I just upgraded a system to 5.1A (clean install). I am now getting
files in /tmp that appear to be from evmlogger (I guess):
$ ls -l evm*
-rw-rw-rw- 1 root system 336 Feb 2 19:20 evmlog_details.257412
-rw-rw-rw- 1 root system 336 Feb 3 03:35 evmlog_details.261881
-rw-rw-rw- 1 root system 336 Feb 3 07:41 evmlog_details.263645
-rw-rw-rw- 1 root system 336 Feb 3 11:47 evmlog_details.265547
-rw-rw-rw- 1 root system 336 Feb 3 15:51 evmlog_details.270607
-rw-rw-rw- 1 root system 336 Feb 3 19:56 evmlog_details.272381
-rw-rw-rw- 1 root system 336 Feb 4 00:01 evmlog_details.274234
-rw-rw-rw- 1 root system 336 Feb 4 04:10 evmlog_details.276853
-rw-rw-rw- 1 root system 336 Feb 4 08:15 evmlog_details.278639
-rw-rw-rw- 1 root system 336 Feb 5 00:32 evmlog_details.290520
-rw-rw-rw- 1 root system 336 Feb 5 04:41 evmlog_details.292761
-rw-rw-rw- 1 root system 336 Feb 5 08:45 evmlog_details.299891
What are these files, and why are they being dumped in /tmp (especially
with world-writable permissions)? They all look the same:
$ od -c evmlog_details.257412
0000000 003 \0 001 \0 P 001 \0 \0 \0 \0 \0 342 \r 364 \0
0000020 m 220 \ < X 002 3 E 362 335 \b \0 260 \0 \0 \0
0000040 * \n # 001 \0 \0 \0 320 223 232 ; 002 \0 T v
0000060 \0 002 \0 \0 \b \0 \0 \0 001 \0 \0 \0 0 \0 \0 \0
0000100 s y s . u n i x . e v m . d a e
0000120 m o n . e v e n t _ a c t i v i
0000140 t y \0 \0 \0 \0 \0 \0 027 \0 \0 \0 ( \0 \0 \0
0000160 004 \0 \0 \0 006 \0 \0 \0 004 \0 \0 \0 \0 \0 \0 \0
0000200 c o u n t \0 \0 \0 364 001 \0 \0 020 \0 \0 \0
0000220 027 \0 \0 \0 ( \0 \0 \0 004 \0 \0 \0 \a \0 \0 \0
0000240 004 \0 \0 \0 \0 \0 \0 \0 p e r i o d \0 \0
0000260 006 \0 \0 \0 7 ; 2 024 \0 \0 \0 020 \0 \0 \0
0000300 r o o t \0 \0 \0 \0 022 \0 \0 \0 030 \0 \0 \0
0000320 d n s . h i w a a y . n e t \0 \0
0000340 025 \0 \0 \0 P \0 \0 \0 E V M d a e m
0000360 o n : H i g h e v e n t a
0000400 c t i v i t y - e x c e e d
0000420 s $ c o u n t i n $ p e r
0000440 i o d m i n u t e s \0 \0 \0 \0 \0
0000460 026 \0 \0 \0 \0 \0 \0 c a t : e v m e
0000500 x p . c a t : 1 0 0 \0 \0 \0 \0 \0 \0
0000520
It looks like they may be related to a high number of messages being
logged. Since this box receives logs from a number of other systems,
that isn't unusual (so I don't want stuff dumped in /tmp when it
happens). I don't see this as a configuration option anywhere.
--
Chris Adams <cmadams_at_hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.
Received on Tue Feb 05 2002 - 15:52:31 NZDT