Saturday, November 28, 2020

Re: pflogd: Corrupted log file, move it away

On Nov 27 09:02:04, harald.dunkel@aixigo.com wrote:
> Hi folks,
>
> I got a bazillion of error messages in /var/log/daemon
>
> :
> Nov 27 08:33:25 gate6a pflogd[26893]: Corrupted log file.
> Nov 27 08:33:25 gate6a pflogd[26893]: Invalid/incompatible log file, move it away
> Nov 27 08:33:25 gate6a pflogd[26893]: Logging suspended: open error
> Nov 27 08:33:32 gate6a pflogd[2985]: Corrupted log file.
> Nov 27 08:33:32 gate6a pflogd[2985]: Invalid/incompatible log file, move it away
> Nov 27 08:33:32 gate6a pflogd[2985]: Logging suspended: open error
> :
>
> Problem is, pflogd doesn't tell which one. I am logging to /var/log/\
> pflog{0..3}.

To be sure, are these the names?

/var/log/pflog0
/var/log/pflog1
/var/log/pflog2
/var/log/pflog3

> Nothing else but pflogd is writing these files.

How, exactly? What are the pf.conf log rules?
What are the pflogd -i command lines?

> They are
> rotated every hour, using the default
>
> /var/log/pflog 600 3 250 * ZB "pkill -HUP -u root -U root -t - -x pflogd"

If the above names are correct, this does not rotate any of them.
Do you mean /var/log/pflog.0 etc, being the rotated copies
of a single /var/log/pflog ?

No comments:

Post a Comment