[Openstack] compute node secure message flood rootwrap.conf ovs-ofctl dump-flows br-int table=22
Remo Mattei
remo at italy1.com
Tue Mar 24 14:41:59 UTC 2015
You may want to check your iptables and sysctl page me off line for more detail if you cannot find them
Inviato da iPhone ()
> Il giorno 24/mar/2015, alle ore 07:10, Uwe Sauter <uwe.sauter.de at gmail.com> ha scritto:
>
> Well, sure I can disable debugging but that it will be even *harder* to debug…
>
> I was asking if there is the possibility to disable specific debug messages.
>
> Regards,
>
> Uwe
>
>> Am 24.03.2015 um 15:08 schrieb Gary Kotton:
>> Hi,
>> In neutron conf you can set debug=False
>> Thanks
>> Gary
>>
>>> On 3/24/15, 4:01 PM, "Uwe Sauter" <uwe.sauter.de at gmail.com> wrote:
>>>
>>> Hi,
>>>
>>> is it possible to disable the logging of this particular command for
>>> /var/log/neutron/openvswitch-agent.log ?
>>>
>>> Given the high frequency it makes it really hard and annoying to read the
>>> logs for debugging purposes.
>>>
>>>
>>> Regards,
>>>
>>> Uwe
>>>
>>>> Am 24.03.2015 um 13:52 schrieb Lars Kellogg-Stedman:
>>>>> On Tue, Mar 24, 2015 at 02:22:18PM +0700, Chris wrote:
>>>>> On our compute nodes the /var/log/secure log get flooded with the same
>>>>> kind
>>>>> of messages:
>>>>>
>>>>> Mar 22 10:17:57 xxx sudo: neutron : TTY=unknown ; PWD=/ ; USER=root ;
>>>>> COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf ovs-ofctl
>>>>> dump-flows br-int table=22
>>>>>
>>>>> Any hint what's the purpose of this and how to fix it?
>>>>
>>>> The purpose is that neutron is monitoring the flow rules in that
>>>> particular table, probably in order ensure they remain correct.
>>>> Because neutron is running as an unprivileged user, it needs to use
>>>> "sudo" to gain elevated privileges.
>>>>
>>>> The `sudo` command is, by default, quite verbose, which makes sense in
>>>> an environment where 'sudo' commands happen rarely as the result of
>>>> manual administrator actions. In an environment where it is part of
>>>> frequent automated tasks it can be an annoyance.
>>>>
>>>> You can disable these messages for a *particular* user using syntax
>>>> like this:
>>>>
>>>> Defaults:neutron !syslog
>>>>
>>>> This will disable syslogging of sudo activity for user "neutron" while
>>>> still leaving it enabled for everyone else.
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Mailing list:
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>> Post to : openstack at lists.openstack.org
>>>> Unsubscribe :
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>> _______________________________________________
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack at lists.openstack.org
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
> !DSPAM:1,5511741025433635496455!
>
More information about the Openstack
mailing list