The Planet Forums > Syslogd Failed

spandauer

Jan 2 2009, 09:15 AM

Hello,

I'm receiving an e-mail from my Cpanel every 5 minutes because my Syslogd failed to start. How can I reinstall syslogd?

Thanks..

Tomy Durden

Jan 2 2009, 09:57 AM

Try running /etc/init.d/syslog restart in the shell to see if it restarts.

Should look like:

CODE

[root@c2111-tdurden ~]# /etc/init.d/syslog restart
Shutting down kernel logger:                               [  OK  ]
Shutting down system logger:                               [  OK  ]
Starting system logger:                                    [  OK  ]
Starting kernel logger:                                    [  OK  ]
[root@c2111-tdurden ~]#

spandauer

Jan 2 2009, 05:20 PM

I get this error;

CODE

-bash: /etc/init.d/syslog: No such file or directory

Catalyst

Jan 3 2009, 09:12 AM

Not good ... Try 'rpm -q sysklogd' and if it comes up empty, 'yum install sysklogd' ...

Tomy Durden

Jan 3 2009, 11:23 AM

QUOTE (Catalyst @ Jan 3 2009, 09:12 AM)

Not good ... Try 'rpm -q sysklogd' and if it comes up empty, 'yum install sysklogd' ...

In addition to this, install rkhunter or another rootkit detection tool and run it. It wouldn't be uncommon to see someone who's new to blackhatting uninstall the logging daemons and remove the logs.

spandauer

Jan 4 2009, 04:21 PM

QUOTE (Catalyst @ Jan 3 2009, 09:12 AM)

Not good ... Try 'rpm -q sysklogd' and if it comes up empty, 'yum install sysklogd' ...

CODE

package syslogd is not installed

what can I do now?

Catalyst

Jan 4 2009, 05:51 PM

*blinks* Umm ... Read what I said over and over until it clicks.

spandauer

Jan 5 2009, 07:39 AM

CODE

root@site.com [~]# yum install syslogd
Loading "fastestmirror" plugin
Loading mirror speeds from cached hostfile
* base: centosh3.centos.org
* updates: centose.centos.org
* addons: centose.centos.org
* extras: centosh3.centos.org
base                      100% |=========================| 1.1 kB    00:00
updates                   100% |=========================|  951 B    00:00
addons                    100% |=========================|  951 B    00:00
extras                    100% |=========================| 1.1 kB    00:00
Excluding Packages in global exclude list
Finished
Setting up Install Process
Parsing package install arguments
No package syslogd available.
Nothing to do

Now I get this error

Catalyst

Jan 5 2009, 08:55 AM

*blinks*

...umm...

Read this:

QUOTE (Catalyst @ Jan 3 2009, 10:12 AM)

Not good ... Try 'rpm -q sysklogd' and if it comes up empty, 'yum install sysklogd' ...

Do it *exactly* as I said. That is not what you are doing, and therefore, your results do not work.

spandauer

Jan 5 2009, 01:40 PM

CODE

root@site.com [~]# yum install sysklogd
Loading "fastestmirror" plugin
Loading mirror speeds from cached hostfile
* base: centosh3.centos.org
* updates: centose.centos.org
* addons: centose.centos.org
* extras: centosh3.centos.org
Excluding Packages in global exclude list
Finished
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
--> Running transaction check
---> Package sysklogd.i386 0:1.4.1-44.el5 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================
Package                 Arch       Version          Repository        Size
=============================================================================
Installing:
sysklogd                i386       1.4.1-44.el5     base               73 k

Transaction Summary
=============================================================================
Install      1 Package(s)
Update       0 Package(s)
Remove       0 Package(s)

Total download size: 73 k
Is this ok [y/N]: y
Downloading Packages:
(1/1): sysklogd-1.4.1-44. 100% |=========================|  73 kB    00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing: sysklogd                     ######################### [1/1]

Installed: sysklogd.i386 0:1.4.1-44.el5
Complete!

Tomy Durden

Jan 5 2009, 02:08 PM

Re-run this step:

QUOTE (Tomy Durden @ Jan 2 2009, 09:57 AM)

Try running /etc/init.d/syslog restart in the shell to see if it restarts.

Should look like:

CODE

[root@c2111-tdurden ~]# /etc/init.d/syslog restart
Shutting down kernel logger:                               [  OK  ]
Shutting down system logger:                               [  OK  ]
Starting system logger:                                    [  OK  ]
Starting kernel logger:                                    [  OK  ]
[root@c2111-tdurden ~]#

Except the first two will likely show [FAIL], but that's ok.

James Jhurani

Jan 7 2009, 10:59 AM

QUOTE (Tomy Durden @ Jan 5 2009, 02:08 PM)

Re-run this step:

Except the first two will likely show [FAIL], but that's ok.

if it still fails after doing what Tomy said(restarting syslogd), plz post a tail of /var/log/messages. The messages log may give us a hint as to why it failed.