Bug 7011 - vfs_full_audit not usable : every operation is logged several times
Summary: vfs_full_audit not usable : every operation is logged several times
Status: NEW
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: VFS Modules (show other bugs)
Version: 3.2.5
Hardware: x86 Linux
: P3 major
Target Milestone: ---
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-12-28 03:39 UTC by sdb devs
Modified: 2009-12-28 03:47 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description sdb devs 2009-12-28 03:39:14 UTC 
The module is not usable because it fill the system logs in hours.


config :

        full_audit:success = connect disconnect open unlink rmdir rename
        full_audit:failure = none

result :

Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Comment 1 Volker Lendecke 2009-12-28 03:47:11 UTC 
Can you please compare this to a normal Samba debug log? This might very well be done on behalf of client requests.

Volker