[unknown] in log entry

Hi,
could you please help provide me some explanation about this specific log entry?
08-Nov-2009 20:11:59.79 tcp_intranet tcp_local EE 1 [email protected] rfc822;[email protected] [email protected] <[email protected]> domain.com ([unknown] [10.112.240.101])
I would like to understand what does the ([unknown] ... mean here? How can change this?
SJMS 7.1u3
Thanks,
Stefan

varga_stean wrote:
08-Nov-2009 20:11:59.79 tcp_intranet tcp_local EE 1 [email protected] rfc822;[email protected] [email protected] <[email protected]> domain.com ([unknown] [10.112.240.101])
I would like to understand what does the ([unknown] ... mean here? How can change this?The "[unknown]" refers to Messaging Servers attempt to perform a DNS lookup of 10.112.240.101 and getting no result i.e.
bash-3.00# host 10.112.240.101
Host 101.240.112.10.in-addr.arpa. not found: 3(NXDOMAIN)Why would you need to "change this"?
Regards,
Shane.

Similar Messages

Unknown CSRadius Log Entries

G'Day Guys!
We're running 2 Cisco Secure ACS v4.2. In the CSRadius-logs about 90 percent of it looks like this:
RDS 04/12/2010 00:03:16 E 3666 5704 0x0 Received unknown attribute 102
RDS 04/12/2010 00:03:16 E 3666 5704 0x0 Received unknown attribute 102
RDS 04/12/2010 00:03:16 E 3666 5704 0x0 Received unknown attribute 102
RDS 04/12/2010 00:03:16 E 3666 5704 0x0 Received unknown attribute 102
RDS 04/12/2010 00:03:16 E 3666 5704 0x0 Received unknown attribute 102
RDS 04/12/2010 00:03:16 E 3666 2832 0x0 Received unknown attribute 102
RDS 04/12/2010 00:03:16 E 3666 2832 0x0 Received unknown attribute 102
RDS 04/12/2010 00:03:16 E 3666 2832 0x0 Received unknown attribute 102
I'd appreciate it if someone could help us to understand those entries and the behaviour!
Can you guys give us ideas what to do about it and where to look for it's cause?!
Thanks alot!

Hi,
Those messages look like a DDTS that was found on the 4.2.0.124.0 ACS.
Basically:
Logged-In-Users not updated for Ext-DB users with Disable dynamic users. The users are mapped to the correct group during authentication.
But during radius accounting the group mapping fails and it gets mapped to default group.
As it was never reported by any customer it is marked as internal found, so not visible to customers.
However, the latest patch has this issue fixed, so if you are running 4.2.0.124.0, you may want to apply the latest patch.
Regarding the IDs in bold, there is no decoding for those as they are are incremental IDs to simply identify the internal acs processes ans authnetication attempts. There is no specific decoding for them.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Unknown firewall log entries Home Hub 2

Hi,
could anyone explain what the following are on my event log please?.
FIREWALL icmp check (1 of 3): Protocol: ICMP Src ip: 81.134.23.245 Dst ip: 81.154.36.164 Type: Destination Unreachable Code: Host Unreacheable - this appears quite a few times over the space of two hours this evening.
Also, :
UPnP action 'DeletePortMapping' from ip=192.16x.xx (No such entry in array)
19:56:22 26 Apr
UPnP action 'DeletePortMapping' from ip=192.16x.xx(No such entry in array)
The IP address in this one corresponds to a known/recognised device.
Very garetful if anyone can help explain what these mean. And,if they are anything to worry aboout.
Thanks.

camper wrote:
Hi,
could anyone explain what the following are on my event log please?.
The IP address in this one corresponds to a known/recognised device.
Very garetful if anyone can help explain what these mean. And,if they are anything to worry aboout.
Thanks.
FIREWALL icmp check (1 of 3): Protocol: ICMP Src ip: 81.134.23.245 Dst ip: 81.154.36.164 Type: Destination Unreachable Code: Host Unreacheable - this appears quite a few times over the space of two hours this evening.
That is an external "ping" request from the Internet that has been blocked, Probably someone trying to find whether there is anything worth trying to hack into.
UPnP action 'DeletePortMapping' from ip=192.16x.xx (No such entry in array)
Thats an application on your device which is trying to open an incoming port, perhaps you have a game or IM program running?
If not, then disable uPnP on the home hub.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Power supply related log entries?

(This question was posted all day yesterday, with no replies, in the iMac G5 forum. Perhaps someone here will have some idea what these logs mean in this situation.)
I recently had the PSU and the Logic Board replaced (two tries to get it right) for the sudden shutdown/ defective capacitor issue. Everything, fingers crossed, seems to be functioning properly, at least, so far. But, now that I'm completely paranoid about this issue, I've noticed log entries "AppleSMU -- shutdown cause = 1" or "AppleSMU -- shutdown cause = 2" (at least, not the dreaded = -110) in the log just after bootup. I know these are often related to the PSU issue and, since my shutdowns have been normal, I don't understand why they are appearing or what they mean.

Here's the latest log from after an SMU reset. (Rebooted after that and only got the usual "shutdown cause =1.") The message in question is in bold. Should I be thinking of a corrupted cache, or is this a possible indication that the latest PSU is also on the way out? My shutdowns (as well as everything else, +so far+) appear to be normal, but this entry "localhost kernel[0]: AppleSMU -- shutdown cause = -110," is the log I was getting from when the computer was shutting down all the time, which is very strange. Thanks for any help.
Nov 19 23:23:14 Macintosh-3 shutdown[644]: SHUTDOWN_TIME: 1258690994 83525
Nov 19 23:23:14 Macintosh-3 com.apple.loginwindow[27]: Shutdown NOW!
Nov 19 23:23:14 Macintosh-3 com.apple.loginwindow[27]: System shutdown time has arrived^G^G
Nov 19 23:23:14 Macintosh-3 mDNSResponder mDNSResponder-176.3 (Jan 27 2009 14:51:59)[26]: stopping
Nov 19 23:23:14 Macintosh-3 com.apple.SystemStarter[20]: Stopping HP Trap Monitor
Nov 19 23:23:14 Macintosh-3 com.apple.SystemStarter[20]: Stopping HP IO Monitor
Nov 19 23:23:14 Macintosh-3 com.apple.usbmuxd[18]: stopping.
Nov 20 06:56:40 localhost kernel[0]: Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC
Nov 20 06:56:34 localhost com.apple.launchctl.System[2]: /dev/disk0s3 on / (hfs, local, journaled)
Nov 20 06:56:37 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Nov 20 06:56:37 localhost com.apple.launchd[1] (com.apple.usbmuxd): Unknown key for boolean: EnableTransactions
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.x.privileged_startx): Unknown key for boolean: EnableTransactions
Nov 20 06:56:39 localhost kextd[12]: 428 cached, 0 uncached personalities to catalog
Nov 20 06:56:40 localhost kernel[0]: standard timeslicing quantum is 10000 us
Nov 20 06:56:40 localhost kernel[0]: vmpagebootstrap: 313347 free pages and 14333 wired pages
Nov 20 06:56:40 localhost kernel[0]: migtable_maxdispl = 79
Nov 20 06:56:40 localhost kernel[0]: 103 prelinked modules
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.security.TMSafetyNet
Nov 20 06:56:40 localhost kernel[0]: calling mpopolicyinit for TMSafetyNet
Nov 20 06:56:40 localhost kernel[0]: Security policy loaded: Safety net for Time Machine (TMSafetyNet)
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.nke.applicationfirewall
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.security.seatbelt
Nov 20 06:56:40 localhost kernel[0]: calling mpopolicyinit for mb
Nov 20 06:56:40 localhost kernel[0]: Seatbelt MACF policy initialized
Nov 20 06:56:40 localhost kernel[0]: Security policy loaded: Seatbelt Policy (mb)
Nov 20 06:56:40 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Nov 20 06:56:40 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Nov 20 06:56:40 localhost kernel[0]: MAC Framework successfully initialized
Nov 20 06:56:40 localhost kernel[0]: using 6553 buffer headers and 4096 cluster IO buffer headers
Nov 20 06:56:40 localhost kernel[0]: AirPort_Brcm43xx::probe: 02956680, 0
Nov 20 06:56:40 localhost kernel[0]: AppleKauaiATA shasta-ata features enabled
Nov 20 06:56:40 localhost kernel[0]: DART enabled
Nov 20 06:56:40 localhost kernel[0]: FireWire (OHCI) Apple ID 52 PCI now active, GUID 001124fffe343a86; max speed s400.
Nov 20 06:56:40 localhost kernel[0]: mbinit: done
Nov 20 06:56:40 localhost kernel[0]: Security auditing service present
Nov 20 06:56:40 localhost kernel[0]: BSM auditing present
Nov 20 06:56:40 localhost kernel[0]: rooting via boot-uuid from /chosen: 06DF991F-E8CC-32A4-B78C-1791214651DE
Nov 20 06:56:40 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
*Nov 20 06:56:40 localhost kernel[0]: AppleSMU -- shutdown cause = -110*
Nov 20 06:56:40 localhost kernel[0]: wl0: Broadcom BCM4320 802.11 Wireless Controller
Nov 20 06:56:40 localhost kernel[0]: 4.170.25.8.2Got boot device = IOService:/MacRISC4PE/ht@0,f2000000/AppleMacRiscHT/pci@3/IOPCI2PCIBridge/k2-sat a-root@C/AppleK2SATARoot/k2-sata@0/AppleK2SATA/ATADeviceNub@0/AppleATADiskDriver /IOATABlockStorageDevice/IOBlockStorageDriver/WDC WD800JD-40GBB2 WDC WD800JD-40GBB2/IOApplePartitionScheme/Untitled@3
Nov 20 06:56:40 localhost kernel[0]: BSD root: disk0s3, major 14, minor 2
Nov 20 06:56:40 localhost kernel[0]: AppleSMU::PMU vers = 0x000d004c, SPU vers = 0x15, SDB vers = 0x01,
Nov 20 06:56:40 localhost kernel[0]: Jettisoning kernel linker.
Nov 20 06:56:40 localhost kernel[0]: Resetting IOCatalogue.
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 1
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 3
Nov 20 06:56:40: --- last message repeated 4 times ---
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 4
Nov 20 06:56:40 localhost kernel[0]: NVDANV30HAL loaded and registered.
Nov 20 06:56:40 localhost kernel[0]: PowerMac8,1: stalling for module
Nov 20 06:56:42 localhost bootlog[40]: BOOT_TIME: 1258718192 0
Nov 20 06:56:42 localhost fseventsd[31]: bumping event counter to: 0x1d08d5e (current 0x0) from log file '0000000001d0337a'
Nov 20 06:56:43 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Nov 20 06:56:46 localhost kernel[0]: Matching service count = 1
Nov 20 06:56:46 localhost DirectoryService[36]: Launched version 5.7 (v514.25)
Nov 20 06:56:47 localhost kernel[0]: PowerMac81SystemFansCtrlLoop::calculateNewTarget() linkedControl not ready
Nov 20 06:56:47 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[27]: Login Window Application Started -- Threaded auth
Nov 20 06:56:47 localhost rpc.statd[22]: statd.notify - no notifications needed
Nov 20 06:56:47 localhost kernel[0]: UniNEnet: Ethernet address 00:11:24:34:3a:86
Nov 20 06:56:48 localhost kernel[0]: AirPort_Brcm43xx: Ethernet address 00:0a:95:f4:79:08
Nov 20 06:56:49 localhost iStatLocalDaemon[45]: Waiting for connections on port 5204.
Nov 20 06:56:50 localhost mDNSResponder mDNSResponder-176.3 (Jan 27 2009 14:51:59)[26]: starting
Nov 20 06:56:50 localhost com.apple.usbmuxd[18]: usbmuxd-176 built for iTunesNine on Jul 20 2009 at 13:06:53, running 32 bit
Nov 20 06:56:51 localhost com.paceap.pacesupport[44]: kextload: extension /System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns/PACESupportL eopard.kext is already loaded
Nov 20 06:56:52 localhost /usr/sbin/ocspd[67]: starting
Nov 20 06:56:55 localhost loginwindow[27]: Login Window Started Security Agent
Nov 20 06:56:57 localhost kernel[0]: AirPort: Link Down on en1
Nov 20 06:56:57 localhost kextd[12]: writing kernel link data to /var/run/mach.sym
Nov 20 06:56:58 Macintosh-3 configd[38]: setting hostname to "Macintosh-3.local"
Nov 20 06:56:59 Macintosh-3 kernel[0]: AirPort: Link Up on en1
Nov 20 06:56:59 Macintosh-3 kernel[0]: SetCryptoKey T: len 16, idx 0
Nov 20 06:56:59 Macintosh-3 kernel[0]: SetCryptoKey R: len 32, idx 2
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: PACESupport - launchd already started us
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: Starting HP IO Monitor
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: Starting HP Trap Monitor
Nov 20 06:57:26 Macintosh-3 SecurityAgent[82]: NSExceptionHandler has recorded the following exception:\nNSRangeException -- * -[NSCFArray objectAtIndex:]: index (0) beyond bounds (0)\nStack trace: 0x39dbc 0x9329a4ec 0x92303c00 0x92303c38 0x90448180 0x709c8 0x5bee4 0x6edd8 0x637b4 0x649c4 0x6c678 0x9140c358 0x9140c28c 0x9144dc94 0x9144c0f4 0x914092dc 0x74764 0x913dc680 0x913498d8 0x11e14 0x2db0
Nov 20 06:57:33 Macintosh-3 authorizationhost[81]: MechanismInvoke 0x12d5f0 retainCount 2
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: MechanismInvoke 0x101660 retainCount 1
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: NSSecureTextFieldCell detected a field editor ((null)) that is not a NSTextView subclass designed to work with the cell. Ignoring...
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: NSExceptionHandler has recorded the following exception:\nNSRangeException -- * -[NSCFArray objectAtIndex:]: index (0) beyond bounds (0)\nStack trace: 0x39dbc 0x9329a4ec 0x92303c00 0x92303c38 0x90448180 0x709c8 0x5bee4 0x6edd8 0x637b4 0x68368 0x774a4 0xe068 0x14200 0x13f64 0xdb58 0x9047f8f0 0x9227426c 0x92296634 0x900bbb18 0x900bb93c 0x900bb77c 0x91350248 0x9134fc00 0x913498a0 0x11e14 0x2db0
Nov 20 06:57:34 Macintosh-3 loginwindow[27]: Login Window - Returned from Security Agent
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: MechanismDestroy 0x101660 retainCount 1
Nov 20 06:57:34 Macintosh-3 authorizationhost[81]: MechanismDestroy 0x12d5f0 retainCount 2
Nov 20 06:57:34 Macintosh-3 loginwindow[27]: USER_PROCESS: 27 console
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[80]): Exited: Terminated
Nov 20 06:57:34 Macintosh-3 com.apple.launchctl.Aqua[110]: launchctl: Couldn't stat("/etc/machinit_peruser.d"): No such file or directory
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[107] (com.apple.AirPortBaseStationAgent): Unknown key for boolean: EnableTransactions
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[107] (org.x.startx): Unknown key for boolean: EnableTransactions
Nov 20 06:57:35 Macintosh-3 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 2 seconds
Nov 20 06:57:42 Macintosh-3 /System/Library/CoreServices/coreservicesd[51]: SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(.... Public Folder) returned -14135
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker 2.0 (/Library/Application Support/iStat local/extras/MenuCracker.menu)\n See http://sourceforge.net/projects/menucracker\n MenuCracker is now loaded. Ready to accept new menu extras. Ignore the failure message that follows.
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: failed to instantiate and get the principal class of bundle: NSBundle </Library/Application Support/iStat local/extras/MenuCracker.menu> (loaded)
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusCPU".
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusDisks".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusMemory".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusNetwork".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusTemps".
Message was edited by: WZZZ

Log entry information

I am looking for any help on understanding what field reported the "trojan" entry found in the log entry below:
http://load.videohub.com/core?playerID=P-63Z-6P9&bootloaderID=B-0Y9-YVC, IW_busi,-5.4,"1","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,IW_busi,-,"-","trojan","Unknown","Unknown","-","-",1.26,0,-,"-","-"> NONE/504 11201
I understand that the access was not allowed due to a gateway timeout, we also are not running any type of malware/virus scanning on the WSA. This is from a W3C log file. The log fields we use are listed below:
c-ip
cs-mime-type
cs-username
date
time
cs-url
sc-bytes
x-wbrs-score
x-result-code
x-resultcode-httpstatus
x-webcat-req-code-abbr
x-elapsed-time
Thanks
Dominick

Hi Dominick,
The log field ( %Xr ) x-result-code is the reason why your seeing " trojan" in your W3C logs. The result code that your looking based on our phone conversation is:
sc-http-status
%h
HTTP response code
This information is located in the online userguide of the WSA -> GUI -> Support and Help -> Online Userguide -> Search tab -> W3C -> page 63 about 1/4 of the was down on that page you should find the entery above.
Sincerely,
Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator

No Console Log Entries

Trying to find root cause of near-daily lockups of this 2.4 GHz Macbook. All keys and mouse are locked and a long press on the power button is required.
-Tried to look at console messages and found that there are none since April of 2009.
-Tried to try Onyx to trigger the various log scripts. Downloaded and installed and found that it crashes on startup.
-Ran 10.5.8 combo updater. Did not change the above.
Ideas?
Thanks in advance,
Tom

William, Thanks for your response.
Q: "When you see nothing since April of 2009, what is selected in the left column? "
A: "Console Messages" under the "LOG DATABASE MESSAGES" heading.
system.log is accessible either thru console or through Finder>Go>Go to folder.... It has plenty of current messages.
When Onyx crashes, the log entry is:
Mar 17 10:01:23 sue-pollaks-MacBook com.apple.launchd[82] ([0x0-0x49049].com.titanium.OnyX[960]): Exited abnormally: Trace/BPT trap
This doesn't give me any clues.
Yesterday the machine was sitting idle. Looking through the log entries, the only activity is Time Machine running at 23 minute past each hour. Then, at 22:35, the string of messages associated with booting begins. Hope it's OK to paste part of it here:
Mar 16 22:23:19 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Starting standard backup
Mar 16 22:23:21 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Backing up to: /Volumes/TimeMachine/Backups.backupdb
Mar 16 22:23:21 sue-pollaks-MacBook FindSystemFiles[3759]: Querying receipt database for system packages
Mar 16 22:23:21 sue-pollaks-MacBook com.apple.backupd[3758]: 2010-03-16 22:23:21.834 FindSystemFiles[3759:713] Querying receipt database for system packages
Mar 16 22:23:22 sue-pollaks-MacBook FindSystemFiles[3759]: Using system path cache.
Mar 16 22:23:22 sue-pollaks-MacBook com.apple.backupd[3758]: 2010-03-16 22:23:22.058 FindSystemFiles[3759:713] Using system path cache.
Mar 16 22:23:22 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: No pre-backup thinning needed: 100.0 MB requested (including padding), 29.66 GB available
Mar 16 22:23:23 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Copied 351 files (613 KB) from volume Macintosh HD.
Mar 16 22:23:23 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Starting post-backup thinning
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Deleted backup /Volumes/TimeMachine/Backups.backupdb/sue pollak’s MacBook/2010-03-15-212409: 29.67 GB now available
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Post-back up thinning complete: 1 expired backups removed
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Backup completed successfully.
Mar 16 22:35:27 localhost com.apple.launchctl.System[2]: fsck_hfs: Volume is journaled. No checking performed.
Mar 16 22:35:27 localhost com.apple.launchctl.System[2]: fsck_hfs: Use the -f option to force checking.
Mar 16 22:35:28 localhost com.apple.launchctl.System[2]: BootCacheControl: could not open /var/db/BootCache.playlist: No such file or directory
Mar 16 22:35:28 localhost com.apple.launchctl.System[2]: BootCacheControl: could not unlink playlist /var/db/BootCache.playlist: Unknown error: -1
Mar 16 22:35:29 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Mar 16 22:35:29 localhost com.apple.launchd[1] (com.apple.usbmuxd): Unknown key for boolean: EnableTransactions
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.x.privileged_startx): Unknown key for boolean: EnableTransactions
Mar 16 22:35:31 localhost kernel[0]: npvhash=4095
Mar 16 22:35:30 localhost DirectoryService[11]: Launched version 5.7 (v514.25)
Mar 16 22:35:31 localhost kernel[0]: hi mem tramps at 0xffe00000
Mar 16 22:35:30 localhost DirectoryService[11]: Improper shutdown detected
Mar 16 22:35:31 localhost kernel[0]: PAE enabled
Mar 16 22:35:30 localhost kextd[10]: 425 cached, 0 uncached personalities to catalog
Mar 16 22:35:31 localhost kernel[0]: 64 bit mode enabled
Looking through this does not give me any clues. The only things that seem odd are:
Mar 16 22:35:30 localhost DirectoryService[11]: Improper shutdown detected
and then later:
Mar 16 22:35:32 localhost kernel[0]: Previous Shutdown Cause: 3
THoughts?
Thanks,
Tom

Excessive log entries with buffalo linkstation

Hi all,
I am getting excessive log entries on my MacBook Pro (OS 10.6.7) that appear to be related to my Buffalo LinkStation HD-CELU2 external drive. This drive is connected to my Airport Extreme (latest firmware) via USB and acts as my iTunes (10.2.2) library, which also serves as the music source for a Sonos digital music system. A sample of the log entries follow:
4/18/11 8:15:22 PM    com.apple.launchd[1]    (jp.buffalo.NASPower) Throttling respawn: Will start in 60 seconds
4/18/11 8:15:39 PM    com.apple.launchd.peruser.501[131]    (jp.buffalo.NASPower[6798]) posix_spawn("/Library/PrivilegedHelperTools/NasNavigator2.app/Contents/MacOS/Na sNavigator2", ...): No such file or directory
4/18/11 8:15:39 PM    com.apple.launchd.peruser.501[131]    (jp.buffalo.NASPower[6798]) Exited with exit code: 1
4/18/11 8:15:39 PM    com.apple.launchd.peruser.501[131]    (jp.buffalo.NASPower) Throttling respawn: Will start in 60 seconds
It says that a file isn't found, and that could be because I uninstalled NASNavigator in an attempt to get rid of these extraneous log entries. Uninstalling the software seems to have only resulted in changing the messages (to "no such file"), not reducing or ending them.
This log entry is constant; it occurs even when the computer has no need to access the Buffalo hard drive. It makes it very hard to diagnose any other issues because it both clutters the log and causes it to only recall a couple of hours worth of log info.
Thanks in advance!

Ho everyone, just registered as I have a Bold 9900 and am considering a Playbook with the new OS2. Does anyone know whether I will be able to get it to talk to my Buffalo Linkstation. think its a Pro Duo 2 and is about 2-3 years old.

.sh file usage log entries multiplied

Hi all,
I have a very strange problem: In order to find out what parts of a big application being used,
I have added the following line as the first executable line in every .sh file:
/application/sh_log $0
The file sh_log looks like this:
now=$(date +"%Y_%m_%d")
filename=/spool/logs/sh_log_$now.log
if [ -f $filename ];                 # Does logfile exist?
then
   echo $(basename $1)";"$(date +"%Y%m%d%H%M%S")";" >> $filename   # Logfile exists, append log record
else
   touch $filename          # Logfile did not exist, create it
   chmod 7777 $filename     # Make it writeable
   echo $(basename $1)";"$(date +"%Y%m%d%H%M%S")";" >> $filename   # Ans append log record
fi
The application calls it's .sh files in a number of ways, but all of them originating from crontab.
What confuses me is that log entries often appear in tuples, that is, when the application's
.sh file is calling the file making the log entry, supposedly to make a single log entry, I'm still
getting 2, 3 or even more log entries with the same time-stamp (resolution: 1 sec).
I don't understand this and would appreciate if some guru here could give me a clou.
Regards
Lars

Hi,
I would log also PIDs together with script name: "/application/sh_log $0 $$". Then you could see whether the application script or sh_log is really called more times (different PIDs).
Also consider to use chmod 0777 instead of 7777. So, e.g.:
now=$(date +"%Y_%m_%d")
filename=/spool/logs/sh_log_$now.log
[ ! -f $filename ] && touch $filename && chmod 0777 $filename
#Format: my_PID;script_name;script_PID;timestamp;
echo $$";"$(basename $1)";"$2";"$(date +"%Y%m%d%H%M%S")";" >> $filename
Regards
Vaclav

Log entries in Service Consupmtion Layer Application Logs of Duet Enterpr

Dear all,
I need your inputs to solve the below mentioned issue,
There is a communication developed between MS sharepoint and SAP.
By using Mapper Classes for each and every operations the conversion of data format from Sharepoint to SAP and viceversa happens.
We can see the message or error logs created during the conversion process using the T-code /iwfnd/view_log.
But i want my custumized messages has to come in that log for that i used the following code in the mapper class Post method but still my logs are not coming in the T-code /iwfnd/view_log.
DATA: lo_logger TYPE REF TO /iwfnd/cl_logger,"logger singleton
lo_message_container TYPE REF TO /iwfnd/if_message_container,"message container
lv_message TYPE bapi_msg,
lv_log_material TYPE symsgv,
lv_log_plant TYPE symsgv,
lv_instance_counter TYPE i,
lv_previous_pur_doc TYPE char10.
CONSTANTS gc_log_agent_name TYPE /iwfnd/sup_iw_agent VALUE 'Dev Guide Purchase Req'.
CONSTANTS gc_log_msg_id TYPE symsgid VALUE 'ZDUET_SCL_PR'.
Get logger
CALL METHOD /iwfnd/cl_logger=>get_logger
RECEIVING
ro_logger = lo_logger.
initialize the post mapper log step
lo_logger->log_step_init(
EXPORTING iv_msg_number = 000 "Post Mapping started for Purchase Req Header Query
iv_msg_id = gc_log_msg_id " message class
iv_system_alias = iv_system_alias "Backend System Alias
iv_agent = gc_log_agent_name "Dev Guide Purchase Req
RECEIVING
rv_msg_handle = lv_msg_handle ).
lo_logger->log_message(
EXPORTING
iv_msg_type = /iwfnd/cl_logger=>info " Message Type
iv_msg_id = gc_log_msg_id " Message Class
iv_msg_number = 006 " Message Number
iv_msg_v1 = lv_instance_counter " Message Variable
iv_system_alias = iv_system_alias " System Alias
iv_agent = gc_log_agent_name " IW Agent
Else
read through the input parameters for logging query parameters
READ TABLE it_parameters INTO ls_parameters WITH KEY attr_name = 'MATERIAL'.
lv_log_material = ls_parameters-low.
READ TABLE it_parameters INTO ls_parameters WITH KEY attr_name = 'PLANT'.
lv_log_plant = ls_parameters-low.
get the message container to add messages
lo_message_container = io_request_data->get_message_container( ).
set the request result code to failed so a fault message can be created
CALL METHOD io_request_data->set_result_code
EXPORTING
iv_result_code = /iwfnd/if_srd_request_context=>cs_result_code-failed_permanent.
add the message to the message container, this will create an error log entry automatically
CALL METHOD lo_message_container->add_message
EXPORTING
is_object_key = ls_key
iv_msg_type = 'E' "Error
iv_msg_id = gc_log_msg_id
iv_msg_number = 004 "Query for Material &1 and Plant &2 returned no results.
iv_msg_v1 = lv_log_material
iv_msg_v2 = lv_log_plant
iv_is_leading_message = abap_true
iv_message_creator = gc_log_agent_name.
Endif.
end this post mapper log step
lo_logger->log_step_completion( EXPORTING
iv_msg_type = /iwfnd/cl_logger=>info
iv_msg_id = gc_log_msg_id
iv_msg_number = 002 "Post Mapping finished for Purchase Req Header Query
iv_system_alias = iv_system_alias
iv_agent = gc_log_agent_name
iv_msg_handle = lv_msg_handle ).
please let me know the answe for this issue.
Many thanks in Advance,
Harish

Hi Girimurugan,
I am currently working with SAP Gateway related stuffs and I need a clarification regarding the application log.
Hope you are very busy and please clarify the doubts if you can spare few minutes towards this query.
Appreciate your valuable advise towards this.
Query:
Can we log any of the different types of logs (I Info / W Warning / A Abort or Cancel / E Error ) into Application Log(/IWFND/APPS_LOG) of the Gateway system in a Hub deployment model ?
How the logging can be achieved?
What are the scenarios, wherein the Application logs are preferred?
Also I have already raised a query in the SCN with this link: http://scn.sap.com/message/15477543. But could not get much details about it.
Can you please clarify the same?
Thanks & Regards,
Mohamed Meeran

Mysterious repeat log entries in System events log

I tried unsuccessfully to share internet connection with 2 iMacs without router(That doesn't matter). But after this, my iMac (24" 2.8 GHz) not networked or on internet now shows this repeated log entries every minute:
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
This message gets repeated every minute on System events log. Daily, Monthly maintenance was not done automatically earlier today on this iMac (usually it did without any problem) which was on all-night.
I checked with Disk Utility, repaired permissions. Although no problems in working, this continuous log writings disturbs me.
Thanks for any help & Happy New Year!
Best.

Thanks, V.K. Did that (was asked password). System log showed after restart:
com.apple.launchd[1] (com.apple.InternetSharing[152]): Exited with exit code: 1
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
com.apple.launchd[1] (com.apple.InternetSharing153): Exited with exit code: 1
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
Then it started again the same way as above - with each aditional line each time as shown above. Thanks for sticking with me on this. Hope you will offer other suggestions.
Best.

RMAN-06054: media recovery requesting unknown archived log

RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of Duplicate Db command at 05/16/2013 09:03:43
RMAN-05501: aborting duplication of target database
RMAN-03015: error occurred in stored script Memory Script
RMAN-06054: media recovery requesting unknown archived log for thread 1 with sequence 34751 and starting SCN of 8923445274I am receiving the error above on performing RMAN Active cloning, please advise how to resolve this

In addition to what was said, I can think of two other possibilities for RMAN-6054 during duplicate: bugs such as 12625205 (also see 8554110); duplicate was run earlier without removing the old restored files (Note 1549172.1). In the first case, just specify SCN or find the actual log file and speficy log sequence, instead of time. In the latter case, remove the old restored files or speficy noresume.
Edited by: user11989003 on May 29, 2013 10:17 AM

Recording User's Log entry

Hi!
I'm the login page, I have acknowledgment checkbox. When the user checks the box it displays the User Name, Password and login button.
I am trying to provide a means to create an audit log entry to record the user's acceptance or every time the user successfully logs in.
Can anyone help me with this?
Thanks,
Bino

...from yesterday: Re: successful login return value
Scott

Windowserver log entries: kCGErrorIllegalArgument:

I'm a newbie to Mac & OS X - I'm seeing lots of entries (sample below) in the log which I don't understand.
Any help appreciated.
Dec 09 11:18:23 [55] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x2 not owned by caller SecurityAgent
Dec 09 11:18:23 [55] kCGErrorIllegalArgument: Set a breakpoint at CGErrorBreakpoint() to catch errors as they are returned
Dec 09 11:18:23 [55] kCGErrorIllegalArgument: CGXOrderWindow: Operation on a window 0x2 not owned by caller SecurityAgent
Dec 09 11:29:53 [55] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x6 not owned by caller SystemUIServer
Dec 09 11:44:49 [55] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x6 not owned by caller Tunnelblick

Hi,
I checked my lab, and saw that only incident's log entries is sorted by date:
Log entries for SR and Problem are not sorted:
And this is hard-coded, if you want to sort them by date, we should click Date Time.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Log Entries not sorted in Problem work items

We have noticed that the Log Entries in all Problem work items appear to be randomly sorted. You can manually sort them by clicking on the column headers.
Log entries for Service Request and Incident work items are sorted by Created date as default which I guess is how most people would want them. Has anyone else noticed this or can this be configured locally somehow?
Thanks

Hi,
I checked my lab, and saw that only incident's log entries is sorted by date:
Log entries for SR and Problem are not sorted:
And this is hard-coded, if you want to sort them by date, we should click Date Time.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Log Entries

Can someone explain how log entries work in FMS 3? If I play
one FLV file, there are 5 entries. I am starting with a clean
logfile to see how things are logged and I see:
Connect
Play
Stop
Play
Stop
A total of these 5 entries has a throughput of 36MB for this
one play. Is that correct? Is there an expert who knows how logging
works in FMS3?
TIA.

shamus1 wrote:
for a long time i had been getting this in my logs
(765310.500000) CWMP: Set Parameter by TR069 failure 9005: Invalid parameter name
but since the log entries
21:48:56, 13 Sep.
(864052.520000) CWMP: Session start now. Event code(s): '7 TRANSFER COMPLETE,M Download,4 VALUE CHANGE'
21:48:55, 13 Sep.
(864051.130000) CWMP: Initializing transaction for event code M Download
21:48:55, 13 Sep.
(864051.130000) transfer completed successfully
21:48:52, 13 Sep.
(864048.200000) CWMP: session completed successfully
21:48:52, 13 Sep.
(864047.980000) CWMP: Download file, FileType=4, FileName=4a-5app-bundle-v3-package.tar.gz.aes.rsa.signed, Username=, CommandKey=1736293426
i am now getting
21:48:58, 14 Sep.
(950453.180000) CWMP: Set Parameter by TR069 Success
21:48:56, 14 Sep.
(950450.560000) CWMP: Set Parameter by TR069 Success
This may not be significant as I have had both the success and failure messages after the download of the file.

[unknown] in log entry

Similar Messages

Maybe you are looking for