Dec 8 04:02:02 do-urden syslogd 1.3-3: restart. Dec 8 04:02:02 do-urden syslogd 1.3-3: restart. Dec 8 04:02:02 do-urden syslogd 1.3-3: restart. Dec 8 04:02:02 do-urden syslogd 1.3-3: restart. Dec 8 04:02:02 do-urden syslogd 1.3-3: restart. Dec 8 04:22:01 do-urden anacron[22192]: Updated timestamp for job `cron.weekly' to 2002-12-08 Dec 8 04:37:51 do-urden PAM_pwdb[27929]: (su) session opened for user news by (uid=0) Dec 8 04:37:52 do-urden PAM_pwdb[27929]: (su) session closed for user news Dec 8 04:46:40 do-urden named[771]: Cleaned cache of 8 RRsets Dec 8 04:46:40 do-urden named[771]: USAGE 1039340800 1039135600 CPU=11.95u/7.65s CHILDCPU=0u/0s Dec 8 04:46:40 do-urden named[771]: NSTATS 1039340800 1039135600 A=31733 PTR=2470 MX=29 AAAA=48 ANY=183 Dec 8 04:46:40 do-urden named[771]: XSTATS 1039340800 1039135600 RR=3035 RNXD=87 RFwdR=1560 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=5 ROpts=0 SSysQ=637 SAns=34283 SFwdQ=1794 SDupQ=218 SErr=1 RQ=34463 RIQ=0 RFwdQ=1794 RDupQ=32 RTCP=0 SFwdR=1560 SFail=0 SFErr=0 SNaAns=2078 SNXD=75 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 05:46:40 do-urden named[771]: Cleaned cache of 19 RRsets Dec 8 05:46:40 do-urden named[771]: USAGE 1039344400 1039135600 CPU=11.97u/7.71s CHILDCPU=0u/0s Dec 8 05:46:40 do-urden named[771]: NSTATS 1039344400 1039135600 A=32071 PTR=2473 MX=29 AAAA=48 ANY=186 Dec 8 05:46:40 do-urden named[771]: XSTATS 1039344400 1039135600 RR=3044 RNXD=88 RFwdR=1566 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=5 ROpts=0 SSysQ=639 SAns=34626 SFwdQ=1801 SDupQ=219 SErr=1 RQ=34807 RIQ=0 RFwdQ=1801 RDupQ=32 RTCP=0 SFwdR=1566 SFail=0 SFErr=0 SNaAns=2081 SNXD=76 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 06:46:40 do-urden named[771]: Cleaned cache of 7 RRsets Dec 8 06:46:40 do-urden named[771]: USAGE 1039348000 1039135600 CPU=12.17u/7.83s CHILDCPU=0u/0s Dec 8 06:46:40 do-urden named[771]: NSTATS 1039348000 1039135600 A=32503 PTR=2473 MX=29 AAAA=48 ANY=186 Dec 8 06:46:40 do-urden named[771]: XSTATS 1039348000 1039135600 RR=3044 RNXD=88 RFwdR=1566 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=5 ROpts=0 SSysQ=639 SAns=35058 SFwdQ=1801 SDupQ=219 SErr=1 RQ=35239 RIQ=0 RFwdQ=1801 RDupQ=32 RTCP=0 SFwdR=1566 SFail=0 SFErr=0 SNaAns=2081 SNXD=76 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 07:46:40 do-urden named[771]: Cleaned cache of 97 RRsets Dec 8 07:46:40 do-urden named[771]: USAGE 1039351600 1039135600 CPU=12.28u/7.92s CHILDCPU=0u/0s Dec 8 07:46:40 do-urden named[771]: NSTATS 1039351600 1039135600 A=32899 PTR=2473 MX=29 AAAA=48 ANY=186 Dec 8 07:46:40 do-urden named[771]: XSTATS 1039351600 1039135600 RR=3044 RNXD=88 RFwdR=1566 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=5 ROpts=0 SSysQ=639 SAns=35454 SFwdQ=1801 SDupQ=219 SErr=1 RQ=35635 RIQ=0 RFwdQ=1801 RDupQ=32 RTCP=0 SFwdR=1566 SFail=0 SFErr=0 SNaAns=2081 SNXD=76 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 08:46:40 do-urden named[771]: Cleaned cache of 13 RRsets Dec 8 08:46:40 do-urden named[771]: USAGE 1039355200 1039135600 CPU=12.4u/8s CHILDCPU=0u/0s Dec 8 08:46:40 do-urden named[771]: NSTATS 1039355200 1039135600 A=33199 PTR=2473 MX=30 AAAA=48 ANY=186 Dec 8 08:46:40 do-urden named[771]: XSTATS 1039355200 1039135600 RR=3045 RNXD=89 RFwdR=1567 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=5 ROpts=0 SSysQ=639 SAns=35755 SFwdQ=1802 SDupQ=219 SErr=1 RQ=35936 RIQ=0 RFwdQ=1802 RDupQ=32 RTCP=0 SFwdR=1567 SFail=0 SFErr=0 SNaAns=2081 SNXD=76 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 09:46:40 do-urden named[771]: Cleaned cache of 2 RRsets Dec 8 09:46:40 do-urden named[771]: USAGE 1039358800 1039135600 CPU=12.5u/8.05s CHILDCPU=0u/0s Dec 8 09:46:40 do-urden named[771]: NSTATS 1039358800 1039135600 A=33578 PTR=2502 MX=30 AAAA=48 ANY=188 Dec 8 09:46:40 do-urden named[771]: XSTATS 1039358800 1039135600 RR=3081 RNXD=89 RFwdR=1589 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=5 ROpts=0 SSysQ=651 SAns=36163 SFwdQ=1815 SDupQ=219 SErr=1 RQ=36346 RIQ=0 RFwdQ=1815 RDupQ=32 RTCP=0 SFwdR=1589 SFail=0 SFErr=0 SNaAns=2083 SNXD=76 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 10:36:06 do-urden named[771]: Lame server on '9.151.59.211.in-addr.arpa' (in '151.59.211.IN-ADDR.ARPA'?): [210.117.65.2].53 'ns2.thrunet.com' Dec 8 10:36:06 do-urden named[771]: Lame server on '9.151.59.211.in-addr.arpa' (in '151.59.211.IN-ADDR.ARPA'?): [210.117.65.100].53 'ns.thrunet.com' Dec 8 10:36:06 do-urden named[771]: ns_forw: query(9.151.59.211.in-addr.arpa) All possible A RR's lame Dec 8 10:46:40 do-urden named[771]: Cleaned cache of 2 RRsets Dec 8 10:46:40 do-urden named[771]: USAGE 1039362400 1039135600 CPU=12.54u/8.07s CHILDCPU=0u/0s Dec 8 10:46:40 do-urden named[771]: NSTATS 1039362400 1039135600 A=33933 PTR=2514 MX=30 AAAA=48 ANY=191 Dec 8 10:46:40 do-urden named[771]: XSTATS 1039362400 1039135600 RR=3109 RNXD=90 RFwdR=1600 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=7 ROpts=0 SSysQ=664 SAns=36530 SFwdQ=1823 SDupQ=221 SErr=1 RQ=36716 RIQ=0 RFwdQ=1823 RDupQ=32 RTCP=0 SFwdR=1600 SFail=0 SFErr=0 SNaAns=2093 SNXD=77 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 11:43:50 do-urden PAM_pwdb[20929]: (login) session opened for user top by (uid=0) Dec 8 11:46:40 do-urden named[771]: Cleaned cache of 15 RRsets Dec 8 11:46:40 do-urden named[771]: USAGE 1039366000 1039135600 CPU=12.58u/8.09s CHILDCPU=0u/0s Dec 8 11:46:40 do-urden named[771]: NSTATS 1039366000 1039135600 A=34275 PTR=2550 MX=30 AAAA=48 ANY=192 Dec 8 11:46:40 do-urden named[771]: XSTATS 1039366000 1039135600 RR=3145 RNXD=90 RFwdR=1621 RDupR=11 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=7 ROpts=0 SSysQ=666 SAns=36908 SFwdQ=1851 SDupQ=222 SErr=1 RQ=37095 RIQ=0 RFwdQ=1851 RDupQ=32 RTCP=0 SFwdR=1621 SFail=0 SFErr=0 SNaAns=2123 SNXD=77 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 12:46:40 do-urden named[771]: Cleaned cache of 39 RRsets Dec 8 12:46:40 do-urden named[771]: USAGE 1039369600 1039135600 CPU=12.81u/8.22s CHILDCPU=0u/0s Dec 8 12:46:40 do-urden named[771]: NSTATS 1039369600 1039135600 A=34675 PTR=2671 MX=30 AAAA=48 ANY=192 Dec 8 12:46:40 do-urden named[771]: XSTATS 1039369600 1039135600 RR=3255 RNXD=91 RFwdR=1657 RDupR=20 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=7 ROpts=0 SSysQ=691 SAns=37421 SFwdQ=1914 SDupQ=223 SErr=1 RQ=37616 RIQ=0 RFwdQ=1914 RDupQ=32 RTCP=0 SFwdR=1657 SFail=0 SFErr=0 SNaAns=2216 SNXD=78 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 13:46:40 do-urden named[771]: Cleaned cache of 50 RRsets Dec 8 13:46:40 do-urden named[771]: USAGE 1039373200 1039135600 CPU=13.16u/8.39s CHILDCPU=0u/0s Dec 8 13:46:40 do-urden named[771]: NSTATS 1039373200 1039135600 A=35186 PTR=2791 MX=30 AAAA=50 ANY=192 Dec 8 13:46:40 do-urden named[771]: XSTATS 1039373200 1039135600 RR=3382 RNXD=93 RFwdR=1711 RDupR=20 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=7 ROpts=0 SSysQ=712 SAns=37991 SFwdQ=2013 SDupQ=288 SErr=1 RQ=38249 RIQ=0 RFwdQ=2013 RDupQ=79 RTCP=0 SFwdR=1711 SFail=0 SFErr=0 SNaAns=2331 SNXD=78 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 13:55:28 do-urden oidentd[31336]: Connection from Amsterdam2.NL.EU.undernet.org (194.134.5.82):61853 Dec 8 14:46:40 do-urden named[771]: Cleaned cache of 60 RRsets Dec 8 14:46:41 do-urden named[771]: USAGE 1039376801 1039135600 CPU=13.5u/8.57s CHILDCPU=0u/0s Dec 8 14:46:41 do-urden named[771]: NSTATS 1039376801 1039135600 A=35659 PTR=2919 MX=30 AAAA=50 ANY=194 Dec 8 14:46:41 do-urden named[771]: XSTATS 1039376801 1039135600 RR=3552 RNXD=94 RFwdR=1785 RDupR=20 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=7 ROpts=0 SSysQ=752 SAns=38588 SFwdQ=2108 SDupQ=290 SErr=1 RQ=38852 RIQ=0 RFwdQ=2108 RDupQ=79 RTCP=0 SFwdR=1785 SFail=0 SFErr=0 SNaAns=2450 SNXD=79 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 15:46:40 do-urden named[771]: Cleaned cache of 55 RRsets Dec 8 15:46:41 do-urden named[771]: USAGE 1039380401 1039135600 CPU=13.83u/8.74s CHILDCPU=0u/0s Dec 8 15:46:41 do-urden named[771]: NSTATS 1039380401 1039135600 A=36211 PTR=3042 MX=30 AAAA=50 ANY=197 Dec 8 15:46:41 do-urden named[771]: XSTATS 1039380401 1039135600 RR=3748 RNXD=95 RFwdR=1902 RDupR=20 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=7 ROpts=0 SSysQ=780 SAns=39263 SFwdQ=2232 SDupQ=293 SErr=1 RQ=39530 RIQ=0 RFwdQ=2232 RDupQ=79 RTCP=0 SFwdR=1902 SFail=0 SFErr=0 SNaAns=2572 SNXD=80 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 16:18:55 do-urden named[771]: Lame server on 'ehg-olympus.hitbox.com' (in 'hitbox.COM'?): [64.154.81.20].53 'NS2.hitbox.com' Dec 8 16:22:09 do-urden oidentd[32548]: Connection from 66.158.142.65:41922 Dec 8 16:22:09 do-urden oidentd[32549]: Connection from stoneyamashita.com (67.89.250.77):3816 Dec 8 16:46:40 do-urden named[771]: Cleaned cache of 113 RRsets Dec 8 16:46:41 do-urden named[771]: USAGE 1039384001 1039135600 CPU=14.24u/8.96s CHILDCPU=0u/0s Dec 8 16:46:41 do-urden named[771]: NSTATS 1039384001 1039135600 A=36691 PTR=3194 MX=30 AAAA=50 ANY=197 Dec 8 16:46:41 do-urden named[771]: XSTATS 1039384001 1039135600 RR=3981 RNXD=100 RFwdR=2030 RDupR=21 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=8 ROpts=0 SSysQ=823 SAns=39888 SFwdQ=2360 SDupQ=296 SErr=1 RQ=40162 RIQ=0 RFwdQ=2360 RDupQ=79 RTCP=0 SFwdR=2030 SFail=0 SFErr=0 SNaAns=2693 SNXD=86 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 17:43:25 do-urden named[771]: Response from unexpected source ([205.166.226.35].53) Dec 8 17:46:40 do-urden named[771]: Cleaned cache of 199 RRsets Dec 8 17:46:41 do-urden named[771]: USAGE 1039387601 1039135600 CPU=14.52u/9.07s CHILDCPU=0u/0s Dec 8 17:46:41 do-urden named[771]: NSTATS 1039387601 1039135600 A=37145 PTR=3332 MX=32 AAAA=50 ANY=205 Dec 8 17:46:41 do-urden named[771]: XSTATS 1039387601 1039135600 RR=4080 RNXD=102 RFwdR=2074 RDupR=21 RFail=4 RFErr=0 RErr=0 RAXFR=0 RLame=8 ROpts=0 SSysQ=838 SAns=40484 SFwdQ=2431 SDupQ=305 SErr=1 RQ=40764 RIQ=0 RFwdQ=2431 RDupQ=79 RTCP=0 SFwdR=2074 SFail=0 SFErr=0 SNaAns=2802 SNXD=86 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 22:50:51 do-urden ftpd[908]: ANONYMOUS FTP LOGIN FROM penguinradio.com [216.109.146.220], mozilla@ Dec 8 17:50:51 do-urden ftpd[907]: FTP session closed Dec 8 18:01:15 do-urden oidentd[1083]: Connection from 66.28.140.54:4975 Dec 8 23:05:51 do-urden ftpd[908]: User ftp timed out after 900 seconds at Sun Dec 8 23:05:51 2002 Dec 8 23:05:51 do-urden ftpd[908]: FTP session closed Dec 8 18:05:51 do-urden inetd[757]: pid 908: exit status 1 Dec 8 18:16:47 do-urden oidentd[1252]: Connection from irc2.easynews.com (140.99.102.4):4474 Dec 8 18:46:40 do-urden named[771]: Cleaned cache of 131 RRsets Dec 8 18:46:41 do-urden named[771]: USAGE 1039391201 1039135600 CPU=14.84u/9.12s CHILDCPU=0u/0s Dec 8 18:46:41 do-urden named[771]: NSTATS 1039391201 1039135600 A=37598 PTR=3471 MX=32 AAAA=54 ANY=208 Dec 8 18:46:41 do-urden named[771]: XSTATS 1039391201 1039135600 RR=4228 RNXD=107 RFwdR=2150 RDupR=21 RFail=5 RFErr=0 RErr=0 RAXFR=0 RLame=8 ROpts=0 SSysQ=857 SAns=41080 SFwdQ=2523 SDupQ=306 SErr=1 RQ=41363 RIQ=0 RFwdQ=2523 RDupQ=79 RTCP=0 SFwdR=2150 SFail=0 SFErr=0 SNaAns=2946 SNXD=89 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 18:49:55 do-urden named[771]: Lame server on 'www.macslash.org' (in 'macslash.org'?): [63.238.196.204].53 'ns1.im1.net' Dec 8 19:46:40 do-urden named[771]: Cleaned cache of 103 RRsets Dec 8 19:46:41 do-urden named[771]: USAGE 1039394801 1039135600 CPU=15.01u/9.27s CHILDCPU=0u/0s Dec 8 19:46:41 do-urden named[771]: NSTATS 1039394801 1039135600 A=38081 PTR=3591 MX=32 AAAA=56 ANY=208 Dec 8 19:46:41 do-urden named[771]: XSTATS 1039394801 1039135600 RR=4345 RNXD=110 RFwdR=2204 RDupR=21 RFail=5 RFErr=0 RErr=0 RAXFR=0 RLame=9 ROpts=0 SSysQ=869 SAns=41682 SFwdQ=2607 SDupQ=315 SErr=1 RQ=41968 RIQ=0 RFwdQ=2607 RDupQ=79 RTCP=0 SFwdR=2204 SFail=0 SFErr=0 SNaAns=3072 SNXD=90 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 20:12:56 do-urden oidentd[2572]: Connection from irc2.easynews.com (140.99.102.4):4803 Dec 8 20:46:40 do-urden named[771]: Cleaned cache of 182 RRsets Dec 8 20:46:41 do-urden named[771]: USAGE 1039398401 1039135600 CPU=15.3u/9.39s CHILDCPU=0u/0s Dec 8 20:46:41 do-urden named[771]: NSTATS 1039398401 1039135600 A=38560 PTR=3712 MX=32 AAAA=56 ANY=208 Dec 8 20:46:41 do-urden named[771]: XSTATS 1039398401 1039135600 RR=4435 RNXD=110 RFwdR=2245 RDupR=22 RFail=5 RFErr=0 RErr=0 RAXFR=0 RLame=9 ROpts=0 SSysQ=875 SAns=42281 SFwdQ=2679 SDupQ=317 SErr=1 RQ=42568 RIQ=0 RFwdQ=2679 RDupQ=79 RTCP=0 SFwdR=2245 SFail=0 SFErr=0 SNaAns=3186 SNXD=90 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 20:47:16 do-urden named[771]: Response from unexpected source ([64.174.7.191].469) Dec 8 21:16:21 do-urden PAM_pwdb[3555]: (sshd) session opened for user root by (uid=0) Dec 8 21:17:05 do-urden PAM_pwdb[3556]: (login) session closed for user root Dec 8 21:17:08 do-urden PAM_pwdb[3555]: (sshd) session closed for user root Dec 8 21:46:40 do-urden named[771]: Cleaned cache of 160 RRsets Dec 8 21:46:41 do-urden named[771]: USAGE 1039402001 1039135600 CPU=15.57u/9.56s CHILDCPU=0u/0s Dec 8 21:46:41 do-urden named[771]: NSTATS 1039402001 1039135600 A=39012 PTR=3838 MX=34 AAAA=62 ANY=213 Dec 8 21:46:41 do-urden named[771]: XSTATS 1039402001 1039135600 RR=4673 RNXD=117 RFwdR=2354 RDupR=22 RFail=5 RFErr=0 RErr=0 RAXFR=0 RLame=9 ROpts=0 SSysQ=938 SAns=42855 SFwdQ=2811 SDupQ=319 SErr=1 RQ=43159 RIQ=0 RFwdQ=2811 RDupQ=79 RTCP=0 SFwdR=2354 SFail=0 SFErr=0 SNaAns=3314 SNXD=94 RUQ=0 RURQ=0 RUXFR=0 RUUpd=0 Dec 8 22:08:09 do-urden PAM_pwdb[4343]: (sshd) session opened for user root by (uid=0) Dec 8 22:08:10 do-urden PAM_pwdb[4344]: (login) session opened for user root by (uid=0) Dec 8 22:11:00 do-urden sshd[4482]: Did not receive identification string from 67.68.99.147. Dec 8 22:11:01 do-urden oidentd[4487]: Connection from Toronto-HSE-ppp3749150.sympatico.ca (67.68.99.147):3800 Dec 8 22:11:05 do-urden afpd[4490]: dsi_stream_read(0): No such file or directory Dec 8 22:11:06 do-urden afpd[4490]: dsi_tcp_open: invalid header Dec 8 22:11:06 do-urden ftpd[4480]: lost connection to Toronto-HSE-ppp3749150.sympatico.ca [67.68.99.147] Dec 8 22:11:06 do-urden ftpd[4480]: FTP session closed Dec 8 22:11:08 do-urden oidentd[4491]: Connection from Toronto-HSE-ppp3749150.sympatico.ca (67.68.99.147):3885 Dec 8 22:11:07 do-urden inetd[757]: pid 4480: exit status 255 Dec 8 22:11:10 do-urden afpd[1112]: server_child[1] 4490 exited 1 Dec 8 22:11:13 do-urden kernel: svc: short len 3, dropping request Dec 8 22:11:16 do-urden ftpd[4496]: FTP session closed Dec 8 22:11:17 do-urden inetd[757]: pid 4484: exit status 1 Dec 8 22:11:19 do-urden ftpd[4497]: FTP session closed Dec 8 22:11:23 do-urden sshd[4511]: Did not receive identification string from 67.68.99.147. Dec 8 22:11:23 do-urden portmap[4512]: connect from 67.68.99.147 to dump(): request from unauthorized host