Command: /usr/local/sbin/syslog-digest.py Time : 0.0461s Status : exited 0 Output : Syslog digest — 2026-10-15 02:05 EDT Processed 1,106 lines, filtered 527 (47%). 579 unknown (179 distinct) from 22 host(s). == b0b02.cs.umd.edu (1 distinct, 1 total) == Oct 15 01:28:29 b0b02.cs.umd.edu rustdesk[3989599]: cannot open display: == biggulp.cs.umd.edu (4 distinct, 4 total) == Oct 15 01:39:37 biggulp.cs.umd.edu sshd-session[2202262]: pam_access(sshd:auth): access denied for user `admin' from `35.241.189.123' Oct 15 01:39:37 biggulp.cs.umd.edu krb5_child[2202264]: Client 'admin@UMD.EDU' not found in Kerberos database Oct 15 01:39:37 biggulp.cs.umd.edu sshd-session[2202260]: error: PAM: System error for admin from 35.241.189.123 Oct 15 01:39:46 biggulp.cs.umd.edu sshd-session[2202274]: error: Protocol major versions differ: 2 vs. 1 == cheezit.cs.umd.edu (3 distinct, 4 total) == Oct 15 01:26:11 cheezit.cs.umd.edu sshd-session[2831766]: pam_access(sshd:auth): access denied for user `larry' from `71.191.93.172' [x2] Oct 15 01:26:12 cheezit.cs.umd.edu sshd-session[2831766]: Error in Duo login for 'larry' from 71.191.93.172 Oct 15 01:26:12 cheezit.cs.umd.edu sshd-session[2831764]: error: PAM: Authentication failure for larry from 71.191.93.172 == hazfs.cs.umd.edu (11 distinct, 66 total) == Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: send response: Failure in sendto [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendStatus."userweb" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendStatus."zfslist" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendStatus."userhome" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."userweb" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."zfslist" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."userhome" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendOutputFull."userweb" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendOutputFull."zfslist" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendOutputFull."userhome" [x6] Oct 15 01:33:28 hazfs.cs.umd.edu snmpd[1431]: -- NET-SNMP-EXTEND-MIB::nsExtendOutNumLines."userweb" [x6] == idm00 (1 distinct, 1 total) == Oct 15 01:54:49 idm00 named[1014]: client @0x7fcbc407aaf8 10.73.240.42#53799: update '73.10.in-addr.arpa/IN' denied == idmh1 (12 distinct, 144 total) == Oct 15 01:08:22 idmh1 check-named-alive[867566]: zone cs.umd.edu: local SOA serial 1791811218 lags newest peer 1791837289 by 26071 (threshold 3600); not acting [x12] Oct 15 01:08:22 idmh1 check-named-alive[867627]: zone csdlabs.umd.edu: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] Oct 15 01:08:23 idmh1 check-named-alive[867688]: zone csic.umd.edu: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] Oct 15 01:08:23 idmh1 check-named-alive[867749]: zone 72.10.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] Oct 15 01:08:23 idmh1 check-named-alive[867870]: zone 88.10.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] Oct 15 01:08:23 idmh1 check-named-alive[867931]: zone 125.8.128.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] Oct 15 01:08:24 idmh1 check-named-alive[867992]: zone 126.8.128.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] Oct 15 01:08:24 idmh1 check-named-alive[868053]: zone 127.8.128.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837289 by 26071 (threshold 3600); not acting [x12] Oct 15 01:08:24 idmh1 check-named-alive[868114]: zone 128.8.128.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837289 by 26071 (threshold 3600); not acting [x12] Oct 15 01:08:24 idmh1 check-named-alive[868175]: zone 129.8.128.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837289 by 26071 (threshold 3600); not acting [x12] Oct 15 01:08:24 idmh1 check-named-alive[868236]: zone 130.8.128.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] Oct 15 01:08:25 idmh1 check-named-alive[868297]: zone 131.8.128.in-addr.arpa: local SOA serial 1791811218 lags newest peer 1791837290 by 26072 (threshold 3600); not acting [x12] == idmp0 (1 distinct, 1 total) == Oct 15 01:40:03 idmp0 named[1180]: client @0x7fe04c01c838 10.73.240.43#50443: update '73.10.in-addr.arpa/IN' denied == idmv0 (12 distinct, 144 total) == Oct 15 01:08:59 idmv0 check-named-alive[968356]: zone cs.umd.edu: local SOA serial 1791814921 lags newest peer 1791837289 by 22368 (threshold 3600); not acting [x12] Oct 15 01:08:59 idmv0 check-named-alive[968417]: zone csdlabs.umd.edu: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] Oct 15 01:08:59 idmv0 check-named-alive[968478]: zone csic.umd.edu: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] Oct 15 01:08:59 idmv0 check-named-alive[968539]: zone 72.10.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] Oct 15 01:09:00 idmv0 check-named-alive[968660]: zone 88.10.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] Oct 15 01:09:00 idmv0 check-named-alive[968724]: zone 125.8.128.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] Oct 15 01:09:00 idmv0 check-named-alive[968785]: zone 126.8.128.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] Oct 15 01:09:00 idmv0 check-named-alive[968854]: zone 127.8.128.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837289 by 22368 (threshold 3600); not acting [x12] Oct 15 01:09:00 idmv0 check-named-alive[968915]: zone 128.8.128.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837289 by 22368 (threshold 3600); not acting [x12] Oct 15 01:09:01 idmv0 check-named-alive[968976]: zone 129.8.128.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837289 by 22368 (threshold 3600); not acting [x12] Oct 15 01:09:01 idmv0 check-named-alive[969037]: zone 130.8.128.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] Oct 15 01:09:01 idmv0 check-named-alive[969098]: zone 131.8.128.in-addr.arpa: local SOA serial 1791814921 lags newest peer 1791837290 by 22369 (threshold 3600); not acting [x12] == itmon02 (1 distinct, 2 total) == Oct 15 01:22:58 itmon02 sshd[805675]: error: beginning MaxStartups throttling [x2] == munin (2 distinct, 10 total) == Oct 15 01:08:10 munin sudo[1008148]: pam_systemd(sudo:session): Failed to stat() runtime directory '/run/user/0': No such file or directory [x5] Oct 15 01:08:10 munin sudo[1008148]: pam_systemd(sudo:session): Not setting $XDG_RUNTIME_DIR, as the directory is not in order. [x5] == newhonors2 (1 distinct, 24 total) == Oct 15 01:13:03 newhonors2 dhcpcd[4039150]: dhcpcd is not running [x24] == ntop00 (96 distinct, 96 total) == Oct 15 01:05:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - START (PID: 9058) *** Oct 15 01:05:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9058, QN: 64/64, ET: 0) *** Oct 15 01:05:12 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9058, QN: 4649/4649, ET: 11) *** Oct 15 01:08:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 9059) *** Oct 15 01:08:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 9059, QN: 5100/5100, ET: 0) *** Oct 15 01:08:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 9059) *** Oct 15 01:08:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - END (PID: 9059, QN: 75/75, ET: 0) *** Oct 15 01:10:01 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - START (PID: 9060) *** Oct 15 01:10:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - START (PID: 9060) *** Oct 15 01:10:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9060, QN: 71/71, ET: 0) *** Oct 15 01:10:12 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9060, QN: 5041/5041, ET: 11) *** Oct 15 01:13:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 9061) *** Oct 15 01:13:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 9061, QN: 4625/4625, ET: 0) *** Oct 15 01:13:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 9061) *** Oct 15 01:13:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - END (PID: 9061, QN: 67/67, ET: 0) *** Oct 15 01:15:01 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - START (PID: 9062) *** Oct 15 01:15:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - START (PID: 9062) *** Oct 15 01:15:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9062, QN: 53/53, ET: 0) *** Oct 15 01:15:12 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9062, QN: 4553/4553, ET: 11) *** Oct 15 01:18:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 9063) *** Oct 15 01:18:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 9063, QN: 4272/4272, ET: 0) *** Oct 15 01:18:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 9063) *** Oct 15 01:18:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - END (PID: 9063, QN: 48/48, ET: 0) *** Oct 15 01:20:01 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - START (PID: 9064) *** Oct 15 01:20:01 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - START (PID: 9064) *** Oct 15 01:20:02 ntop00 nfacctd[1075699]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9064, QN: 56/56, ET: 1) *** Oct 15 01:20:11 ntop00 sfacctd[1075592]: INFO ( m1/mysql ): *** Purging cache - END (PID: 9064, QN: 4177/4177, ET: 10) *** Oct 15 01:23:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - START (PID: 9065) *** Oct 15 01:23:01 ntop00 sfacctd[1075592]: INFO ( p1/print ): *** Purging cache - END (PID: 9065, QN: 4639/4639, ET: 0) *** Oct 15 01:23:01 ntop00 nfacctd[1075699]: INFO ( p1/print ): *** Purging cache - START (PID: 9065) *** ... 66 more distinct messages not shown == outbound00.cs.umd.edu (2 distinct, 7 total) == Oct 15 01:09:09 outbound00.cs.umd.edu python3[2794408]: ldapdb [x6] Oct 15 02:03:56 outbound00.cs.umd.edu krb5_child[2807028]: Client 'admin@UMD.EDU' not found in Kerberos database == outbound01.cs.umd.edu (1 distinct, 6 total) == Oct 15 01:13:06 outbound01.cs.umd.edu python3[93803]: ldapdb [x6] == soul (1 distinct, 1 total) == Oct 15 01:22:21 soul krb5_child[1025952]: Client 'admin@UMD.EDU' not found in Kerberos database == strawberry (7 distinct, 38 total) == Oct 15 01:07:02 strawberry kernel: I/O error, dev sda, sector 206848 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [x6] Oct 15 01:07:02 strawberry kernel: I/O error, dev sda, sector 206848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [x6] Oct 15 01:07:02 strawberry kernel: Buffer I/O error on dev sda2, logical block 0, async page read [x6] Oct 15 01:07:02 strawberry kernel: I/O error, dev sda, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [x6] Oct 15 01:07:02 strawberry kernel: I/O error, dev sda, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [x6] Oct 15 01:07:02 strawberry kernel: Buffer I/O error on dev sda1, logical block 0, async page read [x6] Oct 15 01:34:42 strawberry smartd[5314]: Device: /dev/sda [SAT], failed to read SMART Attribute Data [x2] == submit26-b9-3 (1 distinct, 7 total) == Sep 17 14:58:21 submit26-b9-3 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL [x7] == submit26-b9-f1 (1 distinct, 2 total) == Oct 15 01:10:25 submit26-b9-f1 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL [x2] == submit26-b9-f3 (9 distinct, 9 total) == Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from create access on the directory /(null). For complete SELinux messages run: sealert -l a653b772-cbcd-438b-bae5-23c3dc69b31b Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from add_name access on the directory /(null). For complete SELinux messages run: sealert -l 3e904634-6caa-4202-8c92-f139db798859 Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from create access on the file /(null). For complete SELinux messages run: sealert -l 580b20e4-ec2c-433d-905c-5bd417fba033 Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from open access on the file /tmp/libdnf.kQZZJh/repodata/repomd.xml. For complete SELinux messages run: sealert -l 27f29d48-5e7c-4db7-b051-8ac055737d6f Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from setattr access on the file repomd.xml. For complete SELinux messages run: sealert -l bff72452-d40a-430b-9060-dd0a48f5b6ba Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from read access on the directory libdnf.kQZZJh. For complete SELinux messages run: sealert -l 9638d396-8ce5-4e6a-ae47-45cd3985e1cd Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from remove_name access on the directory repomd.xml. For complete SELinux messages run: sealert -l 6da64b94-7024-45a9-b8c2-3b9812517407 Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 64cbe179-abf1-4d5a-bade-bb164897ee65 Oct 15 01:06:52 submit26-b9-f3 setroubleshoot[3499656]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l d2e35b1a-e27c-4f91-9217-2bb1204e1e68 == submit26-b9-f4 (9 distinct, 9 total) == Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from create access on the directory /(null). For complete SELinux messages run: sealert -l ee160f23-b161-4f4a-9985-c4edfd3a5beb Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from add_name access on the directory /(null). For complete SELinux messages run: sealert -l 89a83821-4b24-4081-9973-0a79ca6ed5b4 Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from create access on the file /(null). For complete SELinux messages run: sealert -l f73955d6-1416-45f9-bab6-ff1f3ea07e9d Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from open access on the file /tmp/libdnf.uItjwv/repodata/repomd.xml. For complete SELinux messages run: sealert -l 9f8f24a0-8fb6-454d-a103-31a8f7a6efa0 Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from setattr access on the file repomd.xml. For complete SELinux messages run: sealert -l 20293136-86a3-40ba-a651-cff48d36059e Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from read access on the directory libdnf.uItjwv. For complete SELinux messages run: sealert -l 25f86b49-4ee7-4f60-ad1c-73a70032560c Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from remove_name access on the directory repomd.xml. For complete SELinux messages run: sealert -l eec250fb-073f-456d-93bc-f98776fd476d Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l c9209e04-a349-43d5-8cb2-3e303e48df74 Oct 15 01:24:58 submit26-b9-f4 setroubleshoot[1273133]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 3178d5f5-80e9-404b-92b7-9bef397a8915 == teaching-awards (2 distinct, 2 total) == Oct 15 01:57:42 teaching-awards krb5_child[641501]: Client 'admin@UMD.EDU' not found in Kerberos database Oct 15 02:00:49 teaching-awards sshd-session[641832]: error: Protocol major versions differ: 2 vs. 1 == tma-0 (1 distinct, 1 total) == Oct 15 02:00:07 tma-0 sshd[28343]: error: PAM: Authentication failure for admin from 71.106.62.34.bc.googleusercontent.com