Keresés

Új hozzászólás Aktív témák

  • mono7806

    tag

    Sziasztok!

    Logolási gondom akadt.
    Van egy TP-Link 1043ND routerem, Openwrt 10.03.1-et tettem rá.
    Van egy Ubuntu szerver mögötte, szeretném beállítani, hogy az Ubuntura logoljon a router.

    A szerveren beállítottam, hogy az rsyslogd kívülről is fogadjon logolási bejegyzéseket, ez látszólag megy is.

    A routeren a WEB-es (Luci) felületen elmentem a System/System/Logging menüpontba.
    Megadtam az Ubuntu IP címét, a portot hagytam az 514-esen, alatta mindkét log level-t "Debug"-ra állítottam.

    Ez után néztem az Ubuntu-n a logokat. Jöttek be, tehát - szerintem - működik a dolog, de most jön egy nagy DE: alig van benne érdemi információ, míg magán a routeren ha megnézem a WEB-es felületen a logokat (vagy a logread-et adom ki), azért van benne bőven ahhoz képest, mint ami az Ubuntu-n látszik.
    Példának okáért az Ubuntun nem látszik az SSH belépés, míg a routerben igen.

    Kicsit kotorásztam a neten, aki ilyesmit állítgat, az általában a /etc/config/system fájlba írogat bele dolgokat, nekem ez most ilyen:
    config 'system'
    option 'zonename' 'Europe/Budapest'
    option 'timezone' 'CET-1CEST,M3.5.0,M10.5.0/3'
    option 'hostname' 'Router'
    option 'log_port' '514'
    option 'log_ip' '192.168.1.107'
    option 'conloglevel' '8'
    option 'cronloglevel' '5'

    A router újra lett indítva, az után sem változott meg semmi.

    És akkor a különbségek. Ha a logread parancsot kiadom a routeren (vagy a Luci-ban nézem meg a logokat), akkor ezt látom:
    Aug 8 15:02:12 Router user.info kernel: IMQ driver loaded successfully.
    Aug 8 15:02:12 Router user.info kernel: Hooking IMQ before NAT on PREROUTING.
    Aug 8 15:02:12 Router user.info kernel: Hooking IMQ after NAT on POSTROUTING.
    Aug 8 15:02:12 Router user.info kernel: ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
    Aug 8 15:02:12 Router user.info kernel: uhci_hcd: USB Universal Host Controller Interface driver
    Aug 8 15:02:12 Router user.info kernel: Initializing USB Mass Storage driver...
    Aug 8 15:02:12 Router user.info kernel: scsi0 : SCSI emulation for USB Mass Storage devices
    Aug 8 15:02:12 Router user.info kernel: usbcore: registered new interface driver usb-storage
    Aug 8 15:02:12 Router user.info kernel: USB Mass Storage support registered.
    Aug 8 15:02:12 Router user.debug kernel: usb-storage: device found at 2
    Aug 8 15:02:12 Router user.debug kernel: usb-storage: waiting for device to settle before scanning
    Aug 8 15:02:14 Router user.info kernel: cfg80211: Calling CRDA for country: HU
    Aug 8 15:02:14 Router user.info kernel: cfg80211: Regulatory domain changed to country: HU
    Aug 8 15:02:14 Router user.info kernel: cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
    Aug 8 15:02:14 Router user.info kernel: cfg80211: (2402000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm)
    Aug 8 15:02:14 Router user.info kernel: cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (N/A, 2000 mBm)
    Aug 8 15:02:14 Router user.info kernel: cfg80211: (5250000 KHz - 5330000 KHz @ 40000 KHz), (N/A, 2000 mBm)
    Aug 8 15:02:14 Router user.info kernel: cfg80211: (5490000 KHz - 5710000 KHz @ 40000 KHz), (N/A, 2700 mBm)
    Aug 8 15:02:15 Router user.info sysinit: command failed: Invalid argument (-22)
    Aug 8 15:02:15 Router daemon.info pppd[491]: PPP session is 195
    Aug 8 15:02:15 Router daemon.info pppd[491]: Using interface pppoe-wan
    Aug 8 15:02:15 Router daemon.notice pppd[491]: Connect: pppoe-wan <--> eth0.2
    Aug 8 15:02:16 Router user.info kernel: device wlan0 entered promiscuous mode
    Aug 8 15:02:16 Router user.info kernel: br-lan: port 2(wlan0) entering forwarding state
    Aug 8 15:02:17 Router user.notice kernel: scsi 0:0:0:0: Direct-Access Kingston DT Micro PMAP PQ: 0 ANSI: 0 CCS
    Aug 8 15:02:17 Router user.debug kernel: usb-storage: device scan complete
    Aug 8 15:02:17 Router user.notice kernel: sd 0:0:0:0: [sda] 15356160 512-byte logical blocks: (7.86 GB/7.32 GiB)
    Aug 8 15:02:17 Router user.notice kernel: sd 0:0:0:0: [sda] Write Protect is off
    Aug 8 15:02:17 Router user.debug kernel: sd 0:0:0:0: [sda] Mode Sense: 23 00 00 00
    Aug 8 15:02:17 Router user.err kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
    Aug 8 15:02:17 Router user.err kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
    Aug 8 15:02:17 Router user.info kernel: sda: sda1 sda2 sda3
    Aug 8 15:02:17 Router user.err kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
    Aug 8 15:02:17 Router user.notice kernel: sd 0:0:0:0: [sda] Attached SCSI removable disk
    Aug 8 15:02:18 Router user.info kernel: yaffs: dev is 8388609 name is "sda1"
    Aug 8 15:02:18 Router user.info kernel: yaffs: passed flags ""
    Aug 8 15:02:18 Router user.warn kernel: yaffs: Attempting MTD mount on 8.1, "sda1"
    Aug 8 15:02:18 Router user.info kernel: yaffs: dev is 8388609 name is "sda1"
    Aug 8 15:02:18 Router user.info kernel: yaffs: passed flags ""
    Aug 8 15:02:18 Router user.warn kernel: yaffs: Attempting MTD mount on 8.1, "sda1"
    Aug 8 15:02:18 Router user.info kernel: device wlan0 left promiscuous mode
    Aug 8 15:02:18 Router user.info kernel: br-lan: port 2(wlan0) entering disabled state
    Aug 8 15:02:18 Router daemon.notice pppd[491]: PAP authentication succeeded
    Aug 8 15:02:18 Router daemon.notice pppd[491]: peer from calling number 00:24:3E:12:5C:9A authorized
    Aug 8 15:02:18 Router daemon.notice pppd[491]: local IP address 188.123.38.112
    Aug 8 15:02:18 Router daemon.notice pppd[491]: remote IP address 10.0.0.1
    Aug 8 15:02:18 Router daemon.notice pppd[491]: primary DNS address 194.120.47.3
    Aug 8 15:02:18 Router daemon.notice pppd[491]: secondary DNS address 194.120.46.5
    Aug 8 15:02:19 Router user.info kernel: device wlan0 entered promiscuous mode
    Aug 8 15:02:19 Router user.info kernel: br-lan: port 2(wlan0) entering forwarding state
    Aug 8 15:02:19 Router user.info kernel: EXT4-fs (sda2): mounted filesystem with ordered data mode
    Aug 8 15:02:20 Router user.notice ifup: Enabling Router Solicitations on wan (pppoe-wan)
    Aug 8 15:02:21 Router user.info sysinit: Loading defaults
    Aug 8 15:02:21 Router user.info kernel: EXT4-fs (sda3): mounted filesystem with ordered data mode
    Aug 8 15:02:21 Router user.info sysinit: Loading synflood protection
    Aug 8 15:02:21 Router user.info sysinit: Adding custom chains
    Aug 8 15:02:22 Router user.info sysinit: Loading zones
    Aug 8 15:02:23 Router user.info sysinit: Loading forwardings
    Aug 8 15:02:23 Router user.info sysinit: Loading redirects
    Aug 8 15:02:23 Router user.info sysinit: Loading rules
    Aug 8 15:02:24 Router user.info sysinit: Loading includes
    Aug 8 15:02:24 Router user.info sysinit: Loading interfaces
    Aug 8 15:02:24 Router user.info firewall: adding lan (br-lan) to zone lan
    Aug 8 15:02:24 Router user.info firewall: adding wan (pppoe-wan) to zone wan
    Aug 8 15:02:26 Router authpriv.info dropbear[1654]: Running in background
    Aug 8 15:02:26 Router user.notice dnsmasq: DNS rebinding protection is active, will discard upstream RFC1918 responses!
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: started, version 2.55 cachesize 150
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: compile time options: IPv6 GNU-getopt no-DBus no-I18N DHCP TFTP
    Aug 8 15:02:30 Router daemon.info dnsmasq-dhcp[1682]: DHCP, IP range 192.168.1.100 -- 192.168.1.120, lease time 12h
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: using local addresses only for domain lan
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: reading /tmp/resolv.conf.auto
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: using nameserver 194.120.47.3#53
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: using nameserver 194.120.46.5#53
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: using local addresses only for domain lan
    Aug 8 15:02:30 Router daemon.info dnsmasq[1682]: read /etc/hosts - 1 addresses
    Aug 8 15:02:30 Router daemon.info dnsmasq-dhcp[1682]: read /etc/ethers - 0 addresses
    Aug 8 15:02:30 Router user.info sysinit: setting up led WLAN
    Aug 8 15:02:30 Router user.info sysinit: setting up led USB
    Aug 8 15:02:30 Router user.debug kernel: ar71xx-wdt: enabling watchdog timer
    Aug 8 15:02:33 Router daemon.info dnsmasq-dhcp[1682]: DHCPDISCOVER(br-lan) 192.168.1.107 00:26:37:51:e3:63
    Aug 8 15:02:33 Router daemon.info dnsmasq-dhcp[1682]: DHCPOFFER(br-lan) 192.168.1.107 00:26:37:51:e3:63
    Aug 8 15:02:33 Router daemon.info dnsmasq-dhcp[1682]: DHCPREQUEST(br-lan) 192.168.1.107 00:26:37:51:e3:63
    Aug 8 15:02:33 Router daemon.info dnsmasq-dhcp[1682]: DHCPACK(br-lan) 192.168.1.107 00:26:37:51:e3:63 MSI
    Aug 8 15:03:41 Router daemon.info pppd[491]: System time change detected.
    Aug 8 15:03:43 Router daemon.warn dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:04:00 Router daemon.info hostapd: wlan0: STA 2c:3c:4c:6c:32:40 IEEE 802.11: authenticated
    Aug 8 15:04:00 Router daemon.info hostapd: wlan0: STA 2c:3c:4c:6c:32:40 IEEE 802.11: associated (aid 1)
    Aug 8 15:04:00 Router daemon.info hostapd: wlan0: STA 2c:3c:4c:6c:32:40 WPA: pairwise key handshake completed (RSN)
    Aug 8 15:04:00 Router daemon.info dnsmasq-dhcp[1682]: DHCPREQUEST(br-lan) 192.168.1.104 5c:ac:4c:6f:33:40
    Aug 8 15:04:00 Router daemon.info dnsmasq-dhcp[1682]: DHCPACK(br-lan) 192.168.1.104 5c:ac:4c:6f:33:40 Mono-Acer-Wifi
    Aug 8 15:07:41 Router authpriv.info dropbear[2522]: Child connection from 192.168.1.104:60194
    Aug 8 15:07:50 Router authpriv.notice dropbear[2522]: Password auth succeeded for 'root' from 192.168.1.104:60194
    Aug 8 15:08:12 Router daemon.warn dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:08:16 Router daemon.warn dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:08:23 Router daemon.warn dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:08:39 Router daemon.warn dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:12:16 Router daemon.info hostapd: wlan0: STA 5d:1c:2c:6d:32:41 WPA: group key handshake completed (RSN)

    Az Ubuntu szerveren pedig ez látszik ebből:

    Aug 8 14:55:38 router.lan dnsmasq-dhcp[1823]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:02:05 router.lan dnsmasq-dhcp[1823]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:02:43 router.lan init: starting pid 5173, tty '': '/etc/init.d/rcS K stop'
    Aug 8 15:02:44 router.lan firewall: removing lan (br-lan) from zone lan
    Aug 8 15:03:41 router.lan pppd[491]: System time change detected.
    Aug 8 15:03:43 router.lan dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:04:00 router.lan hostapd: wlan0: STA 2c:3c:4c:6c:32:40 IEEE 802.11: authenticated
    Aug 8 15:04:00 router.lan hostapd: wlan0: STA 2c:3c:4c:6c:32:40 IEEE 802.11: associated (aid 1)
    Aug 8 15:04:00 router.lan hostapd: wlan0: STA 2c:3c:4c:6c:32:40 WPA: pairwise key handshake completed (RSN)
    Aug 8 15:04:00 router.lan dnsmasq-dhcp[1682]: DHCPREQUEST(br-lan) 192.168.1.104 2c:3c:4c:6c:32:40
    Aug 8 15:04:00 router.lan dnsmasq-dhcp[1682]: DHCPACK(br-lan) 192.168.1.104 2c:3c:4c:6c:32:40 Mono-Acer-Wifi
    Aug 8 15:08:12 router.lan dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:12:16 router.lan hostapd: wlan0: STA 2c:3c:4c:6c:32:40 WPA: group key handshake completed (RSN)
    Aug 8 15:14:41 router.lan dnsmasq-dhcp[1682]: DHCP packet received on eth0.2 which has no address
    Aug 8 15:18:45 router.lan dnsmasq-dhcp[1682]: DHCPINFORM(br-lan) 192.168.1.104 2c:3c:4c:6c:32:40
    Aug 8 15:18:45 router.lan dnsmasq-dhcp[1682]: DHCPACK(br-lan) 192.168.1.104 2c:3c:4c:6c:32:40 Mono-Acer-Wifi

    Bocs, hogy hosszú voltam, de azt gondolom, látványos a különbség. Próbáltam a /etc/config/system fájlben mindkét loglevelt 7-7-re venni, de nem volt semmi változás.

    Van valakinek valamilyen ötlete, mit nézzek meg, mit próbáljak ki? Eléggé gáz, hogy a DHCP-s dolgok átmennek, egy sikeres root belépési információ pedig nem, egyszerűen nem értem...

  • mono7806

    tag

    válasz vargalex #327 üzenetére

    De, hatalmas köszi, ott a pont!
    Megtaláltam más log fájlokban a hiányzó részeket, most már egy külön log fájlba íratom és minden szépen átmegy.

    Köszi a tippet! :R

Új hozzászólás Aktív témák