View Single Post
  #20  
Old 8th April 2009, 21:08
giganet giganet is offline
Senior Member
 
Join Date: Aug 2007
Location: California
Posts: 243
Thanks: 116
Thanked 1 Time in 1 Post
Send a message via AIM to giganet
Arrow

Hi Falko thank you for the reply...

New Information: I have found that when OSSEC sends notices as below:
Code:
OSSEC HIDS Notification.
2009 Apr 08 21:01:47

Received From: giganetwireless->/var/log/auth.log
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Apr  8 21:01:46 giganetwireless getty[9018]: ttyS1: ioctl: Input/output error



 --END OF NOTIFICATION
I have just found that at the same time OSSEC sends error notices that I am also receiving a system message as follows:
Code:
Warning: service mysqld not running (server: giganetwireless.com)!

Message generated at April 8, 2009, 21:30.
Out of curiosity I took a look at '/var/log/auth.log' a few sample lines below:
Code:
Apr  8 21:39:01 giganetwireless CRON[11616]: (pam_unix) session opened for user root by (uid=0)
Apr  8 21:39:01 giganetwireless CRON[11616]: (pam_unix) session closed for user root
Apr  8 21:40:37 giganetwireless getty[11703]: ttyS1: ioctl: Input/output error
Apr  8 21:40:47 giganetwireless getty[11710]: ttyS1: ioctl: Input/output error

I restarted mysql '/etc/init.d/mysql restart' and then ran 'tail -f /var/log/syslog' and all I see in there are mail type messages nothing petaining to MySQL though.

Best Regards

Last edited by giganet; 9th April 2009 at 07:53. Reason: New Information
Reply With Quote