System auditing with auditd System auditing is a very important task that should be a part of every server. It allows us to audit minute details related to what exactly is happening within the system. auditd is a userspace component to the Linux auditing system. This means that system users will be able to run auditd to configure rules and alerts for auditing functionality with the Linux system. One of the best things about auditd is that it is tightly integrated with the kernel, so it gives … [Read more...] about Audit rules for monitoring Copy, move, delete and kill Commands In Linux
Archives for October 2018
“mlock failed: Cannot allocate memory” lvcreate command error in CentOS/RHEL 7
The Problem When attempting to create an LV the following error occurs. # lvcreate -L 5G -n apps vgOS 7fa0c6cd2000-7fa0c6cd3000 r-xp 00216000 fd:00 8388746 /usr/lib64/libgcc_s-4 .8.5-20150702.so.1: mlock failed: Cannot allocate memory 7fa0c75ce000-7fa0c75cf000 r-xp 00265000 fd:00 8895769 /usr/lib64/libdevmapp er.so.1.02: mlock failed: Cannot allocate memory 7fa0c77d6000-7fa0c77d7000 r-xp 00207000 fd:00 9313347 /usr/lib64/libdevmapp er-event.so.1.02: mlock failed: Cannot allocate … [Read more...] about “mlock failed: Cannot allocate memory” lvcreate command error in CentOS/RHEL 7
How to Configure Interface(s) in promiscuous mode on CentOS/RHEL 7 (persistently)
What is Promiscuous mode Promiscuous mode or promisc mode is a feature that makes the ethernet card pass all traffic it received to the kernel. It is usually used by a packet sniffing program like Wireshark, and tcpdump. If there was such program intentionally running or bridged networking for hardware virtualization, the "promiscuous mode" message might be simply ignored. Otherwise, deep investigation on that system will be required due to a security issue. When there is no audit daemon … [Read more...] about How to Configure Interface(s) in promiscuous mode on CentOS/RHEL 7 (persistently)
“Abort command issued nexus” error messages in /var/log/messages file
The Problem The following log entries are found in /var/log/messages continuously. What do they mean and how to get rid of them? Nov 21 07:08:58 db6foredcd kernel: qla2xxx [0000:49:00.0]-801c:4: Abort command issued nexus=4:3:33 -- 1 2002. Nov 21 07:08:58 db6foredcd kernel: qla2xxx [0000:49:00.0]-801c:4: Abort command issued nexus=4:1:33 -- 1 2002. Nov 21 07:08:59 db6foredcd kernel: qla2xxx [0000:49:00.0]-801c:4: Abort command issued nexus=4:1:68 -- 1 2002. Nov 21 07:08:59 db6foredcd … [Read more...] about “Abort command issued nexus” error messages in /var/log/messages file
Oracle ASM 12c – New Features with examples
This post discusses a few 12C ASM new features with examples: Failgroup_repair_time Online disk replace Estimate Work V$ASM_OPERATION view 1. FAILGROUP_REPAIR_TIME For earlier ASM versions, we had disk_repair_time, from 12C onwards we have failgroup_repair_time at the ASM level. Because failure group outages are more likely to be transient in nature and because replacing all the disks in a failure group is a much more expensive operation than replacing a single disk, it would … [Read more...] about Oracle ASM 12c – New Features with examples
Oracle Database 12c New Feature – RMAN “RECOVER TABLE”
Table recovery Table recovery was possible in earlier releases as well. Until previous releases, if we wanted to recover a table, we had the following options: Database point in time recovery (DBPITR) Tablespace point in time recovery (TSPITR) Flashback technology The RECOVER TABLE command is a new feature in 12C that allows a point in time recovery of a table or a table partition. The table is recovered into an auxiliary instance and there is the option to: import the recovered … [Read more...] about Oracle Database 12c New Feature – RMAN “RECOVER TABLE”