File contains possible DP logs (DP 9.06)

[dirkdevos]

A while ago I upgraded from version 9.05 to 9.06 and started noticing a file named "1" in the root folder of just my Unix servers. I have not found a simmilar file on my Linux or Windows servers. From the log entries it appears to have data protector information in it. The last update time of the file is normally around the same time as when that particular server was being backed up.

Has anybody noticed a file with similar contents and does anybody know where this file is coming from or what is causing it to be created.

Any information on this would be appreciated.

Sat Apr  9 20:46:47 2016 [USERID.DOMAIN@server1.Mydomain.com] : PATCH_INFO_IS

Sun Apr 10 01:17:54 2016 [USERID.DOMAIN@server1.Mydomain.com] : BDF

Sun Apr 10 01:22:19 2016 [USERID.DOMAIN@server1.Mydomain.com] : vbda

Sat Apr  9 14:49:42 2016 [USERID.DOMAIN@server1.mydomain.com] : INCLUDE

Sat Apr  9 14:49:43 2016 [USERID.DOMAIN@server1.mydomain.com] : INFO_MODULES

Sat Apr  9 14:49:43 2016 [root.sys@server1.mydomain.com] : GET_FILE

Sat Apr  9 14:49:44 2016 [USERID.DOMAIN@server1.mydomain.com] : INFO

Sat Apr  9 14:49:49 2016 [USERID.DOMAIN@server1.mydomain.com] : INCLUDE

Sat Apr  9 14:49:49 2016 [USERID.DOMAIN@server1.mydomain.com] : INFO_MODULES

Sat Apr  9 14:49:50 2016 [root.sys@server1.mydomain.com] : GET_FILE

Sat Apr  9 14:49:51 2016 [USERID.DOMAIN@server1.mydomain.com] : INFO

Sat Apr  9 14:49:52 2016 [root.root@server2.mydomain.com] : INFO

Sat Apr  9 14:49:52 2016 [root.root@server2.mydomain.com] : EXEC_CMD

Sat Apr  9 14:49:52 2016 [root.root@server2.mydomain.com] : EXEC_CMD

Sat Apr  9 14:49:53 2016 [root.root@server2.mydomain.com] : FTP_PUT_FILE

Sat Apr  9 14:49:54 2016 [root.root@server2.mydomain.com] : EXEC_CMD         

Sat Apr  9 15:15:22 2016 [USERID.DOMAIN@server1.Mydomain.com] : INFO

Sat Apr  9 20:41:22 2016 [USERID.DOMAIN@server1.Mydomain.com] : PATCH_INFO_IS

Sat Apr  9 20:43:42 2016 [USERID.DOMAIN@server1.Mydomain.com] : PATCH_INFO_IS

Sun Apr 10 04:58:40 2016 [USERID.DOMAIN@server1.Mydomain.com] : vbda

Sun Apr 10 10:28:25 2016 [USERID.DOMAIN@server1.Mydomain.com] : vbda

Sun Apr 10 19:38:04 2016 [USERID.DOMAIN@server1.Mydomain.com] : PATCH_INFO_IS

Sun Apr 10 19:38:46 2016 [USERID.DOMAIN@server1.Mydomain.com] : PATCH_INFO_ISF

[Marcos_A_DP]

Hello,

I have not noticed any file like that in UNIX environments. As per the information the file shows I would think it is related to the upgrade information\log. 

[dirkdevos]

Thanks for the information. The file is getting appended to every night. Any ideas on how to determine if this is coming from data protector or not?

[svollrat]

do you have any scripts in place where you try to redirect output to a file and accidently redirect to File "1" instead of STOUT?

[Sebastian.Koehler]

The content looks similar to /var/opt/omni/log/inet.log. I would remove the file and wait if and when it re-appears. Have you done the upgrade remotely (push) or locally? What is the exact operating system version of the UNIX client?

Regards,
Sebastian Koehler

[dirkdevos]

I do not think so. If I did then somehow I changed a script that is running on every single HP-UX server that is being backed up.

[Sebastian.Koehler]

Is this HP-UX 11.31 on Itanium or something different? As mentioned I would remove the file on one client, remotely push the client again to see what happens. If it is recreated check /etc/inetd.conf for any bogus configuration information. Do you see new entries to the file in case you remotely run omnicheck -patches -host client?

Regards,
Sebastian Koehler

[dirkdevos]

Sebastian,

The /var/opt/omni/log/inet.log files appear not to have been updated since the new file started showing up. I have deleted the file on two of my HP-UX clients that are being backed. New entries are being added to the file every night around the time that the server gets backed up. My Unix servers are all running HP-UX 11.31 and they have all been patched in the last month or so.

A while ago I was instructed by HP support to upgrade from version 9.05 to 9.06. I did the install of the cell manager and installation server locally. Once I had a successfull upgrade on my cell manager and HP-UX instalation server, I pushed the update out to all the clients using data protector.

[dirkdevos]

Yes I am running HP-UX 11.31 on Itanium servers. I have deleted the file on 2 servers. I will push the update to one of them and see what happens.

Thanks for all the information so far.

[Sebastian.Koehler]

You should check /etc/inetd.conf on the HP-UX client. Is the -log parameter is correct?

omni stream tcp nowait root /opt/omni/lbin/inet inet -log /var/opt/omni/log/inet.log 

Regards,
Sebastian Koehler

[dirkdevos]

Yes, the /etc/inetd.conf entry for omni is correct.

[Sebastian.Koehler]

In that case I would enable debug in /etc/inetd.conf, restart INET, run a quick backup (1 file is enough) and check the existence of /1. Make sure to remove debug option afterwards.

omni stream tcp nowait root /opt/omni/lbin/inet inet -log /var/opt/omni/log/inet.log -debug 1-500 /tmp/INET.txt

It looks like -log is handled proerly by INET. I have no HP-UX 11.31 client available to double check, but I guess software support will be able to resolve this quickly with that information provided.

Regards,
Sebastian Koehler