cancel
Showing results for 
Search instead for 
Did you mean: 

/var/log/kernel filling up while backup running

DavidE31
Level 4

Hello,

When a backup of one of our linux client runs, the /var/log/kernel file on the client is growing up with entries like this one :

Feb 4 18:08:13 tu-bdcout-q01 kernel: : # NetBakup # IN=eth0 OUT= MAC=00:50:56:92:00:fb:00:23:04:fb:50:80:08:00 SRC=10.120.51.1 DST=10.120.4.2 LEN=72 TOS=0x00 PREC=0x00 TTL=64 ID=1096 DF PROTO=TCP SPT=33867 DPT=1556 WINDOW=501 RES=0x00 ACK URGP=0

This leads the file to grow up to 1Gb, and fill up our /var partition

I'm not sure what process is filling up the file.. is it a netbackup process or some server log process ?

The Default log originator value is set like this at this time :

bash-3.2# ./vxlogcfg -a -p 51216 -o Default -l

Configuration settings for originator 112, of product 51,216...

LogDirectory = /usr/openv/logs/

DebugLevel = 0

DiagnosticLevel = 0

DynaReloadInSec = 0

LogToStdout = False

LogToStderr = False

LogToOslog = False

RolloverMode = FileSize | LocalTime

LogRecycle = False

MaxLogFileSizeKB = 51200

RolloverPeriodInSeconds = 43200

RolloverAtLocalTime = 0:00

NumberOfLogFiles = 3

OIDNames =

AppMsgLogging = ON

L10nLib = /usr/openv/lib/libvxexticu

L10nResourceDir = /usr/openv/resources

SyslogIdent = VRTS-NB

SyslogOpt = 0

SyslogFacility = LOG_LOCAL5

LogFilePermissions = 664

Our master server is a RedHat 2.6 kernel 2.6.18-308.11.1.el5

Running NBU 7.1.0.3 : 

NetBackup-RedHat2.6 7.1.0.3

Our client is the same (same OS, kernel and NBU version)

Have you ever seen this before ?

Thank you

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

Nicolai
Moderator
Moderator
Partner    VIP   

It's not Netbackup. It's iptables logging traffic

http://gentoovps.net/configuring-iptables-firewall/

View solution in original post

4 REPLIES 4

Nicolai
Moderator
Moderator
Partner    VIP   

It's not Netbackup. It's iptables logging traffic

http://gentoovps.net/configuring-iptables-firewall/

DavidE31
Level 4

Thanks a lot Nicolai ...

I found these entries in /etc/sysconfig/iptables file and removed them ...

(...) --dport 1556 -j LOG --log-level debug --log-prefix " # NetBakup # "

mph999
Level 6
Employee Accredited

I don't believe NBU writes directly to this log.  Not to say we're not invoved in some way (clearly we are) , perhpas the logging level can be adjusted from the OS ...

... just a thought

mph999
Level 6
Employee Accredited

Ahh, Nicoli beat me too it ...