BSM logs IP Address in reverse on x86

In moving from SPARC to x86 platform I have found that BSM is logging IP addresses in reverse order as compared to BSM on SPARC. One point of caveat here is that I am using the syslog plugin for BSM. So I don't know if this would occur in the normal BSM binary logs or not, but it is definitely showing up in the syslogs.
For instance on SPARC a user login message would look like this:
Aug 18 07:13:14 hostname audit: [ID 702911 audit.notice] exit(2) ok session 2468094117 by userid as root:root in global from 192.168.15.1The same message on x86 looks like this:
Aug 18 07:13:14 hostname audit: [ID 702911 audit.notice] exit(2) ok session 2468094117 by userid as root:root in global from 1.15.168.192Has anyone else noticed this? Any idea how to correct this?

In case anyone else runs into this...
From Sun Support: this is a known bug on the little endian systems (x64) when using the syslog plugin. Bug ID 6314610. No patch exists and no efforts being made to create a patch at this time.
I have asked that this get escalated for a fix.

Similar Messages

I get ERROR U44M1P7: Error log file location: C:\Program Files (x86)\Common Files\Adobe\Installers

When updating Photoshop CS6 (Creative Cloud) I get ERROR U44M1P7: Error log file location: C:\Program Files (x86)\Common Files\Adobe\Installers. Initial Installation and actual funcioning wuith no problem, only on updating. I have tried several times with same error.

Hi Alberto Pomares,
Please refer the KB Doc : http://helpx.adobe.com/creative-suite/kb/error-u44m1p7-installing-updates-ccm.html

Logging IP Address of xelsysadm login

Hi All,
I need to do some logging of who is using the xelsysadm account.
does anyone know which logging option I would have to enable to see the remote IP address?
Thanx
Fred

You need to look at the Application Server and Web Server for logging ip addresses of users. This shouldn't be monitored as a function of OIM.
-Kevin

Log ip address to asl.log for ssh attempts

Hello,
I am running os x server 10.4.4.
How do I log ip address to asl.log for ssh attempts? I notice alot of ssh login attempts but there is no ip/host info:
[Time 2006.02.03 08:50:39 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message Failed to authorize right system.login.tty by process /usr/sbin/sshd for authorization created by /usr/sbin/sshd.] [Level 5] [UID -2] [GID -2] [Host kane]
[Time 2006.02.03 08:50:42 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message authinternal failed to authenticate user guest.] [Level 3] [UID -2] [GID -2] [Host kane]
[Time 2006.02.03 08:50:42 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message Failed to authorize right system.login.tty by process /usr/sbin/sshd for authorization created by /usr/sbin/sshd.] [Level 5] [UID -2] [GID -2] [Host kane]
[Time 2006.02.03 08:50:45 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message authinternal failed to authenticate user public.] [Level 3] [UID -2] [GID -2] [Host kane]
Soo

First and foremost, do you intend to allow access via ssh ?
For all but those accounts that absolutely must have it, go to each account, and set: shell: to none.
If you must allow ssh access, disallow root access (as you've done).
Setup a non-obvious admin account (so, not admin or administrator, certainly not "test") that can su/sudo, and allow access for that one account only. IE, edit /etc/sshd_config (NOT with a GUI editor, use at least pico please) as follows:
change:
#PermitRootLogin yes
to:
PermitRootLogin no
then, after the line that says StrictMode,
add:
AllowUsers mysrvradmn
Where "mysrvradmn" (still too obvious, just an example), is your non-obvious admin account name that you will allow to access your server via ssh.
Then, setup key pairs for ssh login (see link below).
Last but not least, setup rules at your firewall, to restrict ssh access (port 22)
For setting up ssh keys, read here, starting with "Create authentication keys"
http://www.bombich.com/mactips/rsync.html

Logging MAC addresses

Hi.
Is there a way to logging MAC addresses on a switch via syslog (as they link to the switch or the entire table)?

easy with snmp:
snmp-server ifindex persist
snmp-server enable traps MAC-Notification
snmp-server host .....
int ...
snmp trap mac-notification added
snmp trap mac-notification removed

ICloud email addresses are reversed

My husband and I have our iCloud email addresses reversed so when I send an iCloud email from my phone it says it is from him and the address is his iCloud address. On our phones under iCloud account, the other's address is listed and cannot be edited.

Go to icloud.com and log in.
*edit* You need to transition from MobileMe to iCloud first. If you haven't, go to me.com and log in.

Getting client IP Address via reverse proxy

We're using APEX 4.2.1. I've configured APEX to recognise the X-Forwarded-For header so I can use owa_util.get_cgi_env ('X-Forwarded-For') when available to get the IP address of the client. Does APEX provide a safer way to access this header?
In the APEX Instance Security configuration settings you can specify a comma separated list of proxy servers. This works fine for internal APEX logs, but how do I tap into this in my apps?
What I'm looking for is a function that returns the X-Forwarded-For header when the client IP is in the proxy list or otherwise it returns the REMOTE_ADDR header, without having to maintain a list of trusted proxy IP's elsewhere. I don't want the two sources to inadvertently get out of sync.

Also it may not be any use, e.g. if it is a 192.*.*.* or 10.*.*.* address allocated via NAT. For example it may not be unique among all poossible clients. If you need a client identity it is best to generate it yourself.

Repetitive error in SMTP log: illegal address syntax

Hello I keep getting this error message in the SMTP log:
Dec 17 22:33:36 chucklepunt postfix/smtpd[2909]: connect from
unknown[10.0.0.12]
Dec 17 22:33:36 chucklepunt postfix/smtpd[2909]: warning: Illegal address
syntax from unknown[10.0.0.12] in MAIL command: <W Server>
Dec 17 22:33:36 chucklepunt postfix/smtpd[2909]: disconnect from
unknown[10.0.0.12]
my mail server has this IP listed above, so it obviusoly looks like some kind of internet connection, but I don't know why it keeps happining, and I have 10.0.0.12 listed in the local hosts alias.
Thanks

I thought my problem was solved once I added 10.0.0/24 to my relay and 10.0.0.12 to local hosts in the mail setup but I am getting the error again.
You say is it in my /etc/main.cf?
Should I have that config file, because I do not, at least not in that path.
suggestions please
Thanks!

Log for Meter Reading Reversal

Hi Experts,
Can any one suggest me is there any option in standard SAP to store the logs of meter reading reversals from EL37. Some of the billed meter readings are getting reversed in our system. I need to track the reversals that are carried out.
Regards,
Bala

Hi Ganesan,
Check SLG1 transaction. In the Transaction parameter give EL37 or in the program give RELEABL8. Give the from date and to date. Provide * in all the other fields. click Execute .The system will give the details of all the meter reads reversed during the inputted period.
Regards,
Chandan.

HT204053 How do i log in when it won't recognise my log in address and if i try to change it it tells me that email address is already in use

When i try to log in on my Iphone 3G it won't accept my id and says i need a email address which it won't accept as it says it is already in use
However it does recognise my id without a email address on the laptop

I get the feeling you are not just trying to log into icloud, but are trying to create a new ID.
Go to Settings>icloud, scroll to the bottom of the screen and tap Delete Account (if there's one already that you are logged into). Then log in with the desired ID.

How to Specify the Log File address as RootDir/Logs/Error.log in Log4j

I have a web application,
How to configure the log4j Rolling file Appender in that.
I want to logs to be redirected to the RootDir/logs/Error.log.
Currently, I m using following configuration:
# This file must live on the classpath of the jvm
# Set root logger level to DEBUG and log to both stdout and rollingFile appenders
# (see below for their definitions)
# The set of possible levels are: DEBUG, INFO, WARN, ERROR and FATAL
log4j.rootLogger=INFO, stdout, R
####### Console appender ######
log4j.appender.stdout=org.apache.log4j.ConsoleAppender
log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
# Pattern to output the caller's file name and line number.
# The pattern: Date Priority (Filename:Line Number) - Message\n
log4j.appender.stdout.layout.ConversionPattern=%d %-5p (%F:%L) - %m%n
#### Second appender writes to a file
log4j.appender.R=org.apache.log4j.RollingFileAppender
log4j.appender.R.File=Error.log
# Control the maximum log file size
log4j.appender.R.MaxFileSize=100KB
# Archive log files (one backup file here)
log4j.appender.R.MaxBackupIndex=1
log4j.appender.R.layout=org.apache.log4j.PatternLayout
log4j.appender.R.layout.ConversionPattern=%d %-5p (%F:%L) - %m%n
Thanks for your replies in advance.

Please follow the following steps, will work.
To enable log4j logging to a file on lunar pages do the following:
1) Create a servlet class that will initialize log4j. Here is
the code:
package logging;
import org.apache.log4j.PropertyConfigurator;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class Log4jInit extends HttpServlet {
public
void init() {
String prefix = getServletContext().getRealPath("/");
String file = getInitParameter("log4j-init-file");
// if the log4j-init-file is not set, then no point in trying
if(file != null) {
PropertyConfigurator.configure(prefix+file);
public
void doGet(HttpServletRequest req, HttpServletResponse res) {
2) In your web.xml file add the following entry:
<servlet>
<servlet-name>log4j-init</servlet-name>
<servlet-class>logging.Log4jInit</servlet-class>
<init-param>
<param-name>log4j-init-file</param-name>
<param-value>WEB-INF/classes/log4j.lcf</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
3) Create a log4j.lcf file located in your WEB-INF/classes directory
as with the following entries:
log4j.rootLogger=debug, R
# yourdirectory below is where your site lives.
log4j.appender.R=org.apache.log4j.RollingFileAppender
log4j.appender.R.File=/home/yourdirectory/public_html/logs/out.log
log4j.appender.R.MaxFileSize=500KB
# Keep one backup file
log4j.appender.R.MaxBackupIndex=1
log4j.appender.R.layout=org.apache.log4j.PatternLayout
log4j.appender.R.layout.ConversionPattern=%d %-5p [%c] %m%n
4) Add logging to your class. Here is an example:
import org.apache.log4j.Logger;
public class Example {
static Logger logger = Logger.getLogger(Example.class);
public void doSomething() {
logger.debug("testing logging");
5) make sure you have the log4j-1.2.8.jar file located in your WEB-INF/lib directory.
That should do it!

Logs of address change

Hello,
someone made change to ship-to-address on the sales order , can i find who made this change.
I have looked at tables cdhdr and cdpos but they dont have enough information in them.
Is there anywhere else I can get this from?
Thanks

You will not get change information of address changes in relation to the Order Number. The change document object of Address is ADRESSE. Object id will be generated in relation to the address number of the Customer Code (Like SD01<Address Number>).
Edit : You can get the address number by referring to table field VBPA-ADRNR where VBPA-PARVW = 'WE'.
Edited by: Vinod Kumar on Oct 11, 2010 5:40 PM

Need to change my iCloud Email log in address as that email no longer exists help :)

How can I change my iCloud email address as this email no longer exists

Sign in to your Apple ID and click "Manage Your Apple ID".
Click "Edit" in the "Apple ID and Primary Email Address"
Enter your new email Address.
Follow the instructions in the email you receive asking you to verify your new email address.

DNS and Static IP Address Question on Solaris v10 X86

I�ve recently installed Solaris v10 X86 and have two questions. The system is a Dell E521 with 4GB RAM and 1GB SysKonnect NIC, and internet is provided via a cable modem, that�s plugged into a Netgear router, and the Solaris 10 box is plugged into the Netgear router via a CAT5 ethernet cable.
1. I can connect to my router login page using the following URL:
http://192.168.1.1/start.htm and I can also connect to various web pages such as yahoo, if I first "ping yahoo.com" (on another machine that�s internet enabled) and then plug the web site�s ip address into the Solaris/Mozilla browser. So it appears that I haven�t been successful at pointing the Solaris x86 at a DNS server to resolve the DNS name.
2. I've purchased a commercially available software package and it requires a static ip address for this Solaris x86 server. If the ip address changes, it�ll stop working by design and require that I reacquire the license file. When connecting through this Netgear router, how do I lock this Solaris v10 x86 server into a specific ip address? (the ip address floats presently when cycling my PC�s on/off) presently, and assume the Solaris box will too, usually through an ip range of 192.168.1.<1 through 5>
# ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
skge0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.1.3 netmask ffffff00 broadcast 192.168.1.255
ether 0:0:5a:9b:1f:10
# netstat -rn
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
192.168.1.0 192.168.1.3 U 1 1 skge0
224.0.0.0 127.0.0.1 U 1 0 lo0
default 192.168.1.1 UG 1 0
127.0.0.1 127.0.0.1 UH 8 163 lo0
Some of the present Netgear router settings:
Internet IP Address
Get Dynamically From ISP (yes)
Use Static IP Address      (no)
IP Address           75.185. CROSSED-OUT3
IP Subnet Mask      255.255.248.0
Gateway IP Address      75.185.CROSSED-OUT4
Domain Name Server (DNS) Address
Get Automatically From ISP (yes)
Use These DNS Servers (blank)
Primary DNS      ... (blank)
Secondary DNS      ... (blank)
Netgear Router Status Page:
Account Name      WGT624v3
Hardware Version      V3H1
Firmware Version      V2.0.16_1.0.1NA
Internet Port
MAC Address      00:40:ca:a8:CROSSED-OUT2
IP Address           75.185.CROSSED-OUT3
DHCP           DHCPClient
IP Subnet Mask      255.255.248.0
Domain Name Server      65.24.7.3
          65.24.7.6
LAN Port
MAC Address      00:18:4D:85:CROSSED-OUT1
IP Address           192.168.1.1
DHCP                ON
IP Subnet Mask      255.255.255.0
Excerpt from doing a prtconf -D command:
pci10de,26f, instance #0 (driver name: pci_pci)
pci1028,8010, instance #0 (driver name: hci1394)
pci1148,5021, instance #0 (driver name: skge)
pci1028,1ed
pci1022,1100
The NIC is a SysKonnect 9821 1GB Ethernet card. The drivers in Solaris 10 were apparently very old and didn't install drivers or configure/plumb when I installed Solaris 10, so I downloaded the
latest drivers (hard to find!), followed the instructions and got the NIC drivers installed and then plumbed.
My router's ip address appears to be 192.168.1.1 and in one of the articles I've read, there is a recommendation to create a file (touch) within /etc named defaultrouter and enter the router's ip address. I did this, and the file now contains:
192.168.1.1
I also read where another file called resolv.conf needed to be pointed to a DNS server, which in this case, according to my Netgear router, and according to ipconfig/all on another WinBox on the same network, also shows the same 192.168.1.1 address for the DNS, so I created that file too (wasn't there) and it contains:
nameserver 192.168.1.1
There is a host name file called hostname.skge0 and it contains one line:
INTHOST
There is a hosts file, and it contains:
127.0.0.1 localhost loghost homex86
192.168.1.3 INTHOST
There is a netmasks file, and other than the commented out lines, it appears to contain one relevant line:
192.168.1.0 255.255.255.0
There is a nsswitch.conf file and other than the commented out lines, it contains:
passwd: files
group: files
hosts: files
ipnodes: files
networks: files
protocols: files
rpc: files
ethers: files
netmasks: files
bootparams: files
publickey: files
netgroup: files
automount: files
aliases: files
services: files
printers: user files
auth_attr: files
prof_attr: files
project: files
tnrhtp: files
tnrhdb: files
There is an nsswitch.dns file:
passwd: files
group: files
ipnodes: files dns
networks: files
protocols: files
rpc: files
ethers: files
netmasks: files
bootparams: files
publickey: files
netgroup: files
automount: files
aliases: files
services: files
printers: user files
auth_attr: files
prof_attr: files
project: files
tnrhtp: files
tnrhdb: files
Finally, I've also seen some advice using the folling command (and I tried it):
"route add default 192.168.1.1" as an alternative method of setting up route table
The only other command I've tried is:
"ifconfig skge0 192.168.1.1 netmask 255.255.255.0 up" but I suspect that was redundant as the plumb command I used to get the NIC functioning earlier probably already provided what was needed.
Finally, on this small network, I ran an ipconfig/all on a Windows based PC, to see what network settings were reported through the wireless connection, and this is an excerpt of that information:
C:\Documents and Settings\mark_burke>ipconfig/all
Windows IP Configuration
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controller
Physical Address. . . . . . . . . : (withheld)
Ethernet adapter {xxxxxxxx}:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Nortel IPSECSHM Adapter - Packet Scheduler Min
iport
Physical Address. . . . . . . . . : (withheld)
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . . . . : 0.0.0.0
Default Gateway . . . . . . . . . :
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Dell Wireless 1370 WLAN Mini-PCI Card
Physical Address. . . . . . . . . : (withheld)
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

I�ve recently installed Solaris v10 X86 and have two
questions. The system is a Dell E521 with 4GB RAM
and 1GB SysKonnect NIC, and internet is provided via
a cable modem, that�s plugged into a Netgear router,
and the Solaris 10 box is plugged into the Netgear
router via a CAT5 ethernet cable.
1. I can connect to my router login page using the
following URL:
http://192.168.1.1/start.htm and I can also connect
to various web pages such as yahoo, if I first "ping
yahoo.com" (on another machine that�s internet
enabled) and then plug the web site�s ip address into
the Solaris/Mozilla browser. So it appears that I
haven�t been successful at pointing the Solaris x86
at a DNS server to resolve the DNS name.You can either copy nsswitch.dns to nsswitch.conf, or you can modify nsswitch.conf so that 'dns' is used for hostname lookups.
2. I've purchased a commercially available software
package and it requires a static ip address for this
Solaris x86 server. If the ip address changes, it�ll
stop working by design and require that I reacquire
the license file. When connecting through this
Netgear router, how do I lock this Solaris v10 x86
server into a specific ip address? (the ip address
floats presently when cycling my PC�s on/off)
presently, and assume the Solaris box will too,
usually through an ip range of 192.168.1.<1 through
5>One method is setting the router so that the server's MAC address is tied to a specific IP.
Otherwise you can edit /etc/hostname.<interface> and place a static address there, forgoing DHCP services from the router. You may want the address to appear outside the router's DHCP range.
Darren

10.7 SMTP Mail Logs send email address- Assign Postmaster?

How do you assign the SMTP mail log email address? I received an email this morning from another System Administrator (who previously administered this server), that he received the following message (I should be receiving these notifications, not him. To add: I was already the "Alert Email Address." Is there another location, where the SA's email address is set?):
From: Mail Delivery System
Subject: Postfix SMTP server: errors from server2.domain.com
Date: September 23, 2013 6:05:43 AM EDT
To: Postmaster
Transcript of session follows.
Out: 220 server.domain.com ESMTP Postfix
In: HELO XXX.XXX.XXX.XXX
Out: 250 server.domain
In: STARTTLS
Out: 454 4.7.0 TLS not available due to local problem
In: QUIT
Out: 221 2.0.0 Bye
For other details, see the local mail logfile

I am having the same problem. I also can't send anything with attachments at all. Mail Just hangs there endlessly. This is a HUGE problem for me right now, and I don't feel like using entourage mail because it is not really reliable either. Does anyone know how to get a direct hold of Mac Telephone Support or engineering? I need to fix this problem like right now. We need to go back one level of code. Mr. Logic... This is my third day since I downloaded this code revision too, so please let me know what you find out, and I will do the same for you. I should have known better than to install this code without reading up on the issues and fixes.
[email protected]
Since downloading the 10.4.7 update I've experienced
the mail problem wherein emails can't be sent to the
smtp server. I've read all the discussions on all
the various fora, and tried all the fixes (e.g.
downloading the combo update instead, trashing mail
preferences, repairing permissions, setting up mail
again from scratch, looking for the SOCKS proxy,
resetting the PRAM, etc. etc. etc.) but all to no
avail.
Note that in my case the SOCKS proxy checkbox was
NEVER ticked/checked and so I couldn't uncheck it
(which was the fix that seems to have worked for most
people).
Anyway... last night I thought would try setting the
SOCKS proxy checkbox myself, so that I could then
uncheck it. (you never know!)
However, when doing this I noticed that any changes I
made to the proxy checkboxes in the Network system
preference panel ARE NOT SAVED.
i.e. If I tick one or more of them and Apply the
changes, then exit the Network Preferences panel, the
relaunch the Network Preferences panel, they are all
UNCHECKED again.
Is this related to my Mail problem? Any clues?
This is my 3rd day without the ability to send email
from the Mail client in 10.4.7. Not good.
Any help/suggestions appreciated.
Mr Logic.
Powerbook G4 Mac OS X (10.4.7)

BSM logs IP Address in reverse on x86

Similar Messages

Maybe you are looking for