Apr 09 15:21:34 carlson systemd-journald[201]: Runtime journal (/run/log/journal/) is currently using 8.0M. Maximum allowed usage is set to 3.1G. Leaving at least 4.0G free (of currently available 31.4G of space). Enforced usage limit is thus 3.1G, of which 3.1G are still available. Apr 09 15:21:34 carlson kernel: microcode: CPU0 microcode updated early to revision 0x36, date = 2015-08-10 Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys cpuset Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys cpu Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys cpuacct Apr 09 15:21:34 carlson kernel: Linux version 4.4.3-1-default (geeko@buildhost) (gcc version 5.3.1 20151207 [gcc-5-branch revision 231355] (SUSE Linux) ) #1 SMP PREEMPT Fri Feb 26 09:54:10 UTC 2016 (171b8f1) Apr 09 15:21:34 carlson kernel: Command line: BOOT_IMAGE=/boot/vmlinuz-4.4.3-1-default root=UUID=1a0dc1c5-26cc-45ff-a7b1-1f827c971ff9 resume=/dev/sdb1 splash=silent quiet showopts Apr 09 15:21:34 carlson kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Apr 09 15:21:34 carlson kernel: x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' Apr 09 15:21:34 carlson kernel: x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' Apr 09 15:21:34 carlson kernel: x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' Apr 09 15:21:34 carlson kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Apr 09 15:21:34 carlson kernel: x86/fpu: Using 'eager' FPU context switches. Apr 09 15:21:34 carlson kernel: e820: BIOS-provided physical RAM map: Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009e7ff] usable Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x000000000009e800-0x000000000009ffff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000790fffff] usable Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x0000000079100000-0x0000000079c6ffff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x0000000079c70000-0x0000000079f4afff] usable Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x0000000079f4b000-0x000000007aad3fff] ACPI NVS Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x000000007aad4000-0x000000007afeafff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x000000007afeb000-0x000000007afebfff] usable Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x000000007afec000-0x000000007b071fff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x000000007b072000-0x000000007b289fff] usable Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x000000007b28a000-0x000000007bff8fff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x000000007bff9000-0x000000007bffffff] usable Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x0000000080000000-0x000000008fffffff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved Apr 09 15:21:34 carlson kernel: BIOS-e820: [mem 0x0000000100000000-0x000000107fffffff] usable Apr 09 15:21:34 carlson kernel: NX (Execute Disable) protection: active Apr 09 15:21:34 carlson kernel: SMBIOS 2.8 present. Apr 09 15:21:34 carlson kernel: DMI: To Be Filled By O.E.M. To Be Filled By O.E.M./X99 WS, BIOS P1.30 09/03/2014 Apr 09 15:21:34 carlson kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Apr 09 15:21:34 carlson kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Apr 09 15:21:34 carlson kernel: e820: last_pfn = 0x1080000 max_arch_pfn = 0x400000000 Apr 09 15:21:34 carlson kernel: MTRR default type: write-back Apr 09 15:21:34 carlson kernel: MTRR fixed ranges enabled: Apr 09 15:21:34 carlson kernel: 00000-9FFFF write-back Apr 09 15:21:34 carlson kernel: A0000-BFFFF uncachable Apr 09 15:21:34 carlson kernel: C0000-E7FFF write-through Apr 09 15:21:34 carlson kernel: E8000-FFFFF write-protect Apr 09 15:21:34 carlson kernel: MTRR variable ranges enabled: Apr 09 15:21:34 carlson kernel: 0 base 000080000000 mask 3FFF80000000 uncachable Apr 09 15:21:34 carlson kernel: 1 base 380000000000 mask 3FC000000000 uncachable Apr 09 15:21:34 carlson kernel: 2 base 00007F000000 mask 3FFFFF000000 uncachable Apr 09 15:21:34 carlson kernel: 3 base 0000E0000000 mask 3FFFF0000000 write-through Apr 09 15:21:34 carlson kernel: 4 base 0000F0000000 mask 3FFFFE000000 write-through Apr 09 15:21:34 carlson kernel: 5 disabled Apr 09 15:21:34 carlson kernel: 6 disabled Apr 09 15:21:34 carlson kernel: 7 disabled Apr 09 15:21:34 carlson kernel: 8 disabled Apr 09 15:21:34 carlson kernel: 9 disabled Apr 09 15:21:34 carlson kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT Apr 09 15:21:34 carlson kernel: e820: last_pfn = 0x7c000 max_arch_pfn = 0x400000000 Apr 09 15:21:34 carlson kernel: found SMP MP-table at [mem 0x000fd8f0-0x000fd8ff] mapped at [ffff8800000fd8f0] Apr 09 15:21:34 carlson kernel: Scanning 1 areas for low memory corruption Apr 09 15:21:34 carlson kernel: Base memory trampoline at [ffff880000098000] 98000 size 24576 Apr 09 15:21:34 carlson kernel: Using GB pages for direct mapping Apr 09 15:21:34 carlson kernel: BRK [0x02240000, 0x02240fff] PGTABLE Apr 09 15:21:34 carlson kernel: BRK [0x02241000, 0x02241fff] PGTABLE Apr 09 15:21:34 carlson kernel: BRK [0x02242000, 0x02242fff] PGTABLE Apr 09 15:21:34 carlson kernel: BRK [0x02243000, 0x02243fff] PGTABLE Apr 09 15:21:34 carlson kernel: BRK [0x02244000, 0x02244fff] PGTABLE Apr 09 15:21:34 carlson kernel: BRK [0x02245000, 0x02245fff] PGTABLE Apr 09 15:21:34 carlson kernel: RAMDISK: [mem 0x36c21000-0x37607fff] Apr 09 15:21:34 carlson kernel: ACPI: Early table checksum verification disabled Apr 09 15:21:34 carlson kernel: ACPI: RSDP 0x00000000000F0540 000024 (v02 ALASKA) Apr 09 15:21:34 carlson kernel: ACPI: XSDT 0x000000007A757098 0000AC (v01 ALASKA A M I 01072009 AMI 00010013) Apr 09 15:21:34 carlson kernel: ACPI: FACP 0x000000007A781B90 00010C (v05 ALASKA A M I 01072009 AMI 00010013) Apr 09 15:21:34 carlson kernel: ACPI: DSDT 0x000000007A7571D8 02A9B5 (v02 ALASKA A M I 01072009 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: FACS 0x000000007AAD0F80 000040 Apr 09 15:21:34 carlson kernel: ACPI: APIC 0x000000007A781CA0 000100 (v03 ALASKA A M I 01072009 AMI 00010013) Apr 09 15:21:34 carlson kernel: ACPI: FPDT 0x000000007A781DA0 000044 (v01 ALASKA A M I 01072009 AMI 00010013) Apr 09 15:21:34 carlson kernel: ACPI: FIDT 0x000000007A781DE8 00009C (v01 ALASKA A M I 01072009 AMI 00010013) Apr 09 15:21:34 carlson kernel: ACPI: MCFG 0x000000007A781E88 00003C (v01 ALASKA A M I 01072009 MSFT 00000097) Apr 09 15:21:34 carlson kernel: ACPI: UEFI 0x000000007A781EC8 000042 (v01 00000000 00000000) Apr 09 15:21:34 carlson kernel: ACPI: BDAT 0x000000007A781F10 000030 (v01 ALASKA A M I 00000000 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: HPET 0x000000007A781F40 000038 (v01 ALASKA A M I 00000001 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: MSCT 0x000000007A781F78 000090 (v01 ALASKA A M I 00000001 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: PMCT 0x000000007A782008 000064 (v01 ALASKA A M I 00000000 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: SLIT 0x000000007A782070 00002D (v01 ALASKA A M I 00000001 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: SRAT 0x000000007A7820A0 000E58 (v03 ALASKA A M I 00000001 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: WDDT 0x000000007A782EF8 000040 (v01 ALASKA A M I 00000000 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: SSDT 0x000000007A782F38 00D647 (v01 ALASKA PmMgt 00000001 INTL 20120913) Apr 09 15:21:34 carlson kernel: ACPI: AAFT 0x000000007A790580 0002B1 (v01 ALASKA OEMAAFT 01072009 MSFT 00000097) Apr 09 15:21:34 carlson kernel: ACPI: DMAR 0x000000007A790838 0000D4 (v01 ALASKA A M I 00000001 INTL 20091013) Apr 09 15:21:34 carlson kernel: ACPI: ASF! 0x000000007A790910 0000A0 (v32 INTEL HCG 00000001 TFSM 000F4240) Apr 09 15:21:34 carlson kernel: ACPI: Local APIC address 0xfee00000 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x03 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x05 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x07 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x09 -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: PXM 0 -> APIC 0x0b -> Node 0 Apr 09 15:21:34 carlson kernel: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Apr 09 15:21:34 carlson kernel: SRAT: Node 0 PXM 0 [mem 0x100000000-0x107fffffff] Apr 09 15:21:34 carlson kernel: NUMA: Initialized distance table, cnt=1 Apr 09 15:21:34 carlson kernel: NUMA: Node 0 [mem 0x00000000-0x7fffffff] + [mem 0x100000000-0x107fffffff] -> [mem 0x00000000-0x107fffffff] Apr 09 15:21:34 carlson kernel: NODE_DATA(0) allocated [mem 0x107ffe8000-0x107fff9fff] Apr 09 15:21:34 carlson kernel: Zone ranges: Apr 09 15:21:34 carlson kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Apr 09 15:21:34 carlson kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Apr 09 15:21:34 carlson kernel: Normal [mem 0x0000000100000000-0x000000107fffffff] Apr 09 15:21:34 carlson kernel: Movable zone start for each node Apr 09 15:21:34 carlson kernel: Early memory node ranges Apr 09 15:21:34 carlson kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Apr 09 15:21:34 carlson kernel: node 0: [mem 0x0000000000100000-0x00000000790fffff] Apr 09 15:21:34 carlson kernel: node 0: [mem 0x0000000079c70000-0x0000000079f4afff] Apr 09 15:21:34 carlson kernel: node 0: [mem 0x000000007afeb000-0x000000007afebfff] Apr 09 15:21:34 carlson kernel: node 0: [mem 0x000000007b072000-0x000000007b289fff] Apr 09 15:21:34 carlson kernel: node 0: [mem 0x000000007bff9000-0x000000007bffffff] Apr 09 15:21:34 carlson kernel: node 0: [mem 0x0000000100000000-0x000000107fffffff] Apr 09 15:21:34 carlson kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000107fffffff] Apr 09 15:21:34 carlson kernel: On node 0 totalpages: 16749976 Apr 09 15:21:34 carlson kernel: DMA zone: 64 pages used for memmap Apr 09 15:21:34 carlson kernel: DMA zone: 21 pages reserved Apr 09 15:21:34 carlson kernel: DMA zone: 3997 pages, LIFO batch:0 Apr 09 15:21:34 carlson kernel: DMA32 zone: 7704 pages used for memmap Apr 09 15:21:34 carlson kernel: DMA32 zone: 493051 pages, LIFO batch:31 Apr 09 15:21:34 carlson kernel: Normal zone: 253952 pages used for memmap Apr 09 15:21:34 carlson kernel: Normal zone: 16252928 pages, LIFO batch:31 Apr 09 15:21:34 carlson kernel: ACPI: PM-Timer IO Port: 0x408 Apr 09 15:21:34 carlson kernel: ACPI: Local APIC address 0xfee00000 Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Apr 09 15:21:34 carlson kernel: IOAPIC[0]: apic_id 8, version 32, address 0xfec00000, GSI 0-23 Apr 09 15:21:34 carlson kernel: IOAPIC[1]: apic_id 9, version 32, address 0xfec01000, GSI 24-47 Apr 09 15:21:34 carlson kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Apr 09 15:21:34 carlson kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Apr 09 15:21:34 carlson kernel: ACPI: IRQ0 used by override. Apr 09 15:21:34 carlson kernel: ACPI: IRQ9 used by override. Apr 09 15:21:34 carlson kernel: Using ACPI (MADT) for SMP configuration information Apr 09 15:21:34 carlson kernel: ACPI: HPET id: 0x8086a701 base: 0xfed00000 Apr 09 15:21:34 carlson kernel: smpboot: Allowing 12 CPUs, 0 hotplug CPUs Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x00000000-0x00000fff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x0009e000-0x0009efff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x000a0000-0x000dffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x000e0000-0x000fffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x79100000-0x79c6ffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x79f4b000-0x7aad3fff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x7aad4000-0x7afeafff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x7afec000-0x7b071fff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x7b28a000-0x7bff8fff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x7c000000-0x7fffffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x80000000-0x8fffffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0x90000000-0xfed1bfff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0xfed1c000-0xfed1ffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0xfed20000-0xfeffffff] Apr 09 15:21:34 carlson kernel: PM: Registered nosave memory: [mem 0xff000000-0xffffffff] Apr 09 15:21:34 carlson kernel: e820: [mem 0x90000000-0xfed1bfff] available for PCI devices Apr 09 15:21:34 carlson kernel: Booting paravirtualized kernel on bare hardware Apr 09 15:21:34 carlson kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns Apr 09 15:21:34 carlson kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:12 nr_node_ids:1 Apr 09 15:21:34 carlson kernel: PERCPU: Embedded 34 pages/cpu @ffff88103f200000 s98840 r8192 d32232 u262144 Apr 09 15:21:34 carlson kernel: pcpu-alloc: s98840 r8192 d32232 u262144 alloc=1*2097152 Apr 09 15:21:34 carlson kernel: pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 -- -- -- -- Apr 09 15:21:34 carlson kernel: Built 1 zonelists in Node order, mobility grouping on. Total pages: 16488235 Apr 09 15:21:34 carlson kernel: Policy zone: Normal Apr 09 15:21:34 carlson kernel: Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.4.3-1-default root=UUID=1a0dc1c5-26cc-45ff-a7b1-1f827c971ff9 resume=/dev/sdb1 splash=silent quiet showopts Apr 09 15:21:34 carlson kernel: log_buf_len individual max cpu contribution: 32768 bytes Apr 09 15:21:34 carlson kernel: log_buf_len total cpu_extra contributions: 360448 bytes Apr 09 15:21:34 carlson kernel: log_buf_len min size: 262144 bytes Apr 09 15:21:34 carlson kernel: log_buf_len: 1048576 bytes Apr 09 15:21:34 carlson kernel: early log buf free: 249348(95%) Apr 09 15:21:34 carlson kernel: PID hash table entries: 4096 (order: 3, 32768 bytes) Apr 09 15:21:34 carlson kernel: Memory: 3990840K/66999904K available (6861K kernel code, 1154K rwdata, 5080K rodata, 1616K init, 1544K bss, 1146588K reserved, 0K cma-reserved) Apr 09 15:21:34 carlson kernel: Preemptible hierarchical RCU implementation. Apr 09 15:21:34 carlson kernel: Build-time adjustment of leaf fanout to 64. Apr 09 15:21:34 carlson kernel: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=12. Apr 09 15:21:34 carlson kernel: RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=12 Apr 09 15:21:34 carlson kernel: NR_IRQS:33024 nr_irqs:928 16 Apr 09 15:21:34 carlson kernel: Console: colour dummy device 80x25 Apr 09 15:21:34 carlson kernel: console [tty0] enabled Apr 09 15:21:34 carlson kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Apr 09 15:21:34 carlson kernel: hpet clockevent registered Apr 09 15:21:34 carlson kernel: tsc: Fast TSC calibration using PIT Apr 09 15:21:34 carlson kernel: tsc: Detected 3499.887 MHz processor Apr 09 15:21:34 carlson kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 6999.77 BogoMIPS (lpj=13999548) Apr 09 15:21:34 carlson kernel: pid_max: default: 32768 minimum: 301 Apr 09 15:21:34 carlson kernel: ACPI: Core revision 20150930 Apr 09 15:21:34 carlson kernel: ACPI: 2 ACPI AML tables successfully acquired and loaded Apr 09 15:21:34 carlson kernel: Security Framework initialized Apr 09 15:21:34 carlson kernel: AppArmor: AppArmor initialized Apr 09 15:21:34 carlson kernel: Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes) Apr 09 15:21:34 carlson kernel: Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes) Apr 09 15:21:34 carlson kernel: Mount-cache hash table entries: 131072 (order: 8, 1048576 bytes) Apr 09 15:21:34 carlson kernel: Mountpoint-cache hash table entries: 131072 (order: 8, 1048576 bytes) Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys io Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys memory Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys devices Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys freezer Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys net_cls Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys perf_event Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys net_prio Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys hugetlb Apr 09 15:21:34 carlson kernel: Initializing cgroup subsys pids Apr 09 15:21:34 carlson kernel: CPU: Physical Processor ID: 0 Apr 09 15:21:34 carlson kernel: CPU: Processor Core ID: 0 Apr 09 15:21:34 carlson kernel: mce: CPU supports 22 MCE banks Apr 09 15:21:34 carlson kernel: CPU0: Thermal monitoring enabled (TM1) Apr 09 15:21:34 carlson kernel: process: using mwait in idle threads Apr 09 15:21:34 carlson kernel: Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 Apr 09 15:21:34 carlson kernel: Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 Apr 09 15:21:34 carlson kernel: Freeing SMP alternatives memory: 24K (ffffffff820b6000 - ffffffff820bc000) Apr 09 15:21:34 carlson kernel: ftrace: allocating 26672 entries in 105 pages Apr 09 15:21:34 carlson kernel: DMAR: Host address width 46 Apr 09 15:21:34 carlson kernel: DMAR: DRHD base: 0x000000fbffd000 flags: 0x0 Apr 09 15:21:34 carlson kernel: DMAR: dmar0: reg_base_addr fbffd000 ver 1:0 cap d2008c10ef0466 ecap f0205b Apr 09 15:21:34 carlson kernel: DMAR: DRHD base: 0x000000fbffc000 flags: 0x1 Apr 09 15:21:34 carlson kernel: DMAR: dmar1: reg_base_addr fbffc000 ver 1:0 cap d2078c106f0466 ecap f020df Apr 09 15:21:34 carlson kernel: DMAR: RMRR base: 0x0000007ae64000 end: 0x0000007ae72fff Apr 09 15:21:34 carlson kernel: DMAR: ATSR flags: 0x0 Apr 09 15:21:34 carlson kernel: DMAR: RHSA base: 0x000000fbffc000 proximity domain: 0x0 Apr 09 15:21:34 carlson kernel: DMAR-IR: IOAPIC id 8 under DRHD base 0xfbffc000 IOMMU 1 Apr 09 15:21:34 carlson kernel: DMAR-IR: IOAPIC id 9 under DRHD base 0xfbffc000 IOMMU 1 Apr 09 15:21:34 carlson kernel: DMAR-IR: HPET id 0 under DRHD base 0xfbffc000 Apr 09 15:21:34 carlson kernel: DMAR-IR: x2apic is disabled because BIOS sets x2apic opt out bit. Apr 09 15:21:34 carlson kernel: DMAR-IR: Use 'intremap=no_x2apic_optout' to override the BIOS setting. Apr 09 15:21:34 carlson kernel: DMAR-IR: Enabled IRQ remapping in xapic mode Apr 09 15:21:34 carlson kernel: x2apic: IRQ remapping doesn't support X2APIC mode Apr 09 15:21:34 carlson kernel: Switched APIC routing to physical flat. Apr 09 15:21:34 carlson kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Apr 09 15:21:34 carlson kernel: TSC deadline timer enabled Apr 09 15:21:34 carlson kernel: smpboot: CPU0: Intel(R) Xeon(R) CPU E5-1650 v3 @ 3.50GHz (family: 0x6, model: 0x3f, stepping: 0x2) Apr 09 15:21:34 carlson kernel: Performance Events: PEBS fmt2+, 16-deep LBR, Haswell events, full-width counters, Intel PMU driver. Apr 09 15:21:34 carlson kernel: ... version: 3 Apr 09 15:21:34 carlson kernel: ... bit width: 48 Apr 09 15:21:34 carlson kernel: ... generic registers: 4 Apr 09 15:21:34 carlson kernel: ... value mask: 0000ffffffffffff Apr 09 15:21:34 carlson kernel: ... max period: 0000ffffffffffff Apr 09 15:21:34 carlson kernel: ... fixed-purpose events: 3 Apr 09 15:21:34 carlson kernel: ... event mask: 000000070000000f Apr 09 15:21:34 carlson kernel: x86: Booting SMP configuration: Apr 09 15:21:34 carlson kernel: .... node #0, CPUs: #1 Apr 09 15:21:34 carlson kernel: microcode: CPU1 microcode updated early to revision 0x36, date = 2015-08-10 Apr 09 15:21:34 carlson kernel: TSC synchronization [CPU#0 -> CPU#1]: Apr 09 15:21:34 carlson kernel: Measured 2116593 cycles TSC warp between CPUs, turning off TSC clock. Apr 09 15:21:34 carlson kernel: tsc: Marking TSC unstable due to check_tsc_sync_source failed Apr 09 15:21:34 carlson kernel: NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter. Apr 09 15:21:34 carlson kernel: #2 Apr 09 15:21:34 carlson kernel: microcode: CPU2 microcode updated early to revision 0x36, date = 2015-08-10 Apr 09 15:21:34 carlson kernel: #3 Apr 09 15:21:34 carlson kernel: microcode: CPU3 microcode updated early to revision 0x36, date = 2015-08-10 Apr 09 15:21:34 carlson kernel: #4 Apr 09 15:21:34 carlson kernel: microcode: CPU4 microcode updated early to revision 0x36, date = 2015-08-10 Apr 09 15:21:34 carlson kernel: #5 Apr 09 15:21:34 carlson kernel: microcode: CPU5 microcode updated early to revision 0x36, date = 2015-08-10 Apr 09 15:21:34 carlson kernel: #6 #7 #8 #9 #10 #11 Apr 09 15:21:34 carlson kernel: x86: Booted up 1 node, 12 CPUs Apr 09 15:21:34 carlson kernel: smpboot: Total of 12 processors activated (83997.28 BogoMIPS) Apr 09 15:21:34 carlson kernel: node 0 initialised, 15465619 pages in 212ms Apr 09 15:21:34 carlson kernel: devtmpfs: initialized Apr 09 15:21:34 carlson kernel: memory block size : 2048MB Apr 09 15:21:34 carlson kernel: PM: Registering ACPI NVS region [mem 0x79f4b000-0x7aad3fff] (12095488 bytes) Apr 09 15:21:34 carlson kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns Apr 09 15:21:34 carlson kernel: pinctrl core: initialized pinctrl subsystem Apr 09 15:21:34 carlson kernel: RTC time: 19:21:31, date: 04/09/16 Apr 09 15:21:34 carlson kernel: NET: Registered protocol family 16 Apr 09 15:21:34 carlson kernel: cpuidle: using governor ladder Apr 09 15:21:34 carlson kernel: cpuidle: using governor menu Apr 09 15:21:34 carlson kernel: ACPI FADT declares the system doesn't support PCIe ASPM, so disable it Apr 09 15:21:34 carlson kernel: ACPI: bus type PCI registered Apr 09 15:21:34 carlson kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Apr 09 15:21:34 carlson kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0x80000000-0x8fffffff] (base 0x80000000) Apr 09 15:21:34 carlson kernel: PCI: MMCONFIG at [mem 0x80000000-0x8fffffff] reserved in E820 Apr 09 15:21:34 carlson kernel: PCI: Using configuration type 1 for base access Apr 09 15:21:34 carlson kernel: perf_event_intel: PMU erratum BJ122, BV98, HSD29 worked around, HT is on Apr 09 15:21:34 carlson kernel: ACPI: Added _OSI(Module Device) Apr 09 15:21:34 carlson kernel: ACPI: Added _OSI(Processor Device) Apr 09 15:21:34 carlson kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Apr 09 15:21:34 carlson kernel: ACPI: Added _OSI(Processor Aggregator Device) Apr 09 15:21:34 carlson kernel: [Firmware Bug]: ACPI: BIOS _OSI(Linux) query ignored Apr 09 15:21:34 carlson kernel: ACPI: Interpreter enabled Apr 09 15:21:34 carlson kernel: ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150930/hwxface-580) Apr 09 15:21:34 carlson kernel: ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150930/hwxface-580) Apr 09 15:21:34 carlson kernel: ACPI: (supports S0 S3 S4 S5) Apr 09 15:21:34 carlson kernel: ACPI: Using IOAPIC for interrupt routing Apr 09 15:21:34 carlson kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Apr 09 15:21:34 carlson kernel: ACPI: PCI Root Bridge [UNC0] (domain 0000 [bus ff]) Apr 09 15:21:34 carlson kernel: acpi PNP0A03:03: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI] Apr 09 15:21:34 carlson kernel: acpi PNP0A03:03: _OSC failed (AE_NOT_FOUND); disabling ASPM Apr 09 15:21:34 carlson kernel: PCI host bridge to bus 0000:ff Apr 09 15:21:34 carlson kernel: pci_bus 0000:ff: root bus resource [bus ff] Apr 09 15:21:34 carlson kernel: pci 0000:ff:0b.0: [8086:2f81] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0b.1: [8086:2f36] type 00 class 0x110100 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0b.2: [8086:2f37] type 00 class 0x110100 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0c.0: [8086:2fe0] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0c.1: [8086:2fe1] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0c.2: [8086:2fe2] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0c.3: [8086:2fe3] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0c.4: [8086:2fe4] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0c.5: [8086:2fe5] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0f.0: [8086:2ff8] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0f.1: [8086:2ff9] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0f.4: [8086:2ffc] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0f.5: [8086:2ffd] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:0f.6: [8086:2ffe] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:10.0: [8086:2f1d] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:10.1: [8086:2f34] type 00 class 0x110100 Apr 09 15:21:34 carlson kernel: pci 0000:ff:10.5: [8086:2f1e] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:10.6: [8086:2f7d] type 00 class 0x110100 Apr 09 15:21:34 carlson kernel: pci 0000:ff:10.7: [8086:2f1f] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:12.0: [8086:2fa0] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:12.1: [8086:2f30] type 00 class 0x110100 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.0: [8086:2fa8] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.1: [8086:2f71] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.2: [8086:2faa] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.3: [8086:2fab] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.4: [8086:2fac] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.5: [8086:2fad] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.6: [8086:2fae] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.7: [8086:2faf] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:14.0: [8086:2fb0] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:14.1: [8086:2fb1] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:14.2: [8086:2fb2] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:14.3: [8086:2fb3] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:14.6: [8086:2fbe] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:14.7: [8086:2fbf] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:15.0: [8086:2fb4] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:15.1: [8086:2fb5] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:15.2: [8086:2fb6] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:15.3: [8086:2fb7] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:16.0: [8086:2f68] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:16.6: [8086:2f6e] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:16.7: [8086:2f6f] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:17.0: [8086:2fd0] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:17.4: [8086:2fb8] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:17.5: [8086:2fb9] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:17.6: [8086:2fba] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:17.7: [8086:2fbb] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:1e.0: [8086:2f98] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:1e.1: [8086:2f99] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:1e.2: [8086:2f9a] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:1e.3: [8086:2fc0] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:1e.3: [Firmware Bug]: reg 0x10: invalid BAR (can't size) Apr 09 15:21:34 carlson kernel: pci 0000:ff:1e.4: [8086:2f9c] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:1f.0: [8086:2f88] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:ff:1f.2: [8086:2f8a] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-fe]) Apr 09 15:21:34 carlson kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI] Apr 09 15:21:34 carlson kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug] Apr 09 15:21:34 carlson kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Apr 09 15:21:34 carlson kernel: acpi PNP0A08:00: FADT indicates ASPM is unsupported, using BIOS configuration Apr 09 15:21:34 carlson kernel: PCI host bridge to bus 0000:00 Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x03af window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: root bus resource [io 0x03e0-0x0cf7 window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: root bus resource [io 0x03b0-0x03df window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: root bus resource [io 0x1000-0xffff window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: root bus resource [mem 0x90000000-0xfbffbfff window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: root bus resource [bus 00-fe] Apr 09 15:21:34 carlson kernel: pci 0000:00:00.0: [8086:2f00] type 00 class 0x060000 Apr 09 15:21:34 carlson kernel: pci 0000:00:01.0: [8086:2f02] type 01 class 0x060400 Apr 09 15:21:34 carlson kernel: pci 0000:00:01.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:01.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:02.0: [8086:2f04] type 01 class 0x060400 Apr 09 15:21:34 carlson kernel: pci 0000:00:02.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:02.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: [8086:2f08] type 01 class 0x060400 Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:05.0: [8086:2f28] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:00:05.1: [8086:2f29] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:00:05.2: [8086:2f2a] type 00 class 0x088000 Apr 09 15:21:34 carlson kernel: pci 0000:00:05.4: [8086:2f2c] type 00 class 0x080020 Apr 09 15:21:34 carlson kernel: pci 0000:00:05.4: reg 0x10: [mem 0xfb23e000-0xfb23efff] Apr 09 15:21:34 carlson kernel: pci 0000:00:11.0: [8086:8d7c] type 00 class 0xff0000 Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: [8086:8d62] type 00 class 0x010601 Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: reg 0x10: [io 0xf130-0xf137] Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: reg 0x14: [io 0xf120-0xf123] Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: reg 0x18: [io 0xf110-0xf117] Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: reg 0x1c: [io 0xf100-0xf103] Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: reg 0x20: [io 0xf040-0xf05f] Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: reg 0x24: [mem 0xfb23d000-0xfb23d7ff] Apr 09 15:21:34 carlson kernel: pci 0000:00:11.4: PME# supported from D3hot Apr 09 15:21:34 carlson kernel: pci 0000:00:14.0: [8086:8d31] type 00 class 0x0c0330 Apr 09 15:21:34 carlson kernel: pci 0000:00:14.0: reg 0x10: [mem 0xfb220000-0xfb22ffff 64bit] Apr 09 15:21:34 carlson kernel: pci 0000:00:14.0: PME# supported from D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:14.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:16.0: [8086:8d3a] type 00 class 0x078000 Apr 09 15:21:34 carlson kernel: pci 0000:00:16.0: reg 0x10: [mem 0xfb23c000-0xfb23c00f 64bit] Apr 09 15:21:34 carlson kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:19.0: [8086:153a] type 00 class 0x020000 Apr 09 15:21:34 carlson kernel: pci 0000:00:19.0: reg 0x10: [mem 0xfb200000-0xfb21ffff] Apr 09 15:21:34 carlson kernel: pci 0000:00:19.0: reg 0x14: [mem 0xfb239000-0xfb239fff] Apr 09 15:21:34 carlson kernel: pci 0000:00:19.0: reg 0x18: [io 0xf020-0xf03f] Apr 09 15:21:34 carlson kernel: pci 0000:00:19.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:19.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:1a.0: [8086:8d2d] type 00 class 0x0c0320 Apr 09 15:21:34 carlson kernel: pci 0000:00:1a.0: reg 0x10: [mem 0xfb238000-0xfb2383ff] Apr 09 15:21:34 carlson kernel: pci 0000:00:1a.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:1a.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:1b.0: [8086:8d20] type 00 class 0x040300 Apr 09 15:21:34 carlson kernel: pci 0000:00:1b.0: reg 0x10: [mem 0xfb230000-0xfb233fff 64bit] Apr 09 15:21:34 carlson kernel: pci 0000:00:1b.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.0: [8086:8d10] type 01 class 0x060400 Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: [8086:8d16] type 01 class 0x060400 Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:1d.0: [8086:8d26] type 00 class 0x0c0320 Apr 09 15:21:34 carlson kernel: pci 0000:00:1d.0: reg 0x10: [mem 0xfb237000-0xfb2373ff] Apr 09 15:21:34 carlson kernel: pci 0000:00:1d.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:1d.0: System wakeup disabled by ACPI Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.0: [8086:8d47] type 00 class 0x060100 Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: [8086:8d02] type 00 class 0x010601 Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: reg 0x10: [io 0xf090-0xf097] Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: reg 0x14: [io 0xf080-0xf083] Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: reg 0x18: [io 0xf070-0xf077] Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: reg 0x1c: [io 0xf060-0xf063] Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: reg 0x20: [io 0xf000-0xf01f] Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfb236000-0xfb2367ff] Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.2: PME# supported from D3hot Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.3: [8086:8d22] type 00 class 0x0c0500 Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.3: reg 0x10: [mem 0xfb235000-0xfb2350ff 64bit] Apr 09 15:21:34 carlson kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0580-0x059f] Apr 09 15:21:34 carlson kernel: acpiphp: Slot [2] registered Apr 09 15:21:34 carlson kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Apr 09 15:21:34 carlson kernel: pci 0000:00:02.0: PCI bridge to [bus 02] Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: [10de:1402] type 00 class 0x030000 Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: reg 0x10: [mem 0xfa000000-0xfaffffff] Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: reg 0x14: [mem 0xe0000000-0xefffffff 64bit pref] Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: reg 0x1c: [mem 0xf0000000-0xf1ffffff 64bit pref] Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: reg 0x24: [io 0xe000-0xe07f] Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: reg 0x30: [mem 0xfb000000-0xfb07ffff pref] Apr 09 15:21:34 carlson kernel: pci 0000:03:00.1: [10de:0fba] type 00 class 0x040300 Apr 09 15:21:34 carlson kernel: pci 0000:03:00.1: reg 0x10: [mem 0xfb080000-0xfb083fff] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: PCI bridge to [bus 03] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: bridge window [io 0xe000-0xefff] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: bridge window [mem 0xfa000000-0xfb0fffff] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: bridge window [mem 0xe0000000-0xf1ffffff 64bit pref] Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.0: PCI bridge to [bus 04] Apr 09 15:21:34 carlson kernel: pci 0000:05:00.0: [8086:1533] type 00 class 0x020000 Apr 09 15:21:34 carlson kernel: pci 0000:05:00.0: reg 0x10: [mem 0xfb100000-0xfb17ffff] Apr 09 15:21:34 carlson kernel: pci 0000:05:00.0: reg 0x18: [io 0xd000-0xd01f] Apr 09 15:21:34 carlson kernel: pci 0000:05:00.0: reg 0x1c: [mem 0xfb180000-0xfb183fff] Apr 09 15:21:34 carlson kernel: pci 0000:05:00.0: PME# supported from D0 D3hot D3cold Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: PCI bridge to [bus 05] Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: bridge window [io 0xd000-0xdfff] Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: bridge window [mem 0xfb100000-0xfb1fffff] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: on NUMA node 0 Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 6 7 10 *11 12 14 15) Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 6 7 *10 11 12 14 15) Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKC] (IRQs 3 4 5 6 10 *11 12 14 15) Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 *5 6 10 11 12 14 15) Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 5 6 *7 10 11 12 14 15) Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 5 6 7 10 11 12 14 15) *0, disabled. Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 5 6 7 *10 11 12 14 15) Apr 09 15:21:34 carlson kernel: ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 5 6 7 10 11 12 14 15) *0, disabled. Apr 09 15:21:34 carlson kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Apr 09 15:21:34 carlson kernel: vgaarb: setting as boot device: PCI:0000:03:00.0 Apr 09 15:21:34 carlson kernel: vgaarb: device added: PCI:0000:03:00.0,decodes=io+mem,owns=io+mem,locks=none Apr 09 15:21:34 carlson kernel: vgaarb: loaded Apr 09 15:21:34 carlson kernel: vgaarb: bridge control possible 0000:03:00.0 Apr 09 15:21:34 carlson kernel: SCSI subsystem initialized Apr 09 15:21:34 carlson kernel: libata version 3.00 loaded. Apr 09 15:21:34 carlson kernel: PCI: Using ACPI for IRQ routing Apr 09 15:21:34 carlson kernel: PCI: pci_cache_line_size set to 64 bytes Apr 09 15:21:34 carlson kernel: e820: reserve RAM buffer [mem 0x0009e800-0x0009ffff] Apr 09 15:21:34 carlson kernel: e820: reserve RAM buffer [mem 0x79100000-0x7bffffff] Apr 09 15:21:34 carlson kernel: e820: reserve RAM buffer [mem 0x79f4b000-0x7bffffff] Apr 09 15:21:34 carlson kernel: e820: reserve RAM buffer [mem 0x7afec000-0x7bffffff] Apr 09 15:21:34 carlson kernel: e820: reserve RAM buffer [mem 0x7b28a000-0x7bffffff] Apr 09 15:21:34 carlson kernel: NetLabel: Initializing Apr 09 15:21:34 carlson kernel: NetLabel: domain hash size = 128 Apr 09 15:21:34 carlson kernel: NetLabel: protocols = UNLABELED CIPSOv4 Apr 09 15:21:34 carlson kernel: NetLabel: unlabeled traffic allowed by default Apr 09 15:21:34 carlson kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Apr 09 15:21:34 carlson kernel: hpet0: 8 comparators, 64-bit 14.318180 MHz counter Apr 09 15:21:34 carlson kernel: clocksource: Switched to clocksource hpet Apr 09 15:21:34 carlson kernel: AppArmor: AppArmor Filesystem Enabled Apr 09 15:21:34 carlson kernel: pnp: PnP ACPI init Apr 09 15:21:34 carlson kernel: pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active) Apr 09 15:21:34 carlson kernel: system 00:01: [io 0x0500-0x057f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [io 0x0400-0x047f] could not be reserved Apr 09 15:21:34 carlson kernel: system 00:01: [io 0x0580-0x059f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [io 0x0600-0x061f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [io 0x0880-0x0883] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [io 0x0800-0x081f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [mem 0xfed1c000-0xfed3ffff] could not be reserved Apr 09 15:21:34 carlson kernel: system 00:01: [mem 0xfed45000-0xfed8bfff] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [mem 0xff000000-0xffffffff] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [mem 0xfee00000-0xfeefffff] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [mem 0xfed12000-0xfed1200f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [mem 0xfed12010-0xfed1201f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: [mem 0xfed1b000-0xfed1bfff] has been reserved Apr 09 15:21:34 carlson kernel: system 00:01: Plug and Play ACPI device, IDs PNP0c02 (active) Apr 09 15:21:34 carlson kernel: system 00:02: [io 0x0280-0x028f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:02: [io 0x0290-0x029f] has been reserved Apr 09 15:21:34 carlson kernel: system 00:02: [io 0x02a0-0x02af] has been reserved Apr 09 15:21:34 carlson kernel: system 00:02: [io 0x02b0-0x02bf] has been reserved Apr 09 15:21:34 carlson kernel: system 00:02: Plug and Play ACPI device, IDs PNP0c02 (active) Apr 09 15:21:34 carlson kernel: pnp 00:03: Plug and Play ACPI device, IDs PNP0303 PNP030b (active) Apr 09 15:21:34 carlson kernel: pnp 00:04: [dma 0 disabled] Apr 09 15:21:34 carlson kernel: pnp 00:04: Plug and Play ACPI device, IDs PNP0501 (active) Apr 09 15:21:34 carlson kernel: pnp 00:05: [dma 0 disabled] Apr 09 15:21:34 carlson kernel: pnp 00:05: Plug and Play ACPI device, IDs PNP0501 (active) Apr 09 15:21:34 carlson kernel: pnp: PnP ACPI: found 6 devices Apr 09 15:21:34 carlson kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Apr 09 15:21:34 carlson kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Apr 09 15:21:34 carlson kernel: pci 0000:00:02.0: PCI bridge to [bus 02] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: PCI bridge to [bus 03] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: bridge window [io 0xe000-0xefff] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: bridge window [mem 0xfa000000-0xfb0fffff] Apr 09 15:21:34 carlson kernel: pci 0000:00:03.0: bridge window [mem 0xe0000000-0xf1ffffff 64bit pref] Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.0: PCI bridge to [bus 04] Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: PCI bridge to [bus 05] Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: bridge window [io 0xd000-0xdfff] Apr 09 15:21:34 carlson kernel: pci 0000:00:1c.3: bridge window [mem 0xfb100000-0xfb1fffff] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x03af window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: resource 5 [io 0x03e0-0x0cf7 window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: resource 6 [io 0x03b0-0x03df window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: resource 7 [io 0x1000-0xffff window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: resource 8 [mem 0x000a0000-0x000bffff window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:00: resource 9 [mem 0x90000000-0xfbffbfff window] Apr 09 15:21:34 carlson kernel: pci_bus 0000:03: resource 0 [io 0xe000-0xefff] Apr 09 15:21:34 carlson kernel: pci_bus 0000:03: resource 1 [mem 0xfa000000-0xfb0fffff] Apr 09 15:21:34 carlson kernel: pci_bus 0000:03: resource 2 [mem 0xe0000000-0xf1ffffff 64bit pref] Apr 09 15:21:34 carlson kernel: pci_bus 0000:05: resource 0 [io 0xd000-0xdfff] Apr 09 15:21:34 carlson kernel: pci_bus 0000:05: resource 1 [mem 0xfb100000-0xfb1fffff] Apr 09 15:21:34 carlson kernel: NET: Registered protocol family 2 Apr 09 15:21:34 carlson kernel: TCP established hash table entries: 524288 (order: 10, 4194304 bytes) Apr 09 15:21:34 carlson kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes) Apr 09 15:21:34 carlson kernel: TCP: Hash tables configured (established 524288 bind 65536) Apr 09 15:21:34 carlson kernel: UDP hash table entries: 32768 (order: 8, 1048576 bytes) Apr 09 15:21:34 carlson kernel: UDP-Lite hash table entries: 32768 (order: 8, 1048576 bytes) Apr 09 15:21:34 carlson kernel: NET: Registered protocol family 1 Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: Video device with shadowed ROM Apr 09 15:21:34 carlson kernel: PCI: CLS 32 bytes, default 64 Apr 09 15:21:34 carlson kernel: Unpacking initramfs... Apr 09 15:21:34 carlson kernel: Freeing initrd memory: 10140K (ffff880036c21000 - ffff880037608000) Apr 09 15:21:34 carlson kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Apr 09 15:21:34 carlson kernel: software IO TLB [mem 0x75100000-0x79100000] (64MB) mapped at [ffff880075100000-ffff8800790fffff] Apr 09 15:21:34 carlson kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x3272e69994e, max_idle_ns: 440795378979 ns Apr 09 15:21:34 carlson kernel: RAPL PMU detected, API unit is 2^-32 Joules, 3 fixed counters 655360 ms ovfl timer Apr 09 15:21:34 carlson kernel: hw unit of domain pp0-core 2^-14 Joules Apr 09 15:21:34 carlson kernel: hw unit of domain package 2^-14 Joules Apr 09 15:21:34 carlson kernel: hw unit of domain dram 2^-16 Joules Apr 09 15:21:34 carlson kernel: Intel CQM monitoring enabled Apr 09 15:21:34 carlson kernel: Scanning for low memory corruption every 60 seconds Apr 09 15:21:34 carlson kernel: futex hash table entries: 4096 (order: 6, 262144 bytes) Apr 09 15:21:34 carlson kernel: audit: initializing netlink subsys (disabled) Apr 09 15:21:34 carlson kernel: audit: type=2000 audit(1460229692.376:1): initialized Apr 09 15:21:34 carlson kernel: HugeTLB registered 2 MB page size, pre-allocated 0 pages Apr 09 15:21:34 carlson kernel: zbud: loaded Apr 09 15:21:34 carlson kernel: VFS: Disk quotas dquot_6.6.0 Apr 09 15:21:34 carlson kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Apr 09 15:21:34 carlson kernel: Key type big_key registered Apr 09 15:21:34 carlson kernel: Key type asymmetric registered Apr 09 15:21:34 carlson kernel: Asymmetric key parser 'x509' registered Apr 09 15:21:34 carlson kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) Apr 09 15:21:34 carlson kernel: io scheduler noop registered Apr 09 15:21:34 carlson kernel: io scheduler deadline registered Apr 09 15:21:34 carlson kernel: io scheduler cfq registered (default) Apr 09 15:21:34 carlson kernel: aer 0000:00:01.0:pcie02: service driver aer loaded Apr 09 15:21:34 carlson kernel: aer 0000:00:02.0:pcie02: service driver aer loaded Apr 09 15:21:34 carlson kernel: aer 0000:00:03.0:pcie02: service driver aer loaded Apr 09 15:21:34 carlson kernel: pcieport 0000:00:01.0: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pcie_pme 0000:00:01.0:pcie01: service driver pcie_pme loaded Apr 09 15:21:34 carlson kernel: pcieport 0000:00:02.0: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pcie_pme 0000:00:02.0:pcie01: service driver pcie_pme loaded Apr 09 15:21:34 carlson kernel: pcieport 0000:00:03.0: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pci 0000:03:00.0: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pci 0000:03:00.1: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pcie_pme 0000:00:03.0:pcie01: service driver pcie_pme loaded Apr 09 15:21:34 carlson kernel: pcieport 0000:00:1c.0: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pcie_pme 0000:00:1c.0:pcie01: service driver pcie_pme loaded Apr 09 15:21:34 carlson kernel: pcieport 0000:00:1c.3: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pci 0000:05:00.0: Signaling PME through PCIe PME interrupt Apr 09 15:21:34 carlson kernel: pcie_pme 0000:00:1c.3:pcie01: service driver pcie_pme loaded Apr 09 15:21:34 carlson kernel: pci_hotplug: PCI Hot Plug PCI Core version: 0.5 Apr 09 15:21:34 carlson kernel: pciehp: PCI Express Hot Plug Controller Driver version: 0.4 Apr 09 15:21:34 carlson kernel: vesafb: mode is 1680x1050x32, linelength=6720, pages=0 Apr 09 15:21:34 carlson kernel: vesafb: scrolling: redraw Apr 09 15:21:34 carlson kernel: vesafb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Apr 09 15:21:34 carlson kernel: pmd_set_huge: Cannot satisfy [mem 0xf1000000-0xf1200000] with a huge-page mapping due to MTRR override. Apr 09 15:21:34 carlson kernel: vesafb: framebuffer at 0xf1000000, mapped to 0xffffc90007000000, using 6912k, total 6912k Apr 09 15:21:34 carlson kernel: Console: switching to colour frame buffer device 210x65 Apr 09 15:21:34 carlson kernel: fb0: VESA VGA frame buffer device Apr 09 15:21:34 carlson kernel: intel_idle: MWAIT substates: 0x2120 Apr 09 15:21:34 carlson kernel: intel_idle: v0.4 model 0x3F Apr 09 15:21:34 carlson kernel: intel_idle: lapic_timer_reliable_states 0xffffffff Apr 09 15:21:34 carlson kernel: GHES: HEST is not enabled! Apr 09 15:21:34 carlson kernel: Serial: 8250/16550 driver, 32 ports, IRQ sharing disabled Apr 09 15:21:34 carlson kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Apr 09 15:21:34 carlson kernel: 00:05: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Apr 09 15:21:34 carlson kernel: Non-volatile memory driver v1.3 Apr 09 15:21:34 carlson kernel: Linux agpgart interface v0.103 Apr 09 15:21:34 carlson kernel: ahci 0000:00:11.4: version 3.0 Apr 09 15:21:34 carlson kernel: ahci 0000:00:11.4: SSS flag set, parallel bus scan disabled Apr 09 15:21:34 carlson kernel: ahci 0000:00:11.4: AHCI 0001.0300 32 slots 4 ports 6 Gbps 0xa impl SATA mode Apr 09 15:21:34 carlson kernel: ahci 0000:00:11.4: flags: 64bit ncq stag led clo pio slum part ems sxs apst Apr 09 15:21:34 carlson kernel: scsi host0: ahci Apr 09 15:21:34 carlson kernel: scsi host1: ahci Apr 09 15:21:34 carlson kernel: scsi host2: ahci Apr 09 15:21:34 carlson kernel: scsi host3: ahci Apr 09 15:21:34 carlson kernel: ata1: DUMMY Apr 09 15:21:34 carlson kernel: ata2: SATA max UDMA/133 abar m2048@0xfb23d000 port 0xfb23d180 irq 29 Apr 09 15:21:34 carlson kernel: ata3: DUMMY Apr 09 15:21:34 carlson kernel: ata4: SATA max UDMA/133 abar m2048@0xfb23d000 port 0xfb23d280 irq 29 Apr 09 15:21:34 carlson kernel: ahci 0000:00:1f.2: AHCI 0001.0300 32 slots 6 ports 6 Gbps 0x3f impl SATA mode Apr 09 15:21:34 carlson kernel: ahci 0000:00:1f.2: flags: 64bit ncq led clo pio slum part ems apst Apr 09 15:21:34 carlson kernel: scsi host4: ahci Apr 09 15:21:34 carlson kernel: scsi host5: ahci Apr 09 15:21:34 carlson kernel: scsi host6: ahci Apr 09 15:21:34 carlson kernel: scsi host7: ahci Apr 09 15:21:34 carlson kernel: scsi host8: ahci Apr 09 15:21:34 carlson kernel: scsi host9: ahci Apr 09 15:21:34 carlson kernel: ata5: SATA max UDMA/133 abar m2048@0xfb236000 port 0xfb236100 irq 30 Apr 09 15:21:34 carlson kernel: ata6: SATA max UDMA/133 abar m2048@0xfb236000 port 0xfb236180 irq 30 Apr 09 15:21:34 carlson kernel: ata7: SATA max UDMA/133 abar m2048@0xfb236000 port 0xfb236200 irq 30 Apr 09 15:21:34 carlson kernel: ata8: SATA max UDMA/133 abar m2048@0xfb236000 port 0xfb236280 irq 30 Apr 09 15:21:34 carlson kernel: ata9: SATA max UDMA/133 abar m2048@0xfb236000 port 0xfb236300 irq 30 Apr 09 15:21:34 carlson kernel: ata10: SATA max UDMA/133 abar m2048@0xfb236000 port 0xfb236380 irq 30 Apr 09 15:21:34 carlson kernel: i8042: PNP: PS/2 Controller [PNP0303:PS2K] at 0x60,0x64 irq 1 Apr 09 15:21:34 carlson kernel: i8042: PNP: PS/2 appears to have AUX port disabled, if this is incorrect please boot with i8042.nopnp Apr 09 15:21:34 carlson kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Apr 09 15:21:34 carlson kernel: mousedev: PS/2 mouse device common for all mice Apr 09 15:21:34 carlson kernel: rtc_cmos 00:00: RTC can wake from S4 Apr 09 15:21:34 carlson kernel: rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 Apr 09 15:21:34 carlson kernel: rtc_cmos 00:00: alarms up to one month, y3k, 114 bytes nvram, hpet irqs Apr 09 15:21:34 carlson kernel: Intel P-state driver initializing. Apr 09 15:21:34 carlson kernel: ledtrig-cpu: registered to indicate activity on CPUs Apr 09 15:21:34 carlson kernel: hidraw: raw HID events driver (C) Jiri Kosina Apr 09 15:21:34 carlson kernel: NET: Registered protocol family 10 Apr 09 15:21:34 carlson kernel: microcode: CPU0 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU1 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU2 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU3 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU4 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU5 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU6 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU7 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU8 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU9 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU10 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: CPU11 sig=0x306f2, pf=0x1, revision=0x36 Apr 09 15:21:34 carlson kernel: microcode: Microcode Update Driver: v2.01 , Peter Oruba Apr 09 15:21:34 carlson kernel: registered taskstats version 1 Apr 09 15:21:34 carlson kernel: zswap: loaded using pool lzo/zbud Apr 09 15:21:34 carlson kernel: Key type encrypted registered Apr 09 15:21:34 carlson kernel: AppArmor: AppArmor sha1 policy hashing enabled Apr 09 15:21:34 carlson kernel: Magic number: 12:501:394 Apr 09 15:21:34 carlson kernel: thermal cooling_device9: hash matches Apr 09 15:21:34 carlson kernel: pci 0000:ff:13.0: hash matches Apr 09 15:21:34 carlson kernel: rtc_cmos 00:00: setting system clock to 2016-04-09 19:21:33 UTC (1460229693) Apr 09 15:21:34 carlson kernel: PM: Checking hibernation image partition /dev/sdb1 Apr 09 15:21:34 carlson kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Apr 09 15:21:34 carlson kernel: ata2: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Apr 09 15:21:34 carlson kernel: ata2.00: ATAPI: HL-DT-ST BD-RE WH16NS40, 1.00, max UDMA/100 Apr 09 15:21:34 carlson kernel: ata2.00: configured for UDMA/100 Apr 09 15:21:34 carlson kernel: scsi 1:0:0:0: CD-ROM HL-DT-ST BD-RE WH16NS40 1.00 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: ata6: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Apr 09 15:21:34 carlson kernel: ata9: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Apr 09 15:21:34 carlson kernel: ata7: SATA link up 3.0 Gbps (SStatus 123 SControl 300) Apr 09 15:21:34 carlson kernel: ata10: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Apr 09 15:21:34 carlson kernel: ata5: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Apr 09 15:21:34 carlson kernel: ata8: SATA link up 3.0 Gbps (SStatus 123 SControl 300) Apr 09 15:21:34 carlson kernel: ata6.00: ATA-8: WDC WD2001FFSX-68JNUN0, 81.00A81, max UDMA/133 Apr 09 15:21:34 carlson kernel: ata6.00: 3907029168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA Apr 09 15:21:34 carlson kernel: ata5.00: ATA-8: WDC WD2001FFSX-68JNUN0, 81.00A81, max UDMA/133 Apr 09 15:21:34 carlson kernel: ata5.00: 3907029168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA Apr 09 15:21:34 carlson kernel: ata9.00: ATA-9: ST1000NM0033-9ZM173, SN03, max UDMA/133 Apr 09 15:21:34 carlson kernel: ata9.00: 1953525168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA Apr 09 15:21:34 carlson kernel: ata10.00: ATA-9: ST1000NM0033-9ZM173, SN03, max UDMA/133 Apr 09 15:21:34 carlson kernel: ata10.00: 1953525168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA Apr 09 15:21:34 carlson kernel: ata6.00: configured for UDMA/133 Apr 09 15:21:34 carlson kernel: ata10.00: configured for UDMA/133 Apr 09 15:21:34 carlson kernel: ata9.00: configured for UDMA/133 Apr 09 15:21:34 carlson kernel: ata5.00: configured for UDMA/133 Apr 09 15:21:34 carlson kernel: ata7.00: ATA-8: WDC WD1003FBYX-01Y7B0, 01.01V01, max UDMA/133 Apr 09 15:21:34 carlson kernel: ata7.00: 1953525168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA Apr 09 15:21:34 carlson kernel: ata8.00: ATA-8: WDC WD1003FBYX-01Y7B0, 01.01V01, max UDMA/133 Apr 09 15:21:34 carlson kernel: ata8.00: 1953525168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA Apr 09 15:21:34 carlson kernel: ata7.00: configured for UDMA/133 Apr 09 15:21:34 carlson kernel: ata8.00: configured for UDMA/133 Apr 09 15:21:34 carlson kernel: ata4: SATA link up 3.0 Gbps (SStatus 123 SControl 300) Apr 09 15:21:34 carlson kernel: ata4.00: ATA-9: ST5000DM000-1FK178, CC48, max UDMA/133 Apr 09 15:21:34 carlson kernel: ata4.00: 9767541168 sectors, multi 16: LBA48 Apr 09 15:21:34 carlson kernel: ata4.00: configured for UDMA/133 Apr 09 15:21:34 carlson kernel: scsi 3:0:0:0: Direct-Access ATA ST5000DM000-1FK1 CC48 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: sd 3:0:0:0: [sda] 9767541168 512-byte logical blocks: (5.00 TB/4.55 TiB) Apr 09 15:21:34 carlson kernel: sd 3:0:0:0: [sda] 4096-byte physical blocks Apr 09 15:21:34 carlson kernel: sd 3:0:0:0: [sda] Write Protect is off Apr 09 15:21:34 carlson kernel: sd 3:0:0:0: [sda] Mode Sense: 00 3a 00 00 Apr 09 15:21:34 carlson kernel: sd 3:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Apr 09 15:21:34 carlson kernel: scsi 4:0:0:0: Direct-Access ATA WDC WD2001FFSX-6 0A81 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: sd 4:0:0:0: [sdb] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB) Apr 09 15:21:34 carlson kernel: sd 4:0:0:0: [sdb] 4096-byte physical blocks Apr 09 15:21:34 carlson kernel: sd 4:0:0:0: [sdb] Write Protect is off Apr 09 15:21:34 carlson kernel: sd 4:0:0:0: [sdb] Mode Sense: 00 3a 00 00 Apr 09 15:21:34 carlson kernel: sd 4:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Apr 09 15:21:34 carlson kernel: scsi 5:0:0:0: Direct-Access ATA WDC WD2001FFSX-6 0A81 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: sd 5:0:0:0: [sdc] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB) Apr 09 15:21:34 carlson kernel: sd 5:0:0:0: [sdc] 4096-byte physical blocks Apr 09 15:21:34 carlson kernel: sd 5:0:0:0: [sdc] Write Protect is off Apr 09 15:21:34 carlson kernel: sd 5:0:0:0: [sdc] Mode Sense: 00 3a 00 00 Apr 09 15:21:34 carlson kernel: sd 5:0:0:0: [sdc] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Apr 09 15:21:34 carlson kernel: scsi 6:0:0:0: Direct-Access ATA WDC WD1003FBYX-0 1V01 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: sd 6:0:0:0: [sdd] 1953525168 512-byte logical blocks: (1.00 TB/932 GiB) Apr 09 15:21:34 carlson kernel: sd 6:0:0:0: [sdd] Write Protect is off Apr 09 15:21:34 carlson kernel: sd 6:0:0:0: [sdd] Mode Sense: 00 3a 00 00 Apr 09 15:21:34 carlson kernel: sd 6:0:0:0: [sdd] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Apr 09 15:21:34 carlson kernel: scsi 7:0:0:0: Direct-Access ATA WDC WD1003FBYX-0 1V01 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: sd 7:0:0:0: [sde] 1953525168 512-byte logical blocks: (1.00 TB/932 GiB) Apr 09 15:21:34 carlson kernel: sd 7:0:0:0: [sde] Write Protect is off Apr 09 15:21:34 carlson kernel: sd 7:0:0:0: [sde] Mode Sense: 00 3a 00 00 Apr 09 15:21:34 carlson kernel: sd 7:0:0:0: [sde] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Apr 09 15:21:34 carlson kernel: scsi 8:0:0:0: Direct-Access ATA ST1000NM0033-9ZM SN03 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: sd 8:0:0:0: [sdf] 1953525168 512-byte logical blocks: (1.00 TB/932 GiB) Apr 09 15:21:34 carlson kernel: sd 8:0:0:0: [sdf] Write Protect is off Apr 09 15:21:34 carlson kernel: sd 8:0:0:0: [sdf] Mode Sense: 00 3a 00 00 Apr 09 15:21:34 carlson kernel: sd 8:0:0:0: [sdf] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Apr 09 15:21:34 carlson kernel: scsi 9:0:0:0: Direct-Access ATA ST1000NM0033-9ZM SN03 PQ: 0 ANSI: 5 Apr 09 15:21:34 carlson kernel: sd 9:0:0:0: [sdg] 1953525168 512-byte logical blocks: (1.00 TB/932 GiB) Apr 09 15:21:34 carlson kernel: sd 9:0:0:0: [sdg] Write Protect is off Apr 09 15:21:34 carlson kernel: sd 9:0:0:0: [sdg] Mode Sense: 00 3a 00 00 Apr 09 15:21:34 carlson kernel: sd 9:0:0:0: [sdg] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Apr 09 15:21:34 carlson kernel: sdc: sdc1 sdc2 Apr 09 15:21:34 carlson kernel: sd 5:0:0:0: [sdc] Attached SCSI disk Apr 09 15:21:34 carlson kernel: sdg: sdg1 Apr 09 15:21:34 carlson kernel: sd 9:0:0:0: [sdg] Attached SCSI disk Apr 09 15:21:34 carlson kernel: sdb: sdb1 sdb2 Apr 09 15:21:34 carlson kernel: sd 4:0:0:0: [sdb] Attached SCSI disk Apr 09 15:21:34 carlson kernel: sdf: sdf1 Apr 09 15:21:34 carlson kernel: sd 8:0:0:0: [sdf] Attached SCSI disk Apr 09 15:21:34 carlson kernel: sde: sde1 Apr 09 15:21:34 carlson kernel: sd 7:0:0:0: [sde] Attached SCSI disk Apr 09 15:21:34 carlson kernel: sdd: sdd1 Apr 09 15:21:34 carlson kernel: sd 6:0:0:0: [sdd] Attached SCSI disk Apr 09 15:21:34 carlson kernel: sda: sda1 sda2 Apr 09 15:21:34 carlson kernel: sd 3:0:0:0: [sda] Attached SCSI removable disk Apr 09 15:21:34 carlson kernel: PM: Hibernation image partition 8:17 present Apr 09 15:21:34 carlson kernel: PM: Looking for hibernation image. Apr 09 15:21:34 carlson kernel: PM: Image not found (code -22) Apr 09 15:21:34 carlson kernel: PM: Hibernation image not present or could not be loaded. Apr 09 15:21:34 carlson kernel: Freeing unused kernel memory: 1616K (ffffffff81f22000 - ffffffff820b6000) Apr 09 15:21:34 carlson kernel: Write protecting the kernel read-only data: 14336k Apr 09 15:21:34 carlson kernel: Freeing unused kernel memory: 1320K (ffff8800016b6000 - ffff880001800000) Apr 09 15:21:34 carlson kernel: Freeing unused kernel memory: 1064K (ffff880001cf6000 - ffff880001e00000) Apr 09 15:21:34 carlson kernel: random: systemd urandom read with 76 bits of entropy available Apr 09 15:21:34 carlson systemd[1]: systemd 228 running in system mode. (+PAM +AUDIT +SELINUX -IMA +APPARMOR -SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID -ELFUTILS +KMOD +IDN) Apr 09 15:21:34 carlson systemd[1]: Detected architecture x86-64. Apr 09 15:21:34 carlson systemd[1]: Running in initial RAM disk. Apr 09 15:21:34 carlson systemd[1]: Set hostname to . Apr 09 15:21:34 carlson systemd[1]: Listening on udev Control Socket. Apr 09 15:21:34 carlson systemd[1]: Reached target Swap. Apr 09 15:21:34 carlson systemd[1]: Listening on Journal Socket. Apr 09 15:21:34 carlson systemd[1]: Reached target Timers. Apr 09 15:21:34 carlson systemd[1]: Created slice System Slice. Apr 09 15:21:34 carlson systemd[1]: Starting Load Kernel Modules... Apr 09 15:21:34 carlson systemd[1]: Starting Setup Virtual Console... Apr 09 15:21:34 carlson systemd[1]: Starting Create list of required static device nodes for the current kernel... Apr 09 15:21:34 carlson systemd[1]: Reached target Slices. Apr 09 15:21:34 carlson systemd[1]: Started Entropy Daemon based on the HAVEGE algorithm. Apr 09 15:21:34 carlson kernel: scsi 1:0:0:0: Attached scsi generic sg0 type 5 Apr 09 15:21:34 carlson kernel: sd 3:0:0:0: Attached scsi generic sg1 type 0 Apr 09 15:21:34 carlson kernel: sd 4:0:0:0: Attached scsi generic sg2 type 0 Apr 09 15:21:34 carlson kernel: sd 5:0:0:0: Attached scsi generic sg3 type 0 Apr 09 15:21:34 carlson kernel: sd 6:0:0:0: Attached scsi generic sg4 type 0 Apr 09 15:21:34 carlson kernel: sd 7:0:0:0: Attached scsi generic sg5 type 0 Apr 09 15:21:34 carlson kernel: sd 8:0:0:0: Attached scsi generic sg6 type 0 Apr 09 15:21:34 carlson kernel: sd 9:0:0:0: Attached scsi generic sg7 type 0 Apr 09 15:21:34 carlson systemd[1]: Starting dracut cmdline hook... Apr 09 15:21:34 carlson systemd[1]: Listening on Journal Socket (/dev/log). Apr 09 15:21:34 carlson systemd[1]: Listening on Journal Audit Socket. Apr 09 15:21:34 carlson systemd[1]: Starting Journal Service... Apr 09 15:21:34 carlson systemd[1]: Listening on udev Kernel Socket. Apr 09 15:21:34 carlson systemd[1]: Reached target Sockets. Apr 09 15:21:34 carlson systemd[1]: Created slice system-systemd\x2dhibernate\x2dresume.slice. Apr 09 15:21:34 carlson systemd[1]: Started Load Kernel Modules. Apr 09 15:21:34 carlson systemd[1]: Started Create list of required static device nodes for the current kernel. Apr 09 15:21:34 carlson systemd[1]: Starting Create Static Device Nodes in /dev... Apr 09 15:21:34 carlson systemd[1]: Starting Apply Kernel Variables... Apr 09 15:21:34 carlson systemd[1]: Started Create Static Device Nodes in /dev. Apr 09 15:21:34 carlson systemd[1]: Started Apply Kernel Variables. Apr 09 15:21:34 carlson systemd[1]: Started dracut cmdline hook. Apr 09 15:21:34 carlson systemd[1]: Starting dracut pre-udev hook... Apr 09 15:21:34 carlson systemd[1]: Started dracut pre-udev hook. Apr 09 15:21:34 carlson systemd[1]: Starting udev Kernel Device Manager... Apr 09 15:21:34 carlson systemd[1]: Started udev Kernel Device Manager. Apr 09 15:21:34 carlson systemd[1]: Starting dracut pre-trigger hook... Apr 09 15:21:34 carlson systemd[1]: Started dracut pre-trigger hook. Apr 09 15:21:34 carlson systemd-journald[201]: Journal started Apr 09 15:21:34 carlson systemd-modules-load[190]: Inserted module 'sg' Apr 09 15:21:34 carlson systemd-sysctl[215]: Couldn't write '0' to 'dev/cdrom/autoclose', ignoring: No such file or directory Apr 09 15:21:34 carlson systemd-sysctl[215]: Couldn't write '0' to 'net/bridge/bridge-nf-call-ip6tables', ignoring: No such file or directory Apr 09 15:21:34 carlson systemd-sysctl[215]: Couldn't write '0' to 'net/bridge/bridge-nf-call-iptables', ignoring: No such file or directory Apr 09 15:21:34 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson dracut-cmdline[198]: dracut-Tumbleweed dracut-044-5.1 Apr 09 15:21:34 carlson dracut-cmdline[198]: Using kernel command line parameters: rd.md.uuid=f6026a82:f2308c63:00ae4c21:e581c1bf resume=UUID=e11e3553-d119-4b2c-997d-ccaf8fe4da47 resume=UUID=f506e393-df0d-429e-8133-1dd4e2de704c root=UUID=1a0dc1c5-26cc-45ff-a7b1-1f827c971ff9 rootfstype=ext4 rootflags=rw,relatime,data=ordered BOOT_IMAGE=/boot/vmlinuz-4.4.3-1-default root=UUID=1a0dc1c5-26cc-45ff-a7b1-1f827c971ff9 resume=/dev/sdb1 splash=silent quiet showopts Apr 09 15:21:34 carlson systemd[1]: Started Journal Service. Apr 09 15:21:34 carlson kernel: audit: type=1130 audit(1460229694.556:2): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson systemd[1]: Started Setup Virtual Console. Apr 09 15:21:34 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson kernel: audit: type=1130 audit(1460229694.564:3): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson systemd[1]: Starting udev Coldplug all Devices... Apr 09 15:21:34 carlson kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input1 Apr 09 15:21:34 carlson kernel: ACPI: Power Button [PWRB] Apr 09 15:21:34 carlson kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Apr 09 15:21:34 carlson kernel: ACPI: Power Button [PWRF] Apr 09 15:21:34 carlson systemd[1]: Started udev Coldplug all Devices. Apr 09 15:21:34 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson kernel: audit: type=1130 audit(1460229694.624:4): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson kernel: wmi: Mapper loaded Apr 09 15:21:34 carlson systemd[1]: Starting dracut initqueue hook... Apr 09 15:21:34 carlson systemd[1]: Starting Show Plymouth Boot Screen... Apr 09 15:21:34 carlson systemd[1]: Started Show Plymouth Boot Screen. Apr 09 15:21:34 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson systemd[1]: Started Forward Password Requests to Plymouth Directory Watch. Apr 09 15:21:34 carlson systemd[1]: Reached target Paths. Apr 09 15:21:34 carlson kernel: audit: type=1130 audit(1460229694.648:5): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson kernel: ACPI: bus type USB registered Apr 09 15:21:34 carlson kernel: usbcore: registered new interface driver usbfs Apr 09 15:21:34 carlson kernel: usbcore: registered new interface driver hub Apr 09 15:21:34 carlson kernel: usbcore: registered new device driver usb Apr 09 15:21:34 carlson kernel: ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Apr 09 15:21:34 carlson kernel: ehci-pci: EHCI PCI platform driver Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1a.0: EHCI Host Controller Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1a.0: new USB bus registered, assigned bus number 1 Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1a.0: debug port 2 Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1a.0: cache line size of 32 is not supported Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1a.0: irq 18, io mem 0xfb238000 Apr 09 15:21:34 carlson kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 48x/48x writer dvd-ram cd/rw xa/form2 cdda tray Apr 09 15:21:34 carlson kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Apr 09 15:21:34 carlson kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1a.0: USB 2.0 started, EHCI 1.00 Apr 09 15:21:34 carlson kernel: usb usb1: New USB device found, idVendor=1d6b, idProduct=0002 Apr 09 15:21:34 carlson kernel: usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 Apr 09 15:21:34 carlson kernel: usb usb1: Product: EHCI Host Controller Apr 09 15:21:34 carlson kernel: usb usb1: Manufacturer: Linux 4.4.3-1-default ehci_hcd Apr 09 15:21:34 carlson kernel: usb usb1: SerialNumber: 0000:00:1a.0 Apr 09 15:21:34 carlson kernel: hub 1-0:1.0: USB hub found Apr 09 15:21:34 carlson kernel: hub 1-0:1.0: 2 ports detected Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1d.0: EHCI Host Controller Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1d.0: new USB bus registered, assigned bus number 2 Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1d.0: debug port 2 Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1d.0: cache line size of 32 is not supported Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1d.0: irq 18, io mem 0xfb237000 Apr 09 15:21:34 carlson kernel: random: nonblocking pool is initialized Apr 09 15:21:34 carlson kernel: ehci-pci 0000:00:1d.0: USB 2.0 started, EHCI 1.00 Apr 09 15:21:34 carlson kernel: usb usb2: New USB device found, idVendor=1d6b, idProduct=0002 Apr 09 15:21:34 carlson kernel: usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 Apr 09 15:21:34 carlson kernel: usb usb2: Product: EHCI Host Controller Apr 09 15:21:34 carlson kernel: usb usb2: Manufacturer: Linux 4.4.3-1-default ehci_hcd Apr 09 15:21:34 carlson kernel: usb usb2: SerialNumber: 0000:00:1d.0 Apr 09 15:21:34 carlson kernel: hub 2-0:1.0: USB hub found Apr 09 15:21:34 carlson kernel: hub 2-0:1.0: 2 ports detected Apr 09 15:21:34 carlson kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Apr 09 15:21:34 carlson kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 3 Apr 09 15:21:34 carlson kernel: xhci_hcd 0000:00:14.0: hcc params 0x200077c1 hci version 0x100 quirks 0x00009810 Apr 09 15:21:34 carlson kernel: xhci_hcd 0000:00:14.0: cache line size of 32 is not supported Apr 09 15:21:34 carlson kernel: usb usb3: New USB device found, idVendor=1d6b, idProduct=0002 Apr 09 15:21:34 carlson kernel: usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1 Apr 09 15:21:34 carlson kernel: usb usb3: Product: xHCI Host Controller Apr 09 15:21:34 carlson kernel: usb usb3: Manufacturer: Linux 4.4.3-1-default xhci-hcd Apr 09 15:21:34 carlson kernel: usb usb3: SerialNumber: 0000:00:14.0 Apr 09 15:21:34 carlson kernel: hub 3-0:1.0: USB hub found Apr 09 15:21:34 carlson kernel: hub 3-0:1.0: 15 ports detected Apr 09 15:21:34 carlson kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Apr 09 15:21:34 carlson kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 4 Apr 09 15:21:34 carlson kernel: usb usb4: New USB device found, idVendor=1d6b, idProduct=0003 Apr 09 15:21:34 carlson kernel: usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1 Apr 09 15:21:34 carlson kernel: usb usb4: Product: xHCI Host Controller Apr 09 15:21:34 carlson kernel: usb usb4: Manufacturer: Linux 4.4.3-1-default xhci-hcd Apr 09 15:21:34 carlson kernel: usb usb4: SerialNumber: 0000:00:14.0 Apr 09 15:21:34 carlson kernel: hub 4-0:1.0: USB hub found Apr 09 15:21:34 carlson kernel: hub 4-0:1.0: 6 ports detected Apr 09 15:21:34 carlson systemd[1]: Found device WDC_WD2001FFSX-6 1. Apr 09 15:21:34 carlson systemd[1]: Starting Resume from hibernation using device /dev/sdb1... Apr 09 15:21:34 carlson systemd-hibernate-resume[450]: Could not resume from '/dev/sdb1' (8:17). Apr 09 15:21:34 carlson systemd[1]: Started Resume from hibernation using device /dev/sdb1. Apr 09 15:21:34 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hibernate-resume@dev-sdb1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hibernate-resume@dev-sdb1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson systemd[1]: Reached target Local File Systems (Pre). Apr 09 15:21:34 carlson systemd[1]: Reached target Local File Systems. Apr 09 15:21:34 carlson systemd[1]: Reached target System Initialization. Apr 09 15:21:34 carlson systemd[1]: Reached target Basic System. Apr 09 15:21:34 carlson kernel: PM: Starting manual resume from disk Apr 09 15:21:34 carlson kernel: PM: Hibernation image partition 8:17 present Apr 09 15:21:34 carlson kernel: PM: Looking for hibernation image. Apr 09 15:21:34 carlson kernel: PM: Image not found (code -22) Apr 09 15:21:34 carlson kernel: PM: Hibernation image not present or could not be loaded. Apr 09 15:21:34 carlson kernel: audit: type=1130 audit(1460229694.852:6): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hibernate-resume@dev-sdb1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson kernel: audit: type=1131 audit(1460229694.852:7): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hibernate-resume@dev-sdb1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:34 carlson kernel: md: bind Apr 09 15:21:34 carlson kernel: md: bind Apr 09 15:21:34 carlson kernel: md: raid1 personality registered for level 1 Apr 09 15:21:34 carlson kernel: md/raid1:md0: active with 2 out of 2 mirrors Apr 09 15:21:34 carlson kernel: created bitmap (15 pages) for device md0 Apr 09 15:21:34 carlson kernel: md0: bitmap initialized from disk: read 1 pages, set 0 of 28785 bits Apr 09 15:21:34 carlson kernel: md0: detected capacity change from 0 to 1931676024832 Apr 09 15:21:34 carlson kernel: usb 1-1: new high-speed USB device number 2 using ehci-pci Apr 09 15:21:34 carlson systemd[1]: Found device /dev/disk/by-uuid/1a0dc1c5-26cc-45ff-a7b1-1f827c971ff9. Apr 09 15:21:35 carlson kernel: usb 3-6: new high-speed USB device number 2 using xhci_hcd Apr 09 15:21:35 carlson kernel: usb 2-1: new high-speed USB device number 2 using ehci-pci Apr 09 15:21:35 carlson systemd[1]: Started dracut initqueue hook. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson kernel: audit: type=1130 audit(1460229695.012:8): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Starting dracut pre-mount hook... Apr 09 15:21:35 carlson systemd[1]: Reached target Remote File Systems (Pre). Apr 09 15:21:35 carlson systemd[1]: Reached target Remote File Systems. Apr 09 15:21:35 carlson systemd[1]: Started dracut pre-mount hook. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson kernel: audit: type=1130 audit(1460229695.032:9): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Starting File System Check on /dev/disk/by-uuid/1a0dc1c5-26cc-45ff-a7b1-1f827c971ff9... Apr 09 15:21:35 carlson systemd-fsck[500]: /dev/md0: clean, 2136322/117907456 files, 313644975/471600592 blocks Apr 09 15:21:35 carlson kernel: usb 1-1: New USB device found, idVendor=8087, idProduct=800a Apr 09 15:21:35 carlson kernel: usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Apr 09 15:21:35 carlson kernel: hub 1-1:1.0: USB hub found Apr 09 15:21:35 carlson kernel: hub 1-1:1.0: 6 ports detected Apr 09 15:21:35 carlson kernel: usb 3-6: New USB device found, idVendor=058f, idProduct=6254 Apr 09 15:21:35 carlson kernel: usb 3-6: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Apr 09 15:21:35 carlson kernel: hub 3-6:1.0: USB hub found Apr 09 15:21:35 carlson kernel: hub 3-6:1.0: 4 ports detected Apr 09 15:21:35 carlson kernel: usb 2-1: New USB device found, idVendor=8087, idProduct=8002 Apr 09 15:21:35 carlson kernel: usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Apr 09 15:21:35 carlson kernel: hub 2-1:1.0: USB hub found Apr 09 15:21:35 carlson kernel: hub 2-1:1.0: 8 ports detected Apr 09 15:21:35 carlson systemd[1]: Started File System Check on /dev/disk/by-uuid/1a0dc1c5-26cc-45ff-a7b1-1f827c971ff9. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson kernel: audit: type=1130 audit(1460229695.220:10): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Mounting /sysroot... Apr 09 15:21:35 carlson kernel: EXT4-fs (md0): mounted filesystem with ordered data mode. Opts: (null) Apr 09 15:21:35 carlson systemd[1]: Mounted /sysroot. Apr 09 15:21:35 carlson systemd[1]: Reached target Initrd Root File System. Apr 09 15:21:35 carlson systemd[1]: Starting Reload Configuration from the Real Root... Apr 09 15:21:35 carlson systemd[1]: Reloading. Apr 09 15:21:35 carlson kernel: usb 3-11: new full-speed USB device number 3 using xhci_hcd Apr 09 15:21:35 carlson systemd[1]: Started Reload Configuration from the Real Root. Apr 09 15:21:35 carlson systemd[1]: Reached target Initrd File Systems. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Reached target Initrd Default Target. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Starting dracut pre-pivot and cleanup hook... Apr 09 15:21:35 carlson systemd[1]: Started dracut pre-pivot and cleanup hook. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Starting Cleaning Up and Shutting Down Daemons... Apr 09 15:21:35 carlson systemd[1]: mdmonitor.service: Cannot add dependency job, ignoring: Unit mdmonitor.service failed to load: No such file or directory. Apr 09 15:21:35 carlson systemd[1]: Starting Plymouth switch root service... Apr 09 15:21:35 carlson systemd[1]: Stopped target Timers. Apr 09 15:21:35 carlson systemd[1]: Stopped Cleaning Up and Shutting Down Daemons. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped dracut pre-pivot and cleanup hook. Apr 09 15:21:35 carlson systemd[1]: Stopped target Remote File Systems. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Remote File Systems (Pre). Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped dracut pre-mount hook. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped dracut initqueue hook. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Initrd Default Target. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Basic System. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Slices. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Sockets. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Paths. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target System Initialization. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Local File Systems. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped target Local File Systems (Pre). Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped udev Coldplug all Devices. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped dracut pre-trigger hook. Apr 09 15:21:35 carlson systemd[1]: Stopped Apply Kernel Variables. Apr 09 15:21:35 carlson systemd[1]: Stopped Load Kernel Modules. Apr 09 15:21:35 carlson systemd[1]: Stopping udev Kernel Device Manager... Apr 09 15:21:35 carlson systemd[1]: Stopped target Swap. Apr 09 15:21:35 carlson kernel: usb 3-11: New USB device found, idVendor=046d, idProduct=c52f Apr 09 15:21:35 carlson kernel: usb 3-11: New USB device strings: Mfr=1, Product=2, SerialNumber=0 Apr 09 15:21:35 carlson kernel: usb 3-11: Product: USB Receiver Apr 09 15:21:35 carlson kernel: usb 3-11: Manufacturer: Logitech Apr 09 15:21:35 carlson systemd[1]: Stopped udev Kernel Device Manager. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped dracut pre-udev hook. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped dracut cmdline hook. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped Create Static Device Nodes in /dev. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Stopped Create list of required static device nodes for the current kernel. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Closed udev Control Socket. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Closed udev Kernel Socket. Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Starting Cleanup udevd DB... Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Started Cleanup udevd DB. Apr 09 15:21:35 carlson systemd[1]: Reached target Switch Root. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson kernel: usb 3-6.1: new high-speed USB device number 4 using xhci_hcd Apr 09 15:21:35 carlson systemd[1]: Started Plymouth switch root service. Apr 09 15:21:35 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:35 carlson systemd[1]: Starting Switch Root... Apr 09 15:21:35 carlson kernel: usb 3-6.1: New USB device found, idVendor=058f, idProduct=6377 Apr 09 15:21:35 carlson kernel: usb 3-6.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Apr 09 15:21:35 carlson kernel: usb 3-6.1: Product: Flash Card Reader/Writer Apr 09 15:21:35 carlson kernel: usb 3-6.1: Manufacturer: Generic Apr 09 15:21:35 carlson kernel: usb 3-6.1: SerialNumber: 058F63776479 Apr 09 15:21:35 carlson systemd[1]: Switching root. Apr 09 15:21:35 carlson systemd-journald[201]: Journal stopped Apr 09 15:21:37 carlson systemd-journald[596]: Runtime journal (/run/log/journal/) is currently using 8.0M. Maximum allowed usage is set to 3.1G. Leaving at least 4.0G free (of currently available 31.4G of space). Enforced usage limit is thus 3.1G, of which 3.1G are still available. Apr 09 15:21:38 carlson systemd-journald[201]: Received SIGTERM from PID 1 (systemd). Apr 09 15:21:38 carlson systemd-journald[596]: Journal started Apr 09 15:21:36 carlson systemd[1]: systemd 228 running in system mode. (+PAM +AUDIT +SELINUX -IMA +APPARMOR -SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID -ELFUTILS +KMOD +IDN) Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=haveged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:36 carlson systemd[1]: Detected architecture x86-64. Apr 09 15:21:37 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=haveged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:36 carlson systemd[1]: Set hostname to . Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson systemd[1]: nss-lookup.target: Dependency Before=nss-lookup.target dropped Apr 09 15:21:37 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson systemd[1]: ypbind.service: Cannot add dependency job, ignoring: Unit ypbind.service is masked. Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson systemd[1]: ldap.service: Cannot add dependency job, ignoring: Unit ldap.service failed to load: No such file or directory. Apr 09 15:21:37 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson systemd[1]: mail-transfer-agent.target: Cannot add dependency job, ignoring: Unit mail-transfer-agent.target failed to load: Invalid argument. Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson audit: CONFIG_CHANGE audit_enabled=1 old=1 auid=4294967295 ses=4294967295 res=1 Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-root-symlink comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=haveged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:37 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=haveged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson systemd[1]: Started Remount Root and Kernel File Systems. Apr 09 15:21:38 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson kernel: EXT4-fs (md0): re-mounted. Opts: acl,user_xattr Apr 09 15:21:38 carlson kernel: audit_printk_skb: 141 callbacks suppressed Apr 09 15:21:38 carlson kernel: audit: type=1130 audit(1460229698.132:58): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson systemd[1]: Starting Load/Save Random Seed... Apr 09 15:21:38 carlson systemd[1]: Starting Create Static Device Nodes in /dev... Apr 09 15:21:38 carlson systemd[1]: Starting udev Coldplug all Devices... Apr 09 15:21:38 carlson systemd[1]: Starting Flush Journal to Persistent Storage... Apr 09 15:21:38 carlson systemd[1]: Started Load/Save Random Seed. Apr 09 15:21:38 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson kernel: audit: type=1130 audit(1460229698.224:59): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson systemd[1]: Started Entropy Daemon based on the HAVEGE algorithm. Apr 09 15:21:38 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=haveged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson kernel: audit: type=1130 audit(1460229698.240:60): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=haveged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:39 carlson systemd-journald[596]: System journal (/var/log/journal/) is currently using 2.3G. Maximum allowed usage is set to 4.0G. Leaving at least 4.0G free (of currently available 600.7G of space). Enforced usage limit is thus 4.0G, of which 1.6G are still available. Apr 09 15:21:42 carlson systemd-journald[596]: Time spent on flushing to /var is 3.438989s for 1075 entries. Apr 09 15:21:45 carlson kernel: audit: type=1130 audit(1460229698.376:61): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson kernel: audit: type=1130 audit(1460229698.864:62): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson kernel: audit: type=1400 audit(1460229699.224:63): apparmor="STATUS" operation="profile_load" name="/{usr/,}bin/ping" pid=685 comm="apparmor_parser" Apr 09 15:21:45 carlson kernel: audit: type=1300 audit(1460229699.224:63): arch=c000003e syscall=1 success=yes exit=25329 a0=6 a1=20d3400 a2=62f1 a3=59 items=0 ppid=618 pid=685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:45 carlson kernel: audit: type=1327 audit(1460229699.224:63): proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F62696E2E70696E67 Apr 09 15:21:45 carlson kernel: audit: type=1400 audit(1460229699.304:64): apparmor="STATUS" operation="profile_load" name="klogd" pid=702 comm="apparmor_parser" Apr 09 15:21:45 carlson kernel: audit: type=1300 audit(1460229699.304:64): arch=c000003e syscall=1 success=yes exit=15009 a0=6 a1=273bfc0 a2=3aa1 a3=59 items=0 ppid=618 pid=702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:45 carlson kernel: ip6_tables: (C) 2000-2006 Netfilter Core Team Apr 09 15:21:45 carlson kernel: nf_conntrack version 0.5.0 (65536 buckets, 262144 max) Apr 09 15:21:45 carlson kernel: ip_tables: (C) 2000-2006 Netfilter Core Team Apr 09 15:21:45 carlson kernel: shpchp: Standard Hot Plug PCI Controller Driver version: 0.4 Apr 09 15:21:45 carlson kernel: EDAC MC: Ver: 3.0.0 Apr 09 15:21:45 carlson kernel: pps_core: LinuxPPS API ver. 1 registered Apr 09 15:21:45 carlson kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Apr 09 15:21:45 carlson kernel: PTP clock support registered Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fa0 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fa0 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2ffc Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2ffc Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2ffd Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2ffd Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f60 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fa8 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fa8 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f71 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f71 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2faa Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2faa Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fab Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fab Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fac Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fac Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fad Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fad Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fbd Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fbf Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fbf Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fb9 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fb9 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fbb Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2fbb Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f68 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f68 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f79 Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f6a Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f6b Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f6c Apr 09 15:21:45 carlson kernel: EDAC sbridge: Seeking for: PCI ID 8086:2f6d Apr 09 15:21:45 carlson kernel: EDAC MC0: Giving out device to module sbridge_edac.c controller Haswell Socket#0: DEV 0000:ff:12.0 (POLLED) Apr 09 15:21:45 carlson kernel: EDAC sbridge: Ver: 1.1.1 Apr 09 15:21:45 carlson kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Apr 09 15:21:45 carlson kernel: iTCO_vendor_support: vendor-support=0 Apr 09 15:21:45 carlson kernel: iTCO_wdt: Intel TCO WatchDog Timer Driver v1.11 Apr 09 15:21:45 carlson kernel: iTCO_wdt: unable to reset NO_REBOOT flag, device disabled by hardware/BIOS Apr 09 15:21:45 carlson kernel: input: PC Speaker as /devices/platform/pcspkr/input/input3 Apr 09 15:21:45 carlson kernel: e1000e: Intel(R) PRO/1000 Network Driver - 3.2.6-k Apr 09 15:21:45 carlson kernel: e1000e: Copyright(c) 1999 - 2015 Intel Corporation. Apr 09 15:21:45 carlson kernel: e1000e 0000:00:19.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode Apr 09 15:21:45 carlson kernel: device-mapper: uevent: version 1.0.3 Apr 09 15:21:45 carlson kernel: device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com Apr 09 15:21:45 carlson kernel: dca service started, version 1.12.1 Apr 09 15:21:45 carlson kernel: [drm] Initialized drm 1.1.0 20060810 Apr 09 15:21:45 carlson kernel: FUJITSU Extended Socket Network Device Driver - version 1.0 - Copyright (c) 2015 FUJITSU LIMITED Apr 09 15:21:45 carlson kernel: e1000e 0000:00:19.0 eth0: registered PHC clock Apr 09 15:21:45 carlson kernel: e1000e 0000:00:19.0 eth0: (PCI Express:2.5GT/s:Width x1) d0:50:99:46:76:84 Apr 09 15:21:45 carlson kernel: e1000e 0000:00:19.0 eth0: Intel(R) PRO/1000 Network Connection Apr 09 15:21:45 carlson kernel: e1000e 0000:00:19.0 eth0: MAC: 11, PHY: 12, PBA No: FFFFFF-0FF Apr 09 15:21:45 carlson kernel: e1000e 0000:00:19.0 enp0s25: renamed from eth0 Apr 09 15:21:45 carlson kernel: igb: Intel(R) Gigabit Ethernet Network Driver - version 5.3.0-k Apr 09 15:21:45 carlson kernel: igb: Copyright (c) 2007-2014 Intel Corporation. Apr 09 15:21:45 carlson kernel: pps pps0: new PPS source ptp1 Apr 09 15:21:45 carlson kernel: igb 0000:05:00.0: added PHC on eth0 Apr 09 15:21:45 carlson kernel: igb 0000:05:00.0: Intel(R) Gigabit Ethernet Network Connection Apr 09 15:21:45 carlson kernel: igb 0000:05:00.0: eth0: (PCIe:2.5Gb/s:Width x1) d0:50:99:46:76:83 Apr 09 15:21:45 carlson kernel: igb 0000:05:00.0: eth0: PBA No: 001300-000 Apr 09 15:21:45 carlson kernel: igb 0000:05:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s) Apr 09 15:21:45 carlson kernel: igb 0000:05:00.0 enp5s0: renamed from eth0 Apr 09 15:21:45 carlson kernel: usb-storage 3-6.1:1.0: USB Mass Storage device detected Apr 09 15:21:45 carlson kernel: scsi host10: usb-storage 3-6.1:1.0 Apr 09 15:21:45 carlson kernel: usbcore: registered new interface driver usb-storage Apr 09 15:21:45 carlson kernel: usbcore: registered new interface driver uas Apr 09 15:21:45 carlson kernel: nvidia: module license 'NVIDIA' taints kernel. Apr 09 15:21:45 carlson kernel: Disabling lock debugging due to kernel taint Apr 09 15:21:45 carlson kernel: Adding 67110908k swap on /dev/sdb1. Priority:-1 extents:1 across:67110908k FS Apr 09 15:21:45 carlson kernel: vgaarb: device changed decodes: PCI:0000:03:00.0,olddecodes=io+mem,decodes=none:owns=io+mem Apr 09 15:21:45 carlson kernel: [drm] Initialized nvidia-drm 0.0.0 20150116 for 0000:03:00.0 on minor 0 Apr 09 15:21:45 carlson kernel: NVRM: loading NVIDIA UNIX x86_64 Kernel Module 352.63 Sat Nov 7 21:25:42 PST 2015 Apr 09 15:21:45 carlson kernel: snd_hda_intel 0000:03:00.1: Disabling MSI Apr 09 15:21:45 carlson kernel: snd_hda_intel 0000:03:00.1: Handle vga_switcheroo audio client Apr 09 15:21:45 carlson kernel: usbcore: registered new interface driver usbhid Apr 09 15:21:45 carlson kernel: usbhid: USB HID core driver Apr 09 15:21:45 carlson kernel: input: Logitech USB Receiver as /devices/pci0000:00/0000:00:14.0/usb3/3-11/3-11:1.0/0003:046D:C52F.0001/input/input4 Apr 09 15:21:45 carlson kernel: hid-generic 0003:046D:C52F.0001: input,hidraw0: USB HID v1.11 Mouse [Logitech USB Receiver] on usb-0000:00:14.0-11/input0 Apr 09 15:21:45 carlson kernel: input: Logitech USB Receiver as /devices/pci0000:00/0000:00:14.0/usb3/3-11/3-11:1.1/0003:046D:C52F.0002/input/input5 Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: ALC1150: SKU not ready 0x00000000 Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: autoconfig for ALC1150: line_outs=3 (0x14/0x15/0x16/0x0/0x0) type:line Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: speaker_outs=0 (0x0/0x0/0x0/0x0/0x0) Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: hp_outs=1 (0x1b/0x0/0x0/0x0/0x0) Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: mono: mono_out=0x0 Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: dig-out=0x1e/0x0 Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: inputs: Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: Front Mic=0x19 Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: Rear Mic=0x18 Apr 09 15:21:45 carlson kernel: snd_hda_codec_realtek hdaudioC0D0: Line=0x1a Apr 09 15:21:45 carlson kernel: input: HDA Digital PCBeep as /devices/pci0000:00/0000:00:1b.0/sound/card0/input6 Apr 09 15:21:45 carlson kernel: hid-generic 0003:046D:C52F.0002: input,hiddev0,hidraw1: USB HID v1.11 Device [Logitech USB Receiver] on usb-0000:00:14.0-11/input1 Apr 09 15:21:45 carlson kernel: input: HDA Intel PCH Front Mic as /devices/pci0000:00/0000:00:1b.0/sound/card0/input7 Apr 09 15:21:45 carlson kernel: input: HDA Intel PCH Rear Mic as /devices/pci0000:00/0000:00:1b.0/sound/card0/input8 Apr 09 15:21:45 carlson kernel: input: HDA Intel PCH Line as /devices/pci0000:00/0000:00:1b.0/sound/card0/input9 Apr 09 15:21:45 carlson kernel: input: HDA Intel PCH Line Out Front as /devices/pci0000:00/0000:00:1b.0/sound/card0/input10 Apr 09 15:21:45 carlson kernel: input: HDA Intel PCH Line Out Surround as /devices/pci0000:00/0000:00:1b.0/sound/card0/input11 Apr 09 15:21:45 carlson kernel: input: HDA Intel PCH Line Out CLFE as /devices/pci0000:00/0000:00:1b.0/sound/card0/input12 Apr 09 15:21:45 carlson kernel: input: HDA Intel PCH Front Headphone as /devices/pci0000:00/0000:00:1b.0/sound/card0/input13 Apr 09 15:21:45 carlson kernel: AVX2 version of gcm_enc/dec engaged. Apr 09 15:21:45 carlson kernel: AES CTR mode by8 optimization enabled Apr 09 15:21:45 carlson kernel: input: HDA NVidia HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:03.0/0000:03:00.1/sound/card1/input14 Apr 09 15:21:45 carlson kernel: input: HDA NVidia HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:03.0/0000:03:00.1/sound/card1/input15 Apr 09 15:21:45 carlson kernel: input: HDA NVidia HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:03.0/0000:03:00.1/sound/card1/input16 Apr 09 15:21:45 carlson kernel: input: HDA NVidia HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:03.0/0000:03:00.1/sound/card1/input17 Apr 09 15:21:45 carlson kernel: scsi 10:0:0:0: Direct-Access Generic- Compact Flash 1.01 PQ: 0 ANSI: 4 Apr 09 15:21:45 carlson kernel: sd 10:0:0:0: Attached scsi generic sg8 type 0 Apr 09 15:21:45 carlson kernel: scsi 10:0:0:1: Direct-Access Generic- SD/MMC 1.00 PQ: 0 ANSI: 4 Apr 09 15:21:45 carlson kernel: sd 10:0:0:1: Attached scsi generic sg9 type 0 Apr 09 15:21:45 carlson kernel: scsi 10:0:0:2: Direct-Access Generic- MS/MS-PRO 1.03 PQ: 0 ANSI: 4 CCS Apr 09 15:21:45 carlson kernel: sd 10:0:0:2: Attached scsi generic sg10 type 0 Apr 09 15:21:45 carlson kernel: sd 10:0:0:0: [sdh] Attached SCSI removable disk Apr 09 15:21:45 carlson kernel: scsi 10:0:0:3: Direct-Access Generic- xD-Picture 1.02 PQ: 0 ANSI: 4 Apr 09 15:21:45 carlson kernel: sd 10:0:0:2: [sdj] Attached SCSI removable disk Apr 09 15:21:45 carlson kernel: sd 10:0:0:3: Attached scsi generic sg11 type 0 Apr 09 15:21:45 carlson kernel: scsi 10:0:0:4: Direct-Access Generic- MicroSD/M2 1.08 PQ: 0 ANSI: 4 CCS Apr 09 15:21:45 carlson kernel: sd 10:0:0:4: Attached scsi generic sg12 type 0 Apr 09 15:21:45 carlson kernel: sd 10:0:0:1: [sdi] Attached SCSI removable disk Apr 09 15:21:45 carlson kernel: sd 10:0:0:3: [sdk] Attached SCSI removable disk Apr 09 15:21:45 carlson kernel: sd 10:0:0:4: [sdl] Attached SCSI removable disk Apr 09 15:21:45 carlson kernel: audit_printk_skb: 249 callbacks suppressed Apr 09 15:21:45 carlson kernel: audit: type=1400 audit(1460229703.228:91): apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/lmtp" pid=1555 comm="apparmor_parser" Apr 09 15:21:45 carlson kernel: audit: type=1300 audit(1460229703.228:91): arch=c000003e syscall=1 success=yes exit=25137 a0=6 a1=d7f3e0 a2=6231 a3=59 items=0 ppid=618 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:45 carlson kernel: audit: type=1327 audit(1460229703.228:91): proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E6C6D7470 Apr 09 15:21:45 carlson kernel: audit: type=1400 audit(1460229703.232:92): apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/log" pid=1562 comm="apparmor_parser" Apr 09 15:21:45 carlson kernel: audit: type=1300 audit(1460229703.232:92): arch=c000003e syscall=1 success=yes exit=13041 a0=6 a1=2096ae0 a2=32f1 a3=59 items=0 ppid=618 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:45 carlson kernel: audit: type=1327 audit(1460229703.232:92): proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E6C6F67 Apr 09 15:21:45 carlson kernel: audit: type=1400 audit(1460229703.236:93): apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/managesieve" pid=1566 comm="apparmor_parser" Apr 09 15:21:45 carlson kernel: audit: type=1300 audit(1460229703.236:93): arch=c000003e syscall=1 success=yes exit=14537 a0=6 a1=14ba7c0 a2=38c9 a3=59 items=0 ppid=618 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:45 carlson kernel: audit: type=1327 audit(1460229703.236:93): proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E6D616E6167657369657665 Apr 09 15:21:45 carlson kernel: Adding 67110908k swap on /dev/sdc1. Priority:-2 extents:1 across:67110908k FS Apr 09 15:21:45 carlson kernel: audit: type=1400 audit(1460229703.284:94): apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/managesieve-login" pid=1579 comm="apparmor_parser" Apr 09 15:21:38 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson systemd[1]: Started udev Coldplug all Devices. Apr 09 15:21:41 carlson mtp-probe[1394]: checking bus 3, device 4: "/sys/devices/pci0000:00/0000:00:14.0/usb3/3-6/3-6.1" Apr 09 15:21:38 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:38 carlson systemd[1]: Starting udev Wait for Complete Device Initialization... Apr 09 15:21:41 carlson mtp-probe[1393]: checking bus 3, device 3: "/sys/devices/pci0000:00/0000:00:14.0/usb3/3-11" Apr 09 15:21:39 carlson audit[685]: AVC apparmor="STATUS" operation="profile_load" name="/{usr/,}bin/ping" pid=685 comm="apparmor_parser" Apr 09 15:21:38 carlson systemd[1]: Started Create Static Device Nodes in /dev. Apr 09 15:21:41 carlson mtp-probe[1394]: bus: 3, device: 4 was not an MTP device Apr 09 15:21:39 carlson audit[685]: SYSCALL arch=c000003e syscall=1 success=yes exit=25329 a0=6 a1=20d3400 a2=62f1 a3=59 items=0 ppid=618 pid=685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:38 carlson systemd[1]: Starting udev Kernel Device Manager... Apr 09 15:21:41 carlson mtp-probe[1393]: bus: 3, device: 3 was not an MTP device Apr 09 15:21:39 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F62696E2E70696E67 Apr 09 15:21:40 carlson systemd[1]: Started udev Kernel Device Manager. Apr 09 15:21:41 carlson SuSEfirewall2[1407]: Firewall rules set to CLOSE. Apr 09 15:21:40 carlson systemd[1]: Received SIGRTMIN+20 from PID 373 (plymouthd). Apr 09 15:21:39 carlson audit[702]: AVC apparmor="STATUS" operation="profile_load" name="klogd" pid=702 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit[702]: SYSCALL arch=c000003e syscall=1 success=yes exit=15009 a0=6 a1=273bfc0 a2=3aa1 a3=59 items=0 ppid=618 pid=702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:45 carlson auditd[1690]: Started dispatcher: /sbin/audispd pid: 1695 Apr 09 15:21:39 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7362696E2E6B6C6F6764 Apr 09 15:21:40 carlson systemd-udevd[1104]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[780]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=filter family=10 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=filter family=10 entries=0 Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit[706]: SYSCALL arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a258 a2=0 a3=0 items=0 ppid=106 pid=706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1036]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572 Apr 09 15:21:40 carlson systemd-udevd[780]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1187]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit[711]: AVC apparmor="STATUS" operation="profile_load" name="syslog-ng" pid=711 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1137]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit[711]: SYSCALL arch=c000003e syscall=1 success=yes exit=31273 a0=6 a1=26a2540 a2=7a29 a3=59 items=0 ppid=618 pid=711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1036]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7362696E2E7379736C6F672D6E67 Apr 09 15:21:40 carlson systemd-udevd[1187]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1137]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=mangle family=10 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1196]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=mangle family=10 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit[719]: SYSCALL arch=c000003e syscall=313 success=yes exit=0 a0=3 a1=41a258 a2=0 a3=3 items=0 ppid=598 pid=719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1054]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: PROCTITLE proctitle=6D6F6470726F6265006970367461626C655F6D616E676C65 Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[780]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=filter family=2 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1196]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=filter family=2 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit[726]: SYSCALL arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a258 a2=0 a3=0 items=0 ppid=106 pid=726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null) Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 Apr 09 15:21:40 carlson systemd-udevd[1054]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1036]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=raw family=2 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1187]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: NETFILTER_CFG table=raw family=2 entries=0 Apr 09 15:21:40 carlson systemd-udevd[780]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit[728]: SYSCALL arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a258 a2=0 a3=0 items=0 ppid=106 pid=728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1137]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:39 carlson audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F726177 Apr 09 15:21:40 carlson systemd-udevd[1036]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[998]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: NETFILTER_CFG table=filter family=2 entries=4 Apr 09 15:21:40 carlson systemd-udevd[1066]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[725]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=86eb70 items=0 ppid=598 pid=725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-batch" exe="/usr/sbin/iptables-batch" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1187]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C65732D6261746368002F746D702F537553456669726577616C6C325F69707461626C65732E4A6F4E6A33345861 Apr 09 15:21:45 carlson auditd[1690]: Init complete, auditd 2.4.4 listening for events (startup state enable) Apr 09 15:21:40 carlson systemd-udevd[1137]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[998]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: NETFILTER_CFG table=raw family=2 entries=3 Apr 09 15:21:40 carlson systemd-udevd[1066]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[725]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=7 a1=0 a2=40 a3=86a310 items=0 ppid=598 pid=725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-batch" exe="/usr/sbin/iptables-batch" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C65732D6261746368002F746D702F537553456669726577616C6C325F69707461626C65732E4A6F4E6A33345861 Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[780]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[720]: AVC apparmor="STATUS" operation="profile_load" name="syslogd" pid=720 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1137]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[720]: SYSCALL arch=c000003e syscall=1 success=yes exit=27537 a0=6 a1=15f6110 a2=6b91 a3=59 items=0 ppid=618 pid=720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7362696E2E7379736C6F6764 Apr 09 15:21:40 carlson systemd-udevd[1036]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[780]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: NETFILTER_CFG table=raw family=10 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1187]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: NETFILTER_CFG table=raw family=10 entries=0 Apr 09 15:21:40 carlson systemd-udevd[1196]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[807]: SYSCALL arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a258 a2=0 a3=0 items=0 ppid=122 pid=807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1137]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F726177 Apr 09 15:21:40 carlson systemd-udevd[1054]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[998]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[735]: AVC apparmor="STATUS" operation="profile_load" name="/usr/bin/lessopen.sh" pid=735 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1036]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[735]: SYSCALL arch=c000003e syscall=1 success=yes exit=12257 a0=6 a1=22098c0 a2=2fe1 a3=59 items=0 ppid=618 pid=735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1066]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E62696E2E6C6573736F70656E2E7368 Apr 09 15:21:40 carlson systemd-udevd[1196]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1187]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: NETFILTER_CFG table=filter family=10 entries=4 Apr 09 15:21:40 carlson systemd-udevd[1054]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[733]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=29 a2=40 a3=1d3eeb0 items=0 ppid=598 pid=733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-batch" exe="/usr/sbin/ip6tables-batch" key=(null) Apr 09 15:21:40 carlson systemd-udevd[998]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6970367461626C65732D6261746368002F746D702F537553456669726577616C6C325F6970367461626C65732E70683462667A4F41 Apr 09 15:21:40 carlson systemd-udevd[1066]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: NETFILTER_CFG table=mangle family=10 entries=6 Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[733]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=7 a1=29 a2=40 a3=1d3e490 items=0 ppid=598 pid=733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-batch" exe="/usr/sbin/ip6tables-batch" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl reset-failed kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6970367461626C65732D6261746368002F746D702F537553456669726577616C6C325F6970367461626C65732E70683462667A4F41 Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/usr/bin/systemctl try-restart kdump' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/bin/sh -c 'ethtool -i $1 | sed -n s/^driver:\ //p' -- lo' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: NETFILTER_CFG table=raw family=10 entries=3 Apr 09 15:21:40 carlson systemd-udevd[949]: fork of '/usr/lib/systemd/systemd-vconsole-setup' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit[733]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=8 a1=29 a2=40 a3=1d39310 items=0 ppid=598 pid=733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-batch" exe="/usr/sbin/ip6tables-batch" key=(null) Apr 09 15:21:40 carlson systemd-udevd[780]: fork of '/usr/lib/systemd/systemd-vconsole-setup' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6970367461626C65732D6261746368002F746D702F537553456669726577616C6C325F6970367461626C65732E70683462667A4F41 Apr 09 15:21:40 carlson systemd-udevd[1127]: fork of '/sbin/mdadm --detail --export /dev/md0' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1235]: fork of 'libinput-device-group /sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input1/event1' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=SuSEfirewall2_init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:40 carlson systemd-udevd[1096]: fork of 'libinput-device-group /sys/devices/platform/i8042/serio0/input/input0/event0' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1245]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/apache2/mpm-prefork/apache2" pid=1245 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1189]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdb/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1245]: AVC apparmor="STATUS" operation="profile_load" name="DEFAULT_URI" pid=1245 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1189]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sdb' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1245]: AVC apparmor="STATUS" operation="profile_load" name="HANDLING_UNTRUSTED_INPUT" pid=1245 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1101]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdd/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1245]: AVC apparmor="STATUS" operation="profile_load" name="phpsysinfo" pid=1245 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdg/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1245]: SYSCALL arch=c000003e syscall=1 success=yes exit=52244 a0=6 a1=e27de0 a2=cc14 a3=59 items=0 ppid=618 pid=1245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sda/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E617061636865322E6D706D2D707265666F726B2E61706163686532 Apr 09 15:21:40 carlson systemd-udevd[1103]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdf/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1189]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdb/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1427]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/colord" pid=1427 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1143]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sde/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit[1427]: SYSCALL arch=c000003e syscall=1 success=yes exit=31977 a0=6 a1=1714170 a2=7ce9 a3=59 items=0 ppid=618 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1101]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sdd' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E636F6C6F7264 Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sdg' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1189]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdb' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1431]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/anvil" pid=1431 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1101]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdd/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1431]: SYSCALL arch=c000003e syscall=1 success=yes exit=13121 a0=6 a1=1bf2ae0 a2=3341 a3=59 items=0 ppid=618 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1103]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sdf' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E616E76696C Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sda' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdg/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1435]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/auth" pid=1435 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1143]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sde' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1435]: SYSCALL arch=c000003e syscall=1 success=yes exit=33761 a0=6 a1=f66ac0 a2=83e1 a3=59 items=0 ppid=618 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1189]: fork of '/sbin/multipath -i -u sdb' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E61757468 Apr 09 15:21:40 carlson systemd-udevd[1101]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdd' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdg' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1444]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/config" pid=1444 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sda/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1444]: SYSCALL arch=c000003e syscall=1 success=yes exit=23913 a0=6 a1=956ed0 a2=5d69 a3=59 items=0 ppid=618 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1103]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdf/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E636F6E666967 Apr 09 15:21:40 carlson systemd-udevd[1143]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sde/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1101]: fork of '/sbin/multipath -i -u sdd' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1452]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/deliver" pid=1452 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1189]: fork of 'ata_id --export /dev/sdb' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1452]: SYSCALL arch=c000003e syscall=1 success=yes exit=25777 a0=6 a1=23ea3e0 a2=64b1 a3=59 items=0 ppid=618 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/sbin/multipath -i -u sdg' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E64656C69766572 Apr 09 15:21:40 carlson systemd-udevd[1103]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdf' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/usr/bin/sg_inq --export --page=di /dev/sda' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1457]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/dict" pid=1457 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1101]: fork of 'ata_id --export /dev/sdd' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1457]: SYSCALL arch=c000003e syscall=1 success=yes exit=26297 a0=6 a1=210c4a0 a2=66b9 a3=59 items=0 ppid=618 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1189]: fork of 'scsi_id --export --whitelisted -d /dev/sdb' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E64696374 Apr 09 15:21:40 carlson systemd-udevd[1143]: fork of '/usr/bin/sg_inq --export --page=di /dev/sde' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of 'ata_id --export /dev/sdg' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1461]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/dovecot-auth" pid=1461 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1101]: fork of 'scsi_id --export --whitelisted -d /dev/sdd' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1461]: SYSCALL arch=c000003e syscall=1 success=yes exit=31393 a0=6 a1=1375da0 a2=7aa1 a3=59 items=0 ppid=618 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of 'scsi_id --export --whitelisted -d /dev/sdg' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E646F7665636F742D61757468 Apr 09 15:21:40 carlson systemd-udevd[1103]: fork of '/sbin/multipath -i -u sdf' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/sbin/multipath -i -u sda' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1489]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/dovecot-lda" pid=1489 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1143]: fork of '/sbin/multipath -i -u sde' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1489]: SYSCALL arch=c000003e syscall=1 success=yes exit=25913 a0=6 a1=27343e0 a2=6539 a3=59 items=0 ppid=618 pid=1489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1103]: fork of 'ata_id --export /dev/sdf' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E646F7665636F742D6C6461 Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of 'ata_id --export /dev/sda' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1143]: fork of 'ata_id --export /dev/sde' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1498]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/imap" pid=1498 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1103]: fork of 'scsi_id --export --whitelisted -d /dev/sdf' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit[1498]: SYSCALL arch=c000003e syscall=1 success=yes exit=25225 a0=6 a1=f3d3e0 a2=6289 a3=59 items=0 ppid=618 pid=1498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of 'scsi_id --export --whitelisted -d /dev/sda' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E696D6170 Apr 09 15:21:40 carlson systemd-udevd[1143]: fork of 'scsi_id --export --whitelisted -d /dev/sde' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[886]: fork of '/sbin/multipath -i -u sdd1' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1551]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/imap-login" pid=1551 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/sbin/multipath -i -u sdg1' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1551]: SYSCALL arch=c000003e syscall=1 success=yes exit=15465 a0=6 a1=2263fe0 a2=3c69 a3=59 items=0 ppid=618 pid=1551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[919]: fork of '/sbin/multipath -i -u sda2' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E696D61702D6C6F67696E Apr 09 15:21:40 carlson systemd-udevd[1096]: fork of '/sbin/multipath -i -u sda1' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[856]: fork of '/sbin/multipath -i -u sdf1' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1555]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/lmtp" pid=1555 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/sbin/mdadm --incremental --export /dev/sdg1 --offroot ${DEVLINKS}' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1555]: SYSCALL arch=c000003e syscall=1 success=yes exit=25137 a0=6 a1=d7f3e0 a2=6231 a3=59 items=0 ppid=618 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1087]: fork of '/bin/sh -c '/sbin/mdadm --examine --export /dev/sdg1 | sed s/^MD_/UDISKS_MD_MEMBER_/g'' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E6C6D7470 Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/sbin/multipath -i -u sde1' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1015]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sr0/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1562]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/log" pid=1562 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1015]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sr0' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1562]: SYSCALL arch=c000003e syscall=1 success=yes exit=13041 a0=6 a1=2096ae0 a2=32f1 a3=59 items=0 ppid=618 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1015]: fork of '/usr/bin/sg_inq --export --page=di /dev/sr0' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E6C6F67 Apr 09 15:21:40 carlson systemd-udevd[1015]: fork of 'cdrom_id --lock-media /dev/sr0' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[1015]: fork of 'ata_id --export /dev/sr0' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1566]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/managesieve" pid=1566 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[1015]: fork of 'scsi_id --export --whitelisted -d /dev/sr0' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1566]: SYSCALL arch=c000003e syscall=1 success=yes exit=14537 a0=6 a1=14ba7c0 a2=38c9 a3=59 items=0 ppid=618 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[856]: fork of '/sbin/mdadm --incremental --export /dev/sdf1 --offroot ${DEVLINKS}' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E6D616E6167657369657665 Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/sbin/mdadm --incremental --export /dev/sde1 --offroot ${DEVLINKS}' failed: Resource temporarily unavailable Apr 09 15:21:40 carlson systemd-udevd[886]: fork of '/sbin/mdadm --incremental --export /dev/sdd1 --offroot ${DEVLINKS}' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1579]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/managesieve-login" pid=1579 comm="apparmor_parser" Apr 09 15:21:40 carlson systemd-udevd[856]: fork of '/bin/sh -c '/sbin/mdadm --examine --export /dev/sdf1 | sed s/^MD_/UDISKS_MD_MEMBER_/g'' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1579]: SYSCALL arch=c000003e syscall=1 success=yes exit=15625 a0=6 a1=21169b0 a2=3d09 a3=59 items=0 ppid=618 pid=1579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:40 carlson systemd-udevd[1079]: fork of '/bin/sh -c '/sbin/mdadm --examine --export /dev/sde1 | sed s/^MD_/UDISKS_MD_MEMBER_/g'' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E6D616E61676573696576652D6C6F67696E Apr 09 15:21:40 carlson systemd-udevd[886]: fork of '/bin/sh -c '/sbin/mdadm --examine --export /dev/sdd1 | sed s/^MD_/UDISKS_MD_MEMBER_/g'' failed: Resource temporarily unavailable Apr 09 15:21:41 carlson systemd-udevd[1386]: failed to execute '/usr/bin/hdparm' '/usr/bin/hdparm -B255 -W0 /dev/sda1': No such file or directory Apr 09 15:21:43 carlson audit[1583]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/pop3" pid=1583 comm="apparmor_parser" Apr 09 15:21:41 carlson systemd-udevd[1387]: failed to execute '/usr/bin/hdparm' '/usr/bin/hdparm -B255 -W0 /dev/sda2': No such file or directory Apr 09 15:21:43 carlson audit[1583]: SYSCALL arch=c000003e syscall=1 success=yes exit=24969 a0=6 a1=18d93e0 a2=6189 a3=59 items=0 ppid=618 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:41 carlson systemd-udevd[1096]: Process '/usr/bin/hdparm -B255 -W0 /dev/sda1' failed with exit code 2. Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E706F7033 Apr 09 15:21:41 carlson systemd-udevd[919]: Process '/usr/bin/hdparm -B255 -W0 /dev/sda2' failed with exit code 2. Apr 09 15:21:41 carlson systemd-udevd[919]: renamed network interface eth0 to enp0s25 Apr 09 15:21:43 carlson audit[1587]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/pop3-login" pid=1587 comm="apparmor_parser" Apr 09 15:21:41 carlson systemd[1]: Started SuSEfirewall2 phase 1. Apr 09 15:21:43 carlson audit[1587]: SYSCALL arch=c000003e syscall=1 success=yes exit=23553 a0=6 a1=b0c260 a2=5c01 a3=59 items=0 ppid=618 pid=1587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:41 carlson systemd[1]: Found device WDC_WD2001FFSX-6 1. Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E706F70332D6C6F67696E Apr 09 15:21:41 carlson systemd[1]: Activating swap /dev/disk/by-uuid/e11e3553-d119-4b2c-997d-ccaf8fe4da47... Apr 09 15:21:41 carlson systemd-udevd[886]: renamed network interface eth0 to enp5s0 Apr 09 15:21:43 carlson audit[1591]: AVC apparmor="STATUS" operation="profile_load" name="/usr/lib/dovecot/ssl-params" pid=1591 comm="apparmor_parser" Apr 09 15:21:41 carlson systemd[1]: Activated swap /dev/disk/by-uuid/e11e3553-d119-4b2c-997d-ccaf8fe4da47. Apr 09 15:21:43 carlson audit[1591]: SYSCALL arch=c000003e syscall=1 success=yes exit=13873 a0=6 a1=ac8fe0 a2=3631 a3=59 items=0 ppid=618 pid=1591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:42 carlson systemd[1]: Reached target Sound Card. Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E646F7665636F742E73736C2D706172616D73 Apr 09 15:21:42 carlson systemd-udevd[871]: fork of '/usr/bin/sg_inq --export /dev/sdl' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson systemd-udevd[871]: fork of '/sbin/multipath -i -u sdl' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:42 carlson systemd-udevd[885]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdj/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1595]: AVC apparmor="STATUS" operation="profile_load" name="virt-aa-helper" pid=1595 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[1012]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdi/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1595]: SYSCALL arch=c000003e syscall=1 success=yes exit=26489 a0=6 a1=b68d50 a2=6779 a3=59 items=0 ppid=618 pid=1595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:42 carlson systemd-udevd[885]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sdj' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E6C69622E6C6962766972742E766972742D61612D68656C706572 Apr 09 15:21:42 carlson systemd-udevd[1012]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdi' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson systemd-udevd[885]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdj/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1603]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/apache2" pid=1603 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[1012]: fork of '/sbin/multipath -i -u sdi' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1603]: AVC apparmor="STATUS" operation="profile_load" name="DEFAULT_URI" pid=1603 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[885]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdj' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1603]: AVC apparmor="STATUS" operation="profile_load" name="HANDLING_UNTRUSTED_INPUT" pid=1603 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[856]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdh/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1603]: AVC apparmor="STATUS" operation="profile_load" name="phpsysinfo" pid=1603 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[885]: fork of '/sbin/multipath -i -u sdj' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1603]: SYSCALL arch=c000003e syscall=1 success=yes exit=52164 a0=6 a1=1e97f20 a2=cbc4 a3=59 items=0 ppid=618 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:42 carlson systemd-udevd[856]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdh' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E61706163686532 Apr 09 15:21:42 carlson systemd-udevd[856]: fork of '/sbin/multipath -i -u sdh' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson systemd-udevd[919]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdk/device/vpd_pg80 --raw' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1607]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/avahi-daemon" pid=1607 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[919]: fork of '/usr/bin/sg_inq --export --page=sn /dev/sdk' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1607]: SYSCALL arch=c000003e syscall=1 success=yes exit=27473 a0=6 a1=2091ac0 a2=6b51 a3=59 items=0 ppid=618 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:42 carlson systemd-udevd[919]: fork of '/usr/bin/sg_inq --export --inhex=/sys/block/sdk/device/vpd_pg83 --raw' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E61766168692D6461656D6F6E Apr 09 15:21:42 carlson systemd-udevd[919]: fork of '/usr/bin/sg_inq --export --page=di /dev/sdk' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson systemd-udevd[919]: fork of '/sbin/multipath -i -u sdk' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1611]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/dnsmasq" pid=1611 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[761]: fork of '/usr/bin/sg_inq --export /dev/sdl' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1611]: SYSCALL arch=c000003e syscall=1 success=yes exit=32585 a0=6 a1=1c1f5c0 a2=7f49 a3=59 items=0 ppid=618 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:42 carlson systemd-udevd[1010]: fork of '/usr/bin/sg_inq --export /dev/sdi' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E646E736D617371 Apr 09 15:21:42 carlson systemd-udevd[761]: fork of '/sbin/multipath -i -u sdl' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson systemd-udevd[1010]: fork of '/sbin/multipath -i -u sdi' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1615]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/dovecot" pid=1615 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[737]: fork of '/usr/bin/sg_inq --export /dev/sdj' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1615]: SYSCALL arch=c000003e syscall=1 success=yes exit=35401 a0=6 a1=2518ac0 a2=8a49 a3=59 items=0 ppid=618 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:42 carlson systemd-udevd[737]: fork of '/sbin/multipath -i -u sdj' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E646F7665636F74 Apr 09 15:21:42 carlson systemd-udevd[1015]: fork of '/usr/bin/sg_inq --export /dev/sdh' failed: Resource temporarily unavailable Apr 09 15:21:42 carlson systemd-udevd[1015]: fork of '/sbin/multipath -i -u sdh' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1619]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/identd" pid=1619 comm="apparmor_parser" Apr 09 15:21:42 carlson systemd-udevd[919]: fork of '/usr/bin/sg_inq --export /dev/sdk' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit[1619]: SYSCALL arch=c000003e syscall=1 success=yes exit=24217 a0=6 a1=26ba170 a2=5e99 a3=59 items=0 ppid=618 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:42 carlson systemd-udevd[919]: fork of '/sbin/multipath -i -u sdk' failed: Resource temporarily unavailable Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E6964656E7464 Apr 09 15:21:43 carlson systemd[1]: Found device WDC_WD2001FFSX-6 1. Apr 09 15:21:43 carlson systemd[1]: Activating swap /dev/disk/by-uuid/f506e393-df0d-429e-8133-1dd4e2de704c... Apr 09 15:21:43 carlson audit[1623]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/libvirtd" pid=1623 comm="apparmor_parser" Apr 09 15:21:43 carlson systemd[1]: Activated swap /dev/disk/by-uuid/f506e393-df0d-429e-8133-1dd4e2de704c. Apr 09 15:21:43 carlson audit[1623]: SYSCALL arch=c000003e syscall=1 success=yes exit=9953 a0=6 a1=2267920 a2=26e1 a3=59 items=0 ppid=618 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:43 carlson systemd[1]: Reached target Swap. Apr 09 15:21:43 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E6C69627669727464 Apr 09 15:21:43 carlson systemd[1]: Started udev Wait for Complete Device Initialization. Apr 09 15:21:43 carlson systemd[1]: Starting Activation of LVM2 logical volumes... Apr 09 15:21:44 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:44 carlson systemd[1]: Started Activation of LVM2 logical volumes. Apr 09 15:21:44 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:44 carlson systemd[1]: Reached target Encrypted Volumes. Apr 09 15:21:44 carlson audit[1631]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/mdnsd" pid=1631 comm="apparmor_parser" Apr 09 15:21:44 carlson systemd[1]: Starting Activation of LVM2 logical volumes... Apr 09 15:21:44 carlson audit[1631]: SYSCALL arch=c000003e syscall=1 success=yes exit=24097 a0=6 a1=245f450 a2=5e21 a3=59 items=0 ppid=618 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson systemd[1]: Started Activation of LVM2 logical volumes. Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E6D646E7364 Apr 09 15:21:44 carlson systemd[1]: Reached target Local File Systems (Pre). Apr 09 15:21:44 carlson systemd[1]: var-run.mount: Directory /var/run to mount over is not empty, mounting anyway. Apr 09 15:21:44 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:44 carlson systemd[1]: Mounting Runtime Directory... Apr 09 15:21:44 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson audispd[1695]: priority_boost_parser called with: 4 Apr 09 15:21:44 carlson systemd[1]: Mounted Runtime Directory. Apr 09 15:21:44 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson audispd[1695]: max_restarts_parser called with: 10 Apr 09 15:21:44 carlson systemd[1]: Reached target Local File Systems. Apr 09 15:21:44 carlson audit[1635]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/nmbd" pid=1635 comm="apparmor_parser" Apr 09 15:21:45 carlson audispd[1695]: No plugins found, exiting Apr 09 15:21:44 carlson systemd[1]: Starting Apply Kernel Variables... Apr 09 15:21:44 carlson audit[1635]: SYSCALL arch=c000003e syscall=1 success=yes exit=25457 a0=6 a1=d25170 a2=6371 a3=59 items=0 ppid=618 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson systemd[1]: Starting Tell Plymouth To Write Out Runtime Data... Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E6E6D6264 Apr 09 15:21:44 carlson systemd[1]: Starting Restore /run/initramfs on shutdown... Apr 09 15:21:44 carlson systemd-sysctl[1641]: Couldn't write '0' to 'net/bridge/bridge-nf-call-ip6tables', ignoring: No such file or directory Apr 09 15:21:44 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:44 carlson systemd-sysctl[1641]: Couldn't write '0' to 'net/bridge/bridge-nf-call-iptables', ignoring: No such file or directory Apr 09 15:21:44 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-read-write comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:44 carlson systemd[1]: Starting RPC Bind... Apr 09 15:21:44 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-read-write comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:44 carlson systemd[1]: Started Apply Kernel Variables. Apr 09 15:21:44 carlson audit[1658]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/nscd" pid=1658 comm="apparmor_parser" Apr 09 15:21:44 carlson systemd[1]: Started Restore /run/initramfs on shutdown. Apr 09 15:21:44 carlson audit[1658]: SYSCALL arch=c000003e syscall=1 success=yes exit=24977 a0=6 a1=1c8a450 a2=6191 a3=59 items=0 ppid=618 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson systemd[1]: Started Tell Plymouth To Write Out Runtime Data. Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E6E736364 Apr 09 15:21:44 carlson systemd[1]: Started RPC Bind. Apr 09 15:21:44 carlson systemd[1]: Started Load AppArmor profiles. Apr 09 15:21:44 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson systemd[1]: Started Flush Journal to Persistent Storage. Apr 09 15:21:44 carlson audit[1663]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/ntpd" pid=1663 comm="apparmor_parser" Apr 09 15:21:45 carlson systemd[1]: Starting Create Volatile Files and Directories... Apr 09 15:21:44 carlson audit[1663]: SYSCALL arch=c000003e syscall=1 success=yes exit=29569 a0=6 a1=ce5330 a2=7381 a3=59 items=0 ppid=618 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:45 carlson systemd[1]: Started Create Volatile Files and Directories. Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E6E747064 Apr 09 15:21:45 carlson systemd[1]: Starting Security Auditing Service... Apr 09 15:21:45 carlson systemd[1]: Started Security Auditing Service. Apr 09 15:21:44 carlson audit[1667]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/smbd" pid=1667 comm="apparmor_parser" Apr 09 15:21:45 carlson systemd[1]: Starting Update UTMP about System Boot/Shutdown... Apr 09 15:21:44 carlson audit[1667]: SYSCALL arch=c000003e syscall=1 success=yes exit=37313 a0=6 a1=c58a90 a2=91c1 a3=59 items=0 ppid=618 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E736D6264 Apr 09 15:21:44 carlson audit[1671]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/smbldap-useradd" pid=1671 comm="apparmor_parser" Apr 09 15:21:44 carlson audit[1671]: AVC apparmor="STATUS" operation="profile_load" name="/etc/init.d/nscd" pid=1671 comm="apparmor_parser" Apr 09 15:21:44 carlson audit[1671]: SYSCALL arch=c000003e syscall=1 success=yes exit=52786 a0=6 a1=21b3b30 a2=ce32 a3=59 items=0 ppid=618 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E736D626C6461702D75736572616464 Apr 09 15:21:44 carlson audit[1675]: AVC apparmor="STATUS" operation="profile_load" name="/usr/{sbin/traceroute,bin/traceroute.db}" pid=1675 comm="apparmor_parser" Apr 09 15:21:44 carlson audit[1675]: SYSCALL arch=c000003e syscall=1 success=yes exit=25777 a0=6 a1=9a4450 a2=64b1 a3=59 items=0 ppid=618 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E7472616365726F757465 Apr 09 15:21:44 carlson audit[1679]: AVC apparmor="STATUS" operation="profile_load" name="/usr/sbin/winbindd" pid=1679 comm="apparmor_parser" Apr 09 15:21:44 carlson audit[1679]: SYSCALL arch=c000003e syscall=1 success=yes exit=28985 a0=6 a1=cd6170 a2=7139 a3=59 items=0 ppid=618 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E7362696E2E77696E62696E6464 Apr 09 15:21:44 carlson audit[1683]: AVC apparmor="STATUS" operation="profile_load" name="/usr/share/gitweb/gitweb.cgi" pid=1683 comm="apparmor_parser" Apr 09 15:21:44 carlson audit[1683]: SYSCALL arch=c000003e syscall=1 success=yes exit=28337 a0=6 a1=26d7e20 a2=6eb1 a3=59 items=0 ppid=618 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) Apr 09 15:21:44 carlson audit: PROCTITLE proctitle=2F7362696E2F61707061726D6F725F706172736572002D492F6574632F61707061726D6F722E64002D2D616464002F6574632F61707061726D6F722E642F7573722E73686172652E6769742D7765622E6769747765622E636769 Apr 09 15:21:44 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apparmor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson audit: CONFIG_CHANGE audit_enabled=1 old=1 auid=4294967295 ses=4294967295 res=1 Apr 09 15:21:45 carlson audit: CONFIG_CHANGE audit_pid=1690 old=0 auid=4294967295 ses=4294967295 res=1 Apr 09 15:21:45 carlson audit: CONFIG_CHANGE audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1 Apr 09 15:21:45 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson systemd[1]: Started Update UTMP about System Boot/Shutdown. Apr 09 15:21:45 carlson audit[1702]: SYSTEM_BOOT pid=1702 uid=0 auid=4294967295 ses=4294967295 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson systemd[1]: Reached target System Initialization. Apr 09 15:21:45 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:45 carlson systemd[1]: Listening on Open-iSCSI iscsid Socket. Apr 09 15:21:45 carlson systemd[1]: Started CUPS Scheduler. Apr 09 15:21:45 carlson systemd[1]: Listening on D-Bus System Message Bus Socket. Apr 09 15:21:45 carlson systemd[1]: Listening on Avahi mDNS/DNS-SD Stack Activation Socket. Apr 09 15:21:45 carlson boot.apparmor[618]: Starting AppArmor ..done Apr 09 15:21:45 carlson systemd-udevd[688]: /sbin/install-snd-module: fork: retry: No child processes Apr 09 15:21:45 carlson systemd[1]: ypbind.service: Cannot add dependency job, ignoring: Unit ypbind.service is masked. Apr 09 15:21:45 carlson systemd[1]: ldap.service: Cannot add dependency job, ignoring: Unit ldap.service failed to load: No such file or directory. Apr 09 15:21:45 carlson systemd[1]: mail-transfer-agent.target: Cannot add dependency job, ignoring: Unit mail-transfer-agent.target failed to load: Invalid argument. Apr 09 15:21:45 carlson systemd[1]: Started Sendmail Client Mail Queue Watcher. Apr 09 15:21:45 carlson systemd[1]: Reached target Paths. Apr 09 15:21:45 carlson systemd[1]: Listening on PC/SC Smart Card Daemon Activation Socket. Apr 09 15:21:45 carlson systemd[1]: Starting Console System Startup Logging... Apr 09 15:21:45 carlson systemd[1]: Listening on CUPS Scheduler. Apr 09 15:21:45 carlson systemd[1]: Reached target Sockets. Apr 09 15:21:45 carlson systemd[1]: Reached target Basic System. Apr 09 15:21:45 carlson auditctl[1691]: No rules Apr 09 15:21:45 carlson auditctl[1691]: enabled 1 Apr 09 15:21:45 carlson auditctl[1691]: failure 1 Apr 09 15:21:45 carlson auditctl[1691]: pid 1690 Apr 09 15:21:45 carlson auditctl[1691]: rate_limit 0 Apr 09 15:21:45 carlson auditctl[1691]: backlog_limit 320 Apr 09 15:21:45 carlson auditctl[1691]: lost 208 Apr 09 15:21:45 carlson auditctl[1691]: backlog 1 Apr 09 15:21:45 carlson auditctl[1691]: backlog_wait_time 15000 Apr 09 15:21:45 carlson systemd[1]: Starting Initialize hardware monitoring sensors... Apr 09 15:21:45 carlson systemd[1]: Started D-Bus System Message Bus. Apr 09 15:21:45 carlson kernel: nct6775: Found NCT6791D or compatible chip at 0x2e:0x290 Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dbus comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Starting Modem Manager... Apr 09 15:21:46 carlson systemd[1]: Starting /etc/init.d/boot.local Compatibility... Apr 09 15:21:46 carlson systemd[1]: Starting Name Service Cache Daemon... Apr 09 15:21:46 carlson systemd[1]: Starting wicked AutoIPv4 supplicant service... Apr 09 15:21:46 carlson systemd[1]: Network Manager is not active. Apr 09 15:21:46 carlson systemd[1]: Dependency failed for Network Manager Wait Online. Apr 09 15:21:46 carlson systemd[1]: NetworkManager-wait-online.service: Job NetworkManager-wait-online.service/start failed with result 'dependency'. Apr 09 15:21:46 carlson systemd[1]: Starting Purge old kernels... Apr 09 15:21:46 carlson systemd[1]: Starting LSB: This services starts and stops the USB Arbitrator.... Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring file `/etc/passwd` (1) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring directory `/etc` (2) Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=smartd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Started Self Monitoring and Reporting Technology (SMART) Daemon. Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring file `/etc/group` (3) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring directory `/etc` (2) Apr 09 15:21:46 carlson systemd[1]: Started irqbalance daemon. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Starting Machine Check Exception Logging Daemon... Apr 09 15:21:46 carlson systemd[1]: Starting wicked DHCPv6 supplicant service... Apr 09 15:21:46 carlson systemd[1]: Starting wicked DHCPv4 supplicant service... Apr 09 15:21:46 carlson systemd[1]: Starting Save/Restore Sound Card State... Apr 09 15:21:46 carlson systemd[1]: Started Daily Cleanup of Temporary Directories. Apr 09 15:21:46 carlson systemd[1]: Starting Avahi mDNS/DNS-SD Stack... Apr 09 15:21:46 carlson systemd[1]: Started Console System Startup Logging. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=console-kit-log-system-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Started /etc/init.d/boot.local Compatibility. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rc-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Started Save/Restore Sound Card State. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=alsa-restore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring file `/etc/hosts` (4) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring directory `/etc` (2) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring file `/etc/resolv.conf` (5) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring directory `/etc` (2) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring file `/etc/services` (6) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring directory `/etc` (2) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring file `/etc/netgroup` (7) Apr 09 15:21:46 carlson nscd[1742]: 1742 monitoring directory `/etc` (2) Apr 09 15:21:46 carlson systemd[1]: Started Machine Check Exception Logging Daemon. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=mcelog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Started Initialize hardware monitoring sensors. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=lm_sensors comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson smartd[1741]: smartd 6.4 2016-01-06 r4199 [x86_64-linux-4.4.3-1-default] (SUSE RPM) Apr 09 15:21:46 carlson smartd[1741]: Copyright (C) 2002-15, Bruce Allen, Christian Franke, www.smartmontools.org Apr 09 15:21:46 carlson smartd[1741]: Opened configuration file /etc/smartd.conf Apr 09 15:21:46 carlson smartd[1741]: File /etc/smartd.conf line 24 (drive DEFAULT): ignoring previous Test Directive -s S/../.././03 Apr 09 15:21:46 carlson smartd[1741]: Configuration file /etc/smartd.conf parsed. Apr 09 15:21:46 carlson systemd[1]: Started wicked AutoIPv4 supplicant service. Apr 09 15:21:46 carlson systemd[1]: Started wicked DHCPv4 supplicant service. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=wickedd-auto4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Started wicked DHCPv6 supplicant service. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=wickedd-dhcp4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=wickedd-dhcp6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson smartd[1741]: Device: /dev/sdb, type changed from 'scsi' to 'sat' Apr 09 15:21:46 carlson smartd[1741]: Device: /dev/sdb [SAT], opened Apr 09 15:21:46 carlson systemd[1]: Starting wicked network management service daemon... Apr 09 15:21:46 carlson systemd[1]: Started Name Service Cache Daemon. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=nscd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Reached target User and Group Name Lookups. Apr 09 15:21:46 carlson smartd[1741]: Device: /dev/sdb [SAT], WDC WD2001FFSX-68JNUN0, S/N:WD-WMC5C0DAJZ9S, WWN:5-0014ee-605cf2d41, FW:81.00A81, 2.00 TB Apr 09 15:21:46 carlson systemd[1]: Starting Login Service... Apr 09 15:21:46 carlson smartd[1741]: Device: /dev/sdb [SAT], found in smartd database: Western Digital Red Pro Apr 09 15:21:46 carlson ModemManager[1721]: ModemManager (version 1.4.12) starting in system bus... Apr 09 15:21:46 carlson dbus[1712]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' Apr 09 15:21:46 carlson avahi-daemon[1757]: Found user 'avahi' (UID 474) and group 'avahi' (GID 476). Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=wickedd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Starting Authorization Manager... Apr 09 15:21:46 carlson avahi-daemon[1757]: Successfully dropped root privileges. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=avahi-daemon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Started wicked network management service daemon. Apr 09 15:21:46 carlson avahi-daemon[1757]: avahi-daemon 0.6.31 starting up. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Starting wicked network nanny service... Apr 09 15:21:46 carlson avahi-daemon[1757]: Loading service file /etc/avahi/services/sftp-ssh.service. Apr 09 15:21:46 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=wickedd-nanny comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:46 carlson systemd[1]: Started Avahi mDNS/DNS-SD Stack. Apr 09 15:21:46 carlson avahi-daemon[1757]: Loading service file /etc/avahi/services/ssh.service. Apr 09 15:21:46 carlson systemd[1]: Started Login Service. Apr 09 15:21:46 carlson avahi-daemon[1757]: Network interface enumeration completed. Apr 09 15:21:46 carlson systemd-logind[1800]: New seat seat0. Apr 09 15:21:46 carlson avahi-daemon[1757]: Registering HINFO record with values 'X86_64'/'LINUX'. Apr 09 15:21:46 carlson systemd-logind[1800]: Watching system buttons on /dev/input/event2 (Power Button) Apr 09 15:21:46 carlson avahi-daemon[1757]: Server startup complete. Host name is carlson.local. Local service cookie is 11765682. Apr 09 15:21:46 carlson systemd-logind[1800]: Watching system buttons on /dev/input/event1 (Power Button) Apr 09 15:21:46 carlson avahi-daemon[1757]: Service "carlson" (/etc/avahi/services/ssh.service) successfully established. Apr 09 15:21:46 carlson systemd[1]: Started wicked network nanny service. Apr 09 15:21:46 carlson avahi-daemon[1757]: Service "carlson" (/etc/avahi/services/sftp-ssh.service) successfully established. Apr 09 15:21:46 carlson systemd[1]: Starting wicked managed network interfaces... Apr 09 15:21:46 carlson polkitd[1808]: Started polkitd version 0.113 Apr 09 15:21:47 carlson vmware-USBArbitrator[1737]: [10B blob data] Apr 09 15:21:47 carlson systemd[1]: Started LSB: This services starts and stops the USB Arbitrator.. Apr 09 15:21:47 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=vmware-USBArbitrator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdb [SAT], is SMART capable. Adding to "monitor" list. Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdb [SAT], state read from /var/lib/smartmontools/smartd.WDC_WD2001FFSX_68JNUN0-WD_WMC5C0DAJZ9S.ata.state Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc, type changed from 'scsi' to 'sat' Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc [SAT], opened Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc [SAT], WDC WD2001FFSX-68JNUN0, S/N:WD-WMC5C0D54FXS, WWN:5-0014ee-65b246ada, FW:81.00A81, 2.00 TB Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc [SAT], found in smartd database: Western Digital Red Pro Apr 09 15:21:47 carlson mcelog[1777]: mcelog: Cannot read MSR_ERROR_CONTROL from /dev/cpu/0/msr Apr 09 15:21:47 carlson mcelog[1777]: : Input/output error Apr 09 15:21:47 carlson systemd[1]: mcelog.service: Main process exited, code=exited, status=1/FAILURE Apr 09 15:21:47 carlson systemd[1]: mcelog.service: Unit entered failed state. Apr 09 15:21:47 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=mcelog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 09 15:21:47 carlson systemd[1]: mcelog.service: Failed with result 'exit-code'. Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc [SAT], is SMART capable. Adding to "monitor" list. Apr 09 15:21:47 carlson polkitd[1808]: Loading rules from directory /etc/polkit-1/rules.d Apr 09 15:21:47 carlson polkitd[1808]: Loading rules from directory /usr/share/polkit-1/rules.d Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc [SAT], state read from /var/lib/smartmontools/smartd.WDC_WD2001FFSX_68JNUN0-WD_WMC5C0D54FXS.ata.state Apr 09 15:21:47 carlson smartd[1741]: Monitoring 2 ATA and 0 SCSI devices Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdb [SAT], initial Temperature is 34 Celsius (Min/Max 28/34) Apr 09 15:21:47 carlson polkitd[1808]: Finished loading, compiling and executing 4 rules Apr 09 15:21:47 carlson dbus[1712]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Apr 09 15:21:47 carlson systemd[1]: Started Authorization Manager. Apr 09 15:21:47 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:47 carlson polkitd[1808]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Apr 09 15:21:47 carlson kernel: No iBFT detected. Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc [SAT], initial Temperature is 33 Celsius (Min/Max 26/36) Apr 09 15:21:47 carlson systemd[1]: Started Modem Manager. Apr 09 15:21:47 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ModemManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdb [SAT], state written to /var/lib/smartmontools/smartd.WDC_WD2001FFSX_68JNUN0-WD_WMC5C0DAJZ9S.ata.state Apr 09 15:21:47 carlson smartd[1741]: Device: /dev/sdc [SAT], state written to /var/lib/smartmontools/smartd.WDC_WD2001FFSX_68JNUN0-WD_WMC5C0D54FXS.ata.state Apr 09 15:21:49 carlson ModemManager[1721]: Couldn't find support for device at '/sys/devices/pci0000:00/0000:00:19.0': not supported by any plugin Apr 09 15:21:49 carlson ModemManager[1721]: Couldn't find support for device at '/sys/devices/pci0000:00/0000:00:1c.3/0000:05:00.0': not supported by any plugin Apr 09 15:21:51 carlson kernel: e1000e: enp0s25 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx Apr 09 15:21:51 carlson kernel: NET: Registered protocol family 17 Apr 09 15:21:51 carlson kernel: igb 0000:05:00.0 enp5s0: igb: enp5s0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX Apr 09 15:21:51 carlson wickedd[1787]: enp0s25: No duplicates for IP address 192.168.254.1 detected Apr 09 15:21:51 carlson avahi-daemon[1757]: Joining mDNS multicast group on interface enp0s25.IPv4 with address 192.168.254.1. Apr 09 15:21:51 carlson avahi-daemon[1757]: New relevant interface enp0s25.IPv4 for mDNS. Apr 09 15:21:51 carlson avahi-daemon[1757]: Registering new address record for 192.168.254.1 on enp0s25.IPv4. Apr 09 15:21:51 carlson wickedd[1787]: enp0s25: Notified neighbours about IP address 192.168.254.1 Apr 09 15:21:52 carlson wickedd[1787]: enp0s25: No duplicates for IP address 192.168.1.2 detected Apr 09 15:21:52 carlson avahi-daemon[1757]: Registering new address record for 192.168.1.2 on enp0s25.IPv4. Apr 09 15:21:52 carlson wickedd[1787]: enp0s25: Notified neighbours about IP address 192.168.1.2 Apr 09 15:21:53 carlson wickedd[1787]: enp0s25: No duplicates for IP address 192.168.254.150 detected Apr 09 15:21:53 carlson avahi-daemon[1757]: Registering new address record for 192.168.254.150 on enp0s25.IPv4. Apr 09 15:21:53 carlson wickedd[1787]: enp0s25: Notified neighbours about IP address 192.168.254.150 Apr 09 15:21:54 carlson wickedd[1787]: enp5s0: No duplicates for IP address 75.150.68.97 detected Apr 09 15:21:54 carlson avahi-daemon[1757]: Joining mDNS multicast group on interface enp5s0.IPv4 with address 75.150.68.97. Apr 09 15:21:54 carlson avahi-daemon[1757]: New relevant interface enp5s0.IPv4 for mDNS. Apr 09 15:21:54 carlson avahi-daemon[1757]: Registering new address record for 75.150.68.97 on enp5s0.IPv4. Apr 09 15:21:54 carlson wickedd[1787]: enp5s0: Notified neighbours about IP address 75.150.68.97 Apr 09 15:21:54 carlson wickedd[1787]: enp5s0: No duplicates for IP address 75.150.68.99 detected Apr 09 15:21:54 carlson avahi-daemon[1757]: Registering new address record for 75.150.68.99 on enp5s0.IPv4. Apr 09 15:21:54 carlson wickedd[1787]: enp5s0: Notified neighbours about IP address 75.150.68.99 Apr 09 15:21:55 carlson wicked[1825]: lo up Apr 09 15:21:55 carlson wicked[1825]: enp0s25 up Apr 09 15:21:55 carlson wicked[1825]: enp5s0 up Apr 09 15:21:55 carlson systemd[1]: Started wicked managed network interfaces. Apr 09 15:21:55 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=wicked comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:55 carlson systemd[1]: Reached target Network. Apr 09 15:21:55 carlson systemd[1]: Starting LSB: Domain Name System (DNS) server, named... Apr 09 15:21:55 carlson systemd[1]: Starting SuSEfirewall2 phase 2... Apr 09 15:21:55 carlson systemd[1]: Started Vsftpd ftp daemon. Apr 09 15:21:55 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=vsftpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:55 carlson systemd[1]: Starting OpenSSH Daemon... Apr 09 15:21:55 carlson SuSEfirewall2[2249]: Setting up rules from /etc/sysconfig/SuSEfirewall2 ... Apr 09 15:21:55 carlson systemd[1]: Starting saslauthd Server Daemon... Apr 09 15:21:55 carlson systemd[1]: Starting Network UPS Tools - power device driver controller... Apr 09 15:21:55 carlson systemd[1]: Started Xinetd A Powerful Replacement For Inetd. Apr 09 15:21:55 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=xinetd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:55 carlson systemd[1]: Starting Nagios Core Monitoring Daemon... Apr 09 15:21:55 carlson systemd[1]: Started MyTunesRss Streaming Music. Apr 09 15:21:55 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=mytunes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:55 carlson systemd[1]: Starting CUPS Scheduler... Apr 09 15:21:55 carlson systemd[1]: Starting Samba NMB Daemon... Apr 09 15:21:55 carlson systemd[1]: Reached target Network is Online. Apr 09 15:21:55 carlson systemd[1]: Starting LSB: This service starts and stops VMware services... Apr 09 15:21:55 carlson sshd-gen-keys-start[2245]: Checking for missing server keys in /etc/ssh Apr 09 15:21:55 carlson SuSEfirewall2[2295]: Firewall custom rules loaded from /etc/sysconfig/scripts/SuSEfirewall2-custom Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/chargen [file=/etc/xinetd.conf] [line=60] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/chargen-udp [file=/etc/xinetd.d/chargen-udp] [line=12] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/cvs [file=/etc/xinetd.d/cvs] [line=13] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/daytime [file=/etc/xinetd.d/daytime] [line=16] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/daytime-udp [file=/etc/xinetd.d/daytime-udp] [line=12] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/discard [file=/etc/xinetd.d/discard] [line=13] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/discard-udp [file=/etc/xinetd.d/discard-udp] [line=12] Apr 09 15:21:55 carlson systemd[1]: Starting Login and scanning of iSCSI devices... Apr 09 15:21:55 carlson saslauthd[2327]: detach_tty : master pid is: 2327 Apr 09 15:21:55 carlson saslauthd[2327]: ipc_init : listening on socket: /run/sasl2//mux Apr 09 15:21:55 carlson systemd[1]: Started saslauthd Server Daemon. Apr 09 15:21:55 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=saslauthd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/echo [file=/etc/xinetd.d/echo] [line=13] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/echo-udp [file=/etc/xinetd.d/echo-udp] [line=12] Apr 09 15:21:55 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:55 carlson systemd[1]: Started OpenSSH Daemon. Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/finger [file=/etc/xinetd.d/finger] [line=13] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/netstat [file=/etc/xinetd.d/netstat] [line=13] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/pidentd [file=/etc/xinetd.d/pidentd] [line=16] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/rsync [file=/etc/xinetd.d/rsync] [line=13] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/sane-port [file=/etc/xinetd.d/sane-port] [line=12] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/servers [file=/etc/xinetd.d/servers] [line=14] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/services [file=/etc/xinetd.d/services] [line=14] Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/svnserve [file=/etc/xinetd.d/svnserve] [line=14] Apr 09 15:21:55 carlson vmware[2289]: Starting VMware services: Apr 09 15:21:55 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/systat [file=/etc/xinetd.d/systat] [line=15] Apr 09 15:21:56 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/tftp [file=/etc/xinetd.d/tftp] [line=17] Apr 09 15:21:56 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/time [file=/etc/xinetd.d/time] [line=20] Apr 09 15:21:56 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/time-udp [file=/etc/xinetd.d/time-udp] [line=13] Apr 09 15:21:56 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/vnc [file=/etc/xinetd.d/vnc] [line=13] Apr 09 15:21:56 carlson iscsiadm[2324]: iscsiadm: No records found Apr 09 15:21:56 carlson systemd[1]: Started Login and scanning of iSCSI devices. Apr 09 15:21:56 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=iscsi comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:56 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/vsftpd [file=/etc/xinetd.d/vsftpd] [line=88] Apr 09 15:21:56 carlson systemd[1]: Starting Activation of LVM2 logical volumes... Apr 09 15:21:56 carlson xinetd[2262]: Reading included configuration file: /etc/xinetd.d/webster [file=/etc/xinetd.d/webster] [line=25] Apr 09 15:21:56 carlson xinetd[2262]: Service chargen will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service chargen will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service daytime will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service daytime will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service discard will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service discard will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service echo will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service echo will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service time will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: Service time will use IPv6 or fallback to IPv4 Apr 09 15:21:56 carlson xinetd[2262]: xinetd Version 2.3.15 started with libwrap loadavg options compiled in. Apr 09 15:21:56 carlson xinetd[2262]: Started working: 14 available services Apr 09 15:21:56 carlson vmware[2289]: [33B blob data] Apr 09 15:21:56 carlson kernel: /dev/vmmon[2378]: Module vmmon: registered with major=10 minor=165 Apr 09 15:21:56 carlson kernel: /dev/vmmon[2378]: Using tsc_khz as TSC frequency: 3499887 Apr 09 15:21:56 carlson kernel: /dev/vmmon[2378]: Module vmmon: initialized Apr 09 15:21:56 carlson sshd[2342]: Server listening on 0.0.0.0 port 22. Apr 09 15:21:56 carlson sshd[2342]: Server listening on :: port 22. Apr 09 15:21:56 carlson upsdrvctl[2259]: CyberPower UPS with binary protocol on /dev/ttyS0 detected Apr 09 15:21:56 carlson kernel: Guest personality initialized and is inactive Apr 09 15:21:56 carlson kernel: VMCI host device registered (name=vmci, major=10, minor=57) Apr 09 15:21:56 carlson kernel: Initialized host personality Apr 09 15:21:56 carlson vmware[2289]: [49B blob data] Apr 09 15:21:56 carlson kernel: NET: Registered protocol family 40 Apr 09 15:21:56 carlson vmware[2289]: [50B blob data] Apr 09 15:21:56 carlson kernel: fuse init (API version 7.23) Apr 09 15:21:56 carlson systemd[1]: Mounting FUSE Control File System... Apr 09 15:21:56 carlson systemd[1]: Mounted FUSE Control File System. Apr 09 15:21:57 carlson systemd[1]: Started Activation of LVM2 logical volumes. Apr 09 15:21:57 carlson systemd[1]: Reached target Remote File Systems (Pre). Apr 09 15:21:57 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=lvm2-activation-net comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:57 carlson systemd[1]: Reached target Remote File Systems. Apr 09 15:21:57 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=lvm2-activation-net comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:57 carlson systemd[1]: Starting LSB: The cyrus-imapd mail system... Apr 09 15:21:57 carlson systemd[1]: Starting Permit User Sessions... Apr 09 15:21:57 carlson systemd[1]: Starting LSB: VirtualBox Linux module... Apr 09 15:21:57 carlson audit: NETFILTER_CFG table=nat family=2 entries=0 Apr 09 15:21:57 carlson audit: NETFILTER_CFG table=nat family=2 entries=0 Apr 09 15:21:57 carlson audit[2700]: SYSCALL arch=c000003e syscall=313 success=yes exit=0 a0=2 a1=41a258 a2=0 a3=2 items=0 ppid=121 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null) Apr 09 15:21:57 carlson audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 Apr 09 15:21:57 carlson systemd[1]: Started Permit User Sessions. Apr 09 15:21:57 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:57 carlson nagios[2738]: Nagios 4.1.1 starting... (PID=2738) Apr 09 15:21:57 carlson nagios[2738]: Local time is Sat Apr 09 15:21:57 EDT 2016 Apr 09 15:21:57 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=nagios comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:57 carlson systemd[1]: Started Nagios Core Monitoring Daemon. Apr 09 15:21:57 carlson nagios[2738]: LOG VERSION: 2.0 Apr 09 15:21:57 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=nut-driver comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:57 carlson systemd[1]: Started Network UPS Tools - power device driver controller. Apr 09 15:21:57 carlson nagios[2738]: qh: Socket '/usr/local/nagios/var/rw/nagios.qh' successfully initialized Apr 09 15:21:58 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=vboxdrv comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:58 carlson systemd[1]: Starting Network UPS Tools - power devices information server... Apr 09 15:21:57 carlson nagios[2738]: qh: core query handler registered Apr 09 15:21:58 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=cyrus comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:58 carlson systemd[1]: Started LSB: VirtualBox Linux module. Apr 09 15:21:57 carlson nagios[2738]: nerd: Channel hostchecks registered successfully Apr 09 15:21:57 carlson audit: NETFILTER_CFG table=filter family=2 entries=13 Apr 09 15:21:58 carlson systemd[1]: Started LSB: The cyrus-imapd mail system. Apr 09 15:21:57 carlson nagios[2738]: nerd: Channel servicechecks registered successfully Apr 09 15:21:57 carlson audit[2690]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1a3b3c0 items=0 ppid=2230 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-batch" exe="/usr/sbin/iptables-batch" key=(null) Apr 09 15:21:57 carlson nagios[2738]: nerd: Channel opathchecks registered successfully Apr 09 15:21:57 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C65732D6261746368002F746D702F537553456669726577616C6C325F69707461626C65732E796C577176316E56 Apr 09 15:21:57 carlson nagios[2738]: nerd: Fully initialized and ready to rock! Apr 09 15:21:57 carlson nagios[2738]: wproc: Successfully registered manager as @wproc with query handler Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2744;pid=2744 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2743;pid=2743 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2742;pid=2742 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2751;pid=2751 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2745;pid=2745 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2748;pid=2748 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2746;pid=2746 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2759;pid=2759 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2753;pid=2753 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2754;pid=2754 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2758;pid=2758 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2747;pid=2747 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2749;pid=2749 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2755;pid=2755 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2757;pid=2757 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2756;pid=2756 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2752;pid=2752 Apr 09 15:21:57 carlson nagios[2738]: wproc: Registry request: name=Core Worker 2750;pid=2750 Apr 09 15:21:57 carlson powerpanel[2770]: Startup successful Apr 09 15:21:58 carlson upsd[2771]: listening on 127.0.0.1 port 3493 Apr 09 15:21:58 carlson upsd[2771]: listening on 192.168.254.1 port 3493 Apr 09 15:21:58 carlson upsd[2771]: Connected to UPS [main]: powerpanel-main Apr 09 15:21:58 carlson vboxdrv[2708]: Starting VirtualBox kernel modules..failed Apr 09 15:21:58 carlson vboxdrv[2708]: (modprobe vboxdrv failed. Please use 'dmesg' to find out why) Apr 09 15:21:58 carlson upsdrvctl[2259]: Network UPS Tools - UPS driver controller 2.7.3 Apr 09 15:21:58 carlson cyrus[2703]: Starting IMAP/POP3 service (cyrus-imapd)..done Apr 09 15:21:58 carlson nagios[2265]: Starting nagios:touch: cannot touch '/var/lock/subsys/nagios': Permission denied Apr 09 15:21:58 carlson nagios[2265]: done. Apr 09 15:21:58 carlson upsd[2771]: fopen /var/lib/ups/upsd.pid: No such file or directory Apr 09 15:21:58 carlson upsd[2771]: listening on 127.0.0.1 port 3493 Apr 09 15:21:58 carlson upsd[2771]: listening on 192.168.254.1 port 3493 Apr 09 15:21:58 carlson upsd[2771]: Connected to UPS [main]: powerpanel-main Apr 09 15:21:58 carlson audit: NETFILTER_CFG table=nat family=2 entries=5 Apr 09 15:21:58 carlson audit[2690]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=8 a1=0 a2=40 a3=1a37f70 items=0 ppid=2230 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-batch" exe="/usr/sbin/iptables-batch" key=(null) Apr 09 15:21:58 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C65732D6261746368002F746D702F537553456669726577616C6C325F69707461626C65732E796C577176316E56 Apr 09 15:21:58 carlson audit: NETFILTER_CFG table=raw family=2 entries=5 Apr 09 15:21:58 carlson audit[2690]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=7 a1=0 a2=40 a3=1a37ee0 items=0 ppid=2230 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-batch" exe="/usr/sbin/iptables-batch" key=(null) Apr 09 15:21:58 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C65732D6261746368002F746D702F537553456669726577616C6C325F69707461626C65732E796C577176316E56 Apr 09 15:21:58 carlson dbus[1712]: [system] Activating via systemd: service name='org.freedesktop.ColorManager' unit='colord.service' Apr 09 15:21:58 carlson master[2796]: setrlimit: Unable to set file descriptors limit to -1: Operation not permitted Apr 09 15:21:58 carlson master[2796]: retrying with 4096 (current max) Apr 09 15:21:58 carlson master[2796]: process started Apr 09 15:21:58 carlson upsd[2799]: Startup successful Apr 09 15:21:58 carlson audit: NETFILTER_CFG table=filter family=10 entries=15 Apr 09 15:21:58 carlson audit[2795]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=29 a2=40 a3=1b83c40 items=0 ppid=2230 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-batch" exe="/usr/sbin/ip6tables-batch" key=(null) Apr 09 15:21:58 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6970367461626C65732D6261746368002F746D702F537553456669726577616C6C325F6970367461626C65732E7877716C38646655 Apr 09 15:21:58 carlson audit: NETFILTER_CFG table=mangle family=10 entries=6 Apr 09 15:21:58 carlson audit[2795]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=7 a1=29 a2=40 a3=1b7a8f0 items=0 ppid=2230 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-batch" exe="/usr/sbin/ip6tables-batch" key=(null) Apr 09 15:21:58 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6970367461626C65732D6261746368002F746D702F537553456669726577616C6C325F6970367461626C65732E7877716C38646655 Apr 09 15:21:58 carlson audit: NETFILTER_CFG table=raw family=10 entries=5 Apr 09 15:21:58 carlson audit[2795]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=8 a1=29 a2=40 a3=1b7a8f0 items=0 ppid=2230 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-batch" exe="/usr/sbin/ip6tables-batch" key=(null) Apr 09 15:21:58 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6970367461626C65732D6261746368002F746D702F537553456669726577616C6C325F6970367461626C65732E7877716C38646655 Apr 09 15:21:58 carlson SuSEfirewall2[2804]: Firewall rules successfully set Apr 09 15:21:58 carlson nagios[2738]: Successfully launched command file worker with pid 2810 Apr 09 15:21:58 carlson systemd[1]: Started Network UPS Tools - power devices information server. Apr 09 15:21:58 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=nut-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:58 carlson systemd[1]: Starting Manage, Install and Generate Color Profiles... Apr 09 15:21:59 carlson master[2824]: about to exec /usr/lib/cyrus/bin/ctl_cyrusdb Apr 09 15:21:59 carlson ctl_cyrusdb[2824]: recovering cyrus databases Apr 09 15:21:59 carlson systemd[1]: Started SuSEfirewall2 phase 2. Apr 09 15:21:59 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=SuSEfirewall2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:59 carlson audit[2286]: AVC apparmor="DENIED" operation="capable" profile="/usr/sbin/nmbd" pid=2286 comm="nmbd" capability=12 capname="net_admin" Apr 09 15:21:59 carlson audit[2286]: SYSCALL arch=c000003e syscall=54 success=no exit=-1 a0=3 a1=1 a2=20 a3=7ffe52c985e8 items=0 ppid=1 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nmbd" exe="/usr/sbin/nmbd" key=(null) Apr 09 15:21:59 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6E6D6264002D44 Apr 09 15:21:59 carlson vmware[2289]: [30B blob data] Apr 09 15:21:59 carlson systemd[1]: Starting Fail2Ban Service... Apr 09 15:21:59 carlson audit[2839]: AVC apparmor="DENIED" operation="capable" profile="/usr/sbin/nmbd" pid=2839 comm="nmbd" capability=12 capname="net_admin" Apr 09 15:21:59 carlson audit[2839]: SYSCALL arch=c000003e syscall=54 success=no exit=-1 a0=26 a1=1 a2=20 a3=7ffe52c98608 items=0 ppid=1 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nmbd" exe="/usr/sbin/nmbd" key=(null) Apr 09 15:21:59 carlson systemd[1]: Started Samba NMB Daemon. Apr 09 15:21:59 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F6E6D6264002D44 Apr 09 15:21:59 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=nmb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:21:59 carlson kernel: nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. Apr 09 15:21:59 carlson systemd[1]: Starting Samba SMB Daemon... Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.714832, 0] ../lib/util/become_daemon.c:124(daemon_ready) Apr 09 15:21:59 carlson nmbd[2839]: STATUS=daemon 'nmbd' finished starting up and ready to serve connections Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.820377, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:21:59 carlson nmbd[2839]: [194B blob data] Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.820776, 0] ../source3/nmbd/nmbd_logonnames.c:162(add_logon_names) Apr 09 15:21:59 carlson nmbd[2839]: add_domain_logon_names: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become logon server for workgroup WORKINGCODE on subnet 75.150.68.97 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.820872, 0] ../source3/nmbd/nmbd_logonnames.c:162(add_logon_names) Apr 09 15:21:59 carlson nmbd[2839]: add_domain_logon_names: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become logon server for workgroup WORKINGCODE on subnet 75.150.68.99 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.820960, 0] ../source3/nmbd/nmbd_logonnames.c:162(add_logon_names) Apr 09 15:21:59 carlson nmbd[2839]: add_domain_logon_names: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become logon server for workgroup WORKINGCODE on subnet 192.168.1.2 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821036, 0] ../source3/nmbd/nmbd_logonnames.c:162(add_logon_names) Apr 09 15:21:59 carlson nmbd[2839]: add_domain_logon_names: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become logon server for workgroup WORKINGCODE on subnet 192.168.254.1 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821114, 0] ../source3/nmbd/nmbd_logonnames.c:162(add_logon_names) Apr 09 15:21:59 carlson nmbd[2839]: add_domain_logon_names: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become logon server for workgroup WORKINGCODE on subnet 192.168.254.150 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821180, 0] ../source3/nmbd/nmbd_become_dmb.c:294(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become domain master browser on workgroup WORKINGCODE on subnet 75.150.68.97 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821212, 0] ../source3/nmbd/nmbd_become_dmb.c:307(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: querying subnet 75.150.68.97 for domain master browser on workgroup WORKINGCODE Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821252, 0] ../source3/nmbd/nmbd_become_dmb.c:294(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become domain master browser on workgroup WORKINGCODE on subnet 75.150.68.99 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821293, 0] ../source3/nmbd/nmbd_become_dmb.c:307(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: querying subnet 75.150.68.99 for domain master browser on workgroup WORKINGCODE Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821334, 0] ../source3/nmbd/nmbd_become_dmb.c:294(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become domain master browser on workgroup WORKINGCODE on subnet 192.168.1.2 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821371, 0] ../source3/nmbd/nmbd_become_dmb.c:307(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: querying subnet 192.168.1.2 for domain master browser on workgroup WORKINGCODE Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821406, 0] ../source3/nmbd/nmbd_become_dmb.c:294(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become domain master browser on workgroup WORKINGCODE on subnet 192.168.254.1 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821437, 0] ../source3/nmbd/nmbd_become_dmb.c:307(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: querying subnet 192.168.254.1 for domain master browser on workgroup WORKINGCODE Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821474, 0] ../source3/nmbd/nmbd_become_dmb.c:294(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: Apr 09 15:21:59 carlson nmbd[2839]: Attempting to become domain master browser on workgroup WORKINGCODE on subnet 192.168.254.150 Apr 09 15:21:59 carlson nmbd[2839]: [2016/04/09 15:21:59.821522, 0] ../source3/nmbd/nmbd_become_dmb.c:307(become_domain_master_browser_bcast) Apr 09 15:21:59 carlson nmbd[2839]: become_domain_master_browser_bcast: querying subnet 192.168.254.150 for domain master browser on workgroup WORKINGCODE Apr 09 15:21:59 carlson kernel: ppdev: user-space parallel port driver Apr 09 15:22:00 carlson dbus[1712]: [system] Successfully activated service 'org.freedesktop.ColorManager' Apr 09 15:22:00 carlson audit[2819]: AVC apparmor="DENIED" operation="mkdir" profile="/usr/lib/colord" name="/var/lib/colord/.cache/" pid=2819 comm="colord" requested_mask="c" denied_mask="c" fsuid=458 ouid=458 Apr 09 15:22:00 carlson systemd[1]: Started Manage, Install and Generate Color Profiles. Apr 09 15:22:00 carlson audit[2819]: SYSCALL arch=c000003e syscall=83 success=no exit=-13 a0=557ea30784f0 a1=1c0 a2=0 a3=1e2 items=0 ppid=1 pid=2819 auid=4294967295 uid=458 gid=462 euid=458 suid=458 fsuid=458 egid=462 sgid=462 fsgid=462 tty=(none) ses=4294967295 comm="colord" exe="/usr/lib/colord" key=(null) Apr 09 15:22:00 carlson audit: PROCTITLE proctitle="/usr/lib/colord" Apr 09 15:22:00 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=colord comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:00 carlson ctl_cyrusdb[2824]: skiplist: checkpointed /var/lib/imap/mailboxes.db (7 records, 640 bytes) in 1 second Apr 09 15:22:00 carlson vmnetBridge[2887]: Bridge process created. Apr 09 15:22:00 carlson vmnetBridge[2887]: RTM_NEWLINK: name:enp0s25 index:2 flags:0x00011043 Apr 09 15:22:00 carlson vmnetBridge[2887]: Adding interface enp0s25 index:2 Apr 09 15:22:00 carlson vmnetBridge[2887]: Started bridge enp0s25 to virtual network 0. Apr 09 15:22:00 carlson vmnetBridge[2887]: RTM_NEWLINK: name:enp5s0 index:3 flags:0x00011043 Apr 09 15:22:00 carlson vmnetBridge[2887]: Adding interface enp5s0 index:3 Apr 09 15:22:00 carlson vmnetBridge[2887]: RTM_NEWROUTE: index:3 Apr 09 15:22:00 carlson kernel: /dev/vmnet: open called by PID 2887 (vmnet-bridge) Apr 09 15:22:00 carlson kernel: /dev/vmnet: hub 0 does not exist, allocating memory. Apr 09 15:22:00 carlson kernel: /dev/vmnet: port on hub 0 successfully opened Apr 09 15:22:00 carlson kernel: bridge-enp0s25: up Apr 09 15:22:00 carlson kernel: bridge-enp0s25: attached Apr 09 15:22:00 carlson kernel: bridge-enp0s25: disabling the bridge Apr 09 15:22:00 carlson vmnetBridge[2887]: Stopped bridge enp0s25 to virtual network 0. Apr 09 15:22:00 carlson kernel: bridge-enp0s25: down Apr 09 15:22:00 carlson kernel: bridge-enp0s25: detached Apr 09 15:22:00 carlson kernel: /dev/vmnet: open called by PID 2887 (vmnet-bridge) Apr 09 15:22:00 carlson kernel: /dev/vmnet: hub 0 does not exist, allocating memory. Apr 09 15:22:00 carlson kernel: /dev/vmnet: port on hub 0 successfully opened Apr 09 15:22:00 carlson kernel: bridge-enp5s0: up Apr 09 15:22:00 carlson kernel: bridge-enp5s0: attached Apr 09 15:22:00 carlson vmnetBridge[2887]: Started bridge enp5s0 to virtual network 0. Apr 09 15:22:00 carlson named[2902]: starting BIND 9.10.3-P4 -4 -t /var/lib/named -u named Apr 09 15:22:00 carlson named[2902]: built with '--prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--localstatedir=/var' '--libdir=/usr/lib64' '--enable-exportlib' '--with-export-libdir=/usr/lib64' '--with-export-includedir=/usr/include' '--includedir=/usr/include/bind' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-static' '--with-openssl' '--enable-threads' '--with-libtool' '--enable-runidn' '--with-libxml2' '--with-dlz-mysql' '--with-dlz-ldap' '--enable-rrl' '--with-randomdev=/dev/urandom' 'CFLAGS=-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -DNO_VERSION_DATE -fno-strict-aliasing ' 'LDFLAGS=-L/usr/lib64' Apr 09 15:22:00 carlson named[2902]: ---------------------------------------------------- Apr 09 15:22:00 carlson named[2902]: BIND 9 is maintained by Internet Systems Consortium, Apr 09 15:22:00 carlson named[2902]: Inc. (ISC), a non-profit 501(c)(3) public-benefit Apr 09 15:22:00 carlson named[2902]: corporation. Support and training for BIND 9 are Apr 09 15:22:00 carlson named[2902]: available at https://www.isc.org/support Apr 09 15:22:00 carlson named[2902]: ---------------------------------------------------- Apr 09 15:22:00 carlson named[2902]: adjusted limit on open files from 4096 to 1048576 Apr 09 15:22:00 carlson named[2902]: found 12 CPUs, using 12 worker threads Apr 09 15:22:00 carlson named[2902]: using 6 UDP listeners per interface Apr 09 15:22:00 carlson named[2902]: using up to 4096 sockets Apr 09 15:22:00 carlson named[2902]: loading configuration from '/etc/named.conf' Apr 09 15:22:00 carlson named[2902]: using default UDP/IPv4 port range: [1024, 65535] Apr 09 15:22:00 carlson named[2902]: listening on IPv4 interface lo, 127.0.0.1#53 Apr 09 15:22:00 carlson named[2902]: listening on IPv4 interface enp0s25, 192.168.254.1#53 Apr 09 15:22:00 carlson named[2902]: listening on IPv4 interface enp0s25, 192.168.1.2#53 Apr 09 15:22:00 carlson named[2902]: listening on IPv4 interface enp0s25, 192.168.254.150#53 Apr 09 15:22:00 carlson named[2902]: listening on IPv4 interface enp5s0, 75.150.68.97#53 Apr 09 15:22:00 carlson named[2902]: listening on IPv4 interface enp5s0, 75.150.68.99#53 Apr 09 15:22:00 carlson named[2902]: generating session key for dynamic DNS Apr 09 15:22:00 carlson named[2902]: sizing zone task pool based on 29 zones Apr 09 15:22:00 carlson ctl_cyrusdb[2824]: skiplist: checkpointed /var/lib/imap/annotations.db (0 records, 144 bytes) in 0 seconds Apr 09 15:22:00 carlson ctl_cyrusdb[2824]: done recovering cyrus databases Apr 09 15:22:00 carlson master[2917]: about to exec /usr/lib/cyrus/bin/idled Apr 09 15:22:00 carlson named[2902]: set up managed keys zone for view _default, file '/var/lib/named/dyn//managed-keys.bind' Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 168.192.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 64.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 65.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 66.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 67.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 68.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 69.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 70.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 71.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 72.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 73.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 74.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 75.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 76.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 77.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 78.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 79.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 80.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 81.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 82.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 83.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 84.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 85.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 86.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 87.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 88.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 89.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 90.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 91.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 92.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 93.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 94.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 95.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 96.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 97.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 98.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 99.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 100.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 101.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 102.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 103.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 104.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 105.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 106.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 107.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 108.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 109.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 110.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 111.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 112.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 113.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 114.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 115.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 116.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 117.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 118.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 119.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 120.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 121.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 122.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 123.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 124.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 125.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 126.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 127.100.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 254.169.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 2.0.192.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 100.51.198.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 113.0.203.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: D.F.IP6.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 8.E.F.IP6.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 9.E.F.IP6.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: A.E.F.IP6.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: B.E.F.IP6.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA Apr 09 15:22:00 carlson named[2902]: automatic empty zone: EMPTY.AS112.ARPA Apr 09 15:22:00 carlson named[2902]: configuring command channel from '/etc/rndc.key' Apr 09 15:22:00 carlson named[2902]: command channel listening on 127.0.0.1#953 Apr 09 15:22:00 carlson master[2796]: unable to setsocketopt(IP_TOS): Operation not supported Apr 09 15:22:00 carlson master[2796]: ready for work Apr 09 15:22:00 carlson master[2919]: about to exec /usr/lib/cyrus/bin/ctl_cyrusdb Apr 09 15:22:00 carlson ctl_cyrusdb[2919]: checkpointing cyrus databases Apr 09 15:22:01 carlson named[2902]: could not open entropy source /dev/urandom: file not found Apr 09 15:22:01 carlson named[2902]: using pre-chroot entropy source /dev/urandom Apr 09 15:22:01 carlson named[2902]: the working directory is not writable Apr 09 15:22:01 carlson named[2902]: managed-keys-zone: loaded serial 3 Apr 09 15:22:01 carlson named[2902]: zone 127.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson ctl_cyrusdb[2919]: archiving database file: /var/lib/imap/mailboxes.db Apr 09 15:22:01 carlson ctl_cyrusdb[2919]: archiving database file: /var/lib/imap/annotations.db Apr 09 15:22:01 carlson ctl_cyrusdb[2919]: done checkpointing cyrus databases Apr 09 15:22:01 carlson master[2796]: process 2919 exited, status 0 Apr 09 15:22:01 carlson named[2902]: zone 0.in-addr.arpa/IN: loaded serial 1 Apr 09 15:22:01 carlson named[2902]: zone 25.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 19.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 17.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 20.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 10.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 22.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 29.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 16.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 26.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 21.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 31.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 23.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 27.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 24.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 9.d.1.0.6.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa/IN: loaded serial 2008051300 Apr 09 15:22:01 carlson named[2902]: zone 28.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 253.168.192.in-addr.arpa/IN: loaded serial 2011110500 Apr 09 15:22:01 carlson named[2902]: zone 30.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone 56.168.192.in-addr.arpa/IN: loaded serial 2009120200 Apr 09 15:22:01 carlson named[2902]: zone 9.d.1.0.6.0.f.1.0.7.4.0.1.0.0.2.ip6.int/IN: loaded serial 2008051300 Apr 09 15:22:01 carlson named[2902]: zone 18.172.in-addr.arpa/IN: loaded serial 2 Apr 09 15:22:01 carlson named[2902]: zone localhost/IN: loaded serial 42 Apr 09 15:22:01 carlson named[2902]: zone workingcode.com/IN: loaded serial 2016011700 Apr 09 15:22:01 carlson named[2902]: zone 254.168.192.in-addr.arpa/IN: loaded serial 2015122000 Apr 09 15:22:01 carlson named[2902]: zone 255.in-addr.arpa/IN: loaded serial 1 Apr 09 15:22:01 carlson named[2902]: all zones loaded Apr 09 15:22:01 carlson named[2902]: running Apr 09 15:22:01 carlson named[2227]: Starting name server BIND ..done Apr 09 15:22:01 carlson systemd[1]: Started LSB: Domain Name System (DNS) server, named. Apr 09 15:22:01 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=named comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:01 carlson systemd[1]: Reached target Host and Network Name Lookups. Apr 09 15:22:01 carlson systemd[1]: Started Dovecot IMAP/POP3 email server. Apr 09 15:22:01 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dovecot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:01 carlson systemd[1]: Starting NTP Server Daemon... Apr 09 15:22:01 carlson systemd[1]: Starting Freshclam virus definitions downloader... Apr 09 15:22:01 carlson systemd[1]: Starting Distributed Checksum Clearinghouse (DCC) Spam Filter... Apr 09 15:22:01 carlson systemd[1]: Starting Webster Dictionary... Apr 09 15:22:01 carlson kernel: /dev/vmnet: open called by PID 2941 (vmnet-netifup) Apr 09 15:22:01 carlson kernel: /dev/vmnet: hub 1 does not exist, allocating memory. Apr 09 15:22:01 carlson kernel: /dev/vmnet: port on hub 1 successfully opened Apr 09 15:22:01 carlson avahi-daemon[1757]: Joining mDNS multicast group on interface vmnet1.IPv4 with address 172.16.109.1. Apr 09 15:22:01 carlson avahi-daemon[1757]: New relevant interface vmnet1.IPv4 for mDNS. Apr 09 15:22:01 carlson avahi-daemon[1757]: Registering new address record for 172.16.109.1 on vmnet1.IPv4. Apr 09 15:22:01 carlson named[2902]: listening on IPv4 interface vmnet1, 172.16.109.1#53 Apr 09 15:22:01 carlson vmnet-dhcpd[2953]: Internet Software Consortium DHCP Server 2.0 Apr 09 15:22:01 carlson vmnet-dhcpd[2953]: Copyright 1995, 1996, 1997, 1998, 1999 The Internet Software Consortium. Apr 09 15:22:01 carlson vmnet-dhcpd[2953]: All rights reserved. Apr 09 15:22:01 carlson vmnet-dhcpd[2953]: Apr 09 15:22:01 carlson vmnet-dhcpd[2953]: Please contribute if you find this software useful. Apr 09 15:22:01 carlson vmnet-dhcpd[2953]: For info, please visit http://www.isc.org/dhcp-contrib.html Apr 09 15:22:01 carlson vmnet-dhcpd[2953]: Apr 09 15:22:01 carlson systemd[1]: Started Webster Dictionary. Apr 09 15:22:01 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=webster comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:01 carlson ntpd[2944]: ntpd 4.2.8p6@1.3265-o Fri Mar 18 20:34:27 UTC 2016 (1): Starting Apr 09 15:22:01 carlson ntpd[2944]: Command line: /usr/sbin/ntpd -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -c /etc/ntp.conf Apr 09 15:22:01 carlson ntpd[2963]: proto: precision = 0.628 usec (-21) Apr 09 15:22:01 carlson audit[2883]: AVC apparmor="DENIED" operation="capable" profile="/usr/sbin/smbd" pid=2883 comm="smbd" capability=12 capname="net_admin" Apr 09 15:22:01 carlson audit[2883]: SYSCALL arch=c000003e syscall=54 success=no exit=-1 a0=a a1=1 a2=20 a3=7ffc64ddb8a8 items=0 ppid=1 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="smbd" exe="/usr/sbin/smbd" key=(null) Apr 09 15:22:01 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F736D6264002D44 Apr 09 15:22:01 carlson systemd[1]: smb.service: Supervising process 2964 which is not our child. We'll most likely not notice when it exits. Apr 09 15:22:02 carlson vmnet-dhcpd[2953]: Configured subnet: 172.16.109.0 Apr 09 15:22:02 carlson vmnet-dhcpd[2953]: Setting vmnet-dhcp IP address: 172.16.109.254 Apr 09 15:22:02 carlson vmnet-dhcpd[2953]: Recving on VNet/vmnet1/172.16.109.0 Apr 09 15:22:02 carlson vmnet-dhcpd[2953]: Sending on VNet/vmnet1/172.16.109.0 Apr 09 15:22:02 carlson kernel: /dev/vmnet: open called by PID 2953 (vmnet-dhcpd) Apr 09 15:22:02 carlson kernel: /dev/vmnet: port on hub 1 successfully opened Apr 09 15:22:02 carlson start-ntpd[2923]: Starting network time protocol daemon (NTPD) Apr 09 15:22:02 carlson systemd[1]: Started NTP Server Daemon. Apr 09 15:22:02 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:02 carlson systemd[1]: Reached target System Time Synchronized. Apr 09 15:22:02 carlson systemd[1]: Starting ISC DHCPv4 Server... Apr 09 15:22:02 carlson systemd[1]: Starting The Apache Webserver... Apr 09 15:22:02 carlson ntpd[2963]: switching logging to file /var/log/ntp Apr 09 15:22:02 carlson audit[2964]: AVC apparmor="DENIED" operation="capable" profile="/usr/sbin/smbd" pid=2964 comm="smbd" capability=12 capname="net_admin" Apr 09 15:22:02 carlson audit[2964]: SYSCALL arch=c000003e syscall=54 success=no exit=-1 a0=20 a1=1 a2=20 a3=7ffc64ddb8c8 items=0 ppid=1 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="smbd" exe="/usr/sbin/smbd" key=(null) Apr 09 15:22:02 carlson audit: PROCTITLE proctitle=2F7573722F7362696E2F736D6264002D44 Apr 09 15:22:02 carlson smbd[2964]: [2016/04/09 15:22:02.515198, 0] ../lib/util/become_daemon.c:124(daemon_ready) Apr 09 15:22:02 carlson smbd[2964]: STATUS=daemon 'smbd' finished starting up and ready to serve connections Apr 09 15:22:02 carlson systemd[1]: Started Daily rotation of log files. Apr 09 15:22:02 carlson systemd[1]: Reached target Timers. Apr 09 15:22:02 carlson dovecot[2920]: master: Error: service(pop3-login): listen(*, 110) failed: Address already in use Apr 09 15:22:02 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=smb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:02 carlson systemd[1]: Started Samba SMB Daemon. Apr 09 15:22:02 carlson dovecot[2920]: master: Error: service(pop3-login): listen(::, 110) failed: Address already in use Apr 09 15:22:02 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dovecot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 09 15:22:02 carlson systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a Apr 09 15:22:02 carlson dovecot[2920]: master: Error: service(imap-login): listen(*, 143) failed: Address already in use Apr 09 15:22:02 carlson systemd[1]: dovecot.service: Unit entered failed state. Apr 09 15:22:02 carlson dovecot[2920]: master: Error: service(imap-login): listen(::, 143) failed: Address already in use Apr 09 15:22:02 carlson systemd[1]: dovecot.service: Failed with result 'exit-code'. Apr 09 15:22:02 carlson dovecot[2920]: master: Fatal: Failed to start listeners Apr 09 15:22:02 carlson dovecot[2920]: Error: service(pop3-login): listen(*, 110) failed: Address already in use Apr 09 15:22:02 carlson dovecot[2920]: Error: service(pop3-login): listen(::, 110) failed: Address already in use Apr 09 15:22:02 carlson dovecot[2920]: Error: service(imap-login): listen(*, 143) failed: Address already in use Apr 09 15:22:02 carlson dovecot[2920]: Error: service(imap-login): listen(::, 143) failed: Address already in use Apr 09 15:22:02 carlson dovecot[2920]: Fatal: Failed to start listeners Apr 09 15:22:02 carlson freshclam[3004]: freshclam daemon 0.99.1 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Apr 09 15:22:03 carlson systemd[1]: Started Freshclam virus definitions downloader. Apr 09 15:22:03 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=freshclam comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:03 carlson systemd[1]: Starting Clamav antivirus Deamon... Apr 09 15:22:03 carlson freshclam[3004]: ClamAV update process started at Sat Apr 9 15:22:03 2016 Apr 09 15:22:03 carlson kernel: /dev/vmnet: open called by PID 3012 (vmnet-natd) Apr 09 15:22:03 carlson kernel: /dev/vmnet: hub 8 does not exist, allocating memory. Apr 09 15:22:03 carlson kernel: /dev/vmnet: port on hub 8 successfully opened Apr 09 15:22:03 carlson clamd[3006]: clamd daemon 0.99.1 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Apr 09 15:22:03 carlson clamd[3006]: Running as user vscan (UID 65, GID 467) Apr 09 15:22:03 carlson clamd[3006]: Log file size limited to 1048576 bytes. Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWLINK: name:enp0s25 index:2 flags:0x00011043 Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWLINK: name:enp5s0 index:3 flags:0x00011043 Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWROUTE: index:3 Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWADDR: index:2, addr:192.168.254.1 Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWADDR: index:2, addr:192.168.1.2 Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWADDR: index:2, addr:192.168.254.150 Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWADDR: index:3, addr:75.150.68.97 Apr 09 15:22:03 carlson vmnet-natd[3012]: RTM_NEWADDR: index:3, addr:75.150.68.99 Apr 09 15:22:03 carlson kernel: userif-4: sent link down event. Apr 09 15:22:03 carlson kernel: userif-4: sent link up event. Apr 09 15:22:03 carlson kernel: /dev/vmnet: open called by PID 3028 (vmnet-netifup) Apr 09 15:22:03 carlson kernel: /dev/vmnet: port on hub 8 successfully opened Apr 09 15:22:03 carlson avahi-daemon[1757]: Joining mDNS multicast group on interface vmnet8.IPv4 with address 172.16.252.1. Apr 09 15:22:03 carlson avahi-daemon[1757]: New relevant interface vmnet8.IPv4 for mDNS. Apr 09 15:22:03 carlson avahi-daemon[1757]: Registering new address record for 172.16.252.1 on vmnet8.IPv4. Apr 09 15:22:03 carlson named[2902]: listening on IPv4 interface vmnet8, 172.16.252.1#53 Apr 09 15:22:03 carlson clamd[3006]: Reading databases from /var/lib/clamav Apr 09 15:22:03 carlson clamd[3006]: Not loading PUA signatures. Apr 09 15:22:03 carlson clamd[3006]: Bytecode: Security mode set to "TrustSigned". Apr 09 15:22:03 carlson vmnet-dhcpd[3039]: Internet Software Consortium DHCP Server 2.0 Apr 09 15:22:03 carlson vmnet-dhcpd[3039]: Copyright 1995, 1996, 1997, 1998, 1999 The Internet Software Consortium. Apr 09 15:22:03 carlson vmnet-dhcpd[3039]: All rights reserved. Apr 09 15:22:03 carlson vmnet-dhcpd[3039]: Apr 09 15:22:03 carlson vmnet-dhcpd[3039]: Please contribute if you find this software useful. Apr 09 15:22:03 carlson vmnet-dhcpd[3039]: For info, please visit http://www.isc.org/dhcp-contrib.html Apr 09 15:22:03 carlson vmnet-dhcpd[3039]: Apr 09 15:22:03 carlson colord[2819]: (colord:2819): Cd-WARNING **: failed to get session [pid 2269]: No such device or address Apr 09 15:22:03 carlson colord[2819]: (colord:2819): Cd-WARNING **: failed to get session [pid 2269]: No such device or address Apr 09 15:22:03 carlson nmbd[2839]: [2016/04/09 15:22:03.828993, 0] ../source3/nmbd/nmbd_logonnames.c:123(become_logon_server_success) Apr 09 15:22:03 carlson nmbd[2839]: become_logon_server_success: Samba is now a logon server for workgroup WORKINGCODE on subnet 75.150.68.97 Apr 09 15:22:03 carlson nmbd[2839]: [2016/04/09 15:22:03.829098, 0] ../source3/nmbd/nmbd_logonnames.c:123(become_logon_server_success) Apr 09 15:22:03 carlson nmbd[2839]: become_logon_server_success: Samba is now a logon server for workgroup WORKINGCODE on subnet 75.150.68.99 Apr 09 15:22:03 carlson nmbd[2839]: [2016/04/09 15:22:03.829161, 0] ../source3/nmbd/nmbd_logonnames.c:123(become_logon_server_success) Apr 09 15:22:03 carlson nmbd[2839]: become_logon_server_success: Samba is now a logon server for workgroup WORKINGCODE on subnet 192.168.1.2 Apr 09 15:22:03 carlson nmbd[2839]: [2016/04/09 15:22:03.829215, 0] ../source3/nmbd/nmbd_logonnames.c:123(become_logon_server_success) Apr 09 15:22:03 carlson nmbd[2839]: become_logon_server_success: Samba is now a logon server for workgroup WORKINGCODE on subnet 192.168.254.1 Apr 09 15:22:03 carlson nmbd[2839]: [2016/04/09 15:22:03.829276, 0] ../source3/nmbd/nmbd_logonnames.c:123(become_logon_server_success) Apr 09 15:22:03 carlson nmbd[2839]: become_logon_server_success: Samba is now a logon server for workgroup WORKINGCODE on subnet 192.168.254.150 Apr 09 15:22:03 carlson freshclam[3004]: main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer) Apr 09 15:22:03 carlson freshclam[3004]: daily.cld is up to date (version: 21488, sigs: 84185, f-level: 63, builder: neo) Apr 09 15:22:03 carlson systemd[1]: Started Distributed Checksum Clearinghouse (DCC) Spam Filter. Apr 09 15:22:03 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dcc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:03 carlson systemd[1]: Started CUPS Scheduler. Apr 09 15:22:03 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=cups comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:03 carlson dccm[3042]: 1.3.158 listening to /var/run/dcc/dccm with /var/dcc Apr 09 15:22:03 carlson freshclam[3004]: bytecode.cvd is up to date (version: 276, sigs: 46, f-level: 63, builder: amishhammer) Apr 09 15:22:04 carlson freshclam[3004]: -------------------------------------- Apr 09 15:22:04 carlson vmnet-dhcpd[3039]: Configured subnet: 172.16.252.0 Apr 09 15:22:04 carlson vmnet-dhcpd[3039]: Setting vmnet-dhcp IP address: 172.16.252.254 Apr 09 15:22:04 carlson kernel: /dev/vmnet: open called by PID 3039 (vmnet-dhcpd) Apr 09 15:22:04 carlson kernel: /dev/vmnet: port on hub 8 successfully opened Apr 09 15:22:04 carlson vmnet-dhcpd[3039]: Recving on VNet/vmnet8/172.16.252.0 Apr 09 15:22:04 carlson vmnet-dhcpd[3039]: Sending on VNet/vmnet8/172.16.252.0 Apr 09 15:22:04 carlson vmware[2289]: [26B blob data] Apr 09 15:22:04 carlson vmware[2289]: [38B blob data] Apr 09 15:22:04 carlson vmware[2289]: [33B blob data] Apr 09 15:22:04 carlson systemd[1]: Started LSB: This service starts and stops VMware services. Apr 09 15:22:04 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=vmware comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:04 carlson systemd[1]: Time has been changed Apr 09 15:22:04 carlson fail2ban-client[2838]: 2016-04-09 15:22:04,814 fail2ban.server [3205]: INFO Starting Fail2ban v0.9.4 Apr 09 15:22:04 carlson fail2ban-client[2838]: 2016-04-09 15:22:04,814 fail2ban.server [3205]: INFO Starting in daemon mode Apr 09 15:22:05 carlson dhcpd[3235]: Internet Systems Consortium DHCP Server 4.3.3-P1 Apr 09 15:22:05 carlson dhcpd[3235]: Copyright 2004-2016 Internet Systems Consortium. Apr 09 15:22:05 carlson dhcpd[3235]: All rights reserved. Apr 09 15:22:05 carlson dhcpd[3235]: For info, please visit https://www.isc.org/software/dhcp/ Apr 09 15:22:05 carlson dhcpd[3235]: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file Apr 09 15:22:05 carlson dhcpd[3235]: Config file: /var/lib/dhcp//etc/dhcpd.conf Apr 09 15:22:05 carlson dhcpd[3235]: Database file: /var/lib/dhcp/db/dhcpd.leases Apr 09 15:22:05 carlson dhcpd[3235]: PID file: /var/run/dhcpd.pid Apr 09 15:22:05 carlson dhcpd[3236]: Internet Systems Consortium DHCP Server 4.3.3-P1 Apr 09 15:22:05 carlson dhcpd[3236]: Copyright 2004-2016 Internet Systems Consortium. Apr 09 15:22:05 carlson dhcpd[3236]: All rights reserved. Apr 09 15:22:05 carlson dhcpd[3236]: For info, please visit https://www.isc.org/software/dhcp/ Apr 09 15:22:05 carlson dhcpd[3236]: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file Apr 09 15:22:05 carlson dhcpd[3236]: Config file: /etc/dhcpd.conf Apr 09 15:22:05 carlson dhcpd[3236]: Database file: /db/dhcpd.leases Apr 09 15:22:05 carlson dhcpd[3236]: PID file: /var/run/dhcpd.pid Apr 09 15:22:05 carlson dhcpd[3236]: Wrote 0 deleted host decls to leases file. Apr 09 15:22:05 carlson dhcpd[3236]: Wrote 0 new dynamic host decls to leases file. Apr 09 15:22:05 carlson dhcpd[3236]: Wrote 18 leases to leases file. Apr 09 15:22:05 carlson dhcpd[3236]: Listening on LPF/enp0s25/d0:50:99:46:76:84/192.168.254.0/24 Apr 09 15:22:05 carlson dhcpd[3236]: Sending on LPF/enp0s25/d0:50:99:46:76:84/192.168.254.0/24 Apr 09 15:22:05 carlson dhcpd[3236]: Sending on Socket/fallback/fallback-net Apr 09 15:22:05 carlson dhcpd[3237]: Server starting service. Apr 09 15:22:05 carlson dhcpd[2984]: Starting ISC DHCPv4 Server [chroot]..done Apr 09 15:22:05 carlson systemd[1]: Started ISC DHCPv4 Server. Apr 09 15:22:05 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dhcpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:07 carlson nmbd[2839]: [2016/04/09 15:22:07.398243, 0] ../source3/nmbd/nmbd_become_dmb.c:112(become_domain_master_stage2) Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: Samba server CARLSON is now a domain master browser for workgroup WORKINGCODE on subnet 75.150.68.97 Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: [2016/04/09 15:22:07.398397, 0] ../source3/nmbd/nmbd_become_dmb.c:112(become_domain_master_stage2) Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: Samba server CARLSON is now a domain master browser for workgroup WORKINGCODE on subnet 75.150.68.99 Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: [2016/04/09 15:22:07.398489, 0] ../source3/nmbd/nmbd_become_dmb.c:112(become_domain_master_stage2) Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: Samba server CARLSON is now a domain master browser for workgroup WORKINGCODE on subnet 192.168.1.2 Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: [2016/04/09 15:22:07.398581, 0] ../source3/nmbd/nmbd_become_dmb.c:112(become_domain_master_stage2) Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: Samba server CARLSON is now a domain master browser for workgroup WORKINGCODE on subnet 192.168.254.1 Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: [2016/04/09 15:22:07.398660, 0] ../source3/nmbd/nmbd_become_dmb.c:112(become_domain_master_stage2) Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: Samba server CARLSON is now a domain master browser for workgroup WORKINGCODE on subnet 192.168.254.150 Apr 09 15:22:07 carlson nmbd[2839]: Apr 09 15:22:07 carlson nmbd[2839]: ***** Apr 09 15:22:09 carlson java[2268]: HttpAdaptor version 3.0.1 started on port 8500 Apr 09 15:22:10 carlson systemd[1]: Started The Apache Webserver. Apr 09 15:22:10 carlson systemd[1]: Starting X Display Manager... Apr 09 15:22:10 carlson clamd[3006]: Loaded 4297638 signatures. Apr 09 15:22:10 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apache2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:10 carlson systemd[1]: Started Getty on tty1. Apr 09 15:22:10 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:10 carlson systemd[1]: Reached target Login Prompts. Apr 09 15:22:10 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=after-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:10 carlson systemd[1]: Started /etc/init.d/after.local Compatibility. Apr 09 15:22:11 carlson dbus[1712]: [system] Activating via systemd: service name='org.freedesktop.locale1' unit='dbus-org.freedesktop.locale1.service' Apr 09 15:22:11 carlson display-manager[3268]: /etc/vconsole.conf available Apr 09 15:22:11 carlson display-manager[3268]: KEYMAP: us Apr 09 15:22:11 carlson display-manager[3268]: Command: localectl set-keymap us Apr 09 15:22:11 carlson display-manager[3268]: I: Using systemd /usr/share/systemd/kbd-model-map mapping Apr 09 15:22:11 carlson systemd[1]: Starting Locale Service... Apr 09 15:22:11 carlson audit: NETFILTER_CFG table=filter family=10 entries=0 Apr 09 15:22:11 carlson audit: NETFILTER_CFG table=mangle family=10 entries=0 Apr 09 15:22:11 carlson audit: NETFILTER_CFG table=filter family=2 entries=0 Apr 09 15:22:11 carlson audit: NETFILTER_CFG table=raw family=2 entries=0 Apr 09 15:22:11 carlson audit: NETFILTER_CFG table=raw family=10 entries=0 Apr 09 15:22:11 carlson audit: NETFILTER_CFG table=nat family=2 entries=0 Apr 09 15:22:11 carlson audit[3290]: SYSCALL arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7ffe1bf4c7a0 a2=40004040 a3=7fba9693a8c0 items=0 ppid=1 pid=3290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(-localed)" exe="/usr/lib/systemd/systemd" key=(null) Apr 09 15:22:11 carlson audit: PROCTITLE proctitle="(-localed)" Apr 09 15:22:11 carlson dbus[1712]: [system] Successfully activated service 'org.freedesktop.locale1' Apr 09 15:22:11 carlson systemd[1]: Started Locale Service. Apr 09 15:22:11 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-localed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:11 carlson clamd[3006]: TCP: Bound to [127.0.0.1]:3310 Apr 09 15:22:11 carlson clamd[3006]: TCP: Setting connection queue length to 200 Apr 09 15:22:11 carlson clamd[3006]: LOCAL: Unix socket file /var/run/clamav/clamd-socket Apr 09 15:22:11 carlson clamd[3006]: LOCAL: Setting connection queue length to 200 Apr 09 15:22:11 carlson clamd[3295]: Limits: Global size limit set to 104857600 bytes. Apr 09 15:22:11 carlson clamd[3295]: Limits: File size limit set to 26214400 bytes. Apr 09 15:22:11 carlson clamd[3295]: Limits: Recursion level limit set to 16. Apr 09 15:22:11 carlson clamd[3295]: Limits: Files limit set to 10000. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxEmbeddedPE limit set to 10485760 bytes. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxHTMLNormalize limit set to 10485760 bytes. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxHTMLNoTags limit set to 2097152 bytes. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxScriptNormalize limit set to 5242880 bytes. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxZipTypeRcg limit set to 1048576 bytes. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxPartitions limit set to 50. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxIconsPE limit set to 100. Apr 09 15:22:11 carlson clamd[3295]: Limits: MaxRecHWP3 limit set to 16. Apr 09 15:22:11 carlson clamd[3295]: Limits: PCREMatchLimit limit set to 10000. Apr 09 15:22:11 carlson clamd[3295]: Limits: PCRERecMatchLimit limit set to 5000. Apr 09 15:22:11 carlson clamd[3295]: Limits: PCREMaxFileSize limit set to 26214400. Apr 09 15:22:11 carlson clamd[3295]: Archive support enabled. Apr 09 15:22:11 carlson clamd[3295]: Algorithmic detection enabled. Apr 09 15:22:11 carlson clamd[3295]: Portable Executable support enabled. Apr 09 15:22:11 carlson clamd[3295]: ELF support enabled. Apr 09 15:22:11 carlson clamd[3295]: Mail files support enabled. Apr 09 15:22:11 carlson clamd[3295]: OLE2 support enabled. Apr 09 15:22:11 carlson clamd[3295]: PDF support enabled. Apr 09 15:22:11 carlson clamd[3295]: SWF support enabled. Apr 09 15:22:11 carlson clamd[3295]: HTML support enabled. Apr 09 15:22:11 carlson clamd[3295]: XMLDOCS support enabled. Apr 09 15:22:11 carlson clamd[3295]: HWP3 support enabled. Apr 09 15:22:11 carlson clamd[3295]: Self checking every 600 seconds. Apr 09 15:22:11 carlson display-manager[3268]: Starting service kdm..done Apr 09 15:22:11 carlson systemd[1]: display-manager.service: PID file /var/run/displaymanager.pid not readable (yet?) after start: No such file or directory Apr 09 15:22:11 carlson systemd[1]: Started Clamav antivirus Deamon. Apr 09 15:22:11 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=clamd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:11 carlson systemd[1]: Starting Amavisd-new Virus Scanner interface... Apr 09 15:22:11 carlson echo[3308]: Starting virus-scanner (amavisd-new): Apr 09 15:22:12 carlson amavisd-milter.sh[3314]: /usr/sbin/amavisd-milter.sh: line 3: /etc/sysconfig/amavis: No such file or directory Apr 09 15:22:12 carlson kdm_config[3305]: Multiple occurrences of section [General] in /usr/share/kde4/config/kdm/kdmrc. Consider merging them. Apr 09 15:22:12 carlson kdm_config[3305]: Multiple occurrences of section [Xdmcp] in /usr/share/kde4/config/kdm/kdmrc. Consider merging them. Apr 09 15:22:12 carlson kdm_config[3305]: Multiple occurrences of section [X-*-Core] in /usr/share/kde4/config/kdm/kdmrc. Consider merging them. Apr 09 15:22:12 carlson kdm_config[3305]: Multiple occurrences of section [X-*-Greeter] in /usr/share/kde4/config/kdm/kdmrc. Consider merging them. Apr 09 15:22:12 carlson kdm_config[3305]: Multiple occurrences of section [X-:*-Core] in /usr/share/kde4/config/kdm/kdmrc. Consider merging them. Apr 09 15:22:12 carlson kdm_config[3305]: Multiple occurrences of section [X-:0-Core] in /usr/share/kde4/config/kdm/kdmrc. Consider merging them. Apr 09 15:22:12 carlson systemd[1]: Started X Display Manager. Apr 09 15:22:12 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=display-manager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:12 carlson kdm[3304]: plymouth is running Apr 09 15:22:12 carlson kdm[3304]: plymouth is active on VT 7, reusing for :0 Apr 09 15:22:12 carlson kdm[3304]: plymouth should quit after server startup Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=122 Apr 09 15:22:12 carlson audit[3336]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=112a4d0 items=0 ppid=3333 pid=3336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4E006632622D64656661756C74 Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=124 Apr 09 15:22:12 carlson audit[3337]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1300e10 items=0 ppid=3333 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D41006632622D64656661756C74002D6A0052455455524E Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=125 Apr 09 15:22:12 carlson audit[3333]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=c321d0 items=0 ppid=3207 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4900494E505554002D7000746370002D2D64706F727400737368002D6A006632622D64656661756C74 Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=126 Apr 09 15:22:12 carlson audit[3347]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=ed7160 items=0 ppid=3345 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D41006632622D64656661756C74002D6A0052455455524E Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=127 Apr 09 15:22:12 carlson audit[3345]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=193c520 items=0 ppid=3207 pid=3345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4900494E505554002D7000746370002D2D64706F727400737368002D6A006632622D64656661756C74 Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=128 Apr 09 15:22:12 carlson audit[3350]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1ff94b0 items=0 ppid=3348 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D41006632622D64656661756C74002D6A0052455455524E Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=129 Apr 09 15:22:12 carlson audit[3348]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1241870 items=0 ppid=3207 pid=3348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4900494E505554002D7000746370002D2D64706F727400737368002D6A006632622D64656661756C74 Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=130 Apr 09 15:22:12 carlson audit[3358]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=179f800 items=0 ppid=3354 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D41006632622D64656661756C74002D6A0052455455524E Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=131 Apr 09 15:22:12 carlson audit[3354]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=19b1bc0 items=0 ppid=3207 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4900494E505554002D7000746370002D2D64706F727400737368002D6A006632622D64656661756C74 Apr 09 15:22:12 carlson systemd[1]: Started Fail2Ban Service. Apr 09 15:22:12 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=fail2ban comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=132 Apr 09 15:22:12 carlson audit[3360]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=b1a3e0 items=0 ppid=3359 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4E006632622D737368 Apr 09 15:22:12 carlson audit: NETFILTER_CFG table=filter family=2 entries=134 Apr 09 15:22:12 carlson audit[3361]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=148fd30 items=0 ppid=3359 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:12 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D41006632622D737368002D6A0052455455524E Apr 09 15:22:13 carlson audit: NETFILTER_CFG table=filter family=2 entries=135 Apr 09 15:22:13 carlson audit[3359]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1935cc0 items=0 ppid=3207 pid=3359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:13 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4900494E505554002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300303A3635353335002D6A006632622D737368 Apr 09 15:22:13 carlson audit: NETFILTER_CFG table=filter family=2 entries=136 Apr 09 15:22:13 carlson audit[3366]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=13b7950 items=0 ppid=3365 pid=3366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:13 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4E006632622D73656E646D61696C Apr 09 15:22:13 carlson audit: NETFILTER_CFG table=filter family=2 entries=138 Apr 09 15:22:13 carlson audit[3367]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=f0b290 items=0 ppid=3365 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:13 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D41006632622D73656E646D61696C002D6A0052455455524E Apr 09 15:22:13 carlson audit: NETFILTER_CFG table=filter family=2 entries=139 Apr 09 15:22:13 carlson audit[3365]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1ab4670 items=0 ppid=3207 pid=3365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:13 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4900494E505554002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300736D74702C7375626D697373696F6E002D6A006632622D73656E646D61696C Apr 09 15:22:13 carlson audit: NETFILTER_CFG table=filter family=2 entries=140 Apr 09 15:22:13 carlson audit[3369]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=10d9eb0 items=0 ppid=3368 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:13 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4E006632622D617061636865 Apr 09 15:22:13 carlson audit: NETFILTER_CFG table=filter family=2 entries=142 Apr 09 15:22:13 carlson audit[3370]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=16ca800 items=0 ppid=3368 pid=3370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:13 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D41006632622D617061636865002D6A0052455455524E Apr 09 15:22:13 carlson audit: NETFILTER_CFG table=filter family=2 entries=143 Apr 09 15:22:13 carlson audit[3368]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=22babd0 items=0 ppid=3207 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:13 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D4900494E505554002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300687474702C6874747073002D6A006632622D617061636865 Apr 09 15:22:15 carlson audit: NETFILTER_CFG table=filter family=2 entries=144 Apr 09 15:22:15 carlson audit[3377]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=19e5080 items=0 ppid=3207 pid=3377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:15 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D7300312E3233342E32372E3136002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:15 carlson audit: NETFILTER_CFG table=filter family=2 entries=145 Apr 09 15:22:15 carlson audit[3378]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=148f1f0 items=0 ppid=3207 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:15 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003130382E35382E3133332E323433002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:18 carlson kernel: NVRM: Your system is not currently configured to drive a VGA console Apr 09 15:22:18 carlson kernel: NVRM: on the primary VGA device. The NVIDIA Linux graphics driver Apr 09 15:22:18 carlson kernel: NVRM: requires the use of a text-mode VGA console. Use of other console Apr 09 15:22:18 carlson kernel: NVRM: drivers including, but not limited to, vesafb, may result in Apr 09 15:22:18 carlson kernel: NVRM: corruption and stability problems, and is not supported. Apr 09 15:22:20 carlson amavisd[3320]: Amavis::Util: can't obtain a tainted string at /usr/sbin/amavisd line 2764. Apr 09 15:22:22 carlson nmbd[2839]: [2016/04/09 15:22:22.864140, 0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2) Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: Samba name server CARLSON is now a local master browser for workgroup WORKINGCODE on subnet 75.150.68.97 Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: [2016/04/09 15:22:22.864277, 0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2) Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: Samba name server CARLSON is now a local master browser for workgroup WORKINGCODE on subnet 75.150.68.99 Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: [2016/04/09 15:22:22.864380, 0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2) Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: Samba name server CARLSON is now a local master browser for workgroup WORKINGCODE on subnet 192.168.1.2 Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: [2016/04/09 15:22:22.864469, 0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2) Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: Samba name server CARLSON is now a local master browser for workgroup WORKINGCODE on subnet 192.168.254.1 Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: [2016/04/09 15:22:22.864555, 0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2) Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: Samba name server CARLSON is now a local master browser for workgroup WORKINGCODE on subnet 192.168.254.150 Apr 09 15:22:22 carlson nmbd[2839]: Apr 09 15:22:22 carlson nmbd[2839]: ***** Apr 09 15:22:22 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=68.115.149.54 DST=75.150.68.97 LEN=52 TOS=0x00 PREC=0x20 TTL=112 ID=20298 DF PROTO=TCP SPT=42278 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058C0103030801010402) Apr 09 15:22:23 carlson kdm[3304]: Quitting Plymouth with transition Apr 09 15:22:23 carlson systemd[1]: Received SIGRTMIN+21 from PID 373 (plymouthd). Apr 09 15:22:23 carlson kdm[3304]: Is Plymouth still running? no Apr 09 15:22:23 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:23 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:23 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=68.115.149.54 DST=75.150.68.97 LEN=52 TOS=0x00 PREC=0x20 TTL=112 ID=20526 DF PROTO=TCP SPT=5858 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058C0103030801010402) Apr 09 15:22:23 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=36279 DF PROTO=TCP SPT=23281 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0241DF150000000001030307) Apr 09 15:22:23 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=29357 DF PROTO=TCP SPT=61308 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0241DF190000000001030307) Apr 09 15:22:24 carlson audit: NETFILTER_CFG table=filter family=2 entries=146 Apr 09 15:22:24 carlson audit[3406]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=24dc370 items=0 ppid=3207 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:24 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003130332E31322E3131372E3432002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:24 carlson audit: NETFILTER_CFG table=filter family=2 entries=147 Apr 09 15:22:24 carlson audit[3408]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=f274e0 items=0 ppid=3207 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:24 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003130392E3139302E3138302E313138002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:25 carlson amavis[3320]: starting. /usr/sbin/amavisd at carlson.workingcode.com amavisd-new-2.10.1 (20141025), Unicode aware, LC_CTYPE="en_US.UTF-8" Apr 09 15:22:25 carlson audit: NETFILTER_CFG table=filter family=2 entries=148 Apr 09 15:22:25 carlson audit[3415]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=14f4660 items=0 ppid=3207 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:25 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003131312E31332E37302E313334002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:25 carlson audit: NETFILTER_CFG table=filter family=2 entries=149 Apr 09 15:22:25 carlson audit[3419]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=a907d0 items=0 ppid=3207 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:25 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003131352E3234352E322E313235002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:26 carlson audit: NETFILTER_CFG table=filter family=2 entries=150 Apr 09 15:22:26 carlson audit[3423]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=8d1950 items=0 ppid=3207 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:26 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003131332E3136322E31382E3235002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:26 carlson audit: NETFILTER_CFG table=filter family=2 entries=151 Apr 09 15:22:26 carlson audit[3424]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=fafac0 items=0 ppid=3207 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:26 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003132322E3131342E38392E313530002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:26 carlson audit: NETFILTER_CFG table=filter family=2 entries=152 Apr 09 15:22:26 carlson audit[3432]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=cd4c40 items=0 ppid=3207 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:26 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003131332E3136332E31332E313130002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:26 carlson audit: NETFILTER_CFG table=filter family=2 entries=153 Apr 09 15:22:26 carlson audit[3433]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1d93db0 items=0 ppid=3207 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:26 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003132352E3132332E3233322E313034002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:27 carlson audit: NETFILTER_CFG table=filter family=2 entries=154 Apr 09 15:22:27 carlson audit[3441]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=816f30 items=0 ppid=3207 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:27 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003131332E36372E3233362E3335002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:27 carlson audit: NETFILTER_CFG table=filter family=2 entries=155 Apr 09 15:22:27 carlson audit[3442]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=20a80a0 items=0 ppid=3207 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:27 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003135312E3233372E3139302E313238002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:27 carlson audit: NETFILTER_CFG table=filter family=2 entries=156 Apr 09 15:22:27 carlson audit[3449]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1c80220 items=0 ppid=3207 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:27 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003131392E3134362E3232312E3638002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:27 carlson audit: NETFILTER_CFG table=filter family=2 entries=157 Apr 09 15:22:27 carlson audit[3450]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=2316390 items=0 ppid=3207 pid=3450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:27 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003138302E3132302E3231312E323338002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:27 carlson audit: NETFILTER_CFG table=filter family=2 entries=158 Apr 09 15:22:27 carlson audit[3457]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=9ef510 items=0 ppid=3207 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:27 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003132352E3230382E32352E323136002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:28 carlson audit: NETFILTER_CFG table=filter family=2 entries=159 Apr 09 15:22:28 carlson audit[3458]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=23c5680 items=0 ppid=3207 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:28 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003138302E3132312E3133302E3430002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:28 carlson audit: NETFILTER_CFG table=filter family=2 entries=160 Apr 09 15:22:28 carlson audit[3465]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1af4800 items=0 ppid=3207 pid=3465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:28 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003136372E35362E39392E323436002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:28 carlson audit: NETFILTER_CFG table=filter family=2 entries=161 Apr 09 15:22:28 carlson audit[3466]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=23b0970 items=0 ppid=3207 pid=3466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:28 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003139302E3235332E34392E3530002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:28 carlson audit: NETFILTER_CFG table=filter family=2 entries=162 Apr 09 15:22:28 carlson audit[3473]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=d99af0 items=0 ppid=3207 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:28 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003137312E3235312E34312E3131002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:28 carlson systemd[1]: Started Amavisd-new Virus Scanner interface. Apr 09 15:22:28 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=amavis comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:28 carlson audit: NETFILTER_CFG table=filter family=2 entries=163 Apr 09 15:22:28 carlson audit[3475]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=120fc60 items=0 ppid=3207 pid=3475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:28 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003139392E3136382E3130302E323135002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:28 carlson systemd[1]: Starting Sendmail Mail Transport Agent... Apr 09 15:22:28 carlson echo[3476]: Initializing SMTP port (sendmail) Apr 09 15:22:28 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=30870 DF PROTO=TCP SPT=62370 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0241E3F70000000001030307) Apr 09 15:22:28 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=19142 DF PROTO=TCP SPT=45397 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0241E3FC0000000001030307) Apr 09 15:22:29 carlson amavis[3474]: Net::Server: Group Not Defined. Defaulting to EGID '467 467' Apr 09 15:22:29 carlson amavis[3474]: Net::Server: User Not Defined. Defaulting to EUID '65' Apr 09 15:22:29 carlson amavis[3474]: Module Amavis::Conf 2.404 Apr 09 15:22:29 carlson amavis[3474]: Module Archive::Zip 1.56 Apr 09 15:22:29 carlson amavis[3474]: Module BerkeleyDB 0.55 Apr 09 15:22:29 carlson amavis[3474]: Module Compress::Raw::Zlib 2.068 Apr 09 15:22:29 carlson amavis[3474]: Module Compress::Zlib 2.068 Apr 09 15:22:29 carlson amavis[3474]: Module Crypt::OpenSSL::RSA 0.28 Apr 09 15:22:29 carlson amavis[3474]: Module DB_File 1.835 Apr 09 15:22:29 carlson amavis[3474]: Module Digest::MD5 2.54 Apr 09 15:22:29 carlson amavis[3474]: Module Digest::SHA 5.95 Apr 09 15:22:29 carlson amavis[3474]: Module Digest::SHA1 2.13 Apr 09 15:22:29 carlson amavis[3474]: Module Encode 2.72 Apr 09 15:22:29 carlson amavis[3474]: Module File::Temp 0.2304 Apr 09 15:22:29 carlson amavis[3474]: Module IO::Socket::INET6 2.72 Apr 09 15:22:29 carlson amavis[3474]: Module IO::Socket::IP 0.37 Apr 09 15:22:29 carlson amavis[3474]: Module MIME::Entity 5.507 Apr 09 15:22:29 carlson amavis[3474]: Module MIME::Parser 5.507 Apr 09 15:22:29 carlson amavis[3474]: Module MIME::Tools 5.507 Apr 09 15:22:29 carlson amavis[3474]: Module Mail::DKIM::Signer 0.4 Apr 09 15:22:29 carlson amavis[3474]: Module Mail::DKIM::Verifier 0.4 Apr 09 15:22:29 carlson amavis[3474]: Module Mail::Header 2.14 Apr 09 15:22:29 carlson amavis[3474]: Module Mail::Internet 2.14 Apr 09 15:22:29 carlson amavis[3474]: Module Mail::SPF v2.009 Apr 09 15:22:29 carlson amavis[3474]: Module Mail::SpamAssassin 3.004001 Apr 09 15:22:29 carlson amavis[3474]: Module Net::DNS 1.05 Apr 09 15:22:29 carlson amavis[3474]: Module Net::LibIDN 0.12 Apr 09 15:22:29 carlson amavis[3474]: Module Net::Patricia 1.22 Apr 09 15:22:29 carlson amavis[3474]: Module Net::Server 2.008 Apr 09 15:22:29 carlson amavis[3474]: Module NetAddr::IP 4.072 Apr 09 15:22:29 carlson amavis[3474]: Module Razor2::Client::Version 2.84 Apr 09 15:22:29 carlson amavis[3474]: Module Scalar::Util 1.41 Apr 09 15:22:29 carlson amavis[3474]: Module Socket 2.018 Apr 09 15:22:29 carlson amavis[3474]: Module Socket6 0.25 Apr 09 15:22:29 carlson amavis[3474]: Module Time::HiRes 1.9726 Apr 09 15:22:29 carlson amavis[3474]: Module URI 1.71 Apr 09 15:22:29 carlson amavis[3474]: Module Unix::Syslog 1.1 Apr 09 15:22:29 carlson amavis[3474]: Amavis::ZMQ code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: Amavis::DB code loaded Apr 09 15:22:29 carlson amavis[3474]: SQL base code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: SQL::Log code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: SQL::Quarantine NOT loaded Apr 09 15:22:29 carlson amavis[3474]: Lookup::SQL code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: Lookup::LDAP code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: AM.PDP-in proto code loaded Apr 09 15:22:29 carlson amavis[3474]: SMTP-in proto code loaded Apr 09 15:22:29 carlson amavis[3474]: Courier proto code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: SMTP-out proto code loaded Apr 09 15:22:29 carlson amavis[3474]: Pipe-out proto code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: BSMTP-out proto code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: Local-out proto code loaded Apr 09 15:22:29 carlson amavis[3474]: OS_Fingerprint code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: ANTI-VIRUS code loaded Apr 09 15:22:29 carlson amavis[3474]: ANTI-SPAM code loaded Apr 09 15:22:29 carlson amavis[3474]: ANTI-SPAM-EXT code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: ANTI-SPAM-C code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: ANTI-SPAM-SA code loaded Apr 09 15:22:29 carlson amavis[3474]: Unpackers code loaded Apr 09 15:22:29 carlson amavis[3474]: DKIM code loaded Apr 09 15:22:29 carlson amavis[3474]: Tools code NOT loaded Apr 09 15:22:29 carlson amavis[3474]: Found $file at /usr/bin/file Apr 09 15:22:29 carlson amavis[3474]: No $altermime, not using it Apr 09 15:22:29 carlson amavis[3474]: Internal decoder for .mail Apr 09 15:22:29 carlson amavis[3474]: No ext program for .F, tried: unfreeze, freeze -d, melt, fcat Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .Z at /usr/bin/uncompress Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .gz at /usr/bin/gzip -d Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .bz2 at /usr/bin/bzip2 -d Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .xz at /usr/bin/xzdec Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .lzma at /usr/bin/lzmadec Apr 09 15:22:29 carlson amavis[3474]: No ext program for .lrz, tried: lrzip -q -k -d -o -, lrzcat -q -k Apr 09 15:22:29 carlson amavis[3474]: No ext program for .lzo, tried: lzop -d Apr 09 15:22:29 carlson amavis[3474]: No ext program for .lz4, tried: lz4c -d Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .rpm at /usr/bin/rpm2cpio Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .cpio at /usr/bin/pax Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .tar at /usr/bin/pax Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .deb at /usr/bin/ar Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .rar at /usr/bin/unrar Apr 09 15:22:29 carlson amavis[3474]: No ext program for .arj, tried: unarj, arj Apr 09 15:22:29 carlson amavis[3474]: No ext program for .arc, tried: nomarch, arc Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .zoo at /usr/bin/zoo Apr 09 15:22:29 carlson amavis[3474]: No ext program for .doc, tried: ripole Apr 09 15:22:29 carlson amavis[3474]: No ext program for .cab, tried: cabextract Apr 09 15:22:29 carlson amavis[3474]: No ext program for .tnef, tried: tnef Apr 09 15:22:29 carlson amavis[3474]: Internal decoder for .tnef Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .zip at /usr/bin/7za Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .kmz at /usr/bin/7za Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .7z at /usr/bin/7za Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .jar at /usr/bin/7z Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .arj at /usr/bin/7z Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .swf at /usr/bin/7z Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .lha at /usr/bin/7z Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .iso at /usr/bin/7z Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .cab at /usr/bin/7z Apr 09 15:22:29 carlson amavis[3474]: Found decoder for .exe at /usr/bin/unrar Apr 09 15:22:29 carlson amavis[3474]: No decoder for .F Apr 09 15:22:29 carlson amavis[3474]: No decoder for .arc Apr 09 15:22:29 carlson amavis[3474]: No decoder for .doc Apr 09 15:22:29 carlson amavis[3474]: No decoder for .lrz Apr 09 15:22:29 carlson amavis[3474]: No decoder for .lz4 Apr 09 15:22:29 carlson amavis[3474]: No decoder for .lzo Apr 09 15:22:29 carlson amavis[3474]: Using primary internal av scanner code for ClamAV-clamd Apr 09 15:22:29 carlson amavis[3474]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan Apr 09 15:22:29 carlson audit: NETFILTER_CFG table=filter family=2 entries=164 Apr 09 15:22:29 carlson audit[3491]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=cb1de0 items=0 ppid=3207 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:29 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003137312E3235312E34322E33002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:29 carlson amavis[3474]: Deleting db files __db.004,nanny.db,snmp.db,__db.001,__db.002,__db.003 in /var/spool/amavis/db Apr 09 15:22:29 carlson audit: NETFILTER_CFG table=filter family=2 entries=165 Apr 09 15:22:29 carlson audit[3495]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=6a1f50 items=0 ppid=3207 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:29 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D73003231332E3137342E3130342E313331002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:29 carlson amavis[3474]: Creating db in /var/spool/amavis/db/; BerkeleyDB 0.55, libdb 4.8 Apr 09 15:22:29 carlson audit: NETFILTER_CFG table=filter family=2 entries=166 Apr 09 15:22:29 carlson audit[3508]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1ebf0d0 items=0 ppid=3207 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:29 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003137392E34332E3134342E3337002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:29 carlson audit: NETFILTER_CFG table=filter family=2 entries=167 Apr 09 15:22:29 carlson audit[3509]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=f77240 items=0 ppid=3207 pid=3509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:29 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D730034392E36372E35352E36002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:30 carlson audit: NETFILTER_CFG table=filter family=2 entries=168 Apr 09 15:22:30 carlson audit[3523]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=16d63c0 items=0 ppid=3207 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:30 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003138332E33392E39382E3136002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:30 carlson audit: NETFILTER_CFG table=filter family=2 entries=169 Apr 09 15:22:30 carlson audit[3524]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=eee530 items=0 ppid=3207 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:30 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D730035342E3230392E34312E323430002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:30 carlson audit: NETFILTER_CFG table=filter family=2 entries=170 Apr 09 15:22:30 carlson audit[3531]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=f446b0 items=0 ppid=3207 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:30 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003138352E3131302E3133322E3534002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:30 carlson audit: NETFILTER_CFG table=filter family=2 entries=171 Apr 09 15:22:30 carlson audit[3539]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=ce3820 items=0 ppid=3207 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:30 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D730038312E3134392E3135302E323133002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:30 carlson audit: NETFILTER_CFG table=filter family=2 entries=172 Apr 09 15:22:30 carlson audit[3559]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=ab79a0 items=0 ppid=3207 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:30 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003139332E3230312E3232372E313135002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:30 carlson audit: NETFILTER_CFG table=filter family=2 entries=173 Apr 09 15:22:30 carlson audit[3560]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=b4cb10 items=0 ppid=3207 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:30 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D730038352E3233382E3130322E3133002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:31 carlson sendmail[3556]: gethostbyaddr(192.168.1.2) failed: 1 Apr 09 15:22:31 carlson audit: NETFILTER_CFG table=filter family=2 entries=174 Apr 09 15:22:31 carlson audit[3567]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=102ec90 items=0 ppid=3207 pid=3567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:31 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003139332E3230312E3232372E313639002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:31 carlson audit: NETFILTER_CFG table=filter family=2 entries=175 Apr 09 15:22:31 carlson audit[3568]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1746e00 items=0 ppid=3207 pid=3568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:31 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D730038372E3130322E35362E313831002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:31 carlson sendmail[3556]: gethostbyaddr(172.16.109.1) failed: 1 Apr 09 15:22:31 carlson sendmail[3556]: gethostbyaddr(172.16.252.1) failed: 1 Apr 09 15:22:31 carlson audit: NETFILTER_CFG table=filter family=2 entries=176 Apr 09 15:22:31 carlson audit[3572]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=2347f80 items=0 ppid=3207 pid=3572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:31 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003230322E3136382E3135382E323334002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:32 carlson sendmail[3576]: starting daemon (8.14.9): SMTP+queueing@00:30:00 Apr 09 15:22:32 carlson systemd[1]: sendmail.service: PID file /var/run/sendmail.pid not readable (yet?) after start: No such file or directory Apr 09 15:22:32 carlson audit: NETFILTER_CFG table=filter family=2 entries=177 Apr 09 15:22:32 carlson audit[3578]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=bfb0f0 items=0 ppid=3207 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:32 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003231322E38332E3137372E323133002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:32 carlson sendmail[3577]: u38EMGMH009682: to=, delay=1+05:00:16, xdelay=00:00:00, mailer=esmtp, pri=4980000, relay=pw.com., dsn=4.0.0, stat=Deferred: Connection timed out with pw.com. Apr 09 15:22:32 carlson systemd[1]: Started Sendmail Mail Transport Agent. Apr 09 15:22:32 carlson systemd[1]: Started Command Scheduler. Apr 09 15:22:32 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=sendmail comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:32 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:32 carlson systemd[1]: Starting LSB: Starts the mailinglist manager Mailman... Apr 09 15:22:32 carlson systemd[1]: Starting Sendmail Mail Transport Client... Apr 09 15:22:32 carlson audit: NETFILTER_CFG table=filter family=2 entries=178 Apr 09 15:22:32 carlson audit[3587]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1d8f270 items=0 ppid=3207 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:32 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003232322E3138362E32312E323131002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:32 carlson audit: NETFILTER_CFG table=filter family=2 entries=179 Apr 09 15:22:32 carlson audit[3602]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=8fe3e0 items=0 ppid=3207 pid=3602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:32 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D730034302E37362E35302E313739002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:32 carlson cron[3583]: (CRON) INFO (RANDOM_DELAY will be scaled with factor 98% if used.) Apr 09 15:22:33 carlson audit: NETFILTER_CFG table=filter family=2 entries=180 Apr 09 15:22:33 carlson audit[3618]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=f6c560 items=0 ppid=3207 pid=3618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:33 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D730034322E3131332E3133322E3339002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:33 carlson sm-client.pre[3588]: /var/run/sendmail: cannot verify root:root 1750 - not listed in /etc/permissions Apr 09 15:22:33 carlson systemd[1]: ypbind.service: Cannot add dependency job, ignoring: Unit ypbind.service is masked. Apr 09 15:22:33 carlson systemd[1]: ldap.service: Cannot add dependency job, ignoring: Unit ldap.service failed to load: No such file or directory. Apr 09 15:22:33 carlson systemd[1]: mail-transfer-agent.target: Cannot add dependency job, ignoring: Unit mail-transfer-agent.target failed to load: Invalid argument. Apr 09 15:22:33 carlson cron[3583]: (CRON) INFO (running with inotify support) Apr 09 15:22:33 carlson audit: NETFILTER_CFG table=filter family=2 entries=181 Apr 09 15:22:33 carlson audit[3645]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1ee46d0 items=0 ppid=3207 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:33 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D730036322E3231302E31342E313033002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:33 carlson audit: NETFILTER_CFG table=filter family=2 entries=182 Apr 09 15:22:33 carlson audit[3669]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=1308850 items=0 ppid=3207 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:33 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D730036362E3137312E31372E313536002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:33 carlson sendmail-client[3679]: starting daemon (8.14.9): persistent-queueing@00:30:00 Apr 09 15:22:33 carlson systemd[1]: sendmail-client.service: Failed to read PID from file /var/spool/clientmqueue/sm-client.pid: Invalid argument Apr 09 15:22:33 carlson systemd[1]: Started Sendmail Mail Transport Client. Apr 09 15:22:33 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=sendmail-client comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:33 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=62023 DF PROTO=TCP SPT=46467 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0241E8DA0000000001030307) Apr 09 15:22:34 carlson mailman[3586]: Starting mailman..done Apr 09 15:22:34 carlson systemd[1]: Started LSB: Starts the mailinglist manager Mailman. Apr 09 15:22:34 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=mailman comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:35 carlson nagios[2738]: SERVICE ALERT: localhost;Current Load;WARNING;SOFT;1;WARNING - load average: 5.47, 1.62, 0.56 Apr 09 15:22:35 carlson kdm_greet[3405]: Cannot load /usr/share/kde4/apps/kdm/faces/.default.face: No such file or directory Apr 09 15:22:40 carlson audit[3403]: USER_AUTH pid=3403 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/bin/kdm" hostname=? addr=? terminal=:0 res=success' Apr 09 15:22:40 carlson audit[3403]: USER_ACCT pid=3403 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/bin/kdm" hostname=? addr=? terminal=:0 res=success' Apr 09 15:22:41 carlson audit[3403]: CRED_ACQ pid=3403 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/bin/kdm" hostname=? addr=? terminal=:0 res=success' Apr 09 15:22:41 carlson kdm[3403]: :0[3403]: pam_unix(xdm:session): session opened for user carlsonj by (uid=0) Apr 09 15:22:41 carlson systemd[1]: Created slice User Slice of carlsonj. Apr 09 15:22:41 carlson systemd[1]: Starting User Manager for UID 1003... Apr 09 15:22:41 carlson systemd-logind[1800]: New session 1 of user carlsonj. Apr 09 15:22:41 carlson systemd[1]: Started Session 1 of user carlsonj. Apr 09 15:22:41 carlson audit[3699]: USER_ACCT pid=3699 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:41 carlson systemd[3699]: pam_unix(systemd-user:session): session opened for user carlsonj by (uid=0) Apr 09 15:22:41 carlson audit[3699]: USER_START pid=3699 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_limits,pam_unix,pam_umask,pam_systemd,pam_gnome_keyring,pam_env acct="carlsonj" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:41 carlson systemd[3699]: Reached target Paths. Apr 09 15:22:41 carlson systemd[3699]: Reached target Timers. Apr 09 15:22:41 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:41 carlson systemd[3699]: Reached target Sockets. Apr 09 15:22:41 carlson audit[3403]: USER_START pid=3403 uid=0 auid=1003 ses=1 msg='op=PAM:session_open grantors=pam_loginuid,pam_limits,pam_unix,pam_umask,pam_systemd,pam_gnome_keyring,pam_env acct="carlsonj" exe="/usr/bin/kdm" hostname=? addr=? terminal=:0 res=success' Apr 09 15:22:41 carlson systemd[3699]: Reached target Basic System. Apr 09 15:22:41 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-localed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:41 carlson systemd[3699]: Reached target Default. Apr 09 15:22:41 carlson systemd[3699]: Startup finished in 118ms. Apr 09 15:22:41 carlson systemd[1]: Started User Manager for UID 1003. Apr 09 15:22:43 carlson audit[3761]: CRYPTO_KEY_USER pid=3761 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=3761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3761]: CRYPTO_KEY_USER pid=3761 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=3761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3761]: CRYPTO_KEY_USER pid=3761 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=3761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3761]: CRYPTO_KEY_USER pid=3761 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=3761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3763]: CRYPTO_KEY_USER pid=3763 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=3763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3763]: CRYPTO_KEY_USER pid=3763 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=3763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3763]: CRYPTO_KEY_USER pid=3763 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=3763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3763]: CRYPTO_KEY_USER pid=3763 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=3763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3760]: CRYPTO_SESSION pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=3761 suid=479 rport=54862 laddr=75.150.68.97 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3760]: CRYPTO_SESSION pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=3761 suid=479 rport=54862 laddr=75.150.68.97 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3762]: CRYPTO_SESSION pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=3763 suid=479 rport=54870 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:43 carlson audit[3762]: CRYPTO_SESSION pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=3763 suid=479 rport=54870 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:44 carlson sshd[3760]: Invalid user admin from 91.197.232.30 Apr 09 15:22:44 carlson sshd[3762]: Invalid user admin from 91.197.232.30 Apr 09 15:22:44 carlson audit[3762]: USER_LOGIN pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:44 carlson audit[3760]: USER_LOGIN pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:44 carlson sshd[3762]: input_userauth_request: invalid user admin [preauth] Apr 09 15:22:44 carlson sshd[3760]: input_userauth_request: invalid user admin [preauth] Apr 09 15:22:44 carlson sshd[3783]: gkr-pam: error looking up user information Apr 09 15:22:44 carlson sshd[3762]: Postponed keyboard-interactive for invalid user admin from 91.197.232.30 port 54870 ssh2 [preauth] Apr 09 15:22:44 carlson sshd[3784]: gkr-pam: error looking up user information Apr 09 15:22:44 carlson sshd[3760]: Postponed keyboard-interactive for invalid user admin from 91.197.232.30 port 54862 ssh2 [preauth] Apr 09 15:22:45 carlson sshd[3783]: pam_unix(sshd:auth): check pass; user unknown Apr 09 15:22:45 carlson sshd[3783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.197.232.30 Apr 09 15:22:45 carlson audit[3783]: USER_AUTH pid=3783 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.197.232.30 addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:45 carlson sshd[3784]: pam_unix(sshd:auth): check pass; user unknown Apr 09 15:22:45 carlson sshd[3784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.197.232.30 Apr 09 15:22:45 carlson audit[3784]: USER_AUTH pid=3784 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.197.232.30 addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:45 carlson org.a11y.Bus[3733]: Activating service name='org.a11y.atspi.Registry' Apr 09 15:22:45 carlson dbus[1712]: [system] Activating via systemd: service name='org.freedesktop.ConsoleKit' unit='console-kit-daemon.service' Apr 09 15:22:45 carlson systemd[1]: Starting Console Manager... Apr 09 15:22:45 carlson org.a11y.Bus[3733]: ** (process:3787): WARNING **: Failed to register client: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.gnome.SessionManager was not provided by any .service files Apr 09 15:22:45 carlson org.a11y.Bus[3733]: Successfully activated service 'org.a11y.atspi.Registry' Apr 09 15:22:45 carlson org.a11y.atspi.Registry[3802]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry Apr 09 15:22:45 carlson console-kit-daemon[3808]: (process:3873): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed Apr 09 15:22:45 carlson console-kit-daemon[3808]: missing action Apr 09 15:22:45 carlson dbus[1712]: [system] Successfully activated service 'org.freedesktop.ConsoleKit' Apr 09 15:22:45 carlson systemd[1]: Started Console Manager. Apr 09 15:22:45 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=console-kit-daemon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:22:45 carlson console-kit-daemon[3808]: (process:3878): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed Apr 09 15:22:45 carlson console-kit-daemon[3808]: missing action Apr 09 15:22:47 carlson sshd[3762]: error: PAM: User not known to the underlying authentication module for illegal user admin from 91.197.232.30 Apr 09 15:22:47 carlson sshd[3762]: Failed keyboard-interactive/pam for invalid user admin from 91.197.232.30 port 54870 ssh2 Apr 09 15:22:47 carlson audit[3762]: USER_AUTH pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=challenge-response acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:47 carlson sshd[3760]: error: PAM: User not known to the underlying authentication module for illegal user admin from 91.197.232.30 Apr 09 15:22:47 carlson sshd[3760]: Failed keyboard-interactive/pam for invalid user admin from 91.197.232.30 port 54862 ssh2 Apr 09 15:22:47 carlson audit[3760]: USER_AUTH pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=challenge-response acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:47 carlson sshd[3762]: Received disconnect from 91.197.232.30: 11: Bye [preauth] Apr 09 15:22:47 carlson audit[3762]: CRYPTO_KEY_USER pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=3763 suid=479 rport=54870 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3762]: USER_ERR pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.197.232.30 addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:47 carlson audit[3762]: CRYPTO_KEY_USER pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=3762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3762]: CRYPTO_KEY_USER pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=3762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3762]: CRYPTO_KEY_USER pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=3762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3762]: CRYPTO_KEY_USER pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=3762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3762]: USER_LOGIN pid=3762 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:47 carlson sshd[3760]: Received disconnect from 91.197.232.30: 11: Bye [preauth] Apr 09 15:22:47 carlson audit[3760]: CRYPTO_KEY_USER pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=3761 suid=479 rport=54862 laddr=75.150.68.97 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3760]: USER_ERR pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.197.232.30 addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:47 carlson audit[3760]: CRYPTO_KEY_USER pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=3760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3760]: CRYPTO_KEY_USER pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=3760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3760]: CRYPTO_KEY_USER pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=3760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3760]: CRYPTO_KEY_USER pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=3760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3760]: USER_LOGIN pid=3760 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:47 carlson audit[3904]: CRYPTO_KEY_USER pid=3904 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=3904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3904]: CRYPTO_KEY_USER pid=3904 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=3904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3904]: CRYPTO_KEY_USER pid=3904 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=3904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3904]: CRYPTO_KEY_USER pid=3904 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=3904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3905]: CRYPTO_KEY_USER pid=3905 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=3905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3905]: CRYPTO_KEY_USER pid=3905 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=3905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3905]: CRYPTO_KEY_USER pid=3905 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=3905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3905]: CRYPTO_KEY_USER pid=3905 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=3905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3902]: CRYPTO_SESSION pid=3902 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=3904 suid=479 rport=55548 laddr=75.150.68.97 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3902]: CRYPTO_SESSION pid=3902 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=3904 suid=479 rport=55548 laddr=75.150.68.97 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3903]: CRYPTO_SESSION pid=3903 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=3905 suid=479 rport=55547 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:47 carlson audit[3903]: CRYPTO_SESSION pid=3903 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=3905 suid=479 rport=55547 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=? res=success' Apr 09 15:22:48 carlson sshd[3903]: Invalid user admin from 91.197.232.30 Apr 09 15:22:48 carlson sshd[3903]: input_userauth_request: invalid user admin [preauth] Apr 09 15:22:48 carlson audit[3903]: USER_LOGIN pid=3903 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:48 carlson sshd[3902]: Invalid user admin from 91.197.232.30 Apr 09 15:22:48 carlson sshd[3902]: input_userauth_request: invalid user admin [preauth] Apr 09 15:22:48 carlson audit[3902]: USER_LOGIN pid=3902 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:48 carlson sshd[3906]: gkr-pam: error looking up user information Apr 09 15:22:48 carlson sshd[3902]: Postponed keyboard-interactive for invalid user admin from 91.197.232.30 port 55548 ssh2 [preauth] Apr 09 15:22:48 carlson sshd[3906]: pam_unix(sshd:auth): check pass; user unknown Apr 09 15:22:48 carlson sshd[3906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.197.232.30 Apr 09 15:22:48 carlson audit[3906]: USER_AUTH pid=3906 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.197.232.30 addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:48 carlson sshd[3908]: gkr-pam: error looking up user information Apr 09 15:22:48 carlson sshd[3903]: Postponed keyboard-interactive for invalid user admin from 91.197.232.30 port 55547 ssh2 [preauth] Apr 09 15:22:49 carlson sshd[3908]: pam_unix(sshd:auth): check pass; user unknown Apr 09 15:22:49 carlson sshd[3908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.197.232.30 Apr 09 15:22:49 carlson audit[3908]: USER_AUTH pid=3908 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.197.232.30 addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:49 carlson audit: NETFILTER_CFG table=filter family=2 entries=183 Apr 09 15:22:49 carlson audit[3914]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=20849c0 items=0 ppid=3207 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:22:49 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D730039312E3139372E3233322E3330002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:22:50 carlson sshd[3902]: error: PAM: User not known to the underlying authentication module for illegal user admin from 91.197.232.30 Apr 09 15:22:50 carlson sshd[3902]: Failed keyboard-interactive/pam for invalid user admin from 91.197.232.30 port 55548 ssh2 Apr 09 15:22:50 carlson audit[3902]: USER_AUTH pid=3902 uid=0 auid=4294967295 ses=4294967295 msg='op=challenge-response acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:22:51 carlson sshd[3903]: error: PAM: User not known to the underlying authentication module for illegal user admin from 91.197.232.30 Apr 09 15:22:51 carlson sshd[3903]: Failed keyboard-interactive/pam for invalid user admin from 91.197.232.30 port 55547 ssh2 Apr 09 15:22:51 carlson audit[3903]: USER_AUTH pid=3903 uid=0 auid=4294967295 ses=4294967295 msg='op=challenge-response acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=91.197.232.30 terminal=ssh res=failed' Apr 09 15:23:01 carlson dbus[1712]: [system] Activating via systemd: service name='org.freedesktop.UDisks2' unit='udisks2.service' Apr 09 15:23:01 carlson systemd[1]: Starting Disk Manager... Apr 09 15:23:01 carlson udisksd[3962]: udisks daemon version 2.1.7 starting Apr 09 15:23:01 carlson dbus[1712]: [system] Successfully activated service 'org.freedesktop.UDisks2' Apr 09 15:23:01 carlson udisksd[3962]: Acquired the name org.freedesktop.UDisks2 on the system message bus Apr 09 15:23:01 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=udisks2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:23:01 carlson systemd[1]: Started Disk Manager. Apr 09 15:23:01 carlson dbus[1712]: [system] Activating via systemd: service name='org.freedesktop.UPower' unit='upower.service' Apr 09 15:23:01 carlson systemd[1]: Starting Daemon for power management... Apr 09 15:23:02 carlson dbus[1712]: [system] Successfully activated service 'org.freedesktop.UPower' Apr 09 15:23:02 carlson systemd[1]: Started Daemon for power management. Apr 09 15:23:02 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=upower comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:23:02 carlson polkitd[1808]: Registered Authentication Agent for unix-session:1 (system bus name :1.28 [/usr/lib64/libexec/polkit-kde-authentication-agent-1], object path /org/kde/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) Apr 09 15:23:02 carlson dbus[1712]: [system] Activating via systemd: service name='org.freedesktop.RealtimeKit1' unit='rtkit-daemon.service' Apr 09 15:23:02 carlson systemd[1]: Starting RealtimeKit Scheduling Policy Service... Apr 09 15:23:02 carlson audit: NETFILTER_CFG table=filter family=10 entries=0 Apr 09 15:23:02 carlson audit: NETFILTER_CFG table=mangle family=10 entries=0 Apr 09 15:23:02 carlson audit: NETFILTER_CFG table=filter family=2 entries=0 Apr 09 15:23:02 carlson audit: NETFILTER_CFG table=raw family=2 entries=0 Apr 09 15:23:02 carlson audit: NETFILTER_CFG table=raw family=10 entries=0 Apr 09 15:23:02 carlson audit: NETFILTER_CFG table=nat family=2 entries=0 Apr 09 15:23:02 carlson audit[4035]: SYSCALL arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7ffe1bf4c7a0 a2=fffffffffffffff5 a3=7fba9693a8c0 items=0 ppid=1 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(t-daemon)" exe="/usr/lib/systemd/systemd" key=(null) Apr 09 15:23:02 carlson audit: PROCTITLE proctitle="(t-daemon)" Apr 09 15:23:03 carlson dbus[1712]: [system] Successfully activated service 'org.freedesktop.RealtimeKit1' Apr 09 15:23:03 carlson systemd[1]: Started RealtimeKit Scheduling Policy Service. Apr 09 15:23:03 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rtkit-daemon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:23:03 carlson rtkit-daemon[4035]: Successfully called chroot. Apr 09 15:23:03 carlson rtkit-daemon[4035]: Successfully dropped privileges. Apr 09 15:23:03 carlson rtkit-daemon[4035]: Successfully limited resources. Apr 09 15:23:03 carlson rtkit-daemon[4035]: Running. Apr 09 15:23:03 carlson rtkit-daemon[4035]: Watchdog thread running. Apr 09 15:23:03 carlson rtkit-daemon[4035]: Canary thread running. Apr 09 15:23:03 carlson rtkit-daemon[4035]: Successfully made thread 4033 of process 4033 (/usr/bin/pulseaudio) owned by 'carlsonj' high priority at nice level -11. Apr 09 15:23:03 carlson rtkit-daemon[4035]: Supervising 1 threads of 1 processes of 1 users. Apr 09 15:23:04 carlson org.kde.KScreen[3733]: kscreen.xrandr: Connected output 447 to CRTC 442 Apr 09 15:23:04 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Detected XRandR 1.4 Apr 09 15:23:04 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Event Base: 89 Apr 09 15:23:04 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Event Error: 147 Apr 09 15:23:04 carlson org.kde.KScreen[3733]: kscreen: Loading "XRandR" backend Apr 09 15:23:06 carlson rtkit-daemon[4035]: Supervising 1 threads of 1 processes of 1 users. Apr 09 15:23:06 carlson rtkit-daemon[4035]: Successfully made thread 4090 of process 4033 (/usr/bin/pulseaudio) owned by 'carlsonj' RT at priority 5. Apr 09 15:23:06 carlson rtkit-daemon[4035]: Supervising 2 threads of 1 processes of 1 users. Apr 09 15:23:06 carlson hp-systray[4087]: hp-systray[4087]: error: option -s not recognized Apr 09 15:23:06 carlson rtkit-daemon[4035]: Supervising 2 threads of 1 processes of 1 users. Apr 09 15:23:06 carlson rtkit-daemon[4035]: Successfully made thread 4095 of process 4033 (/usr/bin/pulseaudio) owned by 'carlsonj' RT at priority 5. Apr 09 15:23:06 carlson rtkit-daemon[4035]: Supervising 3 threads of 1 processes of 1 users. Apr 09 15:23:07 carlson dbus[1712]: [system] Activating via systemd: service name='org.bluez' unit='dbus-org.bluez.service' Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: XRandR::setConfig Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Requested screen size is QSize(1680, 1050) Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Needed CRTCs: 1 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Actions to perform: Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Primary Output: true Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Old: 446 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: New: 447 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Change Screen Size: false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Disable outputs: false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Change outputs: false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Enable outputs: false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: RRSetOutputPrimary Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: New primary: 447 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: XRandR::setConfig done! Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: RRotify_OutputChange Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Output: 446 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: CRTC: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Mode: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Rotation: "Rotate_0" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Connection: "Disconnected" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Subpixel Order: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: RRotify_OutputChange Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Output: 447 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: CRTC: 442 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Mode: 448 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Rotation: "Rotate_0" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Connection: "Connected" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Subpixel Order: 0 Apr 09 15:23:07 carlson dbus[1712]: [system] Activating service name='org.kde.powerdevil.backlighthelper' (using servicehelper) Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: RRScreenChangeNotify Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Window: 85983236 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Root: 474 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Rotation: "Rotate_0" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Size ID: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Size: 1680 1050 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: SizeMM: 474 303 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: RRotify_OutputChange Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Output: 446 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: CRTC: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Mode: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Rotation: "Rotate_0" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Connection: "Disconnected" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Subpixel Order: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: RRotify_OutputChange Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Output: 447 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: CRTC: 442 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Mode: 448 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Rotation: "Rotate_0" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Connection: "Connected" Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xcb.helper: Subpixel Order: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: XRandROutput 446 update Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_connected: 1 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_crtc QObject(0x0) Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: CRTC: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: MODE: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Connection: 1 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Primary: false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Output 446 : connected = false , enabled = false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: XRandROutput 447 update Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_connected: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_crtc XRandRCrtc(0x1b447e0) Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: CRTC: 442 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: MODE: 448 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Connection: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Primary: true Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Output 447 : connected = true , enabled = true Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: XRandROutput 446 update Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_connected: 1 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_crtc QObject(0x0) Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: CRTC: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: MODE: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Connection: 1 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Primary: false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Output 446 : connected = false , enabled = false Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: XRandROutput 447 update Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_connected: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: m_crtc XRandRCrtc(0x1b447e0) Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: CRTC: 442 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: MODE: 448 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Connection: 0 Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Primary: true Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Output 447 : connected = true , enabled = true Apr 09 15:23:07 carlson org.kde.powerdevil.backlighthelper[1712]: powerdevil: no kernel backlight interface found Apr 09 15:23:07 carlson dbus[1712]: [system] Successfully activated service 'org.kde.powerdevil.backlighthelper' Apr 09 15:23:07 carlson org.kde.KScreen[3733]: kscreen.xrandr: Emitting configChanged() Apr 09 15:23:09 carlson org.gtk.vfs.AfcVolumeMonitor[3733]: Volume monitor alive Apr 09 15:23:09 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.148 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=26529 DF PROTO=TCP SPT=41569 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:23:11 carlson org.gnome.OnlineAccounts[3733]: goa-daemon-Message: goa-daemon version 3.20.0 starting Apr 09 15:23:11 carlson hp-upgrade[4232]: hp-upgrade[4232]: error: HPLIP upgrade is disabled by openSUSE for security reasons, see https://bugzilla.novell.com/show_bug.cgi?id=853405 - if you like to upgrade HPLIP, use an openSUSE software package manager like YaST or zypper. Apr 09 15:23:26 carlson purge-kernels[1769]: /sbin/purge-kernels: Nothing to do. Apr 09 15:23:26 carlson systemd[1]: Started Purge old kernels. Apr 09 15:23:26 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=purge-kernels comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:23:26 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=purge-kernels comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:23:26 carlson systemd[1]: Reached target Multi-User System. Apr 09 15:23:26 carlson systemd[1]: Reached target Graphical Interface. Apr 09 15:23:27 carlson systemd[1]: Starting Update UTMP about System Runlevel Changes... Apr 09 15:23:27 carlson audit[4487]: SYSTEM_RUNLEVEL pid=4487 uid=0 auid=4294967295 ses=4294967295 msg='old-level=N new-level=5 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Apr 09 15:23:27 carlson systemd[1]: Started Update UTMP about System Runlevel Changes. Apr 09 15:23:27 carlson systemd[1]: Startup finished in 2.527s (kernel) + 1.951s (initrd) + 1min 51.268s (userspace) = 1min 55.748s. Apr 09 15:23:27 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:23:27 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:23:32 carlson dbus[1712]: [system] Failed to activate service 'org.bluez': timed out Apr 09 15:23:32 carlson pulseaudio[4033]: [pulseaudio] bluez5-util.c: GetManagedObjects() failed: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken. Apr 09 15:23:35 carlson nagios[2738]: SERVICE ALERT: localhost;Current Load;OK;SOFT;2;OK - load average: 4.95, 2.16, 0.81 Apr 09 15:23:46 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=117.34.70.143 DST=75.150.68.99 LEN=48 TOS=0x00 PREC=0x20 TTL=109 ID=44725 PROTO=TCP SPT=37595 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B401010402) Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: (gst-plugin-scanner:4539): GLib-GObject-WARNING **: cannot register existing type 'ClutterGstVideoSink' Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: (gst-plugin-scanner:4539): GLib-GObject-CRITICAL **: g_type_add_interface_static: assertion 'G_TYPE_IS_INSTANTIATABLE (instance_type)' failed Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: (gst-plugin-scanner:4539): GLib-GObject-CRITICAL **: g_type_add_interface_static: assertion 'G_TYPE_IS_INSTANTIATABLE (instance_type)' failed Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: (gst-plugin-scanner:4539): GLib-CRITICAL **: g_once_init_leave: assertion 'result != 0' failed Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: (gst-plugin-scanner:4539): GLib-GObject-CRITICAL **: g_object_new: assertion 'G_TYPE_IS_OBJECT (object_type)' failed Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: ERROR: Caught a segmentation fault while loading plugin file: Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: /usr/lib64/gstreamer-1.0/libgstclutter-3.0.so Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: Please either: Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: - remove it and restart. Apr 09 15:23:46 carlson org.freedesktop.thumbnails.Cache1[3733]: - run with --gst-disable-segtrap --gst-disable-registry-fork and debug. Apr 09 15:23:47 carlson org.freedesktop.thumbnails.Thumbnailer1[3733]: (tumblerd:4546): tumblerd-WARNING **: Failed to start the thumbnail cache service: Another thumbnail cache service is already running Apr 09 15:23:57 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.9 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=13076 DF PROTO=TCP SPT=22013 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:24:07 carlson audit[4580]: USER_AUTH pid=4580 uid=1003 auid=1003 ses=1 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Apr 09 15:24:07 carlson audit[4580]: USER_ACCT pid=4580 uid=1003 auid=1003 ses=1 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Apr 09 15:24:07 carlson sudo[4580]: carlsonj : TTY=pts/0 ; PWD=/home/carlsonj ; USER=root ; COMMAND=/usr/bin/tcsh Apr 09 15:24:07 carlson audit[4580]: USER_CMD pid=4580 uid=1003 auid=1003 ses=1 msg='cwd="/home/carlsonj" cmd="tcsh" terminal=pts/0 res=success' Apr 09 15:24:07 carlson sudo[4580]: pam_unix(sudo:session): session opened for user root by carlsonj(uid=0) Apr 09 15:24:07 carlson audit[4580]: CRED_REFR pid=4580 uid=0 auid=1003 ses=1 msg='op=PAM:setcred grantors=pam_gnome_keyring,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Apr 09 15:24:07 carlson sudo[4580]: pam_systemd(sudo:session): Cannot create session: Already running in a session Apr 09 15:24:07 carlson audit[4580]: USER_START pid=4580 uid=0 auid=1003 ses=1 msg='op=PAM:session_open grantors=pam_limits,pam_unix,pam_umask,pam_systemd,pam_gnome_keyring,pam_env acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Apr 09 15:24:28 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=77.75.77.17 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=50 ID=51768 DF PROTO=TCP SPT=57680 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080A0E1C284E0000000001030308) Apr 09 15:24:29 carlson nmbd[2839]: [2016/04/09 15:24:29.158159, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:24:29 carlson nmbd[2839]: [194B blob data] Apr 09 15:24:31 carlson polkitd[1808]: Registered Authentication Agent for unix-process:4613:18018 (system bus name :1.58 [/usr/bin/pkttyagent --notify-fd 4 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale POSIX) Apr 09 15:24:31 carlson systemd[1]: Stopped Dovecot IMAP/POP3 email server. Apr 09 15:24:31 carlson systemd[1]: Started Dovecot IMAP/POP3 email server. Apr 09 15:24:31 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dovecot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:24:31 carlson polkitd[1808]: Unregistered Authentication Agent for unix-process:4613:18018 (system bus name :1.58, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale POSIX) (disconnected from bus) Apr 09 15:24:31 carlson dovecot[4619]: Error: service(pop3-login): listen(*, 110) failed: Address already in use Apr 09 15:24:31 carlson dovecot[4619]: master: Error: service(pop3-login): listen(*, 110) failed: Address already in use Apr 09 15:24:31 carlson dovecot[4619]: master: Error: service(pop3-login): listen(::, 110) failed: Address already in use Apr 09 15:24:31 carlson dovecot[4619]: master: Error: service(imap-login): listen(*, 143) failed: Address already in use Apr 09 15:24:31 carlson dovecot[4619]: master: Error: service(imap-login): listen(::, 143) failed: Address already in use Apr 09 15:24:31 carlson systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a Apr 09 15:24:31 carlson dovecot[4619]: master: Fatal: Failed to start listeners Apr 09 15:24:31 carlson systemd[1]: dovecot.service: Unit entered failed state. Apr 09 15:24:31 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dovecot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 09 15:24:31 carlson systemd[1]: dovecot.service: Failed with result 'exit-code'. Apr 09 15:24:31 carlson dovecot[4619]: Error: service(pop3-login): listen(::, 110) failed: Address already in use Apr 09 15:24:31 carlson dovecot[4619]: Error: service(imap-login): listen(*, 143) failed: Address already in use Apr 09 15:24:31 carlson dovecot[4619]: Error: service(imap-login): listen(::, 143) failed: Address already in use Apr 09 15:24:31 carlson dovecot[4619]: Fatal: Failed to start listeners Apr 09 15:24:44 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=77.75.77.17 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=50 ID=8209 DF PROTO=TCP SPT=59478 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080A0E1C68710000000001030308) Apr 09 15:24:45 carlson nmbd[2839]: [2016/04/09 15:24:45.177019, 0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2) Apr 09 15:24:45 carlson nmbd[2839]: ***** Apr 09 15:24:45 carlson nmbd[2839]: Apr 09 15:24:45 carlson nmbd[2839]: Samba name server CARLSON is now a local master browser for workgroup WORKINGCODE on subnet 172.16.252.1 Apr 09 15:24:45 carlson nmbd[2839]: Apr 09 15:24:45 carlson nmbd[2839]: ***** Apr 09 15:24:45 carlson nmbd[2839]: [2016/04/09 15:24:45.177255, 0] ../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2) Apr 09 15:24:45 carlson nmbd[2839]: ***** Apr 09 15:24:45 carlson nmbd[2839]: Apr 09 15:24:45 carlson nmbd[2839]: Samba name server CARLSON is now a local master browser for workgroup WORKINGCODE on subnet 172.16.109.1 Apr 09 15:24:45 carlson nmbd[2839]: Apr 09 15:24:45 carlson nmbd[2839]: ***** Apr 09 15:25:26 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=6599 DF PROTO=TCP SPT=57990 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024291030000000001030307) Apr 09 15:25:27 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.134 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=47576 DF PROTO=TCP SPT=19335 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:25:30 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=2.2.2.2 DST=75.150.68.97 LEN=80 TOS=0x00 PREC=0x20 TTL=238 ID=0 PROTO=ICMP TYPE=3 CODE=13 [SRC=75.150.68.97 DST=93.84.68.179 LEN=71 TOS=0x00 PREC=0x00 TTL=236 ID=23364 DF PROTO=UDP SPT=55688 DPT=53 LEN=51 ] Apr 09 15:25:31 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=49018 DF PROTO=TCP SPT=41497 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024295E60000000001030307) Apr 09 15:25:36 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=59107 DF PROTO=TCP SPT=25686 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02429AC90000000001030307) Apr 09 15:25:36 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=44107 DF PROTO=TCP SPT=63869 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02429AC90000000001030307) Apr 09 15:25:43 carlson audit[4643]: CRYPTO_KEY_USER pid=4643 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=4643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson audit[4643]: CRYPTO_KEY_USER pid=4643 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=4643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson audit[4643]: CRYPTO_KEY_USER pid=4643 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=4643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson audit[4643]: CRYPTO_KEY_USER pid=4643 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=4643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson sshd[4642]: Connection closed by 127.0.0.1 [preauth] Apr 09 15:25:43 carlson audit[4642]: CRYPTO_KEY_USER pid=4642 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=4642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson audit[4642]: CRYPTO_KEY_USER pid=4642 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=4642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson audit[4642]: CRYPTO_KEY_USER pid=4642 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=4642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson audit[4642]: CRYPTO_KEY_USER pid=4642 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=4642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:25:43 carlson audit[4642]: USER_LOGIN pid=4642 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' Apr 09 15:25:49 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=108.174.3.202 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=55 ID=11708 DF PROTO=TCP SPT=45050 DPT=25 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A028AD5B40000000001030307) Apr 09 15:25:49 carlson sendmail[4646]: STARTTLS=server, relay=maile-bb.linkedin.com [108.174.3.202], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-GCM-SHA384, bits=256/256 Apr 09 15:25:50 carlson sendmail[4646]: u39JPnra004646: from=, size=28790, class=0, nrcpts=1, msgid=<15608168.2133385.1460229943370.JavaMail.app@ltx1-app11070.prod.linkedin.com>, proto=ESMTP, daemon=MTA, relay=maile-bb.linkedin.com [108.174.3.202] Apr 09 15:25:50 carlson sendmail[4646]: u39JPnra004646: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=1 Fuz2=1 Apr 09 15:25:53 carlson sendmail[4648]: u39JPnra004646: to=, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=59160, dsn=2.0.0, stat=Sent Apr 09 15:25:59 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=202.96.176.229 DST=75.150.68.97 LEN=48 TOS=0x00 PREC=0x20 TTL=106 ID=32063 DF PROTO=TCP SPT=38011 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B401010402) Apr 09 15:26:05 carlson sendmail[4655]: u39JQ3Y5004655: from=, size=4113, class=0, nrcpts=1, msgid=, proto=ESMTP, daemon=MTA, relay=[202.96.176.229] Apr 09 15:26:05 carlson sendmail[4655]: u39JQ3Y5004655: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=49 Fuz1=87 Fuz2=many Apr 09 15:26:08 carlson sendmail[4658]: u39JQ3Y5004655: to=, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=34392, dsn=2.0.0, stat=Sent Apr 09 15:26:11 carlson master[2796]: exiting on SIGTERM/SIGINT Apr 09 15:26:19 carlson polkitd[1808]: Registered Authentication Agent for unix-process:4673:28838 (system bus name :1.60 [/usr/bin/pkttyagent --notify-fd 4 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale POSIX) Apr 09 15:26:19 carlson systemd[1]: Stopped Dovecot IMAP/POP3 email server. Apr 09 15:26:19 carlson systemd[1]: Started Dovecot IMAP/POP3 email server. Apr 09 15:26:19 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dovecot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:26:19 carlson polkitd[1808]: Unregistered Authentication Agent for unix-process:4673:28838 (system bus name :1.60, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale POSIX) (disconnected from bus) Apr 09 15:26:19 carlson dovecot[4679]: master: Dovecot v2.2.22 (fe789d2) starting up for imap, pop3, lmtp (core dumps disabled) Apr 09 15:26:42 carlson audit[4784]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4784 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:26:42 carlson audit[4784]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55968e4eb8d0 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:26:42 carlson dovecot[4684]: auth: Error: stats: open(stats-user) failed: Permission denied Apr 09 15:26:42 carlson audit: PROCTITLE proctitle="dovecot/auth" Apr 09 15:26:43 carlson audit[4795]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4795 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:26:43 carlson audit[4795]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55643e316a40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:26:43 carlson dovecot[4684]: auth-worker(4795): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:26:43 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77 Apr 09 15:26:43 carlson audit[4796]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4796 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:26:43 carlson audit[4796]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55e979ef2a40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:26:43 carlson dovecot[4684]: auth-worker(4796): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:26:43 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77 Apr 09 15:26:43 carlson audit[4797]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4797 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:26:43 carlson audit[4797]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55d4f5483a40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:26:43 carlson dovecot[4684]: auth-worker(4797): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:26:43 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77 Apr 09 15:26:43 carlson audit[4795]: USER_AUTH pid=4795 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:43 carlson audit[4795]: USER_ACCT pid=4795 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:43 carlson audit[4796]: USER_AUTH pid=4796 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:43 carlson audit[4796]: USER_ACCT pid=4796 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:43 carlson audit[4797]: USER_AUTH pid=4797 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:43 carlson audit[4797]: USER_ACCT pid=4797 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:43 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=75.150.68.97, lip=75.150.68.97, mpid=4798, TLS, session= Apr 09 15:26:43 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=75.150.68.97, lip=75.150.68.97, mpid=4799, TLS, session= Apr 09 15:26:43 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=75.150.68.97, lip=75.150.68.97, mpid=4800, TLS, session= Apr 09 15:26:46 carlson audit[4795]: USER_AUTH pid=4795 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:46 carlson audit[4795]: USER_ACCT pid=4795 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:26:46 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=75.150.68.97, lip=75.150.68.97, mpid=4807, TLS, session= Apr 09 15:26:48 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=192.64.237.179 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=51 ID=33195 DF PROTO=TCP SPT=50065 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080A6C27FB360000000001030307) Apr 09 15:26:49 carlson sendmail[4810]: u39JQm4P004810: from=, size=33449, class=-60, nrcpts=1, msgid=<20160409134627.6469932.2346973@sailthru.com>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=dsmgroup-d.sailthru.com [192.64.237.179] Apr 09 15:26:49 carlson sendmail[4810]: u39JQm4P004810: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=many Fuz2=many Apr 09 15:26:52 carlson sendmail[4814]: u39JQm4P004810: to=, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=171744, dsn=2.0.0, stat=Sent Apr 09 15:27:15 carlson nmbd[2839]: [2016/04/09 15:27:15.321692, 0] ../source3/nmbd/nmbd_logonnames.c:162(add_logon_names) Apr 09 15:27:15 carlson nmbd[2839]: add_domain_logon_names: Apr 09 15:27:15 carlson nmbd[2839]: Attempting to become logon server for workgroup WORKINGCODE on subnet 172.16.252.1 Apr 09 15:27:15 carlson nmbd[2839]: [2016/04/09 15:27:15.321895, 0] ../source3/nmbd/nmbd_logonnames.c:162(add_logon_names) Apr 09 15:27:15 carlson nmbd[2839]: add_domain_logon_names: Apr 09 15:27:15 carlson nmbd[2839]: Attempting to become logon server for workgroup WORKINGCODE on subnet 172.16.109.1 Apr 09 15:27:15 carlson nmbd[2839]: [2016/04/09 15:27:15.322004, 0] ../source3/nmbd/nmbd_become_dmb.c:294(become_domain_master_browser_bcast) Apr 09 15:27:15 carlson nmbd[2839]: become_domain_master_browser_bcast: Apr 09 15:27:15 carlson nmbd[2839]: Attempting to become domain master browser on workgroup WORKINGCODE on subnet 172.16.252.1 Apr 09 15:27:15 carlson nmbd[2839]: [2016/04/09 15:27:15.322051, 0] ../source3/nmbd/nmbd_become_dmb.c:307(become_domain_master_browser_bcast) Apr 09 15:27:15 carlson nmbd[2839]: become_domain_master_browser_bcast: querying subnet 172.16.252.1 for domain master browser on workgroup WORKINGCODE Apr 09 15:27:15 carlson nmbd[2839]: [2016/04/09 15:27:15.322109, 0] ../source3/nmbd/nmbd_become_dmb.c:294(become_domain_master_browser_bcast) Apr 09 15:27:15 carlson nmbd[2839]: become_domain_master_browser_bcast: Apr 09 15:27:15 carlson nmbd[2839]: Attempting to become domain master browser on workgroup WORKINGCODE on subnet 172.16.109.1 Apr 09 15:27:15 carlson nmbd[2839]: [2016/04/09 15:27:15.322152, 0] ../source3/nmbd/nmbd_become_dmb.c:307(become_domain_master_browser_bcast) Apr 09 15:27:15 carlson nmbd[2839]: become_domain_master_browser_bcast: querying subnet 172.16.109.1 for domain master browser on workgroup WORKINGCODE Apr 09 15:27:20 carlson nmbd[2839]: [2016/04/09 15:27:20.327964, 0] ../source3/nmbd/nmbd_logonnames.c:123(become_logon_server_success) Apr 09 15:27:20 carlson nmbd[2839]: become_logon_server_success: Samba is now a logon server for workgroup WORKINGCODE on subnet 172.16.252.1 Apr 09 15:27:20 carlson nmbd[2839]: [2016/04/09 15:27:20.328140, 0] ../source3/nmbd/nmbd_logonnames.c:123(become_logon_server_success) Apr 09 15:27:20 carlson nmbd[2839]: become_logon_server_success: Samba is now a logon server for workgroup WORKINGCODE on subnet 172.16.109.1 Apr 09 15:27:20 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=17.155.127.223 DST=75.150.68.97 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=0 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 Apr 09 15:27:20 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=17.155.127.223 DST=75.150.68.97 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=0 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 Apr 09 15:27:20 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=17.155.127.223 DST=75.150.68.97 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=0 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 Apr 09 15:27:21 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=93.174.93.94 DST=75.150.68.99 LEN=40 TOS=0x00 PREC=0x20 TTL=242 ID=33833 PROTO=TCP SPT=59984 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 Apr 09 15:27:21 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=17.155.127.223 DST=75.150.68.97 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=0 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 Apr 09 15:27:21 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=17.155.127.223 DST=75.150.68.97 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=0 DF PROTO=UDP SPT=16387 DPT=16403 LEN=24 Apr 09 15:27:25 carlson nmbd[2839]: [2016/04/09 15:27:25.334043, 0] ../source3/nmbd/nmbd_become_dmb.c:112(become_domain_master_stage2) Apr 09 15:27:25 carlson nmbd[2839]: ***** Apr 09 15:27:25 carlson nmbd[2839]: Apr 09 15:27:25 carlson nmbd[2839]: Samba server CARLSON is now a domain master browser for workgroup WORKINGCODE on subnet 172.16.252.1 Apr 09 15:27:25 carlson nmbd[2839]: Apr 09 15:27:25 carlson nmbd[2839]: ***** Apr 09 15:27:25 carlson nmbd[2839]: [2016/04/09 15:27:25.334196, 0] ../source3/nmbd/nmbd_become_dmb.c:112(become_domain_master_stage2) Apr 09 15:27:25 carlson nmbd[2839]: ***** Apr 09 15:27:25 carlson nmbd[2839]: Apr 09 15:27:25 carlson nmbd[2839]: Samba server CARLSON is now a domain master browser for workgroup WORKINGCODE on subnet 172.16.109.1 Apr 09 15:27:25 carlson nmbd[2839]: Apr 09 15:27:25 carlson nmbd[2839]: ***** Apr 09 15:27:39 carlson audit[4795]: USER_AUTH pid=4795 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:27:39 carlson audit[4795]: USER_ACCT pid=4795 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="carlsonj" exe="/usr/lib/dovecot/auth" hostname=75.150.68.97 addr=75.150.68.97 terminal=dovecot res=success' Apr 09 15:27:39 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=75.150.68.97, lip=75.150.68.97, mpid=4838, TLS, session=<8SEBThIw8sBLlkRh> Apr 09 15:27:45 carlson nmbd[2839]: [2016/04/09 15:27:45.355518, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:27:45 carlson nmbd[2839]: [194B blob data] Apr 09 15:28:01 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.27 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=57629 DF PROTO=TCP SPT=34745 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:28:04 carlson dovecot[4684]: imap(carlsonj): Logged out in=371 out=1115 Apr 09 15:28:04 carlson dovecot[4684]: imap(carlsonj): Logged out in=785 out=27047 Apr 09 15:28:04 carlson dovecot[4684]: imap(carlsonj): Logged out in=1053 out=337296 Apr 09 15:28:04 carlson dovecot[4684]: imap(carlsonj): Logged out in=1883 out=360371 Apr 09 15:28:04 carlson dovecot[4684]: imap(carlsonj): Logged out in=1571 out=113683 Apr 09 15:28:13 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=3000 DF PROTO=TCP SPT=10414 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0243343A0000000001030307) Apr 09 15:28:18 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=41383 DF PROTO=TCP SPT=11402 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0243391D0000000001030307) Apr 09 15:28:19 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=40593 DF PROTO=TCP SPT=49499 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02433A170000000001030307) Apr 09 15:28:23 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=46432 DF PROTO=TCP SPT=33307 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02433E000000000001030307) Apr 09 15:28:50 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=212.48.116.201 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=39125 DF PROTO=TCP SPT=3778 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A1E557B090000000001030301) Apr 09 15:28:52 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=212.48.116.201 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=32454 DF PROTO=TCP SPT=4802 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A1E557BEF0000000001030301) Apr 09 15:28:53 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=212.48.116.201 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=39126 DF PROTO=TCP SPT=3778 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A1E557C350000000001030301) Apr 09 15:28:55 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=212.48.116.201 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=32455 DF PROTO=TCP SPT=4802 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A1E557D1B0000000001030301) Apr 09 15:28:59 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=212.48.116.201 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=39127 DF PROTO=TCP SPT=3778 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A1E557E8D0000000001030301) Apr 09 15:29:19 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.19 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=39035 DF PROTO=TCP SPT=52218 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:29:22 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=198.7.229.2 DST=75.150.68.97 LEN=64 TOS=0x00 PREC=0x20 TTL=55 ID=45474 DF PROTO=TCP SPT=5961 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (02040564010303050101080A3241F9AB0000000004020000) Apr 09 15:29:22 carlson audit[4870]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4870 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:29:22 carlson audit[4870]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=558accff38d0 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:29:22 carlson dovecot[4684]: auth: Error: stats: open(stats-user) failed: Permission denied Apr 09 15:29:22 carlson audit: PROCTITLE proctitle="dovecot/auth" Apr 09 15:29:23 carlson audit[4872]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4872 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:29:23 carlson audit[4872]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55f4a8087a40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:29:23 carlson dovecot[4684]: auth-worker(4872): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:29:23 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77 Apr 09 15:29:23 carlson audit[4872]: USER_AUTH pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="madeline" exe="/usr/lib/dovecot/auth" hostname=198.7.229.2 addr=198.7.229.2 terminal=dovecot res=success' Apr 09 15:29:23 carlson audit[4872]: USER_ACCT pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="madeline" exe="/usr/lib/dovecot/auth" hostname=198.7.229.2 addr=198.7.229.2 terminal=dovecot res=success' Apr 09 15:29:23 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=198.7.229.2, lip=75.150.68.97, mpid=4873, TLS, session=<+CUoVBIwSRfGB+UC> Apr 09 15:29:26 carlson audit[4872]: USER_AUTH pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="madeline" exe="/usr/lib/dovecot/auth" hostname=198.7.229.2 addr=198.7.229.2 terminal=dovecot res=success' Apr 09 15:29:26 carlson audit[4872]: USER_ACCT pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="madeline" exe="/usr/lib/dovecot/auth" hostname=198.7.229.2 addr=198.7.229.2 terminal=dovecot res=success' Apr 09 15:29:26 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=198.7.229.2, lip=75.150.68.97, mpid=4875, TLS, session=<7GxZVBIw633GB+UC> Apr 09 15:29:43 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=166.171.186.154 DST=75.150.68.97 LEN=64 TOS=0x00 PREC=0x20 TTL=53 ID=36847 DF PROTO=TCP SPT=43554 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (0204055A010303050101080A78D900170000000004020000) Apr 09 15:30:02 carlson nmbd[2839]: [2016/04/09 15:30:02.093167, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:30:02 carlson nmbd[2839]: [194B blob data] Apr 09 15:30:12 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=166.171.186.154 DST=75.150.68.97 LEN=64 TOS=0x00 PREC=0x20 TTL=53 ID=51952 DF PROTO=TCP SPT=14784 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (0204055A010303050101080A78D96D7E0000000004020000) Apr 09 15:30:13 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=166.171.186.154 DST=75.150.68.97 LEN=64 TOS=0x00 PREC=0x20 TTL=53 ID=58871 DF PROTO=TCP SPT=57058 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (0204055A010303050101080A78D9713A0000000004020000) Apr 09 15:30:29 carlson audit[4872]: USER_ACCT pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:29 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=166.171.186.154, lip=75.150.68.97, mpid=4942, TLS, session= Apr 09 15:30:32 carlson dovecot[4684]: imap(beth): Logged out in=470 out=4490 Apr 09 15:30:32 carlson dovecot[4684]: imap(beth): Logged out in=798 out=2207 Apr 09 15:30:32 carlson audit[4872]: USER_AUTH pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:32 carlson audit[4872]: USER_ACCT pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:32 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=166.171.186.154, lip=75.150.68.97, mpid=4944, TLS, session= Apr 09 15:30:33 carlson dovecot[4684]: imap(beth): Connection closed in=789 out=2163 Apr 09 15:30:34 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=166.171.186.154 DST=75.150.68.97 LEN=64 TOS=0x00 PREC=0x20 TTL=53 ID=20317 DF PROTO=TCP SPT=58075 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (0204055A010303050101080A78D9C06C0000000004020000) Apr 09 15:30:35 carlson audit[4872]: USER_AUTH pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:35 carlson audit[4872]: USER_ACCT pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:35 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=166.171.186.154, lip=75.150.68.97, mpid=4946, TLS, session= Apr 09 15:30:38 carlson dovecot[4684]: imap(beth): Logged out in=110 out=2002 Apr 09 15:30:38 carlson audit[4872]: USER_AUTH pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:38 carlson audit[4872]: USER_ACCT pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:38 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=166.171.186.154, lip=75.150.68.97, mpid=4948, TLS, session= Apr 09 15:30:40 carlson audit[4872]: USER_AUTH pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:40 carlson audit[4872]: USER_ACCT pid=4872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=166.171.186.154 addr=166.171.186.154 terminal=dovecot res=success' Apr 09 15:30:40 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=166.171.186.154, lip=75.150.68.97, mpid=4950, TLS, session= Apr 09 15:30:41 carlson dovecot[4684]: imap(beth): Logged out in=95 out=461 Apr 09 15:30:43 carlson audit[4953]: CRYPTO_KEY_USER pid=4953 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=4953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson audit[4953]: CRYPTO_KEY_USER pid=4953 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=4953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson audit[4953]: CRYPTO_KEY_USER pid=4953 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=4953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson sshd[4952]: Connection closed by 127.0.0.1 [preauth] Apr 09 15:30:43 carlson audit[4953]: CRYPTO_KEY_USER pid=4953 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=4953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson audit[4952]: CRYPTO_KEY_USER pid=4952 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=4952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson audit[4952]: CRYPTO_KEY_USER pid=4952 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=4952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson audit[4952]: CRYPTO_KEY_USER pid=4952 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=4952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson audit[4952]: CRYPTO_KEY_USER pid=4952 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=4952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:30:43 carlson audit[4952]: USER_LOGIN pid=4952 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' Apr 09 15:30:46 carlson dovecot[4684]: imap(beth): Logged out in=798 out=2207 Apr 09 15:31:15 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=35492 DF PROTO=TCP SPT=47478 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0243E5E40000000001030307) Apr 09 15:31:15 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=32798 DF PROTO=TCP SPT=30484 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0243E5E50000000001030307) Apr 09 15:31:20 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=62353 DF PROTO=TCP SPT=14497 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0243EAC70000000001030307) Apr 09 15:31:20 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=29151 DF PROTO=TCP SPT=31565 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0243EAC80000000001030307) Apr 09 15:31:22 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=69.129.45.106 DST=75.150.68.97 LEN=52 TOS=0x00 PREC=0x20 TTL=117 ID=2655 DF PROTO=TCP SPT=55795 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) Apr 09 15:31:23 carlson saslauthd[2328]: gkr-pam: error looking up user information Apr 09 15:31:23 carlson saslauthd[2328]: pam_unix(smtp:auth): check pass; user unknown Apr 09 15:31:23 carlson audit[2328]: USER_AUTH pid=2328 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/saslauthd" hostname=? addr=? terminal=? res=failed' Apr 09 15:31:23 carlson saslauthd[2328]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Apr 09 15:31:24 carlson sendmail[4960]: u39JVN1m004960: from=, size=42437, class=-60, nrcpts=1, msgid=<20160409153123.6469797.75336@sailthru.com>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=mx-aol-f.sailthru.com [192.64.236.208] Apr 09 15:31:24 carlson sendmail[4960]: u39JVN1m004960: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=many Fuz2=many Apr 09 15:31:25 carlson saslauthd[2328]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Apr 09 15:31:25 carlson saslauthd[2328]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Apr 09 15:31:25 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=52940 DF PROTO=TCP SPT=53589 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0243EFAA0000000001030307) Apr 09 15:31:25 carlson sendmail[4958]: u39JVMam004958: h69-129-45-106.lncswi.dedicated.static.tds.net [69.129.45.106] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Apr 09 15:31:26 carlson sendmail[4962]: u39JVN1m004960: to=, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=180725, dsn=2.0.0, stat=Sent Apr 09 15:31:48 carlson nmbd[2839]: [2016/04/09 15:31:48.818519, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:31:48 carlson nmbd[2839]: [194B blob data] Apr 09 15:31:55 carlson audit[4974]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4974 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:31:55 carlson audit[4974]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55c0d39118d0 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:31:55 carlson dovecot[4684]: auth: Error: stats: open(stats-user) failed: Permission denied Apr 09 15:31:55 carlson audit: PROCTITLE proctitle="dovecot/auth" Apr 09 15:31:55 carlson audit[4976]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=4976 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:31:55 carlson audit[4976]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55ed3f29da40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:31:55 carlson dovecot[4684]: auth-worker(4976): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:31:55 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77 Apr 09 15:31:55 carlson audit[4976]: USER_AUTH pid=4976 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=192.168.254.179 addr=192.168.254.179 terminal=dovecot res=success' Apr 09 15:31:55 carlson audit[4976]: USER_ACCT pid=4976 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=192.168.254.179 addr=192.168.254.179 terminal=dovecot res=success' Apr 09 15:31:55 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=192.168.254.179, lip=75.150.68.97, mpid=4977, TLS, session= Apr 09 15:32:00 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=162.244.32.49 DST=75.150.68.97 LEN=40 TOS=0x00 PREC=0x20 TTL=242 ID=54321 PROTO=TCP SPT=47039 DPT=21320 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 09 15:32:05 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.30 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=12601 DF PROTO=TCP SPT=45830 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:32:11 carlson clamd[3295]: SelfCheck: Database status OK. Apr 09 15:33:11 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.22 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=43237 DF PROTO=TCP SPT=49739 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:33:41 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=199.7.204.12 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=47 ID=56219 DF PROTO=TCP SPT=49157 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080A1DB353C70000000001030307) Apr 09 15:33:43 carlson sendmail[4998]: u39JXgEb004998: from=, size=46534, class=0, nrcpts=1, msgid=<0.0.12.99.1D1928595BCD8C6.0@omp.email.stitchfix.com>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=omp.email.stitchfix.com [199.7.204.12] Apr 09 15:33:43 carlson sendmail[4998]: u39JXgEb004998: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=2 Fuz2=many Apr 09 15:33:45 carlson sendmail[5000]: u39JXgEb004998: to=, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=76825, dsn=2.0.0, stat=Sent Apr 09 15:33:54 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=198.7.229.2 DST=75.150.68.97 LEN=64 TOS=0x00 PREC=0x20 TTL=55 ID=35805 DF PROTO=TCP SPT=22253 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (02040564010303050101080A32461DDD0000000004020000) Apr 09 15:33:54 carlson audit[5013]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=5013 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:33:54 carlson audit[5013]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55f729f08a40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:33:54 carlson dovecot[4684]: auth-worker(5013): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:33:54 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77 Apr 09 15:33:54 carlson audit[5013]: USER_AUTH pid=5013 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="madeline" exe="/usr/lib/dovecot/auth" hostname=198.7.229.2 addr=198.7.229.2 terminal=dovecot res=success' Apr 09 15:33:54 carlson audit[5013]: USER_ACCT pid=5013 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="madeline" exe="/usr/lib/dovecot/auth" hostname=198.7.229.2 addr=198.7.229.2 terminal=dovecot res=success' Apr 09 15:33:54 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=198.7.229.2, lip=75.150.68.97, mpid=5014, TLS, session= Apr 09 15:34:03 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=47935 DF PROTO=TCP SPT=43792 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02448A4A0000000001030307) Apr 09 15:34:08 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=47389 DF PROTO=TCP SPT=10717 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02448F2D0000000001030307) Apr 09 15:34:09 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=32271 DF PROTO=TCP SPT=27779 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024490270000000001030307) Apr 09 15:34:13 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=8403 DF PROTO=TCP SPT=11936 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024494100000000001030307) Apr 09 15:34:55 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=66.231.95.29 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=48 ID=61660 DF PROTO=TCP SPT=42372 DPT=25 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A10AFF9360000000001030307) Apr 09 15:34:56 carlson sendmail[5021]: STARTTLS=server, relay=mta1.official.nike.com [66.231.95.29], version=TLSv1/SSLv3, verify=NO, cipher=DHE-RSA-AES256-SHA, bits=256/256 Apr 09 15:34:57 carlson sendmail[5021]: u39JYunF005021: from=, size=43358, class=0, nrcpts=1, msgid=<61901f88-ad23-4128-877f-85f7bab7f021@xtnvmta410.xt.local>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=mta1.official.nike.com [66.231.95.29] Apr 09 15:34:58 carlson sendmail[5021]: u39JYunF005021: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=many Fuz2=many Apr 09 15:35:00 carlson sendmail[5023]: u39JYunF005021: to=, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=73727, dsn=2.0.0, stat=Sent Apr 09 15:35:43 carlson audit[5042]: CRYPTO_KEY_USER pid=5042 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson audit[5042]: CRYPTO_KEY_USER pid=5042 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson sshd[5041]: Connection closed by 127.0.0.1 [preauth] Apr 09 15:35:43 carlson audit[5042]: CRYPTO_KEY_USER pid=5042 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson audit[5042]: CRYPTO_KEY_USER pid=5042 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson audit[5041]: CRYPTO_KEY_USER pid=5041 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson audit[5041]: CRYPTO_KEY_USER pid=5041 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson audit[5041]: CRYPTO_KEY_USER pid=5041 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson audit[5041]: CRYPTO_KEY_USER pid=5041 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:35:43 carlson audit[5041]: USER_LOGIN pid=5041 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' Apr 09 15:35:46 carlson audit[5044]: USER_AUTH pid=5044 uid=1003 auid=1003 ses=1 msg='op=PAM:unix_chkpwd acct="carlsonj" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' Apr 09 15:35:57 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=72.166.182.198 DST=75.150.68.97 LEN=44 TOS=0x00 PREC=0x20 TTL=56 ID=26782 DF PROTO=TCP SPT=44564 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B4) Apr 09 15:35:58 carlson sendmail[5058]: u39JZved005058: from=, size=57992, class=0, nrcpts=1, msgid=<588.926243531.201604091727325351146.0028318428@mail.bhg.com>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=p1-182198.mail.shape.com [72.166.182.198] Apr 09 15:35:58 carlson sendmail[5058]: u39JZved005058: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=many Fuz2=many Apr 09 15:36:00 carlson sendmail[5107]: u39JZved005058: to=, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=88281, dsn=2.0.0, stat=Sent Apr 09 15:36:09 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.11 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=51775 DF PROTO=TCP SPT=60523 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:36:40 carlson systemd[1]: Starting Cleanup of Temporary Directories... Apr 09 15:36:41 carlson systemd[1]: Started Cleanup of Temporary Directories. Apr 09 15:36:41 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:36:41 carlson audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:36:59 carlson nmbd[2839]: [2016/04/09 15:36:59.100583, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:36:59 carlson nmbd[2839]: [194B blob data] Apr 09 15:37:02 carlson audit[5299]: CRYPTO_KEY_USER pid=5299 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:02 carlson audit[5299]: CRYPTO_KEY_USER pid=5299 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:02 carlson audit[5299]: CRYPTO_KEY_USER pid=5299 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:02 carlson audit[5299]: CRYPTO_KEY_USER pid=5299 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:02 carlson audit[5298]: CRYPTO_SESSION pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 spid=5299 suid=479 rport=39505 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:02 carlson audit[5298]: CRYPTO_SESSION pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 spid=5299 suid=479 rport=39505 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:04 carlson kernel: md: md127 stopped. Apr 09 15:37:04 carlson kernel: md: bind Apr 09 15:37:04 carlson kernel: md: bind Apr 09 15:37:04 carlson kernel: md: bind Apr 09 15:37:04 carlson kernel: md: bind Apr 09 15:37:04 carlson udisksd[3962]: Error creating watch for file /sys/devices/virtual/block/md127/md/sync_action: No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson udisksd[3962]: Error creating watch for file /sys/devices/virtual/block/md127/md/degraded: No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson udisksd[3962]: Error reading sysfs attr `/sys/devices/virtual/block/md127/md/degraded': Failed to open file '/sys/devices/virtual/block/md127/md/degraded': No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson udisksd[3962]: Error reading sysfs attr `/sys/devices/virtual/block/md127/md/sync_action': Failed to open file '/sys/devices/virtual/block/md127/md/sync_action': No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson udisksd[3962]: Error reading sysfs attr `/sys/devices/virtual/block/md127/md/sync_completed': Failed to open file '/sys/devices/virtual/block/md127/md/sync_completed': No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson udisksd[3962]: Error reading sysfs attr `/sys/devices/virtual/block/md127/md/degraded': Failed to open file '/sys/devices/virtual/block/md127/md/degraded': No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson udisksd[3962]: Error reading sysfs attr `/sys/devices/virtual/block/md127/md/sync_action': Failed to open file '/sys/devices/virtual/block/md127/md/sync_action': No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson udisksd[3962]: Error reading sysfs attr `/sys/devices/virtual/block/md127/md/sync_completed': Failed to open file '/sys/devices/virtual/block/md127/md/sync_completed': No such file or directory (g-file-error-quark, 4) Apr 09 15:37:04 carlson kernel: raid6: sse2x1 gen() 5276 MB/s Apr 09 15:37:04 carlson kernel: raid6: sse2x1 xor() 5486 MB/s Apr 09 15:37:04 carlson kernel: raid6: sse2x2 gen() 11225 MB/s Apr 09 15:37:04 carlson kernel: raid6: sse2x2 xor() 9061 MB/s Apr 09 15:37:04 carlson kernel: raid6: sse2x4 gen() 16448 MB/s Apr 09 15:37:04 carlson kernel: raid6: sse2x4 xor() 11496 MB/s Apr 09 15:37:04 carlson kernel: raid6: avx2x1 gen() 21801 MB/s Apr 09 15:37:04 carlson kernel: raid6: avx2x2 gen() 25252 MB/s Apr 09 15:37:04 carlson kernel: raid6: avx2x4 gen() 29396 MB/s Apr 09 15:37:04 carlson kernel: raid6: using algorithm avx2x4 gen() 29396 MB/s Apr 09 15:37:04 carlson kernel: raid6: using avx2x2 recovery algorithm Apr 09 15:37:04 carlson kernel: async_tx: api initialized (async) Apr 09 15:37:04 carlson kernel: xor: automatically using best checksumming function: Apr 09 15:37:05 carlson kernel: avx : 14805.000 MB/sec Apr 09 15:37:05 carlson kernel: md: raid6 personality registered for level 6 Apr 09 15:37:05 carlson kernel: md: raid5 personality registered for level 5 Apr 09 15:37:05 carlson kernel: md: raid4 personality registered for level 4 Apr 09 15:37:05 carlson kernel: md/raid:md127: device sdd1 operational as raid disk 0 Apr 09 15:37:05 carlson kernel: md/raid:md127: device sdg1 operational as raid disk 3 Apr 09 15:37:05 carlson kernel: md/raid:md127: device sdf1 operational as raid disk 2 Apr 09 15:37:05 carlson kernel: md/raid:md127: device sde1 operational as raid disk 1 Apr 09 15:37:05 carlson kernel: md/raid:md127: allocated 4374kB Apr 09 15:37:05 carlson kernel: md/raid:md127: raid level 5 active with 4 out of 4 devices, algorithm 2 Apr 09 15:37:05 carlson kernel: RAID conf printout: Apr 09 15:37:05 carlson kernel: --- level:5 rd:4 wd:4 Apr 09 15:37:05 carlson kernel: disk 0, o:1, dev:sdd1 Apr 09 15:37:05 carlson kernel: disk 1, o:1, dev:sde1 Apr 09 15:37:05 carlson kernel: disk 2, o:1, dev:sdf1 Apr 09 15:37:05 carlson kernel: disk 3, o:1, dev:sdg1 Apr 09 15:37:05 carlson kernel: created bitmap (8 pages) for device md127 Apr 09 15:37:05 carlson kernel: md127: bitmap initialized from disk: read 1 pages, set 0 of 14905 bits Apr 09 15:37:05 carlson kernel: md127: detected capacity change from 0 to 3000608489472 Apr 09 15:37:05 carlson systemd[1]: Starting MD array monitor... Apr 09 15:37:05 carlson sshd[5298]: User root from 117.34.70.143 not allowed because not listed in AllowUsers Apr 09 15:37:05 carlson sshd[5298]: input_userauth_request: invalid user root [preauth] Apr 09 15:37:05 carlson systemd[1]: Started MD array monitor. Apr 09 15:37:05 carlson audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=mdmonitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 09 15:37:06 carlson audit[5363]: CRYPTO_KEY_USER pid=5363 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5363]: CRYPTO_KEY_USER pid=5363 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5363]: CRYPTO_KEY_USER pid=5363 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5363]: CRYPTO_KEY_USER pid=5363 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson sshd[5298]: Received disconnect from 117.34.70.143: 11: Bye Bye [preauth] Apr 09 15:37:06 carlson audit[5298]: CRYPTO_KEY_USER pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=5299 suid=479 rport=39505 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5298]: USER_ERR pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=117.34.70.143 addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:06 carlson audit[5298]: CRYPTO_KEY_USER pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5298]: CRYPTO_KEY_USER pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5298]: CRYPTO_KEY_USER pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5298]: CRYPTO_KEY_USER pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5298]: USER_LOGIN pid=5298 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:06 carlson audit[5362]: CRYPTO_SESSION pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 spid=5363 suid=479 rport=40894 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:06 carlson audit[5362]: CRYPTO_SESSION pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 spid=5363 suid=479 rport=40894 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:08 carlson sshd[5362]: Invalid user oracle from 117.34.70.143 Apr 09 15:37:08 carlson sshd[5362]: input_userauth_request: invalid user oracle [preauth] Apr 09 15:37:08 carlson audit[5362]: USER_LOGIN pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:09 carlson audit[5365]: CRYPTO_KEY_USER pid=5365 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5365]: CRYPTO_KEY_USER pid=5365 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5365]: CRYPTO_KEY_USER pid=5365 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5365]: CRYPTO_KEY_USER pid=5365 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson sshd[5362]: Received disconnect from 117.34.70.143: 11: Bye Bye [preauth] Apr 09 15:37:09 carlson audit[5362]: CRYPTO_KEY_USER pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=5363 suid=479 rport=40894 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5362]: USER_ERR pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=117.34.70.143 addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:09 carlson audit[5362]: CRYPTO_KEY_USER pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5362]: CRYPTO_KEY_USER pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5362]: CRYPTO_KEY_USER pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5362]: CRYPTO_KEY_USER pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5362]: USER_LOGIN pid=5362 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:09 carlson audit[5364]: CRYPTO_SESSION pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 spid=5365 suid=479 rport=42068 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:09 carlson audit[5364]: CRYPTO_SESSION pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 spid=5365 suid=479 rport=42068 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:10 carlson sshd[5364]: Invalid user oracle from 117.34.70.143 Apr 09 15:37:10 carlson sshd[5364]: input_userauth_request: invalid user oracle [preauth] Apr 09 15:37:10 carlson audit[5364]: USER_LOGIN pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:11 carlson sshd[5364]: Received disconnect from 117.34.70.143: 11: Bye Bye [preauth] Apr 09 15:37:11 carlson audit[5364]: CRYPTO_KEY_USER pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=5365 suid=479 rport=42068 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5364]: USER_ERR pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=117.34.70.143 addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:11 carlson audit[5364]: CRYPTO_KEY_USER pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5364]: CRYPTO_KEY_USER pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5364]: CRYPTO_KEY_USER pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5364]: CRYPTO_KEY_USER pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5364]: USER_LOGIN pid=5364 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:11 carlson audit[5368]: CRYPTO_KEY_USER pid=5368 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5368]: CRYPTO_KEY_USER pid=5368 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5368]: CRYPTO_KEY_USER pid=5368 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:11 carlson audit[5368]: CRYPTO_KEY_USER pid=5368 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:12 carlson audit[5367]: CRYPTO_SESSION pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 spid=5368 suid=479 rport=42896 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:12 carlson audit[5367]: CRYPTO_SESSION pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 spid=5368 suid=479 rport=42896 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:14 carlson sshd[5367]: Invalid user test from 117.34.70.143 Apr 09 15:37:14 carlson sshd[5367]: input_userauth_request: invalid user test [preauth] Apr 09 15:37:14 carlson audit[5367]: USER_LOGIN pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:14 carlson sshd[5367]: Received disconnect from 117.34.70.143: 11: Bye Bye [preauth] Apr 09 15:37:14 carlson audit[5367]: CRYPTO_KEY_USER pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=5368 suid=479 rport=42896 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:14 carlson audit[5367]: USER_ERR pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=117.34.70.143 addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:14 carlson audit[5367]: CRYPTO_KEY_USER pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:14 carlson audit[5367]: CRYPTO_KEY_USER pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:14 carlson audit[5367]: CRYPTO_KEY_USER pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:14 carlson audit[5367]: CRYPTO_KEY_USER pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:14 carlson audit[5367]: USER_LOGIN pid=5367 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:15 carlson audit[5370]: CRYPTO_KEY_USER pid=5370 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:15 carlson audit[5370]: CRYPTO_KEY_USER pid=5370 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:15 carlson audit[5370]: CRYPTO_KEY_USER pid=5370 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:15 carlson audit[5370]: CRYPTO_KEY_USER pid=5370 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:15 carlson audit[5369]: CRYPTO_SESSION pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 spid=5370 suid=479 rport=44130 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:15 carlson audit[5369]: CRYPTO_SESSION pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 spid=5370 suid=479 rport=44130 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:16 carlson sshd[5369]: Invalid user test from 117.34.70.143 Apr 09 15:37:16 carlson sshd[5369]: input_userauth_request: invalid user test [preauth] Apr 09 15:37:16 carlson audit[5369]: USER_LOGIN pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:16 carlson sshd[5369]: Received disconnect from 117.34.70.143: 11: Bye Bye [preauth] Apr 09 15:37:16 carlson audit[5369]: CRYPTO_KEY_USER pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=5370 suid=479 rport=44130 laddr=75.150.68.99 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:16 carlson audit[5369]: USER_ERR pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=117.34.70.143 addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:16 carlson audit[5369]: CRYPTO_KEY_USER pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:16 carlson audit[5369]: CRYPTO_KEY_USER pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:16 carlson audit[5369]: CRYPTO_KEY_USER pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:16 carlson audit[5369]: CRYPTO_KEY_USER pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:16 carlson audit[5369]: USER_LOGIN pid=5369 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28696E76616C6964207573657229 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=ssh res=failed' Apr 09 15:37:17 carlson audit[5375]: CRYPTO_KEY_USER pid=5375 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=5375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:17 carlson audit[5375]: CRYPTO_KEY_USER pid=5375 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=5375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:17 carlson audit[5375]: CRYPTO_KEY_USER pid=5375 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=5375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:17 carlson audit[5375]: CRYPTO_KEY_USER pid=5375 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=5375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=117.34.70.143 terminal=? res=success' Apr 09 15:37:17 carlson audit: NETFILTER_CFG table=filter family=2 entries=184 Apr 09 15:37:17 carlson audit[5376]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=bc6b40 items=0 ppid=3207 pid=5376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:37:17 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D7373680031002D73003131372E33342E37302E313433002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:37:25 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=199.16.156.163 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=50 ID=51734 DF PROTO=TCP SPT=45068 DPT=25 WINDOW=2920 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030300) Apr 09 15:37:25 carlson sendmail[5378]: STARTTLS=server, relay=spring-chicken-ax.twitter.com [199.16.156.163], version=TLSv1/SSLv3, verify=NO, cipher=AES128-GCM-SHA256, bits=128/128 Apr 09 15:37:26 carlson sendmail[5378]: u39JbPMh005378: from=, size=72651, class=-60, nrcpts=1, msgid=<0D.98.09440.70559075@twitter.com>, proto=ESMTP, daemon=MTA, relay=spring-chicken-ax.twitter.com [199.16.156.163] Apr 09 15:37:30 carlson sendmail[5378]: u39JbPMh005378: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=1 Fuz2=1 Apr 09 15:37:32 carlson sendmail[5380]: u39JbPMh005378: to=, delay=00:00:07, xdelay=00:00:02, mailer=local, pri=211025, dsn=2.0.0, stat=Sent Apr 09 15:37:34 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=188.152.13.26 DST=75.150.68.99 LEN=98 TOS=0x00 PREC=0x20 TTL=51 ID=15148 PROTO=ICMP TYPE=3 CODE=3 [SRC=75.150.68.99 DST=188.152.13.26 LEN=70 TOS=0x00 PREC=0x00 TTL=241 ID=25156 DF PROTO=UDP SPT=55695 DPT=53 LEN=50 ] Apr 09 15:38:31 carlson kernel: EXT4-fs (md127): mounted filesystem with ordered data mode. Opts: acl,user_xattr Apr 09 15:39:52 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=14517 DF PROTO=TCP SPT=22862 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0245DF600000000001030307) Apr 09 15:40:13 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.159 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=35839 DF PROTO=TCP SPT=26914 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:40:38 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=190.83.158.126 DST=75.150.68.99 LEN=108 TOS=0x00 PREC=0x20 TTL=48 ID=58408 PROTO=ICMP TYPE=3 CODE=3 [SRC=75.150.68.99 DST=190.83.158.126 LEN=80 TOS=0x00 PREC=0x00 TTL=234 ID=23876 DF PROTO=UDP SPT=55690 DPT=53 LEN=60 ] Apr 09 15:40:43 carlson audit[6106]: CRYPTO_KEY_USER pid=6106 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson audit[6106]: CRYPTO_KEY_USER pid=6106 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson sshd[6105]: Connection closed by 127.0.0.1 [preauth] Apr 09 15:40:43 carlson audit[6106]: CRYPTO_KEY_USER pid=6106 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson audit[6106]: CRYPTO_KEY_USER pid=6106 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson audit[6105]: CRYPTO_KEY_USER pid=6105 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson audit[6105]: CRYPTO_KEY_USER pid=6105 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson audit[6105]: CRYPTO_KEY_USER pid=6105 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson audit[6105]: CRYPTO_KEY_USER pid=6105 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:40:43 carlson audit[6105]: USER_LOGIN pid=6105 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' Apr 09 15:40:56 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.155 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=34483 DF PROTO=TCP SPT=43860 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:41:36 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=104.47.0.248 DST=75.150.68.97 LEN=52 TOS=0x02 PREC=0x20 TTL=39 ID=5925 DF PROTO=TCP SPT=34368 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 OPT (020405B40103030801010402) Apr 09 15:41:37 carlson sendmail[6436]: STARTTLS=server, relay=mail-he1eur01hn0248.outbound.protection.outlook.com [104.47.0.248], version=TLSv1/SSLv3, verify=FAIL, cipher=AES256-SHA256, bits=256/256 Apr 09 15:41:38 carlson sendmail[6436]: u39Jfapc006436: from=, size=7525, class=0, nrcpts=1, msgid=, bodytype=7BIT, proto=ESMTP, daemon=MTA, relay=mail-he1eur01hn0248.outbound.protection.outlook.com [104.47.0.248] Apr 09 15:41:38 carlson sendmail[6436]: u39Jfapc006436: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=21 Fuz1=21 Fuz2=many Apr 09 15:41:43 carlson sendmail[6438]: u39Jfapc006436: to=, delay=00:00:06, xdelay=00:00:05, mailer=local, pri=37919, dsn=2.0.0, stat=Sent Apr 09 15:42:11 carlson clamd[3295]: SelfCheck: Database status OK. Apr 09 15:42:53 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=2270 DF PROTO=TCP SPT=52933 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024690480000000001030307) Apr 09 15:42:54 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=45726 DF PROTO=TCP SPT=35907 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024690490000000001030307) Apr 09 15:43:00 carlson nmbd[2839]: [2016/04/09 15:43:00.003649, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:43:00 carlson nmbd[2839]: [194B blob data] Apr 09 15:43:10 carlson sendmail[6465]: u39JhAlT006465: from=, size=1612, class=0, nrcpts=1, msgid=<988784292.201604091243.712yyenh1541@awakeholds.com>, proto=ESMTP, daemon=MTA, relay=[104.255.99.239] Apr 09 15:43:10 carlson sendmail[6465]: u39JhAlT006465: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=2257 Fuz2=many Apr 09 15:43:12 carlson sendmail[6467]: u39JhAlT006465: to=, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=31897, dsn=2.0.0, stat=Sent Apr 09 15:44:17 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.9 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=18448 DF PROTO=TCP SPT=12029 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:44:49 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.5 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=18348 DF PROTO=TCP SPT=27571 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:45:34 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=217.151.59.12 DST=75.150.68.97 LEN=56 TOS=0x00 PREC=0x20 TTL=46 ID=13330 PROTO=ICMP TYPE=3 CODE=3 [SRC=75.150.68.97 DST=217.151.59.12 LEN=64 TOS=0x00 PREC=0x00 TTL=240 ID=24644 DF PROTO=UDP SPT=55693 DPT=53 LEN=44 ] Apr 09 15:45:34 carlson dhcpd[3237]: reuse_lease: lease age 457627 (secs) under 25% threshold, reply with unaltered, existing lease Apr 09 15:45:34 carlson dhcpd[3237]: DHCPREQUEST for 192.168.254.175 from a4:67:06:56:94:e8 via enp0s25 Apr 09 15:45:34 carlson dhcpd[3237]: DHCPACK on 192.168.254.175 to a4:67:06:56:94:e8 via enp0s25 Apr 09 15:45:34 carlson dhcpd[3237]: reuse_lease: lease age 457627 (secs) under 25% threshold, reply with unaltered, existing lease Apr 09 15:45:34 carlson dhcpd[3237]: DHCPREQUEST for 192.168.254.175 from a4:67:06:56:94:e8 via enp0s25 Apr 09 15:45:34 carlson dhcpd[3237]: DHCPACK on 192.168.254.175 to a4:67:06:56:94:e8 via enp0s25 Apr 09 15:45:43 carlson audit[6529]: CRYPTO_KEY_USER pid=6529 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson sshd[6528]: Connection closed by 127.0.0.1 [preauth] Apr 09 15:45:43 carlson audit[6529]: CRYPTO_KEY_USER pid=6529 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson audit[6529]: CRYPTO_KEY_USER pid=6529 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson audit[6529]: CRYPTO_KEY_USER pid=6529 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson audit[6528]: CRYPTO_KEY_USER pid=6528 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson audit[6528]: CRYPTO_KEY_USER pid=6528 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson audit[6528]: CRYPTO_KEY_USER pid=6528 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson audit[6528]: CRYPTO_KEY_USER pid=6528 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:45:43 carlson audit[6528]: USER_LOGIN pid=6528 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' Apr 09 15:45:56 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=19951 DF PROTO=TCP SPT=13522 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024742340000000001030307) Apr 09 15:46:00 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=49532 DF PROTO=TCP SPT=52891 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0247461D0000000001030307) Apr 09 15:46:05 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=22435 DF PROTO=TCP SPT=19744 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02474B000000000001030307) Apr 09 15:46:05 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=34380 DF PROTO=TCP SPT=36668 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02474B000000000001030307) Apr 09 15:46:14 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=61.33.23.251 DST=75.150.68.99 LEN=84 TOS=0x00 PREC=0x20 TTL=106 ID=25833 PROTO=UDP SPT=53 DPT=55695 LEN=64 Apr 09 15:47:06 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=111.73.45.223 DST=75.150.68.99 LEN=40 TOS=0x00 PREC=0x20 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 Apr 09 15:47:06 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=111.73.45.223 DST=75.150.68.97 LEN=40 TOS=0x00 PREC=0x20 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 Apr 09 15:48:16 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=68.115.149.54 DST=75.150.68.97 LEN=52 TOS=0x00 PREC=0x20 TTL=112 ID=23992 DF PROTO=TCP SPT=32790 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058C0103030801010402) Apr 09 15:48:17 carlson saslauthd[2330]: gkr-pam: error looking up user information Apr 09 15:48:17 carlson saslauthd[2330]: pam_unix(smtp:auth): check pass; user unknown Apr 09 15:48:17 carlson audit[2330]: USER_AUTH pid=2330 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/saslauthd" hostname=? addr=? terminal=? res=failed' Apr 09 15:48:17 carlson saslauthd[2330]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Apr 09 15:48:19 carlson saslauthd[2330]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Apr 09 15:48:19 carlson saslauthd[2330]: do_auth : auth failure: [user=patrick] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Apr 09 15:48:19 carlson sendmail[6586]: u39JmG8U006586: 68-115-149-54.static.spbg.sc.charter.com [68.115.149.54] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Apr 09 15:48:21 carlson sendmail[6588]: u39JmKMB006588: from=<57FZLLO-0G7KVU-0AMDC-835781-40MPXM-H-M2-20160409-2e61a8ccf92f25a@mbshbi.bounce.ed10.net>, size=30469, class=0, nrcpts=1, msgid=<7885-485-57FZLLO-0G7KVU-0AMDC-835781-40MPXM-H-M2-20160409-2e61a8ccf92f25a@e-dialog.com>, proto=ESMTP, daemon=MTA, relay=mbshbi.outbound.ed10.com [208.94.20.105] Apr 09 15:48:21 carlson sendmail[6588]: u39JmKMB006588: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=many Fuz2=many Apr 09 15:48:23 carlson sendmail[6590]: u39JmKMB006588: to=, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=60766, dsn=2.0.0, stat=Sent Apr 09 15:48:41 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.134 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=29574 DF PROTO=TCP SPT=30470 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:48:43 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=1957 DF PROTO=TCP SPT=47491 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0247E55D0000000001030307) Apr 09 15:48:48 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=61952 DF PROTO=TCP SPT=31129 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0247EA400000000001030307) Apr 09 15:50:00 carlson nmbd[2839]: [2016/04/09 15:50:00.401589, 0] ../source3/nmbd/nmbd_incomingrequests.c:213(process_name_registration_request) Apr 09 15:50:00 carlson nmbd[2839]: [194B blob data] Apr 09 15:50:43 carlson audit[6619]: CRYPTO_KEY_USER pid=6619 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson audit[6619]: CRYPTO_KEY_USER pid=6619 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson audit[6619]: CRYPTO_KEY_USER pid=6619 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson audit[6619]: CRYPTO_KEY_USER pid=6619 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson sshd[6618]: Connection closed by 127.0.0.1 [preauth] Apr 09 15:50:43 carlson audit[6618]: CRYPTO_KEY_USER pid=6618 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson audit[6618]: CRYPTO_KEY_USER pid=6618 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson audit[6618]: CRYPTO_KEY_USER pid=6618 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson audit[6618]: CRYPTO_KEY_USER pid=6618 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:50:43 carlson audit[6618]: USER_LOGIN pid=6618 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' Apr 09 15:50:43 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=37.28.152.58 DST=75.150.68.99 LEN=40 TOS=0x00 PREC=0x20 TTL=117 ID=34837 PROTO=TCP SPT=42982 DPT=8087 WINDOW=50778 RES=0x00 SYN URGP=0 Apr 09 15:51:45 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=29686 DF PROTO=TCP SPT=52533 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A0248970A0000000001030307) Apr 09 15:51:47 carlson smartd[1741]: Device: /dev/sdb [SAT], Temperature changed +1 Celsius to 35 Celsius (Min/Max 28/35!) Apr 09 15:51:47 carlson smartd[1741]: Device: /dev/sdb [SAT], old test of type L not run at Sun Feb 7 01:00:00 2016 EST, starting now. Apr 09 15:51:47 carlson smartd[1741]: Device: /dev/sdb [SAT], starting scheduled Long Self-Test. Apr 09 15:51:50 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=31831 DF PROTO=TCP SPT=53378 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02489BED0000000001030307) Apr 09 15:51:50 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=11891 DF PROTO=TCP SPT=36136 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02489BED0000000001030307) Apr 09 15:51:55 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=117.21.226.189 DST=75.150.68.97 LEN=40 TOS=0x00 PREC=0x20 TTL=101 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 Apr 09 15:51:55 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=117.21.226.189 DST=75.150.68.99 LEN=40 TOS=0x00 PREC=0x20 TTL=101 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 Apr 09 15:52:08 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=54.159.142.15 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=36 ID=36517 DF PROTO=TCP SPT=54059 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A00618DDD0000000001030307) Apr 09 15:52:11 carlson clamd[3295]: SelfCheck: Database status OK. Apr 09 15:52:23 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=173.224.120.38 DST=75.150.68.99 LEN=443 TOS=0x00 PREC=0x20 TTL=52 ID=0 DF PROTO=UDP SPT=5082 DPT=5060 LEN=423 Apr 09 15:52:25 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.153 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=27868 DF PROTO=TCP SPT=15564 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:53:38 carlson audit[6649]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=6649 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:53:38 carlson audit[6649]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=562510ace8d0 a1=801 a2=b a3=50d items=0 ppid=4679 pid=6649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:53:38 carlson dovecot[4684]: auth: Error: stats: open(stats-user) failed: Permission denied Apr 09 15:53:38 carlson audit: PROCTITLE proctitle="dovecot/auth" Apr 09 15:53:38 carlson dovecot[4684]: auth-worker(6651): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:53:38 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=192.168.254.179, lip=75.150.68.97, mpid=6652, TLS, session= Apr 09 15:53:38 carlson audit[6651]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=6651 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:53:38 carlson audit[6651]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=56025e3f1a40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=6651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:53:38 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77 Apr 09 15:53:38 carlson audit[6651]: USER_AUTH pid=6651 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=192.168.254.179 addr=192.168.254.179 terminal=dovecot res=success' Apr 09 15:53:38 carlson audit[6651]: USER_ACCT pid=6651 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=192.168.254.179 addr=192.168.254.179 terminal=dovecot res=success' Apr 09 15:53:43 carlson audit[6651]: USER_AUTH pid=6651 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=192.168.254.179 addr=192.168.254.179 terminal=dovecot res=success' Apr 09 15:53:43 carlson audit[6651]: USER_ACCT pid=6651 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/lib/dovecot/auth" hostname=192.168.254.179 addr=192.168.254.179 terminal=dovecot res=success' Apr 09 15:53:43 carlson dovecot[4684]: imap-login: Login: user=, method=PLAIN, rip=192.168.254.179, lip=75.150.68.97, mpid=6654, TLS, session= Apr 09 15:54:02 carlson sendmail[6660]: STARTTLS=server, relay=mac.workingcode.com [192.168.254.179], version=TLSv1/SSLv3, verify=NO, cipher=DHE-RSA-AES128-SHA, bits=128/128 Apr 09 15:54:02 carlson audit[2327]: USER_AUTH pid=2327 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="beth" exe="/usr/sbin/saslauthd" hostname=? addr=? terminal=? res=success' Apr 09 15:54:02 carlson audit[2327]: USER_ACCT pid=2327 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="beth" exe="/usr/sbin/saslauthd" hostname=? addr=? terminal=? res=success' Apr 09 15:54:02 carlson sendmail[6660]: AUTH=server, relay=mac.workingcode.com [192.168.254.179], authid=beth, mech=PLAIN, bits=0 Apr 09 15:54:02 carlson sendmail[6660]: u39Js26h006660: from=, size=1596, class=0, nrcpts=1, msgid=<57095DDA.6010605@workingcode.com>, proto=ESMTP, daemon=MSA, relay=mac.workingcode.com [192.168.254.179] Apr 09 15:54:06 carlson sendmail[6660]: u39Js26h006660: Milter add: header: X-DCC-MGTINTERNET-Metrics: carlson 1170; Body=1 Fuz1=1 Fuz2=1 Apr 09 15:54:07 carlson sendmail[6665]: STARTTLS=client, relay=gmail-smtp-in.l.google.com., version=TLSv1/SSLv3, verify=FAIL, cipher=ECDHE-RSA-AES128-GCM-SHA256, bits=128/128 Apr 09 15:54:09 carlson sendmail[6665]: u39Js26h006660: to=, ctladdr= (1004/100), delay=00:00:07, xdelay=00:00:03, mailer=esmtp, pri=121596, relay=gmail-smtp-in.l.google.com. [173.194.206.27], dsn=2.0.0, stat=Sent (OK 1460231649 x145si14619000qka.105 - gsmtp) Apr 09 15:54:32 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=25795 DF PROTO=TCP SPT=57844 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02493ADC0000000001030307) Apr 09 15:54:37 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.99 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=23557 DF PROTO=TCP SPT=41886 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02493FBE0000000001030307) Apr 09 15:54:37 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=44 ID=28906 DF PROTO=TCP SPT=24880 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A02493FBF0000000001030307) Apr 09 15:54:39 carlson sendmail[6636]: u38EMGMH009682: to=, delay=1+05:32:23, xdelay=00:02:07, mailer=esmtp, pri=5070000, relay=pw.com. [155.201.250.61], dsn=4.0.0, stat=Deferred: Connection timed out with pw.com. Apr 09 15:54:42 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=183.3.202.110 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=41885 DF PROTO=TCP SPT=63956 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A024944A20000000001030307) Apr 09 15:54:45 carlson kernel: SFW2-INext-DROP-DEFLT IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=123.7.59.71 DST=75.150.68.97 LEN=107 TOS=0x00 PREC=0x20 TTL=47 ID=51693 PROTO=ICMP TYPE=3 CODE=3 [SRC=75.150.68.97 DST=123.7.59.71 LEN=79 TOS=0x00 PREC=0x00 TTL=233 ID=24644 DF PROTO=UDP SPT=55693 DPT=53 LEN=59 ] Apr 09 15:54:54 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=216.243.31.2 DST=75.150.68.97 LEN=40 TOS=0x00 PREC=0x20 TTL=244 ID=54321 PROTO=TCP SPT=46000 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 09 15:55:21 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=75.107.241.62 DST=75.150.68.97 LEN=52 TOS=0x00 PREC=0x20 TTL=115 ID=19262 DF PROTO=TCP SPT=48468 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405B40103030201010402) Apr 09 15:55:26 carlson sendmail[6675]: u39JtLCQ006675: <4e89c5e6.1090500@workingcode.com>... User unknown Apr 09 15:55:28 carlson sendmail[6675]: u39JtLCQ006675: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=75-107-241-62.cust.wildblue.net [75.107.241.62] Apr 09 15:55:29 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=69.129.45.106 DST=75.150.68.97 LEN=52 TOS=0x00 PREC=0x20 TTL=117 ID=2092 DF PROTO=TCP SPT=56677 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) Apr 09 15:55:29 carlson saslauthd[2328]: gkr-pam: error looking up user information Apr 09 15:55:29 carlson saslauthd[2328]: pam_unix(smtp:auth): check pass; user unknown Apr 09 15:55:29 carlson audit[2328]: USER_AUTH pid=2328 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/saslauthd" hostname=? addr=? terminal=? res=failed' Apr 09 15:55:29 carlson saslauthd[2328]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Apr 09 15:55:31 carlson saslauthd[2328]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Apr 09 15:55:31 carlson saslauthd[2328]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Apr 09 15:55:31 carlson sendmail[6677]: u39JtTwM006677: h69-129-45-106.lncswi.dedicated.static.tds.net [69.129.45.106] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Apr 09 15:55:31 carlson audit: NETFILTER_CFG table=filter family=2 entries=185 Apr 09 15:55:31 carlson audit[6682]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=224fcb0 items=0 ppid=3207 pid=6682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" key=(null) Apr 09 15:55:31 carlson audit: PROCTITLE proctitle=69707461626C6573002D77002D49006632622D73656E646D61696C0031002D730036392E3132392E34352E313036002D6A0052454A454354002D2D72656A6563742D776974680069636D702D706F72742D756E726561636861626C65 Apr 09 15:55:43 carlson audit[6685]: CRYPTO_KEY_USER pid=6685 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson audit[6685]: CRYPTO_KEY_USER pid=6685 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson sshd[6684]: Connection closed by 127.0.0.1 [preauth] Apr 09 15:55:43 carlson audit[6685]: CRYPTO_KEY_USER pid=6685 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson audit[6685]: CRYPTO_KEY_USER pid=6685 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson audit[6684]: CRYPTO_KEY_USER pid=6684 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=ae:c9:50:e9:7c:69:a1:d4:3d:55:48:66:1e:f9:e4:3b [MD5] direction=? spid=6684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson audit[6684]: CRYPTO_KEY_USER pid=6684 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=73:21:a0:45:a4:41:ac:f6:16:24:5f:c3:02:b1:ca:1a [MD5] direction=? spid=6684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson audit[6684]: CRYPTO_KEY_USER pid=6684 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=51:d1:5f:02:e0:05:97:f3:36:6c:8a:f3:b9:54:a1:1f [MD5] direction=? spid=6684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson audit[6684]: CRYPTO_KEY_USER pid=6684 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=d4:c8:bf:84:c0:e2:3b:2b:81:f1:39:67:40:60:5c:a9 [MD5] direction=? spid=6684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' Apr 09 15:55:43 carlson audit[6684]: USER_LOGIN pid=6684 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' Apr 09 15:56:26 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.27 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=29760 DF PROTO=TCP SPT=10421 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:56:30 carlson kernel: SFW2-INext-ACC-TCP IN=enp5s0 OUT= MAC=d0:50:99:46:76:83:6a:ee:96:de:49:71:08:00 SRC=180.76.15.148 DST=75.150.68.97 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=5336 DF PROTO=TCP SPT=55283 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B404020101010101010101010101030308) Apr 09 15:56:32 carlson audit[6692]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=6692 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:56:32 carlson audit[6692]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=56255d27d8d0 a1=801 a2=b a3=50d items=0 ppid=4679 pid=6692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:56:32 carlson dovecot[4684]: auth: Error: stats: open(stats-user) failed: Permission denied Apr 09 15:56:32 carlson audit: PROCTITLE proctitle="dovecot/auth" Apr 09 15:56:32 carlson audit[6694]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/auth" name="/var/run/dovecot/stats-user" pid=6694 comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 09 15:56:32 carlson audit[6694]: SYSCALL arch=c000003e syscall=2 success=no exit=-13 a0=55dc01c90a40 a1=801 a2=b a3=50d items=0 ppid=4679 pid=6694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/lib/dovecot/auth" key=(null) Apr 09 15:56:32 carlson dovecot[4684]: auth-worker(6694): Error: stats: open(stats-user) failed: Permission denied Apr 09 15:56:32 carlson audit: PROCTITLE proctitle=646F7665636F742F61757468002D77