[sysmon-help] Huge Log Files
Jared Mauch
jared at sysmon.org
Tue Dec 16 11:24:26 EST 2003
I will look into this as well.
- Jared
On Fri, Dec 12, 2003 at 11:37:48PM -0600, Jim Vaughan wrote:
> Same thing here . . .
>
> I count ~29 log entries *per second*
>
> Logs are huge:
>
> -rw-r--r-- 1 root root 229,544,846 Dec 12 23:04
> /var/log/sysmon-pub.log
> -rw-r--r-- 1 root root 20,225,634 Dec 7 01:02
> /var/log/sysmon-pub.log.1.gz <- compressed
>
> Running sysmond version 0.91.20+
>
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.405071
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.406452
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.407883
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.409275
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.410671
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.412071
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.413471
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.414875
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.416283
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.417744
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.419163
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.420582
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.422005
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.423428
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.424854
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.426289
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.427769
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.429211
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.430653
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.432102
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.433548
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.435005
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.436462
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.438004
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.439472
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.440941
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.442619
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.444149
> Dec 12 2003-19:24:11 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.445480
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.446873
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.448212
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.449554
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.450897
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.452240
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.453587
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.454941
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.456295
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.457699
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.459057
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.460419
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.461784
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.463158
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.464527
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.465900
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.523590
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.524982
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.526363
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.527794
> Dec 12 2003-19:24:12 : Possibly stale check of 198.206.150.131:smtp:0
> lasting 59.529179
>
>
> ---
> Jim Vaughan - Mead, NE, USA
> jim at jimvaughan.com
> http://www.jimvaughan.com
> ftp://ftp.jimvaughan.com
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.551 / Virus Database: 343 - Release Date: 12/11/2003
>
> _______________________________________________
> Sysmon-help mailing list
> Sysmon-help at puck.nether.net
> https://puck.nether.net/mailman/listinfo/sysmon-help
--
Jared Mauch | pgp key available via finger from jared at puck.nether.net
clue++; | http://puck.nether.net/~jared/ My statements are only mine.
More information about the Sysmon-help
mailing list