1 Time(s) push_ifconfig_defined = DISABLED: 1 Time(s) push_ifconfig_local = 0.0.0.0: 1 Time(s) push_ifconfig_remote_netmask = 0.0.0.0: 1 Time(s) push_peer_info = DISABLED: 1 Time(s) rcvbuf = 65536: 1 Time(s) real_hash_size = 256: 1 Time(s) remap_sigusr1 = 0: 1 Time(s) remote = '[UNDEF]': 1 Time(s) remote_cert_eku = '[UNDEF]': 1 Time(s) remote_cert_ku[i] = 0: 13 Time(s) remote_float = DISABLED: 1 Time(s) remote_port = 1194: 1 Time(s) remote_random = DISABLED: 1 Time(s) renegotiate_bytes = 0: 1 Time(s) renegotiate_packets = 0: 1 Time(s) renegotiate_seconds = 3600: 1 Time(s) replay = ENABLED: 1 Time(s) replay_time = 15: 1 Time(s) replay_window = 64: 1 Time(s) resolve_retry_seconds = 1000000000: 1 Time(s) route 172.16.100.0/255.255.254.0/nil/nil: 1 Time(s) route_default_gateway = '[UNDEF]': 1 Time(s) route_default_metric = 0: 1 Time(s) route_delay = 0: 1 Time(s) route_delay_defined = DISABLED: 1 Time(s) route_delay_window = 30: 1 Time(s) route_gateway_via_dhcp = DISABLED: 1 Time(s) route_noexec = DISABLED: 1 Time(s) route_nopull = DISABLED: 1 Time(s) route_script = '[UNDEF]': 1 Time(s) selinux_context = '[UNDEF]': 1 Time(s) server_bridge_ip = 0.0.0.0: 1 Time(s) server_bridge_netmask = 0.0.0.0: 1 Time(s) server_bridge_pool_end = 0.0.0.0: 1 Time(s) server_bridge_pool_start = 0.0.0.0: 1 Time(s) server_netmask = 255.255.254.0: 1 Time(s) server_network = 172.16.100.0: 1 Time(s) shaper = 0: 1 Time(s) shared_secret_file = '[UNDEF]': 1 Time(s) show_ciphers = DISABLED: 1 Time(s) show_digests = DISABLED: 1 Time(s) show_engines = DISABLED: 1 Time(s) show_tls_ciphers = DISABLED: 1 Time(s) single_session = DISABLED: 1 Time(s) sndbuf = 65536: 1 Time(s) sockflags = 0: 1 Time(s) socks_proxy_port = 0: 1 Time(s) socks_proxy_retry = DISABLED: 1 Time(s) socks_proxy_server = '[UNDEF]': 1 Time(s) ssl_flags = 0: 1 Time(s) status_file = '/var/log/openvpn-status.log': 1 Time(s) status_file_update_freq = 60: 1 Time(s) status_file_version = 1: 1 Time(s) suppress_timestamps = DISABLED: 1 Time(s) tcp_queue_limit = 64: 1 Time(s) test_crypto = DISABLED: 1 Time(s) tls_auth_file = '[UNDEF]': 1 Time(s) tls_client = DISABLED: 1 Time(s) tls_exit = DISABLED: 1 Time(s) tls_remote = '[UNDEF]': 1 Time(s) tls_server = ENABLED: 1 Time(s) tls_timeout = 2: 1 Time(s) tls_verify = '[UNDEF]': 1 Time(s) tmp_dir = '[UNDEF]': 1 Time(s) topology = 2: 1 Time(s) transition_window = 3600: 1 Time(s) tun_ipv6 = DISABLED: 1 Time(s) tun_mtu = 1500: 1 Time(s) tun_mtu_defined = ENABLED: 1 Time(s) tun_mtu_extra = 0: 1 Time(s) tun_mtu_extra_defined = DISABLED: 1 Time(s) up_delay = DISABLED: 1 Time(s) up_restart = DISABLED: 1 Time(s) up_script = '[UNDEF]': 1 Time(s) use_iv = ENABLED: 1 Time(s) username = 'nobody': 1 Time(s) verbosity = 5: 1 Time(s) virtual_hash_size = 256: 1 Time(s) writepid = '/var/run/openvpn/openvpn.pid': 1 Time(s) Connection profiles END: 1 Time(s) Connection profiles [default]:: 1 Time(s) Current Parameter Settings:: 1 Time(s) ERROR: Linux route delete command failed: external program exited with error status: 2: 1 Time(s) Linux ip addr del failed: external program exited with error status: 2: 1 Time(s) Listening for incoming TCP connection on [undef]:1194: 1 Time(s) MULTI: TCP INIT maxclients=1024 maxevents=1028: 1 Time(s) NOTE: the current --script-security setting may allow this configuration to call user-defined scripts: 1 Time(s) ROUTE default_gateway=140.221.76.1: 1 Time(s) SIGTERM[hard,] received, process exiting: 1 Time(s) Socket Buffers: R=[87380->131072] S=[16384->131072]: 1 Time(s) TCPv4_SERVER link local (bound): [undef]:1194: 1 Time(s) TCPv4_SERVER link remote: [undef]: 1 Time(s) TUN/TAP TX queue length set to 100: 1 Time(s) WARNING: --ifconfig-pool-persist will not work with --duplicate-cn: 1 Time(s) ---------------------- OpenVPN End ------------------------- --------------------- pam_unix Begin ------------------------ runuser: Unknown Entries: session closed for user root: 1 Time(s) session opened for user root by (uid=0): 1 Time(s) sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov): 4 Time(s) dolson (mcswl012.mcs.anl.gov): 1 Time(s) dolson (namby.mcs.anl.gov): 1 Time(s) Invalid Users: Unknown Account: 4 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 6 Time(s) session opened for user mgrastprod by tharriso(uid=0): 6 Time(s) session closed for user jared: 1 Time(s) session opened for user jared by root(uid=0): 1 Time(s) sudo: Authentication Failures: jared(0) -> jared: 7 Time(s) dsouza(0) -> dsouza: 3 Time(s) tharriso(0) -> tharriso: 3 Time(s) jbischof(0) -> jbischof: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 350086 bytes transferred 721 messages sent 721 messages removed from queue ---------------------- postfix End ------------------------- --------------------- Smartd Begin ------------------------ **Unmatched Entries** Problem creating device name scan list Device /dev/sda: using '-d sat' for ATA disk behind SAT layer. Device /dev/sdb: using '-d sat' for ATA disk behind SAT layer. ---------------------- Smartd End ------------------------- --------------------- SSHD Begin ------------------------ SSHD Killed: 1 Time(s) SSHD Started: 2 Time(s) Failed logins from: 130.202.135.12 (mcswl012.mcs.anl.gov): 1 time Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov): 4 times Users logging in through sshd: dolson: 140.221.9.203 (namby.mcs.anl.gov): 1 time dsouza: 140.221.10.82 (dsouza.mcs.anl.gov): 2 times 130.202.232.249 (anlvpn249.mcs.anl.gov): 1 time jared: 140.221.11.239 (jaredwilkening.mcs.anl.gov): 3 times jbischof: 130.202.135.144 (mcswl144.mcs.anl.gov): 8 times root: 192.5.200.126 (warehouse13.mcs.anl.gov): 1 time tharriso: 130.202.135.159 (mcswl159.mcs.anl.gov): 3 times Received disconnect: 11: disconnected by user : 11 Time(s) **Unmatched Entries** Rhosts authentication refused for dolson: no home directory /homes/dolson : 2 time(s) pam_krb5[9333]: TGT verified : 1 time(s) pam_krb5[9175]: error reading keytab 'FILE:/etc/krb5.keytab' : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 2 time(s) pam_krb5[9175]: TGT verified : 1 time(s) fatal: Access denied for user dolson by PAM account configuration : 1 time(s) pam_krb5[9333]: error reading keytab 'FILE:/etc/krb5.keytab' : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 2 time(s) pam_access(sshd:account): access denied for user `dolson' from `mcswl012.mcs.anl.gov' : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh dsouza => root ------------------------------------------------------------------------------ /bin/bash /bin/bash ============================================================================== jared => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- XNTPD Begin ------------------------ XNTPD Killed: 1 Time(s) XNTPD Started: 1 Time(s) Time Reset 1 times (total: -0.495888 s average: -0.495888 s) Total interfaces 7 (non-local: 3) Total synchronizations 2 (hosts: 1) ---------------------- XNTPD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 8.1G 5.5G 60% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################
participants (1)
-
logwatch＠mcs.anl.gov