log error

This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
Post Reply
Renan
Junior Member
Posts: 9
Joined: 07 Dec 2007, 17:24

log error

Post by Renan »

Hey

I wanted to know if this would be a possible bug.

When I click on "lfd Log" I get this output on the next screen

ConfigServer Security & Firewall - csf v2.94
Displaying the last 30 lines of /var/log/lfd.log...

Fri Dec 7 12:27:34 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:27:34 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:27:39 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:27:39 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:27:44 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:27:44 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:27:49 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:27:49 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:27:54 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:27:54 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:27:59 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:27:59 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:28:05 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:28:05 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:28:10 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:28:10 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:28:15 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:28:15 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:28:20 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:28:20 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:28:25 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:28:25 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:28:40 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:28:40 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:29:00 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:29:00 2007 lfd: Watching /usr/local/apache/logs/error_log...
Fri Dec 7 12:29:05 2007 lfd: Directory Watching terminated after 40 seconds
Fri Dec 7 12:29:05 2007 lfd: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds
Fri Dec 7 12:29:15 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Fri Dec 7 12:29:15 2007 lfd: Watching /usr/local/apache/logs/error_log...

everytime I go and check its there

Would it be a bug or anything that I have to do in my part?

Please let me know.

Thank you.
sdjl
Junior Member
Posts: 81
Joined: 10 Dec 2006, 16:56
Location: London, UK.

Post by sdjl »

I've recently been getting this in CSF too. Looking in the Apache error_log file I see lots of warnings to do with SUExec.

Warning: SuexecUserGroup directive requires SUEXEC wrapper.
Warning: SuexecUserGroup directive requires SUEXEC wrapper.

So it's probably not a bug with CSF, but something to do with cPanel/WHM/Apache install.

David
chirpy
Moderator
Posts: 3537
Joined: 09 Dec 2006, 18:13

Post by chirpy »

Indeed. It's a protection mechanism within lfd to prevent it looping when there's flooding of one of the log files, in this case the apache error log.
Renan
Junior Member
Posts: 9
Joined: 07 Dec 2007, 17:24

Post by Renan »

and how can this be corrected?
Renan
Junior Member
Posts: 9
Joined: 07 Dec 2007, 17:24

Post by Renan »

I did the update today and "it seems" to be normal now, let see in a couple of hours how it performes.

thank you.
Renan
Junior Member
Posts: 9
Joined: 07 Dec 2007, 17:24

Post by Renan »

It still showing the errors:

Thu Dec 13 11:01:55 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Thu Dec 13 11:01:55 2007 lfd: Watching /usr/local/apache/logs/error_log...
Thu Dec 13 11:02:01 2007 lfd: Error: Log line flooding/looping in /usr/local/apache/logs/error_log. Reopening log file
Thu Dec 13 11:02:01 2007 lfd: Watching /usr/local/apache/logs/error_log...


Can you let me know how I can fix this, I don't have much experience with LFD so if you could help or suggest anything.

Thank you.
chirpy
Moderator
Posts: 3537
Joined: 09 Dec 2006, 18:13

Post by chirpy »

lfd stops checking a log file if the log file (in your case the apache error_log) is being flooded with errors. You have to find out what's causing the problems with the apache error_log and fix that.
Post Reply