AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached' - Aix

This is a discussion on AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached' - Aix ; Good day, seems that this question was asked before with no reply some time ago. Possibly I am second person in the world experiencing this issue. One of our AIX 5.3 machines (a 6025-6F0) logs a message every 30 minutes ...

+ Reply to Thread
Results 1 to 5 of 5

Thread: AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached'

  1. AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached'

    Good day,

    seems that this question was asked before with no reply some time ago. Possibly
    I am second person in the world experiencing this issue. One of our AIX 5.3
    machines (a 6025-6F0) logs a message every 30 minutes or so:

    [quote]
    Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached
    Jul 12 12:52:43 sdb1 kern:crit unix: bpf: lo0 attached
    Jul 12 13:23:20 sdb1 kern:crit unix: bpf: lo0 attached
    Jul 12 13:53:57 sdb1 kern:crit unix: bpf: lo0 attached
    Jul 12 14:24:34 sdb1 kern:crit unix: bpf: lo0 attached
    Jul 12 14:55:11 sdb1 kern:crit unix: bpf: lo0 attached
    Jul 12 15:25:48 sdb1 kern:crit unix: bpf: lo0 attached
    Jul 12 15:56:25 sdb1 kern:crit unix: bpf: lo0 attached
    [unquote]

    This message used to appear since AIX 5.3 was installed, I guess, but does not
    seem to cause any harm, error log is empty. Any clue as to what may be causing
    it? I googled around a bit, all references to 'bpf' in aix seem to be related to
    tcpdump and similar network utilities. We are not running any packet dump
    software on this machine (unless it is a part of OS services, or, unlikely,
    Oracle9 RDBMS). We do have similar servers installed, also AIX 5.3, all same
    technology level - latest as of today, and they do not log such a message.


    Alex

  2. Re: AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached'

    On Jul 13, 5:11 am, AlexB wrote:
    > Good day,
    >
    > seems that this question was asked before with no reply some time ago. Possibly
    > I am second person in the world experiencing this issue. One of our AIX 5.3
    > machines (a 6025-6F0) logs a message every 30 minutes or so:
    >
    > [quote]
    > Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 12:52:43 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 13:23:20 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 13:53:57 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 14:24:34 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 14:55:11 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 15:25:48 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 15:56:25 sdb1 kern:crit unix: bpf: lo0 attached
    > [unquote]
    >
    > This message used to appear since AIX 5.3 was installed, I guess, but does not
    > seem to cause any harm, error log is empty. Any clue as to what may be causing
    > it? I googled around a bit, all references to 'bpf' in aix seem to be related to
    > tcpdump and similar network utilities. We are not running any packet dump
    > software on this machine (unless it is a part of OS services, or, unlikely,
    > Oracle9 RDBMS). We do have similar servers installed, also AIX 5.3, all same
    > technology level - latest as of today, and they do not log such a message.
    >
    > Alex


    This may help.
    http://www.gsp.com/cgi-bin/man.cgi?section=4&topic=bpf

    I don't have any messages in syslog regarding bpf, however I do have
    bpf devices in /dev...I saw some hits that dhcp requires bpf on some
    platforms.


  3. Re: AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached'

    On Jul 13, 5:11 am, AlexB wrote:
    > Good day,
    >
    > seems that this question was asked before with no reply some time ago. Possibly
    > I am second person in the world experiencing this issue. One of our AIX 5.3
    > machines (a 6025-6F0) logs a message every 30 minutes or so:
    >
    > [quote]
    > Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 12:52:43 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 13:23:20 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 13:53:57 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 14:24:34 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 14:55:11 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 15:25:48 sdb1 kern:crit unix: bpf: lo0 attached
    > Jul 12 15:56:25 sdb1 kern:crit unix: bpf: lo0 attached
    > [unquote]
    >
    > This message used to appear since AIX 5.3 was installed, I guess, but does not
    > seem to cause any harm, error log is empty. Any clue as to what may be causing
    > it? I googled around a bit, all references to 'bpf' in aix seem to be related to
    > tcpdump and similar network utilities. We are not running any packet dump
    > software on this machine (unless it is a part of OS services, or, unlikely,
    > Oracle9 RDBMS). We do have similar servers installed, also AIX 5.3, all same
    > technology level - latest as of today, and they do not log such a message.
    >
    > Alex



    The times are close to 30 minutes but not exactly 30 minutes, so
    probably not run by
    cron. Look through your processes for a script containing a while
    loop that does
    something and then sleeps for 1800 seconds.
    -- S


  4. Re: AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached'

    Hi!

    * AlexB :
    > Good day,
    >
    > Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached



    Stop the prngd daemon if it's running and deinstall it.
    (Was needed by an older ssh version)

    If it's not running, forget this posting. :-)


    Regards,

    Kai.


  5. Re: AIX 5.3: syslog shows 'kern:crit unix: bpf: lo0 attached'

    On 16 Jul 2007 06:12:20 GMT, Kai Nielsen wrote:

    >Hi!
    >
    >* AlexB :
    >> Good day,
    >>
    >> Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached

    >
    >
    >Stop the prngd daemon if it's running and deinstall it.
    >(Was needed by an older ssh version)
    >
    >If it's not running, forget this posting. :-)
    >
    >
    >Regards,
    >
    > Kai.


    Thanks a lot, Kai! prngd daemon was causing these messages, you are absolutely
    right! I issued a stopsrc for it and removed it from the list of daemons to
    start up when system starts. syslog messages stopped immediately. Other servers
    did not have this daemon installed for some reason, although all of them are
    using ssh/sshd.

    Alex


+ Reply to Thread