Many strange entries in syslog
Hello,
Today evening i saw some strange entries in syslog.
Maybe it is important but i don't know...
Jun 22 20:43:12 rt-main bsalg: parser failed
Jun 22 20:43:17 rt-main printk: 27 messages suppressed.
Jun 22 20:43:17 rt-main bsalg: parser failed
Jun 22 20:43:22 rt-main printk: 16 messages suppressed.
Jun 22 20:43:22 rt-main bsalg: parser failed
Does anyone tell me what is this and what can i do for fix it ?
Regards
Re: Many strange entries in syslog
On Fri, 22 Jun 2007, in the Usenet newsgroup comp.os.linux.networking, in
article <f5h6ok$eas$1@inews.gazeta.pl>, Komuch wrote:
[color=blue]
>Today evening i saw some strange entries in syslog.
>Maybe it is important but i don't know...[/color]
When did this start? What did you change?
[color=blue]
>Jun 22 20:43:12 rt-main bsalg: parser failed[/color]
'bsalg' is an old part of netfilter - replaced several years ago by
'ip_nat_snmp_basic'. There is some configuration error, but I've long
forgotten what/how to configure.
[color=blue]
>Jun 22 20:43:17 rt-main printk: 27 messages suppressed.[/color]
The kernel is being overloaded by these error messages. Rather than
print out the same thing over, and over, and over again, it's telling
you that it would have printed the same thing 27 more times.
[color=blue]
>Does anyone tell me what is this and what can i do for fix it ?[/color]
Fix you firewall configuration. It _might_ help if you identified
what distribution you are using, and what version. We can't see the
console of your system from here.
Old guy
Re: Many strange entries in syslog
Moe Trin wrote:
[color=blue]
>
> When did this start? What did you change?
>[/color]
A few days ago (maybe two weeks).
I didn't change anything.. :/
[color=blue][color=green]
>> Jun 22 20:43:12 rt-main bsalg: parser failed[/color]
>
> 'bsalg' is an old part of netfilter - replaced several years ago by
> 'ip_nat_snmp_basic'. There is some configuration error, but I've long
> forgotten what/how to configure.[/color]
I never saw this message before (~7 years of experience).
This is my first time and i feel like a virgin ;)
[color=blue]
>[color=green]
>> Jun 22 20:43:17 rt-main printk: 27 messages suppressed.[/color]
>
> The kernel is being overloaded by these error messages. Rather than
> print out the same thing over, and over, and over again, it's telling
> you that it would have printed the same thing 27 more times.
>[/color]
I know :)
[color=blue]
>
> Fix you firewall configuration. It _might_ help if you identified
> what distribution you are using, and what version. We can't see the
> console of your system from here.[/color]
This configuration is aplied on few routers and it's working fine
without this messages...
Configuration is simple script with SNAT, NAT 1:1 and some DROPS
(netbios, other ports) and traffic logging (packets with NEW flag).
Nothing unusual...
uname -a:
Linux rt-main 2.6.19-gentoo-r5
iptables -V:
iptables v1.3.5
Many thanks for help
Regars,