Command: /usr/local/sbin/syslog-digest.py Time : 0.0533s Status : exited 0 Output : Syslog digest — 2026-09-17 21:05 EDT Processed 2,810 lines, filtered 2,290 (81%). 520 unknown (213 distinct) from 22 host(s). == b0b02.cs.umd.edu (1 distinct, 1 total) == Sep 17 20:48:32 b0b02.cs.umd.edu rustdesk[2278036]: cannot open display: == csfw00a (1 distinct, 124 total) == Sep 17 20:04:09 csfw00a kernel: bnxt_en 0000:09:00.0 eth3: NIC Link is Down [x124] == frozone (2 distinct, 2 total) == Sep 17 20:47:42 frozone falcon-sensor-bpf[1052]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:47:42 frozone falcon-sensor-bpf[1052]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == grosh (2 distinct, 2 total) == Sep 17 20:34:33 grosh falcon-sensor-bpf[3220]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:34:33 grosh falcon-sensor-bpf[3220]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == hackerman (2 distinct, 2 total) == Sep 17 20:37:32 hackerman falcon-sensor-bpf[896]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:37:32 hackerman falcon-sensor-bpf[896]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == haproxy02.cs.umd.edu (2 distinct, 2 total) == Sep 17 20:10:51 haproxy02.cs.umd.edu falcon-sensor-bpf[990]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:10:51 haproxy02.cs.umd.edu falcon-sensor-bpf[990]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == idm00 (1 distinct, 1 total) == Sep 17 20:53:57 idm00 named[4166701]: client @0x7f11a4042778 10.73.240.42#55622: update '73.10.in-addr.arpa/IN' denied == idmp0 (1 distinct, 1 total) == Sep 17 20:37:57 idmp0 named[1598691]: client @0x7f2d40000cc8 10.73.240.43#64913: update '73.10.in-addr.arpa/IN' denied == irb2156 (2 distinct, 2 total) == Sep 17 20:18:58 irb2156 falcon-sensor-bpf[3728]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:18:58 irb2156 falcon-sensor-bpf[3728]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == itmon02 (3 distinct, 5 total) == Sep 17 20:08:02 itmon02 sshd[1750555]: error: beginning MaxStartups throttling [x2] Sep 17 20:46:25 itmon02 SetroubleshootPrivileged.py[2933 failed to retrieve rpm info for path '/var/lib/selinux/targeted/active/modules/200/grafana': Sep 17 20:46:25 itmon02 setroubleshoot[2933442]: SELinux is preventing /usr/sbin/grafana from name_connect access on the tcp_socket port 3306. For complete SELinux messages run: sealert -l deb40268-1414-43e0-8915-0a3785a3ecd5 [x2] == munin (2 distinct, 72 total) == Sep 17 20:23:04 munin sudo[3589515]: pam_systemd(sudo:session): Failed to stat() runtime directory '/run/user/0': No such file or directory [x36] Sep 17 20:23:04 munin sudo[3589515]: pam_systemd(sudo:session): Not setting $XDG_RUNTIME_DIR, as the directory is not in order. [x36] == neodontcare.cs.umd.edu (2 distinct, 2 total) == Sep 17 20:08:46 neodontcare.cs.umd.edu falcon-sensor-bpf[951]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:08:46 neodontcare.cs.umd.edu falcon-sensor-bpf[951]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == netman.cs.umd.edu (2 distinct, 2 total) == Sep 17 20:28:18 netman.cs.umd.edu falcon-sensor-bpf[1129]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:28:18 netman.cs.umd.edu falcon-sensor-bpf[1129]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == newhonors2 (1 distinct, 24 total) == Sep 17 20:13:03 newhonors2 dhcpcd[2783104]: dhcpcd is not running [x24] == ntop00 (132 distinct, 177 total) == Sep 17 20:05:01 ntop00 nfacctd[313303]: INFO ( m1/mysql ): *** Purging cache - START (PID: 14) *** Sep 17 20:05:01 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - START (PID: 15) *** Sep 17 20:05:01 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - END (PID: 15, QN: 73/73, ET: 0) *** Sep 17 20:05:02 ntop00 setroubleshoot[316999]: SELinux is preventing /usr/local/sbin/sfacctd from append access on the file sflow.json. For complete SELinux messages run: sealert -l 9916476b-fb21-444f-b3db-e6c3fcb28735 [x10] Sep 17 20:05:02 ntop00 setroubleshoot[316999]: SELinux is preventing /usr/local/sbin/sfacctd from write access on the file sflow.json. For complete SELinux messages run: sealert -l 5c164851-02bd-4109-8bc1-a62be4d42c4e [x10] Sep 17 20:05:02 ntop00 setroubleshoot[316999]: failed to retrieve rpm info for path '/srv/pmacct/sflow.json': [x13] Sep 17 20:05:02 ntop00 setroubleshoot[316999]: SELinux is preventing /usr/local/sbin/sfacctd from lock access on the file /srv/pmacct/sflow.json. For complete SELinux messages run: sealert -l 322848e7-c44b-4cc2-96d6-933b8aaacb81 [x10] Sep 17 20:05:38 ntop00 sfacctd[313229]: INFO ( m1/mysql ): *** Purging cache - END (PID: 15, QN: 20461/20461, ET: 37) *** Sep 17 20:05:38 ntop00 nfacctd[313303]: INFO ( m1/mysql ): *** Purging cache - END (PID: 14, QN: 73/73, ET: 37) *** Sep 17 20:10:01 ntop00 sfacctd[313229]: INFO ( p1/print ): *** Purging cache - START (PID: 16) *** Sep 17 20:10:01 ntop00 sfacctd[313229]: INFO ( m1/mysql ): *** Purging cache - START (PID: 17) *** Sep 17 20:10:01 ntop00 sfacctd[313229]: INFO ( p1/print ): *** Purging cache - END (PID: 16, QN: 14740/14740, ET: 0) *** Sep 17 20:10:01 ntop00 nfacctd[313303]: INFO ( m1/mysql ): *** Purging cache - START (PID: 16) *** Sep 17 20:10:02 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - START (PID: 17) *** Sep 17 20:10:02 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - END (PID: 17, QN: 76/76, ET: 0) *** Sep 17 20:10:24 ntop00 sfacctd[313229]: INFO ( m1/mysql ): *** Purging cache - END (PID: 17, QN: 14740/14740, ET: 23) *** Sep 17 20:10:24 ntop00 nfacctd[313303]: INFO ( m1/mysql ): *** Purging cache - END (PID: 16, QN: 76/76, ET: 23) *** Sep 17 20:15:01 ntop00 sfacctd[313229]: INFO ( p1/print ): *** Purging cache - START (PID: 18) *** Sep 17 20:15:01 ntop00 sfacctd[313229]: INFO ( m1/mysql ): *** Purging cache - START (PID: 19) *** Sep 17 20:15:01 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - START (PID: 18) *** Sep 17 20:15:01 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - END (PID: 18, QN: 62/62, ET: 0) *** Sep 17 20:15:01 ntop00 nfacctd[313303]: INFO ( m1/mysql ): *** Purging cache - START (PID: 19) *** Sep 17 20:15:01 ntop00 sfacctd[313229]: INFO ( p1/print ): *** Purging cache - END (PID: 18, QN: 10195/10195, ET: 0) *** Sep 17 20:15:17 ntop00 sfacctd[313229]: INFO ( m1/mysql ): *** Purging cache - END (PID: 19, QN: 10195/10195, ET: 16) *** Sep 17 20:15:17 ntop00 nfacctd[313303]: INFO ( m1/mysql ): *** Purging cache - END (PID: 19, QN: 62/62, ET: 16) *** Sep 17 20:20:01 ntop00 sfacctd[313229]: INFO ( p1/print ): *** Purging cache - START (PID: 20) *** Sep 17 20:20:01 ntop00 sfacctd[313229]: INFO ( m1/mysql ): *** Purging cache - START (PID: 21) *** Sep 17 20:20:01 ntop00 sfacctd[313229]: INFO ( p1/print ): *** Purging cache - END (PID: 20, QN: 9820/9820, ET: 0) *** Sep 17 20:20:01 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - START (PID: 21) *** Sep 17 20:20:01 ntop00 nfacctd[313303]: INFO ( p1/print ): *** Purging cache - END (PID: 21, QN: 79/79, ET: 0) *** ... 102 more distinct messages not shown == outbound00.cs.umd.edu (1 distinct, 6 total) == Sep 17 20:09:09 outbound00.cs.umd.edu python3[1125599]: ldapdb [x6] == outbound01.cs.umd.edu (1 distinct, 6 total) == Sep 17 20:13:06 outbound01.cs.umd.edu python3[3385090]: ldapdb [x6] == sentry-docker00.cs.umd.edu (36 distinct, 36 total) == Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494632]: link_config: could not get ethtool features for veth148aa14 Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494632]: Could not set offload features of veth148aa14: No such device Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494674]: Could not generate persistent MAC address for veth361617d: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494675]: Could not generate persistent MAC address for veth0e5661f: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494678]: Could not generate persistent MAC address for veth36c465e: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494679]: Could not generate persistent MAC address for veth5b1c9f9: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494690]: Could not generate persistent MAC address for vethf5d9fee: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494674]: Could not generate persistent MAC address for veth8a42eee: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494709]: Could not generate persistent MAC address for veth4bb1a72: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494710]: Could not generate persistent MAC address for vethfe3b7f1: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494728]: Could not generate persistent MAC address for veth814a2fa: No such file or directory Sep 17 20:10:48 sentry-docker00.cs.umd.edu systemd-udevd[2494713]: Could not generate persistent MAC address for vethdda09d7: No such file or directory Sep 17 20:30:56 sentry-docker00.cs.umd.edu systemd-udevd[2504264]: link_config: could not get ethtool features for veth36c465e Sep 17 20:30:56 sentry-docker00.cs.umd.edu systemd-udevd[2504264]: Could not set offload features of veth36c465e: No such device Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504283]: Could not generate persistent MAC address for vethbeb1f9a: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504284]: Could not generate persistent MAC address for veth5777127: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504310]: Could not generate persistent MAC address for vethffc98c1: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504309]: Could not generate persistent MAC address for veth5a9cf5f: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504335]: Could not generate persistent MAC address for veth738441a: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504336]: Could not generate persistent MAC address for veth5d5bae9: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504354]: Could not generate persistent MAC address for veth5512614: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504344]: Could not generate persistent MAC address for veth9d8e232: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504382]: Could not generate persistent MAC address for veth29e45d7: No such file or directory Sep 17 20:30:57 sentry-docker00.cs.umd.edu systemd-udevd[2504388]: Could not generate persistent MAC address for veth19e8ffa: No such file or directory Sep 17 20:51:05 sentry-docker00.cs.umd.edu systemd-udevd[2513692]: link_config: could not get ethtool features for vethbeb1f9a Sep 17 20:51:05 sentry-docker00.cs.umd.edu systemd-udevd[2513692]: Could not set offload features of vethbeb1f9a: No such device Sep 17 20:51:05 sentry-docker00.cs.umd.edu systemd-udevd[2513728]: Could not generate persistent MAC address for veth4bdc0b1: No such file or directory Sep 17 20:51:05 sentry-docker00.cs.umd.edu systemd-udevd[2513729]: Could not generate persistent MAC address for veth1802720: No such file or directory Sep 17 20:51:05 sentry-docker00.cs.umd.edu systemd-udevd[2513733]: Could not generate persistent MAC address for veth9470223: No such file or directory Sep 17 20:51:05 sentry-docker00.cs.umd.edu systemd-udevd[2513732]: Could not generate persistent MAC address for veth41fbafe: No such file or directory ... 6 more distinct messages not shown == strawberry (7 distinct, 38 total) == Sep 17 20:07:03 strawberry kernel: I/O error, dev sda, sector 206848 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [x6] Sep 17 20:07:03 strawberry kernel: I/O error, dev sda, sector 206848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [x6] Sep 17 20:07:03 strawberry kernel: Buffer I/O error on dev sda2, logical block 0, async page read [x6] Sep 17 20:07:03 strawberry kernel: I/O error, dev sda, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [x6] Sep 17 20:07:03 strawberry kernel: I/O error, dev sda, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [x6] Sep 17 20:07:03 strawberry kernel: Buffer I/O error on dev sda1, logical block 0, async page read [x6] Sep 17 20:34:42 strawberry smartd[5314]: Device: /dev/sda [SAT], failed to read SMART Attribute Data [x2] == submit26-b9-f4 (1 distinct, 1 total) == Sep 17 21:03:03 submit26-b9-f4 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL == submit26-b9-fclone (9 distinct, 12 total) == Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from create access on the directory /(null). For complete SELinux messages run: sealert -l 9355d9d9-a311-48d2-bd37-6c0f6947dfff Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from add_name access on the directory /(null). For complete SELinux messages run: sealert -l cc4658d7-9db1-405d-9eee-de0ccee5857f Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from create access on the file /(null). For complete SELinux messages run: sealert -l 568a2429-0b1b-49df-af41-49b5cd298ae8 [x2] Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from open access on the file /tmp/libdnf.uBK5Q9/repodata/repomd.xml. For complete SELinux messages run: sealert -l 03e2f521-0e7c-481f-8e92-0602c6adeedc [x2] Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from setattr access on the file repomd.xml. For complete SELinux messages run: sealert -l 0d6b7b1f-ebe3-4beb-915a-b06b63bf2566 [x2] Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from read access on the directory libdnf.uBK5Q9. For complete SELinux messages run: sealert -l 887adbf9-2bb9-4009-b800-36ddf9ba0db5 Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from remove_name access on the directory repomd.xml. For complete SELinux messages run: sealert -l 092e0644-8373-4017-b77f-1afa6c6da4ac Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l ce429a92-56de-4de1-b859-cbfb69ae123c Sep 17 20:21:50 submit26-b9-fclone setroubleshoot[22224]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 99b886eb-497b-406d-8206-afe76a1086b4 == talkhosts9 (2 distinct, 2 total) == Sep 17 20:23:27 talkhosts9 falcon-sensor-bpf[714]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Sep 17 20:23:27 talkhosts9 falcon-sensor-bpf[714]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225
participants (1)
-
cron/syslog01.cs.umd.edu