Hi, I see series of strange CIFS requests on the /var/adm/messages logs : starsystem is the hostname deadstar is the hostname of the old system this one has replaced and is still used in some services (Apache)
Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar access denied: IPC only Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadsta share not found Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar access denied: IPC only Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar share not found Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar access denied: IPC only Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadsta share not found Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar.bat share not found Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar.cmd share not found Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar.exe share not found Apr 18 07:29:39 starsystem last message repeated 1 time Apr 18 07:29:39 starsystem smbsrv: [ID 138215 kern.notice] NOTICE: smbd[NT Authority\Anonymous]: deadstar.com share not found [...] I was wondering if there is a way to make it log the source IP of the connection ? Best regards. Ben _______________________________________________ openindiana-discuss mailing list [email protected] http://openindiana.org/mailman/listinfo/openindiana-discuss
