Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Strange `--MARK--`
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo
View previous topic :: View next topic  
Author Message
kamracik
Apprentice
Apprentice


Joined: 01 Apr 2006
Posts: 219
Location: Poland->Lodz

PostPosted: Mon Jun 11, 2007 4:00 pm    Post subject: Strange `--MARK--` Reply with quote

Can enyone tell me why I got in logs every 20 minutes '--MARK--'??

I dont know why that happen and what causes that.. but it makes my logs bigger :/
Back to top
View user's profile Send private message
ningo
n00b
n00b


Joined: 20 Sep 2005
Posts: 19

PostPosted: Mon Jun 11, 2007 4:04 pm    Post subject: Reply with quote

Read syslogd(8).
_________________
"Linux is fucking POO, not just bad, bad REALLY REALLY BAD"
Back to top
View user's profile Send private message
PaulBredbury
Watchman
Watchman


Joined: 14 Jul 2005
Posts: 7310

PostPosted: Mon Jun 11, 2007 4:35 pm    Post subject: Reply with quote

Add mark_freq to the options bit in /etc/syslog-ng/syslog-ng.conf
Code:
options {
    chain_hostnames(off);
    sync(0);
    stats(43200);
    mark_freq(43200);
};
Back to top
View user's profile Send private message
kamracik
Apprentice
Apprentice


Joined: 01 Apr 2006
Posts: 219
Location: Poland->Lodz

PostPosted: Mon Jun 11, 2007 8:57 pm    Post subject: Reply with quote

thx that help :)

but could you explain what it makes?? :)
Back to top
View user's profile Send private message
think4urs11
Bodhisattva
Bodhisattva


Joined: 25 Jun 2003
Posts: 6659
Location: above the cloud

PostPosted: Tue Jun 12, 2007 9:31 am    Post subject: Reply with quote

mark_freq is some sort of 'still alive'-signal syslog-ng generates after the given amount of time.
So if no syslog message is generated for 'x' seconds a '-- MARK --' is logged. If you want to get rid of those completely (43200 means one per 12 hours) then you can also use 0 as value.
_________________
Nothing is secure / Security is always a trade-off with usability / Do not assume anything / Trust no-one, nothing / Paranoia is your friend / Think for yourself
Back to top
View user's profile Send private message
Jimmers
Tux's lil' helper
Tux's lil' helper


Joined: 02 Feb 2005
Posts: 145

PostPosted: Tue Jun 12, 2007 9:20 pm    Post subject: Reply with quote

Or, just emerge metalog
_________________
I decree today that life is simply taking and not giving. England is mine...
Back to top
View user's profile Send private message
desultory
Administrator
Administrator


Joined: 04 Nov 2005
Posts: 9276

PostPosted: Mon Mar 03, 2008 9:03 am    Post subject: Reply with quote

Moved from Kernel & Hardware to Other Things Gentoo.
Back to top
View user's profile Send private message
swimmer
Veteran
Veteran


Joined: 15 Jul 2002
Posts: 1314
Location: Netherlands

PostPosted: Mon Mar 03, 2008 11:14 am    Post subject: Reply with quote

"mark_freq(n)" is the correct solution but it is not mentioned in the manuals ... there is only talked about "mark(n)" which is not implemented yet :-/ After digging around in /usr/share/doc/syslog-ng-${P}/ I found it mentioned finally in the HTML manual ...

Greetz
swimmer

PS: I'm talking about syslog-ng-2.0.6
Back to top
View user's profile Send private message
danomac
l33t
l33t


Joined: 06 Nov 2004
Posts: 873
Location: Vancouver, BC

PostPosted: Wed May 07, 2008 6:46 pm    Post subject: -- MARK -- in /var/log/messages Reply with quote

I have never seen anything quite like this before. I think the hardware on the box that these messages appear may be dying.

This is what appears in /var/log/messages:

Code:

Feb  6 11:01:03 missionserv01 -- MARK --
Feb  6 11:21:03 missionserv01 -- MARK --
Feb  6 11:41:03 missionserv01 -- MARK --
Feb  6 12:01:03 missionserv01 -- MARK --
Feb  6 12:21:03 missionserv01 -- MARK --
Feb  6 12:41:03 missionserv01 -- MARK --
Feb  6 13:01:03 missionserv01 -- MARK --
Feb  6 13:21:03 missionserv01 -- MARK --
...


There doesn't seem to be anything causing it, nor is there any items of relevance before or after the messages. This system did have a segfault or two (back in Janurary) but doesn't have anything like that in the logs now.

This machine is being rather problematic right now. Memtest showed no issues.

Does anyone know where the output above originates from?
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43808
Location: 56N 3W

PostPosted: Wed May 07, 2008 6:49 pm    Post subject: Reply with quote

danomac,

Your logger is doing that in case some applications do not timestamp log messages.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Carnildo
Guru
Guru


Joined: 17 Jun 2004
Posts: 594

PostPosted: Wed May 07, 2008 9:08 pm    Post subject: Re: -- MARK -- in /var/log/messages Reply with quote

danomac wrote:
Does anyone know where the output above originates from?


Your syslog daemon is generating those. There's probably a way to turn it off, but it depends on which syslog you're using.
Back to top
View user's profile Send private message
danomac
l33t
l33t


Joined: 06 Nov 2004
Posts: 873
Location: Vancouver, BC

PostPosted: Thu May 08, 2008 3:24 pm    Post subject: Reply with quote

Thanks for the replies. It's the standard syslog-ng package, and none of the other boxes are doing it.

I'll hopefully be able to look into this a little more today.
Back to top
View user's profile Send private message
swimmer
Veteran
Veteran


Joined: 15 Jul 2002
Posts: 1314
Location: Netherlands

PostPosted: Fri May 09, 2008 8:58 am    Post subject: Reply with quote

You could try to add "mark(0)" into the options section of /etc/syslog-ng/syslog-ng.conf ...

HTH
swimmer
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43808
Location: 56N 3W

PostPosted: Fri May 09, 2008 10:18 pm    Post subject: Reply with quote

Merged two threads on the same topic
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
swimmer
Veteran
Veteran


Joined: 15 Jul 2002
Posts: 1314
Location: Netherlands

PostPosted: Sat May 10, 2008 3:18 am    Post subject: Reply with quote

Thanks Neddy - your merge shows me how stupid I am :-/

In the previous post I recommended already 'mark_freq' and forgot it in the last post again :(

My apologies to the OP and kudos to the moderator who hereby solved the problem (I think & hope) ...

Greetz
swimmer
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum