Velký /var/log/syslog

Velký /var/log/syslog
« kdy: 15. 06. 2020, 11:43:33 »
Zdravim,
moj /var/log/syslog narastol na uctihodnych 17GB a vidim ze sa vnom opakuje nasledujuca hlaska

Kód: [Vybrat]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850071] ------------[ cut here ]------------
Jun 15 10:28:40 lubuntu kernel: [ 7808.850072] wlp16s0:  Failed check-sdata-in-driver check, flags: 0x4
Jun 15 10:28:40 lubuntu kernel: [ 7808.850097] WARNING: CPU: 0 PID: 2991 at /build/linux-CbANGF/linux-4.15.0/net/mac80211/driver-ops.h:18 drv_sta_state+0x165/0x410 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850098] Modules linked in: ccm bnep hp_wmi sparse_keymap wmi_bmof arc4 coretemp kvm_intel kvm irqbypass iwl3945 snd_hda_codec_hdmi snd_hda_codec_analog iwlegacy i915 input_leds joydev snd_hda_codec_generic pcmcia mac80211 serio_raw snd_hda_intel snd_hda_codec drm_kms_helper cfg80211 yenta_socket drm snd_hda_core pcmcia_rsrc snd_hwdep pcmcia_core lpc_ich snd_pcm i2c_algo_bit fb_sys_fops btusb snd_timer btrtl btbcm btintel shpchp bluetooth syscopyarea ecdh_generic snd sysfillrect sysimgblt soundcore wmi tpm_infineon hp_accel lis3lv02d mac_hid input_polldev video sch_fq_codel parport_pc ppdev lp parport ip_tables x_tables autofs4 psmouse firewire_ohci tg3 pata_acpi firewire_core ptp crc_itu_t pps_core
Jun 15 10:28:40 lubuntu kernel: [ 7808.850120] CPU: 0 PID: 2991 Comm: kworker/0:2 Tainted: G        W        4.15.0-99-generic #100-Ubuntu
Jun 15 10:28:40 lubuntu kernel: [ 7808.850121] Hardware name: Hewlett-Packard HP Compaq 6710b (GB892EA#ABB)/30C0, BIOS 68DDU Ver. F.0B 08/02/2007
Jun 15 10:28:40 lubuntu kernel: [ 7808.850135] Workqueue: events_freezable ieee80211_restart_work [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850150] RIP: 0010:drv_sta_state+0x165/0x410 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850151] RSP: 0000:ffffb739808ff8a8 EFLAGS: 00010282
Jun 15 10:28:40 lubuntu kernel: [ 7808.850152] RAX: 0000000000000000 RBX: ffff8a78f67c0760 RCX: 0000000000000006
Jun 15 10:28:40 lubuntu kernel: [ 7808.850153] RDX: 0000000000000007 RSI: 0000000000000082 RDI: ffff8a78ffc16490
Jun 15 10:28:40 lubuntu kernel: [ 7808.850154] RBP: ffffb739808ff8e0 R08: 0000000011efebab R09: 0000000000000004
Jun 15 10:28:40 lubuntu kernel: [ 7808.850155] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004
Jun 15 10:28:40 lubuntu kernel: [ 7808.850157] R13: 0000000000000003 R14: ffff8a78f67c0cb8 R15: ffff8a78f685c8c0
Jun 15 10:28:40 lubuntu kernel: [ 7808.850158] FS:  0000000000000000(0000) GS:ffff8a78ffc00000(0000) knlGS:0000000000000000
Jun 15 10:28:40 lubuntu kernel: [ 7808.850159] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Jun 15 10:28:40 lubuntu kernel: [ 7808.850160] CR2: 00007ff3ec8de000 CR3: 00000001328ae000 CR4: 00000000000006f0
Jun 15 10:28:40 lubuntu kernel: [ 7808.850161] Call Trace:
Jun 15 10:28:40 lubuntu kernel: [ 7808.850176]  sta_info_move_state+0x284/0x360 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850191]  __sta_info_destroy_part2+0x36/0x1a0 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850205]  __sta_info_flush+0x139/0x1b0 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850224]  ieee80211_set_disassoc+0xb9/0x400 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850242]  ieee80211_mgd_deauth+0x287/0x440 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850259]  ieee80211_deauth+0x18/0x20 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850274]  cfg80211_mlme_deauth+0xaf/0x1c0 [cfg80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850289]  cfg80211_mlme_down+0x66/0x80 [cfg80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850304]  cfg80211_disconnect+0x12a/0x1e0 [cfg80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850317]  __cfg80211_leave+0x13e/0x190 [cfg80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850329]  cfg80211_leave+0x2b/0x40 [cfg80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850341]  cfg80211_netdev_notifier_call+0x2dd/0x6a0 [cfg80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850343]  ? __warn+0xa3/0x110
Jun 15 10:28:40 lubuntu kernel: [ 7808.850345]  ? inetdev_event+0x46/0x540
Jun 15 10:28:40 lubuntu kernel: [ 7808.850363]  ? ieee80211_reconfig+0x22c/0x11b0 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850365]  ? skb_dequeue+0x59/0x70
Jun 15 10:28:40 lubuntu kernel: [ 7808.850367]  notifier_call_chain+0x4c/0x70
Jun 15 10:28:40 lubuntu kernel: [ 7808.850368]  raw_notifier_call_chain+0x16/0x20
Jun 15 10:28:40 lubuntu kernel: [ 7808.850370]  call_netdevice_notifiers_info+0x2d/0x60
Jun 15 10:28:40 lubuntu kernel: [ 7808.850372]  __dev_close_many+0x63/0x110
Jun 15 10:28:40 lubuntu kernel: [ 7808.850373]  dev_close_many+0x8c/0x140
Jun 15 10:28:40 lubuntu kernel: [ 7808.850375]  dev_close.part.88+0x4a/0x70
Jun 15 10:28:40 lubuntu kernel: [ 7808.850377]  dev_close+0x19/0x20
Jun 15 10:28:40 lubuntu kernel: [ 7808.850389]  cfg80211_shutdown_all_interfaces+0x77/0xc0 [cfg80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850407]  ieee80211_handle_reconfig_failure+0x98/0xb0 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850425]  ieee80211_reconfig+0x236/0x11b0 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850439]  ieee80211_restart_work+0xbb/0xf0 [mac80211]
Jun 15 10:28:40 lubuntu kernel: [ 7808.850441]  process_one_work+0x1de/0x420
Jun 15 10:28:40 lubuntu kernel: [ 7808.850443]  worker_thread+0x32/0x410
Jun 15 10:28:40 lubuntu kernel: [ 7808.850444]  kthread+0x121/0x140
Jun 15 10:28:40 lubuntu kernel: [ 7808.850446]  ? process_one_work+0x420/0x420
Jun 15 10:28:40 lubuntu kernel: [ 7808.850447]  ? kthread_create_worker_on_cpu+0x70/0x70
Jun 15 10:28:40 lubuntu kernel: [ 7808.850449]  ret_from_fork+0x35/0x40
Jun 15 10:28:40 lubuntu kernel: [ 7808.850451] Code: 48 85 c9 75 e3 e9 56 ff ff ff 49 8b 87 f8 03 00 00 49 8d b7 18 04 00 00 48 c7 c7 48 ae 7f c0 48 85 c0 48 0f 45 f0 e8 7b df 30 d2 <0f> 0b 41 bd fb ff ff ff e9 28 ff ff ff 41 83 fc 02 0f 85 85 00
Jun 15 10:28:40 lubuntu kernel: [ 7808.850471] ---[ end trace 7d4fa9e131952e56 ]---
Jun 15 10:28:40 lubuntu kernel: [ 7808.850482] ------------[ cut here ]------------

Konfiguracia:

Kód: [Vybrat]
wakatana@lubuntu:~$ uname -a
Linux lubuntu 4.15.0-99-generic #100-Ubuntu SMP Wed Apr 22 20:32:56 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

wakatana@lubuntu:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 18.04.4 LTS
Release:        18.04
Codename:       bionic

Docasne som sa pokusal syslog vypnut no nevyzera ze to pomohlo

Kód: [Vybrat]
wakatana@lubuntu:~$ sudo systemctl stop rsyslog.service
[sudo] password for marek:
Warning: Stopping rsyslog.service, but it can still be activated by:
  syslog.socket
wakatana@lubuntu:~$ sudo systemctl stop rsyslog.socket
Failed to stop rsyslog.socket: Unit rsyslog.socket not loaded.

wakatana@lubuntu:~$ sudo systemctl status rsyslog.service
● rsyslog.service - System Logging Service
   Loaded: loaded (/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled)
   Active: active (running) since Mon 2020-06-15 11:36:31 CEST; 24s ago
     Docs: man:rsyslogd(8)
           http://www.rsyslog.com/doc/
 Main PID: 2019 (rsyslogd)
    Tasks: 4 (limit: 4671)
   CGroup: /system.slice/rsyslog.service
           └─2019 /usr/sbin/rsyslogd -n


Dakujem za kazdu radu
« Poslední změna: 15. 06. 2020, 13:00:08 od Petr Krčmář »


AoK

  • ***
  • 132
    • Zobrazit profil
Re:velky /var/log/sysglog
« Odpověď #1 kdy: 15. 06. 2020, 11:52:21 »
a to nemáš log rotate aktivní?

S tou chybovou hlášku ti nepordím, to neznám.

Re:Velký /var/log/syslog
« Odpověď #2 kdy: 15. 06. 2020, 17:58:48 »
problém je s ovladačem wifi, wifi jede?

omezit log jde v /etc/systemd/journald.conf, užitečné jsou volby

Kód: [Vybrat]
Compress=yes
RateLimitIntervalSec=30s
RateLimitBurst=10000
SystemMaxUse=10M
MaxFileSec=7d

k3dAR

  • *****
  • 1 546
  • porad nemam telo, ale uz mam hlavu... nobody
    • Zobrazit profil
    • E-mail
Re:Velký /var/log/syslog
« Odpověď #3 kdy: 15. 06. 2020, 20:44:18 »
vidim ze mas *buntu bez HWE s jadrem 4.15.x, zkusil bych aktivovat HWE zda se to v 5.3.x bude chovat stejne:
https://wiki.ubuntu.com/Kernel/LTSEnablementStack#Desktop
a reboot...

Re:Velký /var/log/syslog
« Odpověď #4 kdy: 16. 06. 2020, 15:38:49 »
Dakujem za rady, Wifi urcite funguje. Log rotate som nenastavoval, neviem ci je by default, pozriem


Re:Velký /var/log/syslog
« Odpověď #5 kdy: 18. 06. 2020, 10:03:59 »
logrotate je asi jen na staré textové logy, systemd si ty binární logy IMHO rotuje a kompresuje sám právě podle /etc/systemd/journald.conf

Re:Velký /var/log/syslog
« Odpověď #6 kdy: 22. 06. 2020, 23:27:16 »
Este by som upresnil. Jedna sa o stroj ktory mi nebezi permanentne, naposledy som ho zapol aby som nan robil backup. Neviem ci spominana hlaska v syslogu mohla mat suvis s tym ze som tam kopiroval data. Vtedy bol velky aj /var/log/kern.log ale som urobil chybu a zmazal ho bez toho aby som pozrel co v nom je. V tom case som si vsimol aj to ze SSH mi dost lagovalo. Momentalne je /var/log/kern.log prazdny a vo /var/log/syslog je len par veci. SSH ide plynule. Vo /var/log/syslog.2.gz je spominana hlaska + este jedna o nedostupnosti. A je tam par starych archivnych logov (takze predpokladam ze rotate bezi)


Kód: [Vybrat]
wakatana@lubuntu:/var/log$ zless /var/log/syslog.2.gz
Jun 15 09:34:38 lubuntu kernel: [ 4566.515601] ------------[ cut here ]------------
Jun 15 09:34:38 lubuntu kernel: [ 4566.515602] Hardware became unavailable during restart.
Jun 15 09:34:38 lubuntu kernel: [ 4566.515697] WARNING: CPU: 0 PID: 2991 at /build/linux-CbANGF/linux-4.15.0/net/mac80211/util.c:1870 ieee80211_reconfig+0x22c/0x11b0 [mac80211]
Jun 15 09:34:38 lubuntu kernel: [ 4566.515698] Modules linked in: ccm bnep hp_wmi sparse_keymap wmi_bmof arc4 coretemp kvm_intel kvm irqbypass iwl3945 snd_hda_codec_hdmi snd_hda_codec_analog iwlegacy i915 input_leds joydev snd_hda_codec_generic pcmcia mac80211 serio_raw snd_hda_intel snd_hda_codec drm_kms_helper cfg80211 yenta_socket drm snd_hda_core pcmcia_rsrc snd_hwdep pcmcia_core lpc_ich snd_pcm i2c_algo_bit fb_sys_fops btusb snd_timer btrtl btbcm btintel shpchp bluetooth syscopyarea ecdh_generic snd sysfillrect sysimgblt soundcore wmi tpm_infineon hp_accel lis3lv02d mac_hid input_polldev video sch_fq_codel parport_pc ppdev lp parport ip_tables x_tables autofs4 psmouse firewire_ohci tg3 pata_acpi firewire_core ptp crc_itu_t pps_core
Jun 15 09:34:38 lubuntu kernel: [ 4566.515745] CPU: 0 PID: 2991 Comm: kworker/0:2 Not tainted 4.15.0-99-generic #100-Ubuntu
Jun 15 09:34:38 lubuntu kernel: [ 4566.515746] Hardware name: Hewlett-Packard HP Compaq 6710b (GB892EA#ABB)/30C0, BIOS 68DDU Ver. F.0B 08/02/2007
Jun 15 09:34:38 lubuntu kernel: [ 4566.515769] Workqueue: events_freezable ieee80211_restart_work [mac80211]
Jun 15 09:34:38 lubuntu kernel: [ 4566.515797] RIP: 0010:ieee80211_reconfig+0x22c/0x11b0 [mac80211]
Jun 15 09:34:38 lubuntu kernel: [ 4566.515799] RSP: 0018:ffffb739808ffe00 EFLAGS: 00010286
Jun 15 09:34:38 lubuntu kernel: [ 4566.515802] RAX: 0000000000000000 RBX: ffff8a78f67c0760 RCX: 0000000000000006
Jun 15 09:34:38 lubuntu kernel: [ 4566.515803] RDX: 0000000000000007 RSI: 0000000000000092 RDI: ffff8a78ffc16490
Jun 15 09:34:38 lubuntu kernel: [ 4566.515805] RBP: ffffb739808ffe48 R08: 0000000000000390 R09: 0000000000000004
Jun 15 09:34:38 lubuntu kernel: [ 4566.515807] R10: ffffb739808ffc78 R11: 0000000000000001 R12: ffff8a78f67c13a8
Jun 15 09:34:38 lubuntu kernel: [ 4566.515808] R13: 00000000fffffffb R14: ffff8a78f67c0f98 R15: 0000000000000000
Jun 15 09:34:38 lubuntu kernel: [ 4566.515811] FS:  0000000000000000(0000) GS:ffff8a78ffc00000(0000) knlGS:0000000000000000
Jun 15 09:34:38 lubuntu kernel: [ 4566.515813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Jun 15 09:34:38 lubuntu kernel: [ 4566.515815] CR2: 00007ff3edf28450 CR3: 0000000136a1c000 CR4: 00000000000006f0
Jun 15 09:34:38 lubuntu kernel: [ 4566.515816] Call Trace:
Jun 15 09:34:38 lubuntu kernel: [ 4566.515841]  ieee80211_restart_work+0xbb/0xf0 [mac80211]
Jun 15 09:34:38 lubuntu kernel: [ 4566.515847]  process_one_work+0x1de/0x420
Jun 15 09:34:38 lubuntu kernel: [ 4566.515850]  worker_thread+0x32/0x410
Jun 15 09:34:38 lubuntu kernel: [ 4566.515853]  kthread+0x121/0x140
Jun 15 09:34:38 lubuntu kernel: [ 4566.515856]  ? process_one_work+0x420/0x420
Jun 15 09:34:38 lubuntu kernel: [ 4566.515858]  ? kthread_create_worker_on_cpu+0x70/0x70
Jun 15 09:34:38 lubuntu kernel: [ 4566.515863]  ret_from_fork+0x35/0x40
Jun 15 09:34:38 lubuntu kernel: [ 4566.515865] Code: 00 c6 45 d6 00 c6 83 9c 04 00 00 00 48 89 df e8 6b a2 fc ff 85 c0 41 89 c5 0f 84 6e 01 00 00 48 c7 c7 80 da 7f c0 e8 e4 88 2d d2 <0f> 0b 48 89 df e8 9a db ff ff eb b0 4c 8d ab 28 05 00 00 4c 8d
Jun 15 09:34:38 lubuntu kernel: [ 4566.515895] ---[ end trace 7d4fa9e1313e8b24 ]---
Jun 15 09:34:38 lubuntu kernel: [ 4566.515913] wlp16s0: deauthenticating from 00:1b:fc:6b:81:02 by local choice (Reason: 3=DEAUTH_LEAVING)
Jun 15 09:34:38 lubuntu kernel: [ 4566.515920] ------------[ cut here ]------------


wakatana@lubuntu:/var/log$ sudo du -sh * | sort -hr | head
866M    syslog.2.gz
801M    journal
16M     installer
204K    syslog.6.gz
172K    apt
164K    dpkg.log.1
144K    syslog.1
124K    kern.log.4.gz
120K    lightdm
112K    dpkg.log.2.gz


wakatana@lubuntu:/var/log$ journalctl --disk-usage
Archived and active journals take up 800.3M in the file system.


wakatana@lubuntu:~$ cat /var/log/syslog
Jun 22 21:51:46 lubuntu rsyslogd:  [origin software="rsyslogd" swVersion="8.32.0" x-pid="529" x-info="http://www.rsyslog.com"] rsyslogd was HUPed
Jun 22 21:51:51 lubuntu anacron[525]: Job `cron.daily' terminated
Jun 22 21:51:52 lubuntu anacron[525]: Job `cron.weekly' started
Jun 22 21:51:52 lubuntu anacron[1787]: Updated timestamp for job `cron.weekly' to 2020-06-22
Jun 22 21:51:53 lubuntu anacron[525]: Job `cron.weekly' terminated
Jun 22 21:51:53 lubuntu anacron[525]: Normal exit (2 jobs run)
Jun 22 21:57:09 lubuntu systemd[1]: Starting Cleanup of Temporary Directories...
Jun 22 21:57:09 lubuntu systemd[1]: Started Cleanup of Temporary Directories.
Jun 22 21:58:20 lubuntu systemd[1]: Started Session 4 of user wakatana.
Jun 22 22:05:04 lubuntu systemd[1]: Started Run anacron jobs.
Jun 22 22:05:04 lubuntu anacron[2492]: Anacron 2.3 started on 2020-06-22
Jun 22 22:05:04 lubuntu anacron[2492]: Normal exit (0 jobs run)
Jun 22 22:17:01 lubuntu CRON[3569]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)


wakatana@lubuntu:~$ cat /etc/systemd/journald.conf | grep -v '^#'

[Journal]
wakatana@lubuntu:~$ cat /etc/logrotate.conf | grep -v '^#'
weekly

su root syslog

rotate 4

create


include /etc/logrotate.d

/var/log/wtmp {
    missingok
    monthly
    create 0664 root utmp
    rotate 1
}

/var/log/btmp {
    missingok
    monthly
    create 0660 root utmp
    rotate 1
}

k3dAR

  • *****
  • 1 546
  • porad nemam telo, ale uz mam hlavu... nobody
    • Zobrazit profil
    • E-mail
Re:Velký /var/log/syslog
« Odpověď #7 kdy: 22. 06. 2020, 23:42:17 »
zkusil si povysit to jadro pres HWE ?
protoze pokud ne, tak mi prijde ze nevhodne resis nasledek, misto aby si resil pricinu, i kdyz ti wifi chodi tak ti problem s wifi ovladacem proste plni log...