Description | I saw this:
Aug 21 09:57:30 pfdhcplistener(595) INFO: calling '/usr/local/pf/bin/pfcmd violation add vid=1400001,mac=00:c0:ee:8e:66:c7,release_date=0'
(trigger os::8) (pf::violation::violation_trigger)
Aug 21 09:57:30 pfdhcplistener(596) INFO: DHCPACK from 172.19.0.5 (00:21:9b:99:1b:89) to host 00:c0:ee:8e:66:c7
(172.19.9.24) for 300 seconds (main::parse_dhcp_ack)
Aug 21 09:57:30 pfcmd(1118) INFO: Executing pfcmd service pfdhcplistener restart (main::service)
Aug 21 09:57:30 pfcmd(1118) INFO: /usr/local/pf/sbin/pfdhcplistener status (pf::services::service_ctl)
Aug 21 09:57:30 pfcmd(1118) INFO: pidof -x pfdhcplistener returned 596 595 594 (pf::services::service_ctl)
Aug 21 09:57:30 redir.cgi(0) INFO: 3c:43:8e:7c:d7:9c being redirected (ModPerl::ROOT::ModPerl::PerlRun::usr_local_pf_html_captive_2dportal_redir_2ecgi::handler)
Aug 21 09:57:30 redir.cgi(0) INFO: 3c:43:8e:7c:d7:9c redirected to authentication page (ModPerl::ROOT::ModPerl::PerlRun::usr_local_pf_html_captive_2dportal_redir_2ecgi::handler)
Aug 21 09:57:30 pfcmd(1118) INFO: restoring iptables from /usr/local/pf/var/conf/iptables.conf (pf::iptables::iptables_restore)
Aug 21 09:57:30 pfcmd(1118) INFO: /usr/local/pf/sbin/pfdhcplistener restart (pf::services::service_ctl)
Aug 21 09:57:30 pfcmd(1118) INFO: /usr/local/pf/sbin/pfdhcplistener stop (pf::services::service_ctl)
Aug 21 09:57:30 pfcmd(1118) INFO: Stopping pfdhcplistener with '/usr/bin/pkill pfdhcplistener' (pf::services::service_ctl)
Then
Aug 21 10:00:00 pfdhcplistener(1131) INFO: calling '/usr/local/pf/bin/pfcmd violation add vid=1400001,mac=00:c0:ee:8e:66:c7,release_date=0'
(trigger os::8) (pf::violation::violation_trigger)
Aug 21 10:00:00 pfdhcplistener(1133) INFO: DHCPACK from 172.19.0.5 (00:21:9b:99:1b:89) to host 00:c0:ee:8e:66:c7
(172.19.9.24) for 300 seconds (main::parse_dhcp_ack)
Aug 21 10:00:01 pfcmd(1619) INFO: Executing pfcmd service pfdhcplistener restart (main::service)
Aug 21 10:00:01 pfcmd(1619) INFO: /usr/local/pf/sbin/pfdhcplistener status (pf::services::service_ctl)
Aug 21 10:00:01 pfcmd(1619) INFO: pidof -x pfdhcplistener returned 1133 1132 1131 (pf::services::service_ctl)
...
Aug 21 10:00:01 pfcmd(1619) INFO: /usr/local/pf/sbin/pfdhcplistener restart (pf::services::service_ctl)
Aug 21 10:00:01 pfcmd(1619) INFO: /usr/local/pf/sbin/pfdhcplistener stop (pf::services::service_ctl)
Aug 21 10:00:01 pfcmd(1619) INFO: Stopping pfdhcplistener with '/usr/bin/pkill pfdhcplistener' (pf::services::service_ctl)
And even earlier than that:
Aug 21 09:44:56 pfdhcplistener(27955) INFO: calling '/usr/local/pf/bin/pfcmd violation add vid=1400001,mac=00:c0:ee:8e:66:c7,release_date=0'
(trigger os::8) (pf::violation::violation_trigger)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: resolved 172.19.9.24 to mac (00:c0:ee:8e:66:c7) in ARP table
(pf::iplog::ip2macinarp)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: DHCPOFFER from 172.19.0.5 (00:21:9b:99:1b:89) to host 00:c0:ee:8e:66:c7
(172.19.9.24) (main::parse_dhcp_offer)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: DHCPACK from 172.19.0.5 (00:21:9b:99:1b:89) to host 00:c0:ee:8e:66:c7
(172.19.9.24) for 300 seconds (main::parse_dhcp_ack)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: DHCPACK from 172.19.0.5 (00:21:9b:99:1b:89) to host f8:0c:f3:e3:80:39
(172.19.10.25) for 300 seconds (main::parse_dhcp_ack)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: DHCPREQUEST from 18:34:51:9d:6a:bd (192.168.1.11) with lease
of 7776000 seconds (main::parse_dhcp_request)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: could not resolve 192.168.1.11 to mac in ARP table (pf::iplog::ip2macinarp)
Aug 21 09:44:56 pfdhcplistener(27957) WARN: could not resolve 192.168.1.11 to mac (pf::iplog::ip2mac)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: oldip (157.160.203.173) and newip (192.168.1.11) are different
for 18:34:51:9d:6a:bd - closing iplog entry (main::update_iplog)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: 18:34:51:9d:6a:bd requested an IP. DHCP Fingerprint: OS::1102
(Apple iPod, iPhone or iPad). Modified node with last_dhcp = 2012-08-21 09:44:56,computername = iPhone,dhcp_fingerprint
= 1,3,6,15,119,252 (main::listen_dhcp)
Aug 21 09:44:56 pfdhcplistener(27957) INFO: DHCPOFFER from 172.19.0.5 (00:21:9b:99:1b:89) to host f0:b4:79:c4:fe:47
(172.19.13.251) (main::parse_dhcp_offer)
Aug 21 09:44:56 pfcmd(30713) INFO: Executing pfcmd service pfdhcplistener restart (main::service)
Aug 21 09:44:56 pfcmd(30713) INFO: /usr/local/pf/sbin/pfdhcplistener status (pf::services::service_ctl)
Aug 21 09:44:56 pfcmd(30713) INFO: pidof -x pfdhcplistener returned 27957 27956 27955 (pf::services::service_ctl)
Aug 21 09:44:56 pfcmd(30713) INFO: restoring iptables from /usr/local/pf/var/conf/iptables.conf (pf::iptables::iptables_restore)
Aug 21 09:44:56 pfcmd(30713) INFO: /usr/local/pf/sbin/pfdhcplistener restart (pf::services::service_ctl)
Aug 21 09:44:56 pfcmd(30713) INFO: /usr/local/pf/sbin/pfdhcplistener stop (pf::services::service_ctl)
Aug 21 09:44:56 pfcmd(30713) INFO: Stopping pfdhcplistener with '/usr/bin/pkill pfdhcplistener' (pf::services::service_ctl)
Aug 21 09:44:56 pfdhcplistener(27957) FATAL: pfdhcplistener: caught SIGTERM - terminating (main::normal_sighandler)
Aug 21 09:44:56 pfdhcplistener(27956) FATAL: pfdhcplistener: caught SIGTERM - terminating (main::normal_sighandler)
Aug 21 09:44:56 pfdhcplistener(27955) FATAL: pfdhcplistener: caught SIGTERM - terminating (main::normal_sighandler)
Needs investigation.
If it was introduced, this will need to be re-labeled 'regression'. |