For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

adamsr1_1542's avatar
adamsr1_1542
Icon for Nimbostratus rankNimbostratus
Jun 20, 2007

unwanted syslog messages

I am getting "tcp_half_open: Unregister: Deleting icmp socket" syslog messages and want to know how do get rid of them, if anybody could help me I would appreciate it     thanks  
management
monitoring
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 10, 2008
You might get more eyes on your post by posting in the advanced configuration section (Click here).

 

 

I assume that log message is from the bigd monitoring daemon. I'm not sure why it would be getting logged. Do you have verbose logging enabled for monitors (GUI: System >> Logs >> Options >> Monitors or CLI: 'b db Bigd.Debug)?

 

 

You could modify the filter you're using in syslog-ng to send syslog messages to your remote server. Here is an example:

 

 

filter f_my_remote_filter {

 

level (debug...emerg) and not match("Deleting icmp socket");

 

};

 

 

Aaron