Solved

how can i extend freebsd logging capabilities

Posted on 2009-07-05
3
460 Views
Last Modified: 2013-11-22
hello guys,

i have a freebsd server, with multiple shell users on it, the system is mounted with nosuid/noexec, so users are not executing anything but what i want them to. now, the server keeps on crashing once in 10 15 days, and i don't know why, this  issue has spanned over 3 replaced systems, and we even changed the hardware specs, and keeps on happening.

i think it has to do something with the users, but i can't figure out what. is there any aditional logging that i could do so that i could see if maybe the users are causing the crash, like, logging the shell commands that they do, and have something that would output relevant info in case the server crashes?
0
Comment
Question by:rares_dumitrescu
3 Comments
 
LVL 40

Accepted Solution

by:
omarfarid earned 500 total points
ID: 24780950
see if you can enable process / user accounting / auditing on your system
0
 
LVL 2

Expert Comment

by:martino87r
ID: 24781671
Usually each service allow you to setup a different level of logging details. As far as i know, you can use the debug option in most services as well and check the very, very extensive logs.
For more details, decide what services are more likely to crash your machine and then check how to increase the logging verbosity and/or details and investigate the problem.

For example samba log details are configured in the samba.conf
log level = 1 or more

samba specific infos
http://oreilly.com/catalog/samba/chapter/book/ch09_01.html
0
 
LVL 32

Expert Comment

by:Kamran Arshad
ID: 24821632
Hi,

What application is running on these servers? What do the standard system logs say?
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to implement SSO? 22 83
Windows Defender struggles to check for updates. 9 56
mobaxterm not able to change directory 28 207
server core and windows updates 3 51
The foremost challenge encountered by an investigator at the very beginning of a forensics investigation is, accessing a file/data to read/view its contents. Owing to the fact, a platform is necessary for both; opening as well as examining any file.…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question