Bug 7011 - vfs_full_audit not usable : every operation is logged several times
vfs_full_audit not usable : every operation is logged several times
Status: NEW
Product: Samba 3.2
Classification: Unclassified
Component: VFS Modules
3.2.5
x86 Linux
: P3 major
: ---
Assigned To: Samba Bugzilla Account
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2009-12-28 03:39 UTC by sdb devs
Modified: 2009-12-28 03:47 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description sdb devs 2009-12-28 03:39:14 UTC
The module is not usable because it fill the system logs in hours.


config :

        full_audit:success = connect disconnect open unlink rmdir rename
        full_audit:failure = none

result :

Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:54 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Dec 28 10:36:55 zeus smbd_audit: zeus|30535|jdon|192.168.11.2|open|ok|r|PROD/Maintenance
Comment 1 Volker Lendecke 2009-12-28 03:47:11 UTC
Can you please compare this to a normal Samba debug log? This might very well be done on behalf of client requests.

Volker