DHCPACKs are logged unintentional in a second logfile (dhcpd.log.1)

JanKalthoff newsletter at jan-ist.net
Fri Oct 4 09:08:48 UTC 2013


(Sorry for resending this, but I cant see my original eMail (sent September
30th) in the
archive/Thread-Overview<https://lists.isc.org/pipermail/dhcp-users/2013-September/thread.html>
)

Hi all,

I'm trying to figure out, why my private DHCPd Installation is logging nearly
all DHCPACK messages into a second logfile.

Any hint would be realy appreciated.. :-/


# ls -l /var/log/dhcpd.log*
-rw-------. 1 root root 215061 Sep 30 15:31 /var/log/dhcpd.log
-rw-r-----. 1 root root  88928 Sep 30 15:31 /var/log/dhcpd.log.1
-rw-------. 1 root root  21980 Sep 24 03:26 /var/log/dhcpd.log-20130924.gz

--


# tail -n 2 /var/log/dhcpd.log
Sep 30 15:34:57 x dhcpd: DHCPINFORM from x via x
Sep 30 15:34:57 x dhcpd: DHCPACK to x (00:0f:fe:d5:a6:bd) via eth0

# tail -n 2 /var/log/dhcpd.log.1
Sep 30 15:32:05 x dhcpd: DHCPACK to x (00:00:00:00:00:00) via eth0
Sep 30 15:34:57 x dhcpd: DHCPACK to x (00:0f:fe:d5:a6:bd) via eth0


--


# grep dhcp /etc/rsyslog.conf
# Save dhcpd messages to dhcpd.log
local6.*                                                /var/log/dhcpd.log

--

# cat /etc/logrotate.d/dhcpd
/var/log/dhcpd.log {
    compress
    dateext
    rotate 7
    sharedscripts
    lastaction
      echo "start" >> /var/log/dhcpd.log
      /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null ||
true
      /bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2> /dev/null ||
true
    endscript
}

--

# grep log /etc/dhcp/dhcpd*
/etc/dhcp/dhcpd.conf:log- facility local6;
/etc/dhcp/dhcpd-master.conf: host [..]


--


# ps faux | grep dhcp
root     17344  0.0  0.0 103244   824 pts/0    S+   15:33   0:00          \_
grep dhcp
dhcpd    22818  0.0  0.5  49168  5228 ?        Ss   Sep27   0:04 /usr/sbin/dhcpd
-user dhcpd -group dhcpd eth0


# /usr/sbin/dhcpd
Internet Systems Consortium DHCP Server 4.1.1-P1


Cheers,
Jan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20131004/16a9b67b/attachment.html>


More information about the dhcp-users mailing list