Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

/var/log/kernel filling up while backup running

Created: 05 Feb 2013 • Updated: 05 Feb 2013 | 4 comments
This issue has been solved. See solution.

Hello,

When a backup of one of our linux client runs, the /var/log/kernel file on the client is growing up with entries like this one :

Feb 4 18:08:13 tu-bdcout-q01 kernel: : # NetBakup # IN=eth0 OUT= MAC=00:50:56:92:00:fb:00:23:04:fb:50:80:08:00 SRC=10.120.51.1 DST=10.120.4.2 LEN=72 TOS=0x00 PREC=0x00 TTL=64 ID=1096 DF PROTO=TCP SPT=33867 DPT=1556 WINDOW=501 RES=0x00 ACK URGP=0

This leads the file to grow up to 1Gb, and fill up our /var partition

I'm not sure what process is filling up the file.. is it a netbackup process or some server log process ?

The Default log originator value is set like this at this time :

bash-3.2# ./vxlogcfg -a -p 51216 -o Default -l

Configuration settings for originator 112, of product 51,216...

LogDirectory = /usr/openv/logs/

DebugLevel = 0

DiagnosticLevel = 0

DynaReloadInSec = 0

LogToStdout = False

LogToStderr = False

LogToOslog = False

RolloverMode = FileSize | LocalTime

LogRecycle = False

MaxLogFileSizeKB = 51200

RolloverPeriodInSeconds = 43200

RolloverAtLocalTime = 0:00

NumberOfLogFiles = 3

OIDNames =

AppMsgLogging = ON

L10nLib = /usr/openv/lib/libvxexticu

L10nResourceDir = /usr/openv/resources

SyslogIdent = VRTS-NB

SyslogOpt = 0

SyslogFacility = LOG_LOCAL5

LogFilePermissions = 664

Our master server is a RedHat 2.6 kernel 2.6.18-308.11.1.el5

Running NBU 7.1.0.3 : 

NetBackup-RedHat2.6 7.1.0.3

Our client is the same (same OS, kernel and NBU version)

Have you ever seen this before ?

Thank you

 

 

Comments 4 CommentsJump to latest comment

Nicolai's picture

It's not Netbackup. It's iptables logging traffic

http://gentoovps.net/configuring-iptables-firewall/

Assumption is the mother of all mess ups.

If this post answered your'e qustion -  Please mark as a soloution.

SOLUTION
DavidE31's picture

Thanks a lot Nicolai ...

I found these entries in /etc/sysconfig/iptables file and removed them ...

(...) --dport 1556 -j LOG --log-level debug --log-prefix " # NetBakup # "

mph999's picture

I don't believe NBU writes directly to this log.  Not to say we're not invoved in some way (clearly we are) , perhpas the logging level can be adjusted from the OS ...

... just a thought

 

Regards,  Martin
 
Setting Logs in NetBackup:
http://www.symantec.com/docs/TECH75805
 
mph999's picture

Ahh, Nicoli beat me too it ...

 

 

Regards,  Martin
 
Setting Logs in NetBackup:
http://www.symantec.com/docs/TECH75805