Acu Posted August 25, 2020 Share Posted August 25, 2020 Hi, I have a problem with the log it always gets 100%. I tried to download the diagnostics, but even after a long time, nothing downloads. I am sending a photo where the files are added: / var / log / nginx / var / log / syslog Quote Link to comment
Squid Posted August 25, 2020 Share Posted August 25, 2020 From the terminal window, enter in diagnostics The zip file will get saved to the flash drive (logs folder). The GUI has a limitation that any operation exceeding 120 seconds will fail. Quote Link to comment
Acu Posted August 25, 2020 Author Share Posted August 25, 2020 I have diagnostics after restart unraid. acu-tower-diagnostics-20200825-1308.zip Quote Link to comment
trurl Posted August 25, 2020 Share Posted August 25, 2020 37 minutes ago, Acu said: diagnostics after restart unraid. And of course your logs are not full in those since syslog starts over when you reboot. Quote Link to comment
Acu Posted August 26, 2020 Author Share Posted August 26, 2020 Once the log starts to fill, the diagnostics cannot be downloaded. What now? Quote Link to comment
itimpi Posted August 26, 2020 Share Posted August 26, 2020 I would suggest waiting a while to give the issue a chance to manifest itself and then try downloading the diagnostics before the log actually gets full. Quote Link to comment
Acu Posted August 26, 2020 Author Share Posted August 26, 2020 Now I have 73% in the morning I tried at 43% and also failed to download the diagnostics Quote Link to comment
JorgeB Posted August 26, 2020 Share Posted August 26, 2020 Get the diags on the console by typing "diagnostics" Quote Link to comment
Acu Posted August 26, 2020 Author Share Posted August 26, 2020 Yes this work. acu-tower-diagnostics-20200826-1138.zip Quote Link to comment
JorgeB Posted August 26, 2020 Share Posted August 26, 2020 It's nginx spamming the log, and I've seen it before, but no idea what causes it or the solution, does it do the same if you boot in safe mode? Quote Link to comment
Acu Posted August 26, 2020 Author Share Posted August 26, 2020 I restart to safe mode and wait. Quote Link to comment
Acu Posted August 26, 2020 Author Share Posted August 26, 2020 So far, the log has 1%, but mostly began to fill after a few hours Quote Link to comment
Acu Posted August 27, 2020 Author Share Posted August 27, 2020 So even in safe mode the log is still growing. At the moment I have 70% and started to grow around midnight. Quote Link to comment
JorgeB Posted August 27, 2020 Share Posted August 27, 2020 Post new diags just to confirm it's the same issue. Quote Link to comment
Acu Posted August 27, 2020 Author Share Posted August 27, 2020 Here acu-tower-diagnostics-20200827-1123.zip Quote Link to comment
JorgeB Posted August 27, 2020 Share Posted August 27, 2020 Yep, it's nginx again, but like mentioned I have no idea what causes these, maybe someone else has. Quote Link to comment
Acu Posted August 27, 2020 Author Share Posted August 27, 2020 Does it have anything to do with letsencrypt nginx? Quote Link to comment
trurl Posted August 27, 2020 Share Posted August 27, 2020 have you done memtest? Quote Link to comment
Acu Posted August 27, 2020 Author Share Posted August 27, 2020 No I'm going to run memtest Quote Link to comment
JorgeB Posted August 27, 2020 Share Posted August 27, 2020 1 hour ago, Acu said: Does it have anything to do with letsencrypt nginx? If that's something you were using in safe mode it might, so try again with that stopped, but Unraid also uses nginx for the webGUI. Quote Link to comment
Acu Posted August 28, 2020 Author Share Posted August 28, 2020 Memory test is OK Quote Link to comment
trurl Posted August 28, 2020 Share Posted August 28, 2020 Don't know if this is related: Aug 26 18:50:02 Acu-Tower vsftpd[25980]: connect from 184.105.139.70 (184.105.139.70) Aug 26 19:42:34 Acu-Tower vsftpd[7115]: connect from 170.130.187.58 (170.130.187.58) Aug 26 20:00:51 Acu-Tower vsftpd[23429]: connect from 192.241.227.131 (192.241.227.131) ... Aug 26 22:18:44 Acu-Tower vsftpd[16593]: connect from 104.152.52.34 (104.152.52.34) ... Aug 27 01:51:23 Acu-Tower vsftpd[16342]: connect from 91.241.19.109 (91.241.19.109) https://www.abuseipdb.com/check/184.105.139.70 https://www.abuseipdb.com/check/170.130.187.58 https://www.abuseipdb.com/check/192.241.227.131 https://www.abuseipdb.com/check/104.152.52.34 https://www.abuseipdb.com/check/91.241.19.109 And lots more like that. 1 Quote Link to comment
Acu Posted August 28, 2020 Author Share Posted August 28, 2020 5 hours ago, trurl said: Don't know if this is related: Aug 26 18:50:02 Acu-Tower vsftpd[25980]: connect from 184.105.139.70 (184.105.139.70) Aug 26 19:42:34 Acu-Tower vsftpd[7115]: connect from 170.130.187.58 (170.130.187.58) Aug 26 20:00:51 Acu-Tower vsftpd[23429]: connect from 192.241.227.131 (192.241.227.131) ... Aug 26 22:18:44 Acu-Tower vsftpd[16593]: connect from 104.152.52.34 (104.152.52.34) ... Aug 27 01:51:23 Acu-Tower vsftpd[16342]: connect from 91.241.19.109 (91.241.19.109) https://www.abuseipdb.com/check/184.105.139.70 https://www.abuseipdb.com/check/170.130.187.58 https://www.abuseipdb.com/check/192.241.227.131 https://www.abuseipdb.com/check/104.152.52.34 https://www.abuseipdb.com/check/91.241.19.109 And lots more like that. I only use proftpd sometimes, I can turn it off Am I still sending a photo from open files and nginx which is run three times? Do you think someone is attacking me? Quote Link to comment
trurl Posted August 29, 2020 Share Posted August 29, 2020 Do you have open ports? Quote Link to comment
Acu Posted August 29, 2020 Author Share Posted August 29, 2020 Yes i have port 21 open Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.