On Jul 13, 5:11 am, AlexB wrote:
> Good day,
>
> seems that this question was asked before with no reply some time ago. Possibly
> I am second person in the world experiencing this issue. One of our AIX 5.3
> machines (a 6025-6F0) logs a message every 30 minutes or so:
>
> [quote]
> Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 12:52:43 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 13:23:20 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 13:53:57 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 14:24:34 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 14:55:11 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 15:25:48 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 15:56:25 sdb1 kern:crit unix: bpf: lo0 attached
> [unquote]
>
> This message used to appear since AIX 5.3 was installed, I guess, but does not
> seem to cause any harm, error log is empty. Any clue as to what may be causing
> it? I googled around a bit, all references to 'bpf' in aix seem to be related to
> tcpdump and similar network utilities. We are not running any packet dump
> software on this machine (unless it is a part of OS services, or, unlikely,
> Oracle9 RDBMS). We do have similar servers installed, also AIX 5.3, all same
> technology level - latest as of today, and they do not log such a message.
>
> Alex

This may help.
http://www.gsp.com/cgi-bin/man.cgi?section=4&topic=bpf

I don't have any messages in syslog regarding bpf, however I do have
bpf devices in /dev...I saw some hits that dhcp requires bpf on some
platforms.

On Jul 13, 5:11 am, AlexB wrote:
> Good day,
>
> seems that this question was asked before with no reply some time ago. Possibly
> I am second person in the world experiencing this issue. One of our AIX 5.3
> machines (a 6025-6F0) logs a message every 30 minutes or so:
>
> [quote]
> Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 12:52:43 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 13:23:20 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 13:53:57 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 14:24:34 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 14:55:11 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 15:25:48 sdb1 kern:crit unix: bpf: lo0 attached
> Jul 12 15:56:25 sdb1 kern:crit unix: bpf: lo0 attached
> [unquote]
>
> This message used to appear since AIX 5.3 was installed, I guess, but does not
> seem to cause any harm, error log is empty. Any clue as to what may be causing
> it? I googled around a bit, all references to 'bpf' in aix seem to be related to
> tcpdump and similar network utilities. We are not running any packet dump
> software on this machine (unless it is a part of OS services, or, unlikely,
> Oracle9 RDBMS). We do have similar servers installed, also AIX 5.3, all same
> technology level - latest as of today, and they do not log such a message.
>
> Alex


The times are close to 30 minutes but not exactly 30 minutes, so
probably not run by
cron. Look through your processes for a script containing a while
loop that does
something and then sleeps for 1800 seconds.
-- S

Hi!

* AlexB :
> Good day,
>
> Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached


Stop the prngd daemon if it's running and deinstall it.
(Was needed by an older ssh version)

If it's not running, forget this posting. :-)


Regards,

Kai.

On 16 Jul 2007 06:12:20 GMT, Kai Nielsen wrote:

>Hi!
>
>* AlexB :
>> Good day,
>>
>> Jul 12 12:22:06 sdb1 kern:crit unix: bpf: lo0 attached
>
>
>Stop the prngd daemon if it's running and deinstall it.
>(Was needed by an older ssh version)
>
>If it's not running, forget this posting. :-)
>
>
>Regards,
>
> Kai.

Thanks a lot, Kai! prngd daemon was causing these messages, you are absolutely
right! I issued a stopsrc for it and removed it from the list of daemons to
start up when system starts. syslog messages stopped immediately. Other servers
did not have this daemon installed for some reason, although all of them are
using ssh/sshd.

Alex