Command: /usr/local/sbin/syslog-digest.py Time : 0.1435s Status : exited 0 Output : Syslog digest — 2026-10-08 21:05 EDT Processed 5,182 lines, filtered 2,963 (57%). 2,219 unknown (185 distinct) from 21 host(s). == abuse (1 distinct, 348 total) == Oct 8 20:05:25 abuse rsyslogd[1033]: imjournal: open() failed for path: '/var/lib/rsyslog/imjournal.state.tmp': Input/output error [v8.2404.0 try https://www.rsyslog.com/e/2433 ] [x348] == b0b02.cs.umd.edu (1 distinct, 1 total) == Oct 8 20:19:18 b0b02.cs.umd.edu rustdesk[1717509]: cannot open display: == gle-dind02.cs.umd.edu (23 distinct, 23 total) == Oct 8 20:39:26 gle-dind02.cs.umd.edu systemd-udevd[2126042]: Could not generate persistent MAC address for veth58d3f22: No such file or directory Oct 8 20:39:26 gle-dind02.cs.umd.edu systemd-udevd[2126043]: Could not generate persistent MAC address for vetha4b3717: No such file or directory Oct 8 20:39:27 gle-dind02.cs.umd.edu systemd-udevd[2126143]: Could not generate persistent MAC address for veth5e9dd2f: No such file or directory Oct 8 20:39:27 gle-dind02.cs.umd.edu systemd-udevd[2126144]: Could not generate persistent MAC address for vethd5b15e8: No such file or directory Oct 8 20:39:28 gle-dind02.cs.umd.edu systemd-udevd[2126240]: Could not generate persistent MAC address for veth8926728: No such file or directory Oct 8 20:39:28 gle-dind02.cs.umd.edu systemd-udevd[2126241]: Could not generate persistent MAC address for veth3f88fdc: No such file or directory Oct 8 20:39:29 gle-dind02.cs.umd.edu systemd-udevd[2126338]: Could not generate persistent MAC address for veth44d8098: No such file or directory Oct 8 20:39:29 gle-dind02.cs.umd.edu systemd-udevd[2126339]: Could not generate persistent MAC address for veth204569c: No such file or directory Oct 8 20:39:29 gle-dind02.cs.umd.edu systemd-udevd[2126429]: Could not generate persistent MAC address for vethaf44296: No such file or directory Oct 8 20:39:29 gle-dind02.cs.umd.edu systemd-udevd[2126430]: Could not generate persistent MAC address for vethbb8b8bd: No such file or directory Oct 8 20:39:47 gle-dind02.cs.umd.edu systemd-udevd[2126732]: Could not generate persistent MAC address for veth08795dd: No such file or directory Oct 8 20:39:47 gle-dind02.cs.umd.edu systemd-udevd[2126733]: Could not generate persistent MAC address for veth7035e98: No such file or directory Oct 8 20:39:48 gle-dind02.cs.umd.edu systemd-udevd[2126832]: Could not generate persistent MAC address for veth1ed18a5: No such file or directory Oct 8 20:39:48 gle-dind02.cs.umd.edu systemd-udevd[2126833]: Could not generate persistent MAC address for vethf8ea1c7: No such file or directory Oct 8 20:39:50 gle-dind02.cs.umd.edu systemd-udevd[2127011]: Could not generate persistent MAC address for veth0c39591: No such file or directory Oct 8 20:39:50 gle-dind02.cs.umd.edu systemd-udevd[2127010]: Could not generate persistent MAC address for veth40ec069: No such file or directory Oct 8 20:39:51 gle-dind02.cs.umd.edu systemd-udevd[2127124]: Could not generate persistent MAC address for veth92b8a47: No such file or directory Oct 8 20:39:51 gle-dind02.cs.umd.edu systemd-udevd[2127125]: Could not generate persistent MAC address for vethfd54add: No such file or directory Oct 8 20:47:25 gle-dind02.cs.umd.edu systemd-udevd[2129471]: Could not generate persistent MAC address for veth87d30ef: No such file or directory Oct 8 20:47:25 gle-dind02.cs.umd.edu systemd-udevd[2129472]: Could not generate persistent MAC address for veth1923430: No such file or directory Oct 8 20:47:55 gle-dind02.cs.umd.edu systemd-udevd[2129635]: Could not generate persistent MAC address for veth3984bc6: No such file or directory Oct 8 20:47:55 gle-dind02.cs.umd.edu systemd-udevd[2129636]: Could not generate persistent MAC address for veth53060c6: No such file or directory Oct 8 20:47:57 gle-dind02.cs.umd.edu lldpd[973]: unable to send packet on real device for veth1923430: No such device or address == gle-dind04 (3 distinct, 3 total) == Oct 8 20:12:33 gle-dind04 lldpd[1171]: unable to send packet on real device for vetha00f769: No such device or address Oct 8 20:37:14 gle-dind04 falcon-sensor-bpf[1017]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Oct 8 20:37:14 gle-dind04 falcon-sensor-bpf[1017]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == idm00 (1 distinct, 1 total) == Oct 8 20:54:42 idm00 named[4166701]: client @0x7f11a93ed928 10.73.240.42#50295: update '73.10.in-addr.arpa/IN' denied == idmp0 (1 distinct, 1 total) == Oct 8 20:39:21 idmp0 named[1598691]: client @0x7f2d2801dea8 10.73.240.43#64107: update '73.10.in-addr.arpa/IN' denied == irb2156 (1 distinct, 1 total) == Oct 8 20:05:31 irb2156 systemd-resolved[3579]: Using degraded feature set TCP instead of UDP for DNS server 128.8.76.3. == itmon02 (1 distinct, 3 total) == Oct 8 20:18:57 itmon02 sshd[805675]: error: beginning MaxStartups throttling [x3] == krispykreme.cs.umd.edu (1 distinct, 3 total) == Oct 8 20:28:05 krispykreme.cs.umd.edu sshd-session[3607930]: error: send_error: write: Connection reset by peer [x3] == munin (2 distinct, 50 total) == Oct 8 20:08:50 munin sudo[1970818]: pam_systemd(sudo:session): Failed to stat() runtime directory '/run/user/0': No such file or directory [x25] Oct 8 20:08:50 munin sudo[1970818]: pam_systemd(sudo:session): Not setting $XDG_RUNTIME_DIR, as the directory is not in order. [x25] == newhonors2 (1 distinct, 24 total) == Oct 8 20:13:03 newhonors2 dhcpcd[3750139]: dhcpcd is not running [x24] == ntop00 (96 distinct, 96 total) == Oct 8 20:05:14 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 5482, QN: 7346/7346, ET: 13) *** Oct 8 20:08:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 5483) *** Oct 8 20:08:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 5483, QN: 7161/7161, ET: 0) *** Oct 8 20:08:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 5483) *** Oct 8 20:08:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - END (PID: 5483, QN: 75/75, ET: 0) *** Oct 8 20:10:01 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - START (PID: 5484) *** Oct 8 20:10:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - START (PID: 5484) *** Oct 8 20:10:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - END (PID: 5484, QN: 67/67, ET: 0) *** Oct 8 20:10:11 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 5484, QN: 6093/6093, ET: 10) *** Oct 8 20:13:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 5485) *** Oct 8 20:13:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - END (PID: 5485, QN: 52/52, ET: 0) *** Oct 8 20:13:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 5485) *** Oct 8 20:13:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 5485, QN: 7165/7165, ET: 0) *** Oct 8 20:15:01 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - START (PID: 5486) *** Oct 8 20:15:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - START (PID: 5486) *** Oct 8 20:15:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - END (PID: 5486, QN: 60/60, ET: 0) *** Oct 8 20:15:15 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 5486, QN: 8340/8340, ET: 14) *** Oct 8 20:18:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 5487) *** Oct 8 20:18:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 5487, QN: 7534/7534, ET: 0) *** Oct 8 20:18:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 5487) *** Oct 8 20:18:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - END (PID: 5487, QN: 54/54, ET: 0) *** Oct 8 20:20:01 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - START (PID: 5488) *** Oct 8 20:20:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - START (PID: 5488) *** Oct 8 20:20:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - END (PID: 5488, QN: 62/62, ET: 0) *** Oct 8 20:20:14 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 5488, QN: 7185/7185, ET: 13) *** Oct 8 20:23:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 5489) *** Oct 8 20:23:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - END (PID: 5489, QN: 65/65, ET: 0) *** Oct 8 20:23:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 5489) *** Oct 8 20:23:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 5489, QN: 6282/6282, ET: 0) *** Oct 8 20:25:01 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - START (PID: 5490) *** ... 66 more distinct messages not shown == outbound00.cs.umd.edu (22 distinct, 55 total) == Oct 8 20:09:08 outbound00.cs.umd.edu python3[722088]: ldapdb [x6] Oct 8 20:50:48 outbound00.cs.umd.edu sshd-session[731545]: error: maximum authentication attempts exceeded for invalid user user from 38.148.20.134 port 38704 ssh2 [preauth] Oct 8 20:51:19 outbound00.cs.umd.edu sshd-session[731557]: error: maximum authentication attempts exceeded for invalid user user from 38.148.20.134 port 38888 ssh2 [preauth] Oct 8 20:52:09 outbound00.cs.umd.edu sshd-session[731667]: error: maximum authentication attempts exceeded for invalid user test from 38.148.20.134 port 39235 ssh2 [preauth] Oct 8 20:52:37 outbound00.cs.umd.edu sshd-session[731680]: error: maximum authentication attempts exceeded for invalid user test from 38.148.20.134 port 39422 ssh2 [preauth] Oct 8 20:53:18 outbound00.cs.umd.edu sshd-session[731800]: error: maximum authentication attempts exceeded for invalid user usuario from 38.148.20.134 port 39730 ssh2 [preauth] Oct 8 20:53:47 outbound00.cs.umd.edu sshd-session[731898]: error: maximum authentication attempts exceeded for invalid user usuario from 38.148.20.134 port 39896 ssh2 [preauth] Oct 8 20:54:26 outbound00.cs.umd.edu sshd-session[731922]: error: maximum authentication attempts exceeded for invalid user ftpuser from 38.148.20.134 port 40201 ssh2 [preauth] Oct 8 20:54:51 outbound00.cs.umd.edu sshd-session[732021]: error: maximum authentication attempts exceeded for invalid user ftpuser from 38.148.20.134 port 40354 ssh2 [preauth] Oct 8 20:56:01 outbound00.cs.umd.edu sshd-session[732815]: error: maximum authentication attempts exceeded for invalid user ubuntu from 38.148.20.134 port 40778 ssh2 [preauth] Oct 8 20:56:23 outbound00.cs.umd.edu sshd-session[733110]: error: maximum authentication attempts exceeded for invalid user ubuntu from 38.148.20.134 port 40950 ssh2 [preauth] Oct 8 20:57:12 outbound00.cs.umd.edu sshd-session[733214]: error: maximum authentication attempts exceeded for invalid user oracle from 38.148.20.134 port 41223 ssh2 [preauth] Oct 8 20:57:42 outbound00.cs.umd.edu sshd-session[733226]: error: maximum authentication attempts exceeded for invalid user oracle from 38.148.20.134 port 41415 ssh2 [preauth] Oct 8 20:58:16 outbound00.cs.umd.edu krb5_child[733565]: Client 'admin@UMD.EDU' not found in Kerberos database [x16] Oct 8 20:58:35 outbound00.cs.umd.edu sshd-session[733459]: error: maximum authentication attempts exceeded for admin from 38.148.20.134 port 41771 ssh2 [preauth] Oct 8 20:59:00 outbound00.cs.umd.edu sshd-session[733655]: error: maximum authentication attempts exceeded for admin from 38.148.20.134 port 41931 ssh2 [preauth] Oct 8 20:59:44 outbound00.cs.umd.edu sshd-session[734031]: error: maximum authentication attempts exceeded for invalid user test2 from 38.148.20.134 port 42216 ssh2 [preauth] Oct 8 21:00:10 outbound00.cs.umd.edu sshd-session[734044]: error: maximum authentication attempts exceeded for invalid user test2 from 38.148.20.134 port 42374 ssh2 [preauth] Oct 8 21:00:30 outbound00.cs.umd.edu krb5_child[734474]: Client 'test1@UMD.EDU' not found in Kerberos database [x14] Oct 8 21:00:51 outbound00.cs.umd.edu sshd-session[734471]: error: maximum authentication attempts exceeded for test1 from 38.148.20.134 port 42621 ssh2 [preauth] Oct 8 21:01:17 outbound00.cs.umd.edu sshd-session[734490]: error: maximum authentication attempts exceeded for test1 from 38.148.20.134 port 42811 ssh2 [preauth] Oct 8 21:01:55 outbound00.cs.umd.edu sshd-session[734627]: error: maximum authentication attempts exceeded for root from 38.148.20.134 port 43074 ssh2 [preauth] == outbound01.cs.umd.edu (1 distinct, 6 total) == Oct 8 20:13:06 outbound01.cs.umd.edu python3[2188751]: ldapdb [x6] == strawberry (7 distinct, 38 total) == Oct 8 20:07:03 strawberry kernel: I/O error, dev sda, sector 206848 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [x6] Oct 8 20:07:03 strawberry kernel: I/O error, dev sda, sector 206848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [x6] Oct 8 20:07:03 strawberry kernel: Buffer I/O error on dev sda2, logical block 0, async page read [x6] Oct 8 20:07:03 strawberry kernel: I/O error, dev sda, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [x6] Oct 8 20:07:03 strawberry kernel: I/O error, dev sda, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [x6] Oct 8 20:07:03 strawberry kernel: Buffer I/O error on dev sda1, logical block 0, async page read [x6] Oct 8 20:34:42 strawberry smartd[5314]: Device: /dev/sda [SAT], failed to read SMART Attribute Data [x2] == submit10-cln25 (6 distinct, 1542 total) == Oct 8 20:05:22 submit10-cln25 rsyslogd: file '/var/log/messages': open error: Input/output error [v8.24.0-57.el7_9.3 try http://www.rsyslog.com/e/2433 ] [x1200] Oct 8 20:05:22 submit10-cln25 rsyslogd: imjournal: fopen() failed for path: '/var/lib/rsyslog/imjournal.state.tmp': Input/output error [v8.24.0-57.el7_9.3 try http://www.rsyslog.com/e/2013 ] [x335] Oct 8 20:08:00 submit10-cln25 systemd: Failed at step USER spawning /usr/libexec/pcp/bin/pmie_daily: Input/output error Oct 8 20:10:00 submit10-cln25 systemd: Failed at step USER spawning /usr/libexec/pcp/bin/pmlogger_daily: Input/output error [x2] Oct 8 20:25:00 submit10-cln25 systemd: Failed at step USER spawning /usr/libexec/pcp/bin/pmlogger_check: Input/output error [x2] Oct 8 20:28:00 submit10-cln25 systemd: Failed at step USER spawning /usr/libexec/pcp/bin/pmie_check: Input/output error [x2] == submit26-b9-3 (1 distinct, 2 total) == Sep 10 21:52:59 submit26-b9-3 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL [x2] == submit26-b9-f1 (1 distinct, 1 total) == Oct 8 20:53:08 submit26-b9-f1 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL == submit26-b9-f3 (1 distinct, 2 total) == Oct 8 20:11:49 submit26-b9-f3 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL [x2] == submit26-b9-f4 (5 distinct, 7 total) == Oct 8 20:08:11 submit26-b9-f4 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL [x3] Oct 8 20:08:13 submit26-b9-f4 systemd-coredump[472073]: Process 472071 (public04) of user 1001 dumped core.#012#012Stack trace of thread 472071:#012#0 0x00007f07b54adc60 __strcpy_sse2_unaligned (libc.so.6 + 0xadc60)#012#1 0x0000000000401696 add_paragraph_after (public04 + 0x1696)#012#2 0x00000000004011c8 main (public04 + 0x11c8)#012#3 0x00007f07b5420010 n/a (libc.so.6 + 0x20010)#012ELF object binary architecture: AMD x86-64 Oct 8 20:08:13 submit26-b9-f4 systemd-coredump[472081]: Process 472079 (public05) of user 1001 dumped core.#012#012Stack trace of thread 472079:#012#0 0x00007f51688adc60 __strcpy_sse2_unaligned (libc.so.6 + 0xadc60)#012#1 0x000000000040171a add_paragraph_after (public05 + 0x171a)#012#2 0x00000000004011d5 main (public05 + 0x11d5)#012#3 0x00007f5168820010 n/a (libc.so.6 + 0x20010)#012ELF object binary architecture: AMD x86-64 Oct 8 20:08:14 submit26-b9-f4 systemd-coredump[472110]: Process 472108 (secret04) of user 1001 dumped core.#012#012Stack trace of thread 472108:#012#0 0x00007fc3824adc60 __strcpy_sse2_unaligned (libc.so.6 + 0xadc60)#012#1 0x0000000000401700 add_paragraph_after (secret04 + 0x1700)#012#2 0x00000000004011d5 main (secret04 + 0x11d5)#012#3 0x00007fc382420010 n/a (libc.so.6 + 0x20010)#012ELF object binary architecture: AMD x86-64 Oct 8 20:08:15 submit26-b9-f4 systemd-coredump[472122]: Process 472120 (secret07) of user 1001 dumped core.#012#012Stack trace of thread 472120:#012#0 0x00007f01962adca2 __strcpy_sse2_unaligned (libc.so.6 + 0xadca2)#012#1 0x0000000000401744 add_paragraph_after (secret07 + 0x1744)#012#2 0x00000000004011d5 main (secret07 + 0x11d5)#012#3 0x00007f0196220010 n/a (libc.so.6 + 0x20010)#012ELF object binary architecture: AMD x86-64 == submit26-b9-fclone (9 distinct, 12 total) == Oct 8 20:22:04 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from create access on the directory /(null). For complete SELinux messages run: sealert -l 9355d9d9-a311-48d2-bd37-6c0f6947dfff Oct 8 20:22:04 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from add_name access on the directory /(null). For complete SELinux messages run: sealert -l cc4658d7-9db1-405d-9eee-de0ccee5857f Oct 8 20:22:04 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from create access on the file /(null). For complete SELinux messages run: sealert -l 568a2429-0b1b-49df-af41-49b5cd298ae8 [x2] Oct 8 20:22:04 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from open access on the file /tmp/libdnf.sdpJFP/repodata/repomd.xml. For complete SELinux messages run: sealert -l 03e2f521-0e7c-481f-8e92-0602c6adeedc [x2] Oct 8 20:22:04 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from setattr access on the file repomd.xml. For complete SELinux messages run: sealert -l 0d6b7b1f-ebe3-4beb-915a-b06b63bf2566 [x2] Oct 8 20:22:05 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from read access on the directory libdnf.sdpJFP. For complete SELinux messages run: sealert -l 887adbf9-2bb9-4009-b800-36ddf9ba0db5 Oct 8 20:22:05 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from remove_name access on the directory repomd.xml. For complete SELinux messages run: sealert -l 092e0644-8373-4017-b77f-1afa6c6da4ac Oct 8 20:22:05 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l ce429a92-56de-4de1-b859-cbfb69ae123c Oct 8 20:22:05 submit26-b9-fclone setroubleshoot[1249168]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 99b886eb-497b-406d-8206-afe76a1086b4