A Juniper Networks NetScreen firewall can be configured to send its traffic logs by email with a few simple steps.
[ More Info ]
|
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
[ More Info ]
MS-DOS LAN Manager v2.1 Netbind IBM Netbind Version 2.1 Microsoft (R) Mouse Driver Version 8.20 Copyright (C) Microsoft Corp. 1983-1992. Copyright (C) IBM Corp. 1992-1993. Mouse driver installed Network initialization failed: the DOS-mode client cannot proceed Unable to obtain IP address via DHCP Network initialization failed: the DOS-mode client cannot proceed Unable to obtain IP address via DHCP
The last two lines continued to repeat. I hit Ctrl-C to break
out of the loop, which yielded a C:\GHOST> prompt.
I realized then that the
Ghost backup process
that normally runs on the weekend encountered a problem. A Ghost 7.5 server
normally starts a backup of the system on the weekend by contacting the
Ghost client software on the system and instructing it to reboot into
a Ghost virtual partition. When the backup process completes, the system
will reboot into Windows. But, in this case, something went wrong.
Apparently, when the system rebooted into the Ghost virtual partition, it couldn't obtain an IP address from the Ghost server via DHCP and then just continually looped as it tried to obtain an IP address via DHCP. When I later checked the DHCP server, I found that it had exhausted its pool of available IP addresses for handing out via DHCP.
At the prompt, I typed ngctdos -hide and hit Enter
to "hide" the Ghost virtual boot partition and restart the system normally.
References:
[ More Info ]
named.conf:
logging {
channel query_logging {
file "/var/log/named_querylog"
versions 3 size 100M;
print-time yes; // timestamp log entries
};
category queries {
query_logging;
};
};To have the change take effect, you need to kill the named
process and restart it , e.g. kill `cat path_to/named.pid`
followed by /usr/sbin/in.named to restart the
service. You should then be able to view the log of DNS queries.
# cat /var/log/named_querylog 11-May-2009 17:00:34.885 XX /127.0.0.1/inbound.broadbandsupport.net/A 11-May-2009 17:00:36.097 XX /192.168.1.3/cisco.com/A 11-May-2009 17:00:39.883 XX /127.0.0.1/inbound.broadbandsupport.net/A #
[ More Info ]
References:
