syslog overwrites files in /etc when disk full !?

Hello,

recently we had a process going wild which writes to syslog. As the
computer
only holds a 48 MB IDE flash disk, the disk soon was full. We only
noticed when
the computer hang. After quickly finding the overly big syslog file,
deleting
it and a reboot, we noticed that we had no tcp/ip connection to/from the
computer. A look into /etc/hosts showed that it was overwritten with
syslog
messages! So were /etc/resolv.conf, /etc/networks and /etc/shadow (!!!)

Has anyone experienced something similar? We are at a complete loss. As
a precaution measure we have re-partitioned the disk into two
partitions.
One for /tmp (for the syslog file), and the other for the system.

Any hints would be welcome.

Thank you

Dorothea

Is this for QNX4 or QRTP? What driver are you using?

“Dorothea Mücke-Herzberg” <dmh@ngat.com> wrote in message
news:04E02AB064E0D211B24E0008C79F6A0ED1E3A2@mail.ngat.com

Hello,

recently we had a process going wild which writes to syslog. As the
computer
only holds a 48 MB IDE flash disk, the disk soon was full. We only
noticed when
the computer hang. After quickly finding the overly big syslog file,
deleting
it and a reboot, we noticed that we had no tcp/ip connection to/from the
computer. A look into /etc/hosts showed that it was overwritten with
syslog
messages! So were /etc/resolv.conf, /etc/networks and /etc/shadow (!!!)

Has anyone experienced something similar? We are at a complete loss. As
a precaution measure we have re-partitioned the disk into two
partitions.
One for /tmp (for the syslog file), and the other for the system.

Any hints would be welcome.

Thank you

Dorothea



\

What version of software are you running?
Can you do a “sin ve”?

Dorothea Mücke-Herzberg <dmh@ngat.com> wrote in message
news:04E02AB064E0D211B24E0008C79F6A0ED1E3A2@mail.ngat.com

Hello,

recently we had a process going wild which writes to syslog. As the
computer
only holds a 48 MB IDE flash disk, the disk soon was full. We only
noticed when
the computer hang. After quickly finding the overly big syslog file,
deleting
it and a reboot, we noticed that we had no tcp/ip connection to/from the
computer. A look into /etc/hosts showed that it was overwritten with
syslog
messages! So were /etc/resolv.conf, /etc/networks and /etc/shadow (!!!)

Has anyone experienced something similar? We are at a complete loss. As
a precaution measure we have re-partitioned the disk into two
partitions.
One for /tmp (for the syslog file), and the other for the system.

Any hints would be welcome.

Thank you

Dorothea



\

Did you by any chance reset the system while it was still trying to write the file, or did you do a
clean shutdown and a chkfsys at bootup?
-Paul

Bill at Sierra Design <BC@SierraDesign.com> wrote in message news:92vo6m$9ht$2@inn.qnx.com

What version of software are you running?
Can you do a “sin ve”?

Dorothea Mücke-Herzberg <> dmh@ngat.com> > wrote in message
news:> 04E02AB064E0D211B24E0008C79F6A0ED1E3A2@mail.ngat.com> …
Hello,

recently we had a process going wild which writes to syslog. As the
computer
only holds a 48 MB IDE flash disk, the disk soon was full. We only
noticed when
the computer hang. After quickly finding the overly big syslog file,
deleting
it and a reboot, we noticed that we had no tcp/ip connection to/from the
computer. A look into /etc/hosts showed that it was overwritten with
syslog
messages! So were /etc/resolv.conf, /etc/networks and /etc/shadow (!!!)

Has anyone experienced something similar? We are at a complete loss. As
a precaution measure we have re-partitioned the disk into two
partitions.
One for /tmp (for the syslog file), and the other for the system.

Any hints would be welcome.

Thank you

Dorothea





\

Well, the system was hang-up, so I just pushed the power button. I
presume that the syslog process was still trying to write to disk. We
didn’t do a chkfsys
immediately afterwards, as we soon found the overwritten files and I
don’t think that a chkfsys would recover overwritten files.

Dorothea

-----Original Message-----
From: Paul Russell [mailto:> paul@jenosys.com> ]
Posted At: 03 January 2001 21:25
Posted To: comp.os.qnx
Conversation: syslog overwrites files in /etc when disk full !?
Subject: Re: syslog overwrites files in /etc when disk full !?


Did you by any chance reset the system while it was still
trying to write the file, or did you do a
clean shutdown and a chkfsys at bootup?
-Paul

Bill at Sierra Design <> BC@SierraDesign.com> > wrote in message
news:92vo6m$9ht$> 2@inn.qnx.com> …
What version of software are you running?
Can you do a “sin ve”?

Dorothea Mücke-Herzberg <> dmh@ngat.com> > wrote in message
news:> 04E02AB064E0D211B24E0008C79F6A0ED1E3A2@mail.ngat.com> …
Hello,

recently we had a process going wild which writes to syslog. As the
computer
only holds a 48 MB IDE flash disk, the disk soon was full. We only
noticed when
the computer hang. After quickly finding the overly big syslog file,
deleting
it and a reboot, we noticed that we had no tcp/ip connection to/from
the
computer. A look into /etc/hosts showed that it was overwritten with
syslog
messages! So were /etc/resolv.conf, /etc/networks and /etc/shadow
(!!!)

Has anyone experienced something similar? We are at a complete loss.
As
a precaution measure we have re-partitioned the disk into two
partitions.
One for /tmp (for the syslog file), and the other for the system.

Any hints would be welcome.

Thank you

Dorothea





\

I don’t know either…
But I would recommend putting chkfsys in your sysinit…

This will check & fix errors on all the available QNX4 Partitions
for Disk in /dev/hd*t7?; do
echo “Checking $Disk”
chkfsys -urqsP $Disk
done
-Paul


Dorothea Mücke-Herzberg <dmh@ngat.com> wrote in message
news:04E02AB064E0D211B24E0008C79F6A0ED2339F@mail.ngat.com
Well, the system was hang-up, so I just pushed the power button. I
presume that the syslog process was still trying to write to disk. We
didn’t do a chkfsys
immediately afterwards, as we soon found the overwritten files and I
don’t think that a chkfsys would recover overwritten files.

Dorothea

-----Original Message-----
From: Paul Russell [mailto:> paul@jenosys.com> ]
Posted At: 03 January 2001 21:25
Posted To: comp.os.qnx
Conversation: syslog overwrites files in /etc when disk full !?
Subject: Re: syslog overwrites files in /etc when disk full !?


Did you by any chance reset the system while it was still
trying to write the file, or did you do a
clean shutdown and a chkfsys at bootup?
-Paul

Bill at Sierra Design <> BC@SierraDesign.com> > wrote in message
news:92vo6m$9ht$> 2@inn.qnx.com> …
What version of software are you running?
Can you do a “sin ve”?

Dorothea Mücke-Herzberg <> dmh@ngat.com> > wrote in message
news:> 04E02AB064E0D211B24E0008C79F6A0ED1E3A2@mail.ngat.com> …
Hello,

recently we had a process going wild which writes to syslog. As the
computer
only holds a 48 MB IDE flash disk, the disk soon was full. We only
noticed when
the computer hang. After quickly finding the overly big syslog file,
deleting
it and a reboot, we noticed that we had no tcp/ip connection to/from
the
computer. A look into /etc/hosts showed that it was overwritten with
syslog
messages! So were /etc/resolv.conf, /etc/networks and /etc/shadow
(!!!)

Has anyone experienced something similar? We are at a complete loss.
As
a precaution measure we have re-partitioned the disk into two
partitions.
One for /tmp (for the syslog file), and the other for the system.

Any hints would be welcome.

Thank you

Dorothea





\