Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 6 subscribers
  • Views 5323 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Big confd-debug.log

RomanoBanchieri

Hello,

I have some problem with a HA Cluster UTM-320.

If I take a look on the log files, the bigger (even bigger than the packetfilter.log) is confd-debug.log.

The size is 77Mb after 14 hours, and it is full of these messages:

2017:03:09-13:53:54 portal-2 confd[17662]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys=
"System" sub="confd" name="external call" user="system" srcip="127.0.0.1" facility="system" client=
"awed [master]" lock="none" method="get_objects"
2017:03:09-13:53:57 portal-2 confd[17662]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys=
"System" sub="confd" name="external call" user="system" srcip="127.0.0.1" facility="system" client=
"awed [master]" lock="none" method="logout"
2017:03:09-13:53:57 portal-2 confd[17662]: D Session::terminate:290() => id="3100" severity="debug"
sys="System" sub="confd" name="closing session" user="system" srcip="127.0.0.1" sid="wKsgAHJiiCIyC
IvmbZlP" facility="system" client="awed [master]" call="logout" function="logout"
2017:03:09-13:53:57 portal-2 confd[17662]: D sys::DESTROY:231() => id="3100" severity="debug" sys="
System" sub="confd" name="worker process exiting" user="system" srcip="127.0.0.1" facility="system"
client="awed [master]"
2017:03:09-13:53:58 portal-2 confd[17683]: D Role::authenticate:185() => id="3106" severity="debug"
sys="System" sub="confd" name="authentication successful" user="system" srcip="127.0.0.1" sid="Bqy
FFfnKdLwlEgLBjJPf" facility="system" client="awed [master]" call="new"<31>Mar 9 13:53:58 confd[176
83]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys="System" sub="confd" name="external ca
ll" user="system" srcip="127.0.0.1" facility="system" client="awed [master]" lock="none" method="ge
t_SID"
2017:03:09-13:53:58 portal-2 confd[17683]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys=
"System" sub="confd" name="external call" user="system" srcip="127.0.0.1" facility="system" client=
"awed [master]" lock="none" method="get_objects"
2017:03:09-13:53:59 portal-2 confd[5532]: D Storage::update:87() => id="3108" severity="debug" sys=
"System" sub="confd" name="reloading storage" user="system" srcip="127.0.0.1" facility="system" cli
ent="epp_client.plx" version="1265" storage="/cfg"
2017:03:09-13:53:59 portal-2 confd[5532]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys="
System" sub="confd" name="external call" user="system" srcip="127.0.0.1" facility="system" client="
epp_client.plx" lock="none" method="get_objects"
2017:03:09-13:53:59 portal-2 confd[5532]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys="
System" sub="confd" name="external call" user="system" srcip="127.0.0.1" facility="system" client="
epp_client.plx" lock="none" method="get_objects"
2017:03:09-13:54:01 portal-2 confd[17683]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys=
"System" sub="confd" name="external call" user="system" srcip="127.0.0.1" facility="system" client=
"awed [master]" lock="none" method="logout"
2017:03:09-13:54:01 portal-2 confd[17683]: D Session::terminate:290() => id="3100" severity="debug"
sys="System" sub="confd" name="closing session" user="system" srcip="127.0.0.1" sid="BqyFFfnKdLwlE
gLBjJPf" facility="system" client="awed [master]" call="logout" function="logout"
2017:03:09-13:54:01 portal-2 confd[17683]: D sys::DESTROY:231() => id="3100" severity="debug" sys="
System" sub="confd" name="worker process exiting" user="system" srcip="127.0.0.1" facility="system"
client="awed [master]"
2017:03:09-13:54:01 portal-2 confd[17695]: D Role::authenticate:185() => id="3106" severity="debug"
sys="System" sub="confd" name="authentication successful" user="system" srcip="127.0.0.1" sid="qvs
ylWFZxUdkRUCsKwOq" facility="system" client="awed [master]" call="new"<31>Mar 9 13:54:01 confd[176
95]: D sys::AUTOLOAD:303() => id="3100" severity="debug" sys="System" sub="confd" name="external ca
ll" user="system" srcip="127.0.0.1" facility="system" client="awed [master]" lock="none" method="ge
t_SID"

 

Is it a normal size and content, or something is wrong with it ?

Thank you for your help.



This thread was automatically locked due to age.
  • 0

    with debugging enabled this size is OK.

    but it is not normal.

    debug logging should not be active all the time.

    compare log file size with older files to see time the problem begins.

    and check if someone enable debugging to this time.

     

    currently i don't know how to disable debug logging...


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0 in reply to dirkkotte

    Thank you dirkkotte.

    This debug logging is enabled for a long time, more than 3 months, and all the archived log files have the same size.

    I have found an debug enabled$ switch with the cc command, but it is already turned off (I think) with value 0.

    If somebody know if it is possible to turning off this debugging.....

  • 0 in reply to RomanoBanchieri

    Hi Romano,

    Let support verify if the debug is enabled and make the necessary changes.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to sachingurung

    Hi,

     

    I'm using the home edition and I have also the same problem, the confd-debug.log is "eating" all my log partition.

    Following CC the debugmode enbled value is 0 (I guess it means off), the only workaround that I found was to tweak the syslogng conf file to send to /dev/null instead of that log file.

    Is there a proper way to fix that ?

     

    Thanks,

     

    Regards,

     

  • 0 in reply to sachingurung

    Sachingurung,

     

    Has there been any update on this? Having the same issue. 

Unfiltered HTML