Unknown log entries

Hello,
can someone tell me the below from what command is generated as I turned all debugging of but it persists:
*Mar 1 07:27:10.291: %SEC-6-IPACCESSLOGP: list 103 denied udp 1.1.1.1(2693) -> 2.2.2.2(14690), 1 packet
I have changes the ip addresses.
Thanks !

These are not debug messages but basic level 6 logs from the router, to know more about them you can rerfer to this guide:
http://www.cisco.com/web/about/security/intelligence/identify-incidents-via-syslog.html
Hope this helps.
Thanks,
Varun

Similar Messages

[unknown] in log entry

Hi,
could you please help provide me some explanation about this specific log entry?
08-Nov-2009 20:11:59.79 tcp_intranet tcp_local EE 1 [email protected] rfc822;[email protected] [email protected] <[email protected]> domain.com ([unknown] [10.112.240.101])
I would like to understand what does the ([unknown] ... mean here? How can change this?
SJMS 7.1u3
Thanks,
Stefan

varga_stean wrote:
08-Nov-2009 20:11:59.79 tcp_intranet tcp_local EE 1 [email protected] rfc822;[email protected] [email protected] <[email protected]> domain.com ([unknown] [10.112.240.101])
I would like to understand what does the ([unknown] ... mean here? How can change this?The "[unknown]" refers to Messaging Servers attempt to perform a DNS lookup of 10.112.240.101 and getting no result i.e.
bash-3.00# host 10.112.240.101
Host 101.240.112.10.in-addr.arpa. not found: 3(NXDOMAIN)Why would you need to "change this"?
Regards,
Shane.

Power supply related log entries?

(This question was posted all day yesterday, with no replies, in the iMac G5 forum. Perhaps someone here will have some idea what these logs mean in this situation.)
I recently had the PSU and the Logic Board replaced (two tries to get it right) for the sudden shutdown/ defective capacitor issue. Everything, fingers crossed, seems to be functioning properly, at least, so far. But, now that I'm completely paranoid about this issue, I've noticed log entries "AppleSMU -- shutdown cause = 1" or "AppleSMU -- shutdown cause = 2" (at least, not the dreaded = -110) in the log just after bootup. I know these are often related to the PSU issue and, since my shutdowns have been normal, I don't understand why they are appearing or what they mean.

Here's the latest log from after an SMU reset. (Rebooted after that and only got the usual "shutdown cause =1.") The message in question is in bold. Should I be thinking of a corrupted cache, or is this a possible indication that the latest PSU is also on the way out? My shutdowns (as well as everything else, +so far+) appear to be normal, but this entry "localhost kernel[0]: AppleSMU -- shutdown cause = -110," is the log I was getting from when the computer was shutting down all the time, which is very strange. Thanks for any help.
Nov 19 23:23:14 Macintosh-3 shutdown[644]: SHUTDOWN_TIME: 1258690994 83525
Nov 19 23:23:14 Macintosh-3 com.apple.loginwindow[27]: Shutdown NOW!
Nov 19 23:23:14 Macintosh-3 com.apple.loginwindow[27]: System shutdown time has arrived^G^G
Nov 19 23:23:14 Macintosh-3 mDNSResponder mDNSResponder-176.3 (Jan 27 2009 14:51:59)[26]: stopping
Nov 19 23:23:14 Macintosh-3 com.apple.SystemStarter[20]: Stopping HP Trap Monitor
Nov 19 23:23:14 Macintosh-3 com.apple.SystemStarter[20]: Stopping HP IO Monitor
Nov 19 23:23:14 Macintosh-3 com.apple.usbmuxd[18]: stopping.
Nov 20 06:56:40 localhost kernel[0]: Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC
Nov 20 06:56:34 localhost com.apple.launchctl.System[2]: /dev/disk0s3 on / (hfs, local, journaled)
Nov 20 06:56:37 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Nov 20 06:56:37 localhost com.apple.launchd[1] (com.apple.usbmuxd): Unknown key for boolean: EnableTransactions
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Nov 20 06:56:37 localhost com.apple.launchd[1] (org.x.privileged_startx): Unknown key for boolean: EnableTransactions
Nov 20 06:56:39 localhost kextd[12]: 428 cached, 0 uncached personalities to catalog
Nov 20 06:56:40 localhost kernel[0]: standard timeslicing quantum is 10000 us
Nov 20 06:56:40 localhost kernel[0]: vmpagebootstrap: 313347 free pages and 14333 wired pages
Nov 20 06:56:40 localhost kernel[0]: migtable_maxdispl = 79
Nov 20 06:56:40 localhost kernel[0]: 103 prelinked modules
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.security.TMSafetyNet
Nov 20 06:56:40 localhost kernel[0]: calling mpopolicyinit for TMSafetyNet
Nov 20 06:56:40 localhost kernel[0]: Security policy loaded: Safety net for Time Machine (TMSafetyNet)
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.nke.applicationfirewall
Nov 20 06:56:40 localhost kernel[0]: Loading security extension com.apple.security.seatbelt
Nov 20 06:56:40 localhost kernel[0]: calling mpopolicyinit for mb
Nov 20 06:56:40 localhost kernel[0]: Seatbelt MACF policy initialized
Nov 20 06:56:40 localhost kernel[0]: Security policy loaded: Seatbelt Policy (mb)
Nov 20 06:56:40 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Nov 20 06:56:40 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Nov 20 06:56:40 localhost kernel[0]: MAC Framework successfully initialized
Nov 20 06:56:40 localhost kernel[0]: using 6553 buffer headers and 4096 cluster IO buffer headers
Nov 20 06:56:40 localhost kernel[0]: AirPort_Brcm43xx::probe: 02956680, 0
Nov 20 06:56:40 localhost kernel[0]: AppleKauaiATA shasta-ata features enabled
Nov 20 06:56:40 localhost kernel[0]: DART enabled
Nov 20 06:56:40 localhost kernel[0]: FireWire (OHCI) Apple ID 52 PCI now active, GUID 001124fffe343a86; max speed s400.
Nov 20 06:56:40 localhost kernel[0]: mbinit: done
Nov 20 06:56:40 localhost kernel[0]: Security auditing service present
Nov 20 06:56:40 localhost kernel[0]: BSM auditing present
Nov 20 06:56:40 localhost kernel[0]: rooting via boot-uuid from /chosen: 06DF991F-E8CC-32A4-B78C-1791214651DE
Nov 20 06:56:40 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
*Nov 20 06:56:40 localhost kernel[0]: AppleSMU -- shutdown cause = -110*
Nov 20 06:56:40 localhost kernel[0]: wl0: Broadcom BCM4320 802.11 Wireless Controller
Nov 20 06:56:40 localhost kernel[0]: 4.170.25.8.2Got boot device = IOService:/MacRISC4PE/ht@0,f2000000/AppleMacRiscHT/pci@3/IOPCI2PCIBridge/k2-sat a-root@C/AppleK2SATARoot/k2-sata@0/AppleK2SATA/ATADeviceNub@0/AppleATADiskDriver /IOATABlockStorageDevice/IOBlockStorageDriver/WDC WD800JD-40GBB2 WDC WD800JD-40GBB2/IOApplePartitionScheme/Untitled@3
Nov 20 06:56:40 localhost kernel[0]: BSD root: disk0s3, major 14, minor 2
Nov 20 06:56:40 localhost kernel[0]: AppleSMU::PMU vers = 0x000d004c, SPU vers = 0x15, SDB vers = 0x01,
Nov 20 06:56:40 localhost kernel[0]: Jettisoning kernel linker.
Nov 20 06:56:40 localhost kernel[0]: Resetting IOCatalogue.
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 1
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 3
Nov 20 06:56:40: --- last message repeated 4 times ---
Nov 20 06:56:40 localhost kernel[0]: Matching service count = 4
Nov 20 06:56:40 localhost kernel[0]: NVDANV30HAL loaded and registered.
Nov 20 06:56:40 localhost kernel[0]: PowerMac8,1: stalling for module
Nov 20 06:56:42 localhost bootlog[40]: BOOT_TIME: 1258718192 0
Nov 20 06:56:42 localhost fseventsd[31]: bumping event counter to: 0x1d08d5e (current 0x0) from log file '0000000001d0337a'
Nov 20 06:56:43 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Nov 20 06:56:46 localhost kernel[0]: Matching service count = 1
Nov 20 06:56:46 localhost DirectoryService[36]: Launched version 5.7 (v514.25)
Nov 20 06:56:47 localhost kernel[0]: PowerMac81SystemFansCtrlLoop::calculateNewTarget() linkedControl not ready
Nov 20 06:56:47 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[27]: Login Window Application Started -- Threaded auth
Nov 20 06:56:47 localhost rpc.statd[22]: statd.notify - no notifications needed
Nov 20 06:56:47 localhost kernel[0]: UniNEnet: Ethernet address 00:11:24:34:3a:86
Nov 20 06:56:48 localhost kernel[0]: AirPort_Brcm43xx: Ethernet address 00:0a:95:f4:79:08
Nov 20 06:56:49 localhost iStatLocalDaemon[45]: Waiting for connections on port 5204.
Nov 20 06:56:50 localhost mDNSResponder mDNSResponder-176.3 (Jan 27 2009 14:51:59)[26]: starting
Nov 20 06:56:50 localhost com.apple.usbmuxd[18]: usbmuxd-176 built for iTunesNine on Jul 20 2009 at 13:06:53, running 32 bit
Nov 20 06:56:51 localhost com.paceap.pacesupport[44]: kextload: extension /System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns/PACESupportL eopard.kext is already loaded
Nov 20 06:56:52 localhost /usr/sbin/ocspd[67]: starting
Nov 20 06:56:55 localhost loginwindow[27]: Login Window Started Security Agent
Nov 20 06:56:57 localhost kernel[0]: AirPort: Link Down on en1
Nov 20 06:56:57 localhost kextd[12]: writing kernel link data to /var/run/mach.sym
Nov 20 06:56:58 Macintosh-3 configd[38]: setting hostname to "Macintosh-3.local"
Nov 20 06:56:59 Macintosh-3 kernel[0]: AirPort: Link Up on en1
Nov 20 06:56:59 Macintosh-3 kernel[0]: SetCryptoKey T: len 16, idx 0
Nov 20 06:56:59 Macintosh-3 kernel[0]: SetCryptoKey R: len 32, idx 2
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: PACESupport - launchd already started us
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: Starting HP IO Monitor
Nov 20 06:57:02 Macintosh-3 com.apple.SystemStarter[20]: Starting HP Trap Monitor
Nov 20 06:57:26 Macintosh-3 SecurityAgent[82]: NSExceptionHandler has recorded the following exception:\nNSRangeException -- * -[NSCFArray objectAtIndex:]: index (0) beyond bounds (0)\nStack trace: 0x39dbc 0x9329a4ec 0x92303c00 0x92303c38 0x90448180 0x709c8 0x5bee4 0x6edd8 0x637b4 0x649c4 0x6c678 0x9140c358 0x9140c28c 0x9144dc94 0x9144c0f4 0x914092dc 0x74764 0x913dc680 0x913498d8 0x11e14 0x2db0
Nov 20 06:57:33 Macintosh-3 authorizationhost[81]: MechanismInvoke 0x12d5f0 retainCount 2
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: MechanismInvoke 0x101660 retainCount 1
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: NSSecureTextFieldCell detected a field editor ((null)) that is not a NSTextView subclass designed to work with the cell. Ignoring...
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: NSExceptionHandler has recorded the following exception:\nNSRangeException -- * -[NSCFArray objectAtIndex:]: index (0) beyond bounds (0)\nStack trace: 0x39dbc 0x9329a4ec 0x92303c00 0x92303c38 0x90448180 0x709c8 0x5bee4 0x6edd8 0x637b4 0x68368 0x774a4 0xe068 0x14200 0x13f64 0xdb58 0x9047f8f0 0x9227426c 0x92296634 0x900bbb18 0x900bb93c 0x900bb77c 0x91350248 0x9134fc00 0x913498a0 0x11e14 0x2db0
Nov 20 06:57:34 Macintosh-3 loginwindow[27]: Login Window - Returned from Security Agent
Nov 20 06:57:34 Macintosh-3 SecurityAgent[82]: MechanismDestroy 0x101660 retainCount 1
Nov 20 06:57:34 Macintosh-3 authorizationhost[81]: MechanismDestroy 0x12d5f0 retainCount 2
Nov 20 06:57:34 Macintosh-3 loginwindow[27]: USER_PROCESS: 27 console
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[80]): Exited: Terminated
Nov 20 06:57:34 Macintosh-3 com.apple.launchctl.Aqua[110]: launchctl: Couldn't stat("/etc/machinit_peruser.d"): No such file or directory
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[107] (com.apple.AirPortBaseStationAgent): Unknown key for boolean: EnableTransactions
Nov 20 06:57:34 Macintosh-3 com.apple.launchd[107] (org.x.startx): Unknown key for boolean: EnableTransactions
Nov 20 06:57:35 Macintosh-3 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 2 seconds
Nov 20 06:57:42 Macintosh-3 /System/Library/CoreServices/coreservicesd[51]: SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(.... Public Folder) returned -14135
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker 2.0 (/Library/Application Support/iStat local/extras/MenuCracker.menu)\n See http://sourceforge.net/projects/menucracker\n MenuCracker is now loaded. Ready to accept new menu extras. Ignore the failure message that follows.
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: failed to instantiate and get the principal class of bundle: NSBundle </Library/Application Support/iStat local/extras/MenuCracker.menu> (loaded)
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusCPU".
Nov 20 06:57:49 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusDisks".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusMemory".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusNetwork".
Nov 20 06:57:50 Macintosh-3 SystemUIServer[125]: MenuCracker: Allowing "iStatMenusTemps".
Message was edited by: WZZZ

Log entry information

I am looking for any help on understanding what field reported the "trojan" entry found in the log entry below:
http://load.videohub.com/core?playerID=P-63Z-6P9&bootloaderID=B-0Y9-YVC, IW_busi,-5.4,"1","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,IW_busi,-,"-","trojan","Unknown","Unknown","-","-",1.26,0,-,"-","-"> NONE/504 11201
I understand that the access was not allowed due to a gateway timeout, we also are not running any type of malware/virus scanning on the WSA. This is from a W3C log file. The log fields we use are listed below:
c-ip
cs-mime-type
cs-username
date
time
cs-url
sc-bytes
x-wbrs-score
x-result-code
x-resultcode-httpstatus
x-webcat-req-code-abbr
x-elapsed-time
Thanks
Dominick

Hi Dominick,
The log field ( %Xr ) x-result-code is the reason why your seeing " trojan" in your W3C logs. The result code that your looking based on our phone conversation is:
sc-http-status
%h
HTTP response code
This information is located in the online userguide of the WSA -> GUI -> Support and Help -> Online Userguide -> Search tab -> W3C -> page 63 about 1/4 of the was down on that page you should find the entery above.
Sincerely,
Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator

No Console Log Entries

Trying to find root cause of near-daily lockups of this 2.4 GHz Macbook. All keys and mouse are locked and a long press on the power button is required.
-Tried to look at console messages and found that there are none since April of 2009.
-Tried to try Onyx to trigger the various log scripts. Downloaded and installed and found that it crashes on startup.
-Ran 10.5.8 combo updater. Did not change the above.
Ideas?
Thanks in advance,
Tom

William, Thanks for your response.
Q: "When you see nothing since April of 2009, what is selected in the left column? "
A: "Console Messages" under the "LOG DATABASE MESSAGES" heading.
system.log is accessible either thru console or through Finder>Go>Go to folder.... It has plenty of current messages.
When Onyx crashes, the log entry is:
Mar 17 10:01:23 sue-pollaks-MacBook com.apple.launchd[82] ([0x0-0x49049].com.titanium.OnyX[960]): Exited abnormally: Trace/BPT trap
This doesn't give me any clues.
Yesterday the machine was sitting idle. Looking through the log entries, the only activity is Time Machine running at 23 minute past each hour. Then, at 22:35, the string of messages associated with booting begins. Hope it's OK to paste part of it here:
Mar 16 22:23:19 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Starting standard backup
Mar 16 22:23:21 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Backing up to: /Volumes/TimeMachine/Backups.backupdb
Mar 16 22:23:21 sue-pollaks-MacBook FindSystemFiles[3759]: Querying receipt database for system packages
Mar 16 22:23:21 sue-pollaks-MacBook com.apple.backupd[3758]: 2010-03-16 22:23:21.834 FindSystemFiles[3759:713] Querying receipt database for system packages
Mar 16 22:23:22 sue-pollaks-MacBook FindSystemFiles[3759]: Using system path cache.
Mar 16 22:23:22 sue-pollaks-MacBook com.apple.backupd[3758]: 2010-03-16 22:23:22.058 FindSystemFiles[3759:713] Using system path cache.
Mar 16 22:23:22 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: No pre-backup thinning needed: 100.0 MB requested (including padding), 29.66 GB available
Mar 16 22:23:23 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Copied 351 files (613 KB) from volume Macintosh HD.
Mar 16 22:23:23 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Starting post-backup thinning
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Deleted backup /Volumes/TimeMachine/Backups.backupdb/sue pollak’s MacBook/2010-03-15-212409: 29.67 GB now available
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Post-back up thinning complete: 1 expired backups removed
Mar 16 22:23:24 sue-pollaks-MacBook /System/Library/CoreServices/backupd[3758]: Backup completed successfully.
Mar 16 22:35:27 localhost com.apple.launchctl.System[2]: fsck_hfs: Volume is journaled. No checking performed.
Mar 16 22:35:27 localhost com.apple.launchctl.System[2]: fsck_hfs: Use the -f option to force checking.
Mar 16 22:35:28 localhost com.apple.launchctl.System[2]: BootCacheControl: could not open /var/db/BootCache.playlist: No such file or directory
Mar 16 22:35:28 localhost com.apple.launchctl.System[2]: BootCacheControl: could not unlink playlist /var/db/BootCache.playlist: Unknown error: -1
Mar 16 22:35:29 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Mar 16 22:35:29 localhost com.apple.launchd[1] (com.apple.usbmuxd): Unknown key for boolean: EnableTransactions
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Mar 16 22:35:29 localhost com.apple.launchd[1] (org.x.privileged_startx): Unknown key for boolean: EnableTransactions
Mar 16 22:35:31 localhost kernel[0]: npvhash=4095
Mar 16 22:35:30 localhost DirectoryService[11]: Launched version 5.7 (v514.25)
Mar 16 22:35:31 localhost kernel[0]: hi mem tramps at 0xffe00000
Mar 16 22:35:30 localhost DirectoryService[11]: Improper shutdown detected
Mar 16 22:35:31 localhost kernel[0]: PAE enabled
Mar 16 22:35:30 localhost kextd[10]: 425 cached, 0 uncached personalities to catalog
Mar 16 22:35:31 localhost kernel[0]: 64 bit mode enabled
Looking through this does not give me any clues. The only things that seem odd are:
Mar 16 22:35:30 localhost DirectoryService[11]: Improper shutdown detected
and then later:
Mar 16 22:35:32 localhost kernel[0]: Previous Shutdown Cause: 3
THoughts?
Thanks,
Tom

RMAN Restore Error - media recovery requesting unknown log: thread 1 seq 7

Im using RMAN to copy a database to another server. The new server is IDENTICAL to the old one. By identical I mean it has the same sever name, ip address, operating system, Oracle version and directory structure.
The new server already has the instance created, (same name as the old server instance, paths etc)
The backup files have been manually restored to the new server, same locations as they were on the old one. ( RMAN did an automatic controlfile backup and also the archivelogs on the old server ).
Ive restored the control file on the new server from the RMAN backup pieces.
Ive catalogued the RMAN backup pieces on the new server.
I know the last sequence available in the archivelogs backup by running on the new server :
list backup of archivelog all;
List of Backup Sets
===================
BS Key Size Device Type Elapsed Time Completion Time
5 14.43M DISK 00:00:03 11-MAY-11
BP Key: 9 Status: AVAILABLE Compressed: NO Tag: TAG20110511T163502
Piece Name: C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\SAT\BACKUPSET\
011_05_11\O1_MF_ANNNN_TAG20110511T163502_6WOC5833_.BKP
List of Archived Logs in backup set 5
Thrd Seq Low SCN Low Time Next SCN Next Time
1 2 550217 10-MAY-11 556559 11-MAY-11
1 3 556559 11-MAY-11 559776 11-MAY-11
1 4 559776 11-MAY-11 560093 11-MAY-11
1 5 560093 11-MAY-11 560794 11-MAY-11
BS Key Size Device Type Elapsed Time Completion Time
7 15.50K DISK 00:00:01 11-MAY-11
BP Key: 10 Status: AVAILABLE Compressed: NO Tag: TAG20110511T163653
Piece Name: C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\SAT\BACKUPSET\
011_05_11\O1_MF_ANNNN_TAG20110511T163653_6WOC8PMP_.BKP
List of Archived Logs in backup set 7
Thrd Seq Low SCN Low Time Next SCN Next Time
1 6 560794 11-MAY-11 560851 11-MAY-11
So far its all going swimmingly well.
Now I want to restore the datafiles and recover. So I ran :
RMAN run { restore database; recover database; alter database open resetlogs; }
This gave me the output below which goes great but I get a final error, I think the error is because its looking for an archive log thats not in the backup set, but it should be. However, I think SCN 560851 is for a log that hadnt been created yet on the old server when the backup was ran ?
How do I address resolving the error ? Its worth pointing out log, "archive log filename=C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\SAT\ARCHIVELOG
\2011_05_11\O1_MF_1_6_6WOK1X4W_.ARC recid=10 stamp=750881741" isnt on the old server either which is why its not in the backup set.
I can do a alter database open reset logs but Id prefer to know why its failing.
Any help would be much appreciated.
RMAN> run { restore database; recover database; alter database open resetlogs; }
Starting restore at 11-MAY-11
using channel ORA_DISK_1
channel ORA_DISK_1: starting datafile backupset restore
channel ORA_DISK_1: specifying datafile(s) to restore from backup set
restoring datafile 00001 to C:\ORACLE\PRODUCT\10.2.0\ORADATA\SAT\SYSTEM01.DBF
restoring datafile 00002 to C:\ORACLE\PRODUCT\10.2.0\ORADATA\SAT\UNDOTBS01.DBF
restoring datafile 00003 to C:\ORACLE\PRODUCT\10.2.0\ORADATA\SAT\SYSAUX01.DBF
restoring datafile 00004 to C:\ORACLE\PRODUCT\10.2.0\ORADATA\SAT\USERS01.DBF
channel ORA_DISK_1: reading from backup piece C:\ORACLE\PRODUCT\10.2.0\FLASH_REC
OVERY_AREA\SAT\BACKUPSET\2011_05_11\O1_MF_NNNDF_TAG20110511T163507_6WOC5CM7_.BKP
channel ORA_DISK_1: restored backup piece 1
piece handle=C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\SAT\BACKUPSET\2011_05_
11\O1_MF_NNNDF_TAG20110511T163507_6WOC5CM7_.BKP tag=TAG20110511T163507
channel ORA_DISK_1: restore complete, elapsed time: 00:00:55
Finished restore at 11-MAY-11
Starting recover at 11-MAY-11
using channel ORA_DISK_1
starting media recovery
channel ORA_DISK_1: starting archive log restore to default destination
channel ORA_DISK_1: restoring archive log
archive log thread=1 sequence=6
channel ORA_DISK_1: reading from backup piece C:\ORACLE\PRODUCT\10.2.0\FLASH_REC
OVERY_AREA\SAT\BACKUPSET\2011_05_11\O1_MF_ANNNN_TAG20110511T163653_6WOC8PMP_.BKP
channel ORA_DISK_1: restored backup piece 1
piece handle=C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\SAT\BACKUPSET\2011_05_
11\O1_MF_ANNNN_TAG20110511T163653_6WOC8PMP_.BKP tag=TAG20110511T163653
channel ORA_DISK_1: restore complete, elapsed time: 00:00:01
archive log filename=C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\SAT\ARCHIVELOG
\2011_05_11\O1_MF_1_6_6WOK1X4W_.ARC thread=1 sequence=6
channel default: deleting archive log(s)
archive log filename=C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\SAT\ARCHIVELOG
\2011_05_11\O1_MF_1_6_6WOK1X4W_.ARC recid=10 stamp=750881741
unable to find archive log
archive log thread=1 sequence=7
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of recover command at 05/11/2011 18:15:42
RMAN-06054: media recovery requesting unknown log: thread 1 seq 7 lowscn 560851
RMAN>
Edited by: user12173666 on 11-May-2011 10:28

You need to do incomplete recovery i.e. to ask RMAN to restore/recover to some specific point in time. This is usually done with some UNTIL clause or SET UNTIL statement. Example in your case:
SET UNTIL SEQUENCE 7;See http://download.oracle.com/docs/cd/B19306_01/backup.102/b14194/rcmsynta065.htm#RCMRF160.

Excessive log entries with buffalo linkstation

Hi all,
I am getting excessive log entries on my MacBook Pro (OS 10.6.7) that appear to be related to my Buffalo LinkStation HD-CELU2 external drive. This drive is connected to my Airport Extreme (latest firmware) via USB and acts as my iTunes (10.2.2) library, which also serves as the music source for a Sonos digital music system. A sample of the log entries follow:
4/18/11 8:15:22 PM    com.apple.launchd[1]    (jp.buffalo.NASPower) Throttling respawn: Will start in 60 seconds
4/18/11 8:15:39 PM    com.apple.launchd.peruser.501[131]    (jp.buffalo.NASPower[6798]) posix_spawn("/Library/PrivilegedHelperTools/NasNavigator2.app/Contents/MacOS/Na sNavigator2", ...): No such file or directory
4/18/11 8:15:39 PM    com.apple.launchd.peruser.501[131]    (jp.buffalo.NASPower[6798]) Exited with exit code: 1
4/18/11 8:15:39 PM    com.apple.launchd.peruser.501[131]    (jp.buffalo.NASPower) Throttling respawn: Will start in 60 seconds
It says that a file isn't found, and that could be because I uninstalled NASNavigator in an attempt to get rid of these extraneous log entries. Uninstalling the software seems to have only resulted in changing the messages (to "no such file"), not reducing or ending them.
This log entry is constant; it occurs even when the computer has no need to access the Buffalo hard drive. It makes it very hard to diagnose any other issues because it both clutters the log and causes it to only recall a couple of hours worth of log info.
Thanks in advance!

Ho everyone, just registered as I have a Bold 9900 and am considering a Playbook with the new OS2. Does anyone know whether I will be able to get it to talk to my Buffalo Linkstation. think its a Pro Duo 2 and is about 2-3 years old.

.sh file usage log entries multiplied

Hi all,
I have a very strange problem: In order to find out what parts of a big application being used,
I have added the following line as the first executable line in every .sh file:
/application/sh_log $0
The file sh_log looks like this:
now=$(date +"%Y_%m_%d")
filename=/spool/logs/sh_log_$now.log
if [ -f $filename ];                 # Does logfile exist?
then
   echo $(basename $1)";"$(date +"%Y%m%d%H%M%S")";" >> $filename   # Logfile exists, append log record
else
   touch $filename          # Logfile did not exist, create it
   chmod 7777 $filename     # Make it writeable
   echo $(basename $1)";"$(date +"%Y%m%d%H%M%S")";" >> $filename   # Ans append log record
fi
The application calls it's .sh files in a number of ways, but all of them originating from crontab.
What confuses me is that log entries often appear in tuples, that is, when the application's
.sh file is calling the file making the log entry, supposedly to make a single log entry, I'm still
getting 2, 3 or even more log entries with the same time-stamp (resolution: 1 sec).
I don't understand this and would appreciate if some guru here could give me a clou.
Regards
Lars

Hi,
I would log also PIDs together with script name: "/application/sh_log $0 $$". Then you could see whether the application script or sh_log is really called more times (different PIDs).
Also consider to use chmod 0777 instead of 7777. So, e.g.:
now=$(date +"%Y_%m_%d")
filename=/spool/logs/sh_log_$now.log
[ ! -f $filename ] && touch $filename && chmod 0777 $filename
#Format: my_PID;script_name;script_PID;timestamp;
echo $$";"$(basename $1)";"$2";"$(date +"%Y%m%d%H%M%S")";" >> $filename
Regards
Vaclav

Log entries in Service Consupmtion Layer Application Logs of Duet Enterpr

Dear all,
I need your inputs to solve the below mentioned issue,
There is a communication developed between MS sharepoint and SAP.
By using Mapper Classes for each and every operations the conversion of data format from Sharepoint to SAP and viceversa happens.
We can see the message or error logs created during the conversion process using the T-code /iwfnd/view_log.
But i want my custumized messages has to come in that log for that i used the following code in the mapper class Post method but still my logs are not coming in the T-code /iwfnd/view_log.
DATA: lo_logger TYPE REF TO /iwfnd/cl_logger,"logger singleton
lo_message_container TYPE REF TO /iwfnd/if_message_container,"message container
lv_message TYPE bapi_msg,
lv_log_material TYPE symsgv,
lv_log_plant TYPE symsgv,
lv_instance_counter TYPE i,
lv_previous_pur_doc TYPE char10.
CONSTANTS gc_log_agent_name TYPE /iwfnd/sup_iw_agent VALUE 'Dev Guide Purchase Req'.
CONSTANTS gc_log_msg_id TYPE symsgid VALUE 'ZDUET_SCL_PR'.
Get logger
CALL METHOD /iwfnd/cl_logger=>get_logger
RECEIVING
ro_logger = lo_logger.
initialize the post mapper log step
lo_logger->log_step_init(
EXPORTING iv_msg_number = 000 "Post Mapping started for Purchase Req Header Query
iv_msg_id = gc_log_msg_id " message class
iv_system_alias = iv_system_alias "Backend System Alias
iv_agent = gc_log_agent_name "Dev Guide Purchase Req
RECEIVING
rv_msg_handle = lv_msg_handle ).
lo_logger->log_message(
EXPORTING
iv_msg_type = /iwfnd/cl_logger=>info " Message Type
iv_msg_id = gc_log_msg_id " Message Class
iv_msg_number = 006 " Message Number
iv_msg_v1 = lv_instance_counter " Message Variable
iv_system_alias = iv_system_alias " System Alias
iv_agent = gc_log_agent_name " IW Agent
Else
read through the input parameters for logging query parameters
READ TABLE it_parameters INTO ls_parameters WITH KEY attr_name = 'MATERIAL'.
lv_log_material = ls_parameters-low.
READ TABLE it_parameters INTO ls_parameters WITH KEY attr_name = 'PLANT'.
lv_log_plant = ls_parameters-low.
get the message container to add messages
lo_message_container = io_request_data->get_message_container( ).
set the request result code to failed so a fault message can be created
CALL METHOD io_request_data->set_result_code
EXPORTING
iv_result_code = /iwfnd/if_srd_request_context=>cs_result_code-failed_permanent.
add the message to the message container, this will create an error log entry automatically
CALL METHOD lo_message_container->add_message
EXPORTING
is_object_key = ls_key
iv_msg_type = 'E' "Error
iv_msg_id = gc_log_msg_id
iv_msg_number = 004 "Query for Material &1 and Plant &2 returned no results.
iv_msg_v1 = lv_log_material
iv_msg_v2 = lv_log_plant
iv_is_leading_message = abap_true
iv_message_creator = gc_log_agent_name.
Endif.
end this post mapper log step
lo_logger->log_step_completion( EXPORTING
iv_msg_type = /iwfnd/cl_logger=>info
iv_msg_id = gc_log_msg_id
iv_msg_number = 002 "Post Mapping finished for Purchase Req Header Query
iv_system_alias = iv_system_alias
iv_agent = gc_log_agent_name
iv_msg_handle = lv_msg_handle ).
please let me know the answe for this issue.
Many thanks in Advance,
Harish

Hi Girimurugan,
I am currently working with SAP Gateway related stuffs and I need a clarification regarding the application log.
Hope you are very busy and please clarify the doubts if you can spare few minutes towards this query.
Appreciate your valuable advise towards this.
Query:
Can we log any of the different types of logs (I Info / W Warning / A Abort or Cancel / E Error ) into Application Log(/IWFND/APPS_LOG) of the Gateway system in a Hub deployment model ?
How the logging can be achieved?
What are the scenarios, wherein the Application logs are preferred?
Also I have already raised a query in the SCN with this link: http://scn.sap.com/message/15477543. But could not get much details about it.
Can you please clarify the same?
Thanks & Regards,
Mohamed Meeran

Mysterious repeat log entries in System events log

I tried unsuccessfully to share internet connection with 2 iMacs without router(That doesn't matter). But after this, my iMac (24" 2.8 GHz) not networked or on internet now shows this repeated log entries every minute:
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
This message gets repeated every minute on System events log. Daily, Monthly maintenance was not done automatically earlier today on this iMac (usually it did without any problem) which was on all-night.
I checked with Disk Utility, repaired permissions. Although no problems in working, this continuous log writings disturbs me.
Thanks for any help & Happy New Year!
Best.

Thanks, V.K. Did that (was asked password). System log showed after restart:
com.apple.launchd[1] (com.apple.InternetSharing[152]): Exited with exit code: 1
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
com.apple.launchd[1] (com.apple.InternetSharing153): Exited with exit code: 1
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
Then it started again the same way as above - with each aditional line each time as shown above. Thanks for sticking with me on this. Hope you will offer other suggestions.
Best.

Recording User's Log entry

Hi!
I'm the login page, I have acknowledgment checkbox. When the user checks the box it displays the User Name, Password and login button.
I am trying to provide a means to create an audit log entry to record the user's acceptance or every time the user successfully logs in.
Can anyone help me with this?
Thanks,
Bino

...from yesterday: Re: successful login return value
Scott

Windowserver log entries: kCGErrorIllegalArgument:

I'm a newbie to Mac & OS X - I'm seeing lots of entries (sample below) in the log which I don't understand.
Any help appreciated.
Dec 09 11:18:23 [55] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x2 not owned by caller SecurityAgent
Dec 09 11:18:23 [55] kCGErrorIllegalArgument: Set a breakpoint at CGErrorBreakpoint() to catch errors as they are returned
Dec 09 11:18:23 [55] kCGErrorIllegalArgument: CGXOrderWindow: Operation on a window 0x2 not owned by caller SecurityAgent
Dec 09 11:29:53 [55] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x6 not owned by caller SystemUIServer
Dec 09 11:44:49 [55] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x6 not owned by caller Tunnelblick

Hi,
I checked my lab, and saw that only incident's log entries is sorted by date:
Log entries for SR and Problem are not sorted:
And this is hard-coded, if you want to sort them by date, we should click Date Time.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Log Entries not sorted in Problem work items

We have noticed that the Log Entries in all Problem work items appear to be randomly sorted. You can manually sort them by clicking on the column headers.
Log entries for Service Request and Incident work items are sorted by Created date as default which I guess is how most people would want them. Has anyone else noticed this or can this be configured locally somehow?
Thanks

Hi,
I checked my lab, and saw that only incident's log entries is sorted by date:
Log entries for SR and Problem are not sorted:
And this is hard-coded, if you want to sort them by date, we should click Date Time.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Log Entries

Can someone explain how log entries work in FMS 3? If I play
one FLV file, there are 5 entries. I am starting with a clean
logfile to see how things are logged and I see:
Connect
Play
Stop
Play
Stop
A total of these 5 entries has a throughput of 36MB for this
one play. Is that correct? Is there an expert who knows how logging
works in FMS3?
TIA.

shamus1 wrote:
for a long time i had been getting this in my logs
(765310.500000) CWMP: Set Parameter by TR069 failure 9005: Invalid parameter name
but since the log entries
21:48:56, 13 Sep.
(864052.520000) CWMP: Session start now. Event code(s): '7 TRANSFER COMPLETE,M Download,4 VALUE CHANGE'
21:48:55, 13 Sep.
(864051.130000) CWMP: Initializing transaction for event code M Download
21:48:55, 13 Sep.
(864051.130000) transfer completed successfully
21:48:52, 13 Sep.
(864048.200000) CWMP: session completed successfully
21:48:52, 13 Sep.
(864047.980000) CWMP: Download file, FileType=4, FileName=4a-5app-bundle-v3-package.tar.gz.aes.rsa.signed, Username=, CommandKey=1736293426
i am now getting
21:48:58, 14 Sep.
(950453.180000) CWMP: Set Parameter by TR069 Success
21:48:56, 14 Sep.
(950450.560000) CWMP: Set Parameter by TR069 Success
This may not be significant as I have had both the success and failure messages after the download of the file.

Add log entries to an emailed alerts

Is there any way to add the logs entries that is included in a report/incident in an emailed alert. In other words, instead of just having the link to the mars emailed in the alert, have the actual data that the user will see once they enter the mars.

I have been working on this one for a few months now. Out of the box, no, there is not. There was a feature request added into 6.0.3 that was supposed to add this functionality but it got left out because it was going to be a lot of work. I have opened a new case with TAC (611170537) and the guy confirmed that the engineers added some data to the email alerts that was already being processed and wouldnt need much additional coding.
I have filed a new feature request with my local Cisco team but I do not know the bug id yet. Basically what i want is the ability to create an email template which will have the ability to include variables in the email, so the raw message or matched event ID can be included. I was told by the guy at TAC that when he brought up this idea to the developers, they werent too excited because it seemed like a lot of work and there didnt seem to be a business case for it. So if anyone wants to see this feature added, please contact your local account team and include my latest case #. I will include the bug id once I get one. The only way to get this feature added is to request it.

Unknown log entries

Similar Messages

Maybe you are looking for