Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 0.000000] Linux version 3.10.20 (daniel@Ayoub) (gcc version 4.7.0 (Cavium Inc. Version: SDK_3_1_0_p2 build 34) ) #165 SMP Mon May 18 23:41:17 PDT 2015 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 0.000000] CVMSEG size: 2 cache lines (256 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Cavium Inc. SDK-3.1 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] bootconsole [early0] enabled Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CPU revision is: 000d9602 (Cavium Octeon III) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] FPU revision is: 00739600 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] Checking for the multiply/shift bug... no. Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] Checking for the daddiu bug... no. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Determined physical RAM map: Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] memory: 000000000c800000 @ 0000000002500000 (usable) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] memory: 0000000000c00000 @ 000000000f200000 (usable) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] memory: 000000002f000000 @ 0000000020000000 (usable) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] memory: 0000000000830000 @ 0000000000100000 (usable) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] memory: 0000000001a00000 @ 0000000000930000 (usable after init) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Wasting 896 bytes for tracking 16 unused pages Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Initrd not found or empty - disabling initrd Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Using passed Device Tree <8000000000080000>. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] software IO TLB [mem 0x02670000-0x026b0000] (0MB) mapped at [8000000002670000-80000000026affff] Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] Zone ranges: Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] DMA32 [mem 0x00100000-0xefffffff] Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] Normal empty Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] Movable zone start for each node Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] Early memory node ranges Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] node 0: [mem 0x00100000-0x0232ffff] Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] node 0: [mem 0x02500000-0x0ecfffff] Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] node 0: [mem 0x0f200000-0x0fdfffff] Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] node 0: [mem 0x20000000-0x4effffff] Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] On node 0 totalpages: 15971 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] DMA32 zone: 14 pages used for memmap Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] DMA32 zone: 0 pages reserved Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] DMA32 zone: 15971 pages, LIFO batch:1 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Cavium Hotplug: Available coremask 0x0 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 0.000000] Primary instruction cache 78kB, virtually tagged, 39 way, 16 sets, linesize 128 bytes. Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 0.000000] Primary data cache 32kB, 32-way, 8 sets, linesize 128 bytes. Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 0.000000] Secondary unified cache 512kB, 4-way, 1024 sets, linesize 128 bytes. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] PERCPU: Embedded 1 pages/cpu @8000000002710000 s12544 r8192 d44800 u65536 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] pcpu-alloc: s12544 r8192 d44800 u65536 alloc=1*65536 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] pcpu-alloc: [0] 0 [0] 1 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 0.000000] Built 1 zonelists in Zone order, mobility grouping off. Total pages: 15957 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 0.000000] Kernel command line: bootoctlinux 0x20000000 numcores=2 serial#=752011191521-36287 console=ttyS0,115200 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] PID hash table entries: 4096 (order: -1, 32768 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Dentry cache hash table entries: 131072 (order: 4, 1048576 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Inode-cache hash table entries: 65536 (order: 3, 524288 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Memory: 983296k/1022144k available (5825k kernel code, 38848k reserved, 2536k data, 26624k init, 0k highmem) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] Hierarchical RCU implementation. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] RCU restricting CPUs from NR_CPUS=32 to nr_cpu_ids=2. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] NR_IRQS:512 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CIB interrupt controller probed: 800107000000e000 23 bits Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CIB interrupt controller probed: 800107000000e200 12 bits Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CIB interrupt controller probed: 800107000000e400 6 bits Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CIB interrupt controller probed: 800107000000ec00 15 bits Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CIB interrupt controller probed: 800107000000e600 4 bits Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CIB interrupt controller probed: 800107000000e800 11 bits Wed Apr 27 18:31:09 2016 kern.info kernel: [ 0.000000] CIB interrupt controller probed: 800107000000e900 11 bits Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.695919] Calibrating delay loop (skipped) preset value.. 2000.00 BogoMIPS (lpj=10000000) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.704133] pid_max: default: 32768 minimum: 501 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.708850] Security Framework initialized Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.712866] Mount-cache hash table entries: 4096 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 22.719119] Checking for the daddi bug... no. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.719907] SMP: Booting CPU01 (CoreId 1)... Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.724109] CPU revision is: 000d9602 (Cavium Octeon III) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.724112] FPU revision is: 00739600 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.724294] Cpu 1 online Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.735709] Brought up 2 CPUs Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.738654] Cavium Hotplug: Available coremask 0x0 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 22.745642] NET: Registered protocol family 16 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 22.751056] Installing handlers for error tree at: ffffffff808be430 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 22.768577] PCIe: Initializing port 0 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 24.831113] PCIe: Link timeout on port 0, probably the slot is empty Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 24.831119] PCIe: Initializing port 1 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 24.834614] PCIe: Port 1 not in PCIe mode, skipping Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 24.834620] PCIe: Initializing port 2 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 24.838262] PCIe: Port 2 not in PCIe mode, skipping Wed Apr 27 18:31:09 2016 kern.warn kernel: [ 24.844630] [sched_delayed] sched: RT throttling activated Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.857946] bio: create slab at 0 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.862366] vgaarb: loaded Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 24.865295] SCSI subsystem initialized Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 24.869145] libata version 3.00 loaded. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.869562] usbcore: registered new interface driver usbfs Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.874995] usbcore: registered new interface driver hub Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.880292] usbcore: registered new device driver usb Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.885442] pps_core: LinuxPPS API ver. 1 registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.890240] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.899465] PTP clock support registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.903341] EDAC MC: Ver: 3.0.0 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.907021] PCI host bridge to bus 0000:00 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.910977] pci_bus 0000:00: root bus resource [mem 0x1000000000000] Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.917300] pci_bus 0000:00: root bus resource [io 0x0000] Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.922868] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 24.930795] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.931743] Switching to clocksource OCTEON_CVMCOUNT Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.938016] NET: Registered protocol family 2 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.942657] TCP established hash table entries: 8192 (order: 1, 131072 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.949775] TCP bind hash table entries: 8192 (order: 1, 131072 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.956264] TCP: Hash tables configured (established 8192 bind 8192) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.962533] TCP: reno registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.965714] UDP hash table entries: 2048 (order: 0, 65536 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.971801] UDP-Lite hash table entries: 2048 (order: 0, 65536 bytes) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 24.978459] NET: Registered protocol family 1 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 24.982664] PCI: CLS 0 bytes, default 128 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 26.571175] octeon_pci_console: Console not created. Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 26.575978] /proc/octeon_perf: Octeon performance counter interface loaded Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.584839] HugeTLB registered 512 MB page size, pre-allocated 0 pages Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 26.592559] sys_fw_version: 0.1.17 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 26.592572] sys_revision: 21 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.592929] squashfs: version 4.0 (2009/01/31) Phillip Lougher Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.598864] NTFS driver 2.1.30 [Flags: R/W]. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.602993] jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.609126] msgmni has been set to 1920 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 26.613866] Key type asymmetric registered Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 26.617853] Asymmetric key parser 'x509' registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.622677] io scheduler noop registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.626576] io scheduler deadline registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.630870] io scheduler cfq registered (default) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.635780] octeon_gpio 1070000000800.gpio-controller: OCTEON GPIO Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.693579] Serial: 8250/16550 driver, 6 ports, IRQ sharing disabled Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.701269] 1180000000800.serial: ttyS0 at MMIO 0x1180000000800 (irq = 34) is a OCTEON Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.709056] console [ttyS0] enabled, bootconsole disabled Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.732588] 1180000000c00.serial: ttyS1 at MMIO 0x1180000000c00 (irq = 35) is a OCTEON Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.754373] brd: module loaded Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.772862] loop: module loaded Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 26.789719] slram: not enough parameters. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.814372] IMQ driver loaded successfully. (numdevs = 16, numqueues = 1) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.833455] Hooking IMQ after NAT on PREROUTING. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.850427] Hooking IMQ before NAT on POSTROUTING. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.869797] libphy: mdio-octeon: probed Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.887274] mdio-octeon 1180000001800.mdio: Version 1.0 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.904904] spi_ks8995: Micrel KS8995 Ethernet switch SPI driver version 0.1.1 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.925418] e1000e: Intel(R) PRO/1000 Network Driver - 2.3.2-k Wed Apr 27 18:31:09 2016 kern.info kernel: [ 26.943550] e1000e: Copyright(c) 1999 - 2013 Intel Corporation. Wed Apr 27 18:31:09 2016 kern.err kernel: [ 26.962005] octeon-pow-ethernet ERROR: You must specify a broadcast group mask. Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 26.981653] octeon-ethernet 2.0 Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 26.998650] Interface 0 has 4 ports (QSGMII) Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 26.998728] Interface 1 has 4 ports (QSGMII) Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 26.998735] Interface 2 has 4 ports (NPI) Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 26.998749] Interface 3 has 4 ports (LOOP) Wed Apr 27 18:31:09 2016 kern.debug kernel: [ 26.998766] Interface 4 has 1 ports (AGL) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.007328] usbcore: registered new interface driver cdc_ether Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.025472] usbcore: registered new interface driver plusb Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.043232] usbcore: registered new interface driver sierra_net Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.062008] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.080815] ehci-pci: EHCI PCI platform driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.097660] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.116719] usbcore: registered new interface driver usb-storage Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.135183] usbcore: registered new interface driver usbserial Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.153258] usbcore: registered new interface driver usbserial_generic Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.172012] usbserial: USB Serial support registered for generic Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.190301] usbcore: registered new interface driver sierra Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.208100] usbserial: USB Serial support registered for Sierra USB modem Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.227332] i2c /dev entries driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.243427] i2c-octeon 1180000001000.i2c: version 2.5 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.261465] octeon_wdt: Initial granularity 5 Sec Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.278572] EDAC DEVICE0: Giving out device to module 'octeon-cpu' controller 'cache': DEV 'octeon_pc_edac' (INTERRUPT) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.301694] EDAC DEVICE1: Giving out device to module 'octeon-l2c' controller 'octeon_l2c_err': DEV 'octeon_l2c_edac' (POLLED) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 27.325353] octeon_lmc_edac octeon_lmc_edac.0: Disabled (ECC not enabled) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 29.946779] Netfilter messages via NETLINK v0.30. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 29.963621] nfnl_acct: registering with nfnetlink. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 29.980585] nf_conntrack version 0.5.0 (7682 buckets, 30728 max) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 29.999022] ctnetlink v0.93: registering with nfnetlink. Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.016854] xt_time: kernel timezone is -0000 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 30.033346] ip_set: protocol 6 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.048646] ipip: IPv4 over IPv4 tunneling driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.065998] gre: GRE over IPv4 demultiplexor driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.083020] ip_gre: GRE over IPv4 tunneling driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.101219] ip_tables: (C) 2000-2006 Netfilter Core Team Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.118857] ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.137390] arp_tables: (C) 2002 David S. Miller Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.154182] TCP: cubic registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.169622] Initializing XFRM netlink socket Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.186065] NET: Registered protocol family 10 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.205853] mip6: Mobile IPv6 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.220993] ip6_tables: (C) 2000-2006 Netfilter Core Team Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.238807] sit: IPv6 over IPv4 tunneling driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.256883] ip6_gre: GRE over IPv6 tunneling driver Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.274560] NET: Registered protocol family 17 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.291173] NET: Registered protocol family 15 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 30.307837] Bridge firewalling registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.323987] Ebtables v2.0 registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.386620] 8021q: 802.1Q VLAN Support v1.8 Wed Apr 27 18:31:09 2016 kern.notice kernel: [ 30.402989] Key type dns_resolver registered Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.419524] L2 lock: TLB refill 256 bytes Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.435659] L2 lock: General exception 128 bytes Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.452396] L2 lock: low-level interrupt 128 bytes Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.469307] L2 lock: interrupt 640 bytes Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.485355] L2 lock: memcpy 1152 bytes Wed Apr 27 18:31:09 2016 kern.err kernel: [ 30.503296] drivers/rtc/hctosys.c: unable to open rtc device (rtc0) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 30.528040] Freeing unused kernel memory: 26624K (ffffffff80930000 - ffffffff82330000) Wed Apr 27 18:31:09 2016 kern.info kernel: [ 46.980229] mmc1: BKOPS_EN bit is not set Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.000926] mmc1: new high speed DDR MMC card at address 0001 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.019401] mmcblk0: mmc1:0001 P1XXXX 3.60 GiB Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.036380] mmcblk0boot0: mmc1:0001 P1XXXX partition 1 2.00 MiB Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.054745] mmcblk0boot1: mmc1:0001 P1XXXX partition 2 2.00 MiB Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.073112] mmcblk0rpmb: mmc1:0001 P1XXXX partition 3 128 KiB Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.095022] mmcblk0: p1 p2 p3 p4 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.115863] mmcblk0boot1: unknown partition table Wed Apr 27 18:31:09 2016 kern.info kernel: [ 47.137360] mmcblk0boot0: unknown partition table Wed Apr 27 18:31:09 2016 kern.info kernel: [ 48.126008] kjournald starting. Commit interval 5 seconds Wed Apr 27 18:31:09 2016 kern.info kernel: [ 48.128490] EXT3-fs (mmcblk0p4): using internal journal Wed Apr 27 18:31:09 2016 kern.info kernel: [ 48.129222] EXT3-fs (mmcblk0p4): recovery complete Wed Apr 27 18:31:09 2016 kern.info kernel: [ 48.129226] EXT3-fs (mmcblk0p4): mounted filesystem with writeback data mode Wed Apr 27 18:31:09 2016 user.err kernel: [ 48.417496] init: failed to symlink /tmp -> /var Wed Apr 27 18:31:09 2016 user.info kernel: [ 48.434558] init: Console is alive Wed Apr 27 18:31:09 2016 user.info kernel: [ 48.450442] init: - watchdog - Wed Apr 27 18:31:09 2016 user.info kernel: [ 49.466618] init: - preinit - Wed Apr 27 18:31:09 2016 user.notice kernel: [ 52.666009] mount_root: mounting /dev/root Wed Apr 27 18:31:09 2016 user.info kernel: [ 52.682957] mount_root: loading kmods from internal overlay Wed Apr 27 18:31:09 2016 user.info kernel: [ 52.812145] block: attempting to load /etc/config/fstab Wed Apr 27 18:31:09 2016 user.info kernel: [ 52.831773] block: extroot: not configured Wed Apr 27 18:31:09 2016 user.info kernel: [ 52.852771] procd: - early - Wed Apr 27 18:31:09 2016 user.info kernel: [ 52.868115] procd: - watchdog - Wed Apr 27 18:31:09 2016 user.info kernel: [ 53.584757] procd: - ubus - Wed Apr 27 18:31:09 2016 user.info kernel: [ 54.600891] procd: - init - Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.327340] NET: Registered protocol family 38 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.353736] tun: Universal TUN/TAP device driver, 1.6 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.371090] tun: (C) 1999-2004 Max Krasnyansky Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.399192] u32 classifier Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.414044] input device check on Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.429834] Actions configured Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.446504] Mirror/redirect action on Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.471046] PPP generic driver version 2.4.2 Wed Apr 27 18:31:09 2016 kern.info kernel: [ 56.488520] NET: Registered protocol family 24 Wed Apr 27 18:31:10 2016 user.emerg procd: this file has been obseleted. please call "/sbin/block mount" directly Wed Apr 27 18:31:10 2016 daemon.warn netifd: You have delegated IPv6-prefixes but haven't assigned them to any interface. Did you forget to set option ip6assign on your lan-interfaces? Wed Apr 27 18:31:10 2016 daemon.err block: /dev/mmcblk0p4 is already mounted Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'lan' is enabled Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'blockdomain' is enabled Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'blockdomain' is setting up now Wed Apr 27 18:31:10 2016 kern.debug kernel: [ 58.552027] SGMII0: Port 1 link timeout Wed Apr 27 18:31:10 2016 kern.notice kernel: [ 58.552272] eth1: 1000 Mbps Full duplex, port 1 Wed Apr 27 18:31:10 2016 kern.info kernel: [ 58.552350] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready Wed Apr 27 18:31:10 2016 kern.info kernel: [ 58.553242] device eth1 entered promiscuous mode Wed Apr 27 18:31:10 2016 kern.info kernel: [ 58.555123] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'blockdomain' is now up Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'loopback' is enabled Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'loopback' is setting up now Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'loopback' is now up Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'wan' is enabled Wed Apr 27 18:31:10 2016 kern.notice kernel: [ 58.588490] eth0: 1000 Mbps Full duplex, port 0 Wed Apr 27 18:31:10 2016 kern.info kernel: [ 58.588614] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Wed Apr 27 18:31:10 2016 kern.notice kernel: [ 58.616558] eth2: 1000 Mbps Full duplex, port 2 Wed Apr 27 18:31:10 2016 kern.info kernel: [ 58.616657] IPv6: ADDRCONF(NETDEV_UP): eth2: link is not ready Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'wan6' is enabled Wed Apr 27 18:31:10 2016 daemon.notice netifd: Network device 'lo' link is up Wed Apr 27 18:31:10 2016 daemon.notice netifd: Interface 'loopback' has link connectivity Wed Apr 27 18:31:10 2016 cron.info crond[3170]: crond (busybox 1.23.2) started, log level 4 Wed Apr 27 18:31:10 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:31:10 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:31:10 2016 user.emerg procd: interface lan has no physdev or physdev has no suitable ip Wed Apr 27 18:31:11 2016 daemon.notice netifd: Network device 'eth1' link is up Wed Apr 27 18:31:11 2016 daemon.notice netifd: Bridge 'br-lan' link is up Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'lan' has link connectivity Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'lan' is setting up now Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'blockdomain' has link connectivity Wed Apr 27 18:31:11 2016 kern.info kernel: [ 59.536788] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready Wed Apr 27 18:31:11 2016 kern.info kernel: [ 59.536860] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:11 2016 kern.info kernel: [ 59.536885] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:11 2016 kern.info kernel: [ 59.536936] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready Wed Apr 27 18:31:11 2016 daemon.notice netifd: Network device 'eth0' link is up Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'wan' has link connectivity Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'wan' is setting up now Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'wan' is now up Wed Apr 27 18:31:11 2016 kern.info kernel: [ 59.566830] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Wed Apr 27 18:31:11 2016 daemon.notice netifd: lan (3347): udhcpc (v1.23.2) started Wed Apr 27 18:31:11 2016 daemon.notice netifd: Network device 'eth2' link is up Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'wan6' has link connectivity Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'wan6' is setting up now Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'wan6' is now up Wed Apr 27 18:31:11 2016 kern.info kernel: [ 59.586911] IPv6: ADDRCONF(NETDEV_CHANGE): eth2: link becomes ready Wed Apr 27 18:31:11 2016 daemon.notice netifd: lan (3347): Sending discover... Wed Apr 27 18:31:11 2016 daemon.notice netifd: lan (3347): Sending select for 192.168.1.111... Wed Apr 27 18:31:11 2016 daemon.notice netifd: lan (3347): Lease of 192.168.1.111 obtained, lease time 86400 Wed Apr 27 18:31:11 2016 daemon.notice netifd: Interface 'lan' is now up Wed Apr 27 18:31:12 2016 kern.info kernel: [ 60.958893] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. Wed Apr 27 18:31:13 2016 kern.info kernel: [ 61.546589] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:14 2016 daemon.crit dnsmasq[3371]: error at line 70120 of /etc/ITUS_DNS.txt Wed Apr 27 18:31:14 2016 daemon.crit dnsmasq[3371]: FAILED to start up Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Enabling inline operation Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Found pid path directive (/var/snort/) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Running in IDS mode Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: --== Initializing Snort ==-- Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Initializing Output Plugins! Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Initializing Preprocessors! Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Initializing Plug-ins! Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Parsing Rules file "/etc/snort/snort_bridge.conf" Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'HTTP_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 36 80:90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 33300 34412 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'SHELLCODE_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 1:65535 ] Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'ORACLE_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 1024:65535 ] Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'SSH_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 22 ] Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'FTP_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 21 2100 3535 ] Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'SIP_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 5060:5061 5600 ] Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'FILE_DATA_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 36 80:90 110 143 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 3330Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: PortVar 'GTP_PORTS' defined : Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: [ 2123 2152 3386 ] Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Detection: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Search-Method = AC-Full Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Search-Method-Optimizations = enabled Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Maximum pattern length = 20 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Found pid path directive (/var/snort/) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Tagged Packet Limit: 256 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic engine /usr/lib/snort_dynamicengine/libsf_engine.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: done Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Finished Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/ Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Log directory = /tmp/snort/ Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalizer config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip4: on Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip4::df: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip4::rf: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip4::tos: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip4::trim: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip4::ttl: on (min=1, new=5) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalizer config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp: on Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::ecn: stream Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::block: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::rsv: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::pad: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::req_urg: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::req_pay: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::req_urp: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::urp: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::opt: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::ips: on Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::trim_syn: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::trim_rst: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::trim_win: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: tcp::trim_mss: off Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalizer config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: icmp4: on Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalizer config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip6: on Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ip6::hops: on (min=1, new=5) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalizer config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: icmp6: on Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Frag3 global config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max frags: 65536 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Fragment memory cap: 4194304 bytes Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Frag3 engine config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Bound Address: default Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Target-based policy: WINDOWS Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Fragment timeout: 180 seconds Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Fragment min_ttl: 1 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Fragment Anomalies: Alert Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Overlap Limit: 10 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Min fragment Length: 100 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Expected Streams: 39 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Stream global config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Track TCP sessions: ACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max TCP sessions: 10000 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: TCP cache pruning timeout: 30 seconds Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: TCP cache nominal timeout: 3600 seconds Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Memcap (for reassembly packet storage): 8388608 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Track UDP sessions: ACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max UDP sessions: 10000 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: UDP cache pruning timeout: 30 seconds Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: UDP cache nominal timeout: 180 seconds Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Track ICMP sessions: ACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max ICMP sessions: 65536 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Track IP sessions: INACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Log info if session memory consumption exceeds 1048576 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Send up to 2 active responses Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wait at least 5 seconds between responses Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Protocol Aware Flushing: ACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Maximum Flush Point: 16000 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Stream TCP Policy config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Bound Address: default Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Reassembly Policy: WINDOWS Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Timeout: 180 seconds Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Limit on TCP Overlaps: 10 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Maximum number of bytes to queue per session: 1048576 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Maximum number of segs to queue per session: 2621 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Options: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Require 3-Way Handshake: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 3-Way Handshake Timeout: 180 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Detect Anomalies: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Reassembly Ports: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 21 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 22 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 23 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 25 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 36 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 42 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 53 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 70 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 79 client (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 80 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 81 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 82 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 83 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 84 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 85 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 86 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 87 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 88 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 89 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 90 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: additional ports configured but not printed. Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Stream UDP Policy config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Timeout: 180 seconds Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: HttpInspect Config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: GLOBAL CONFIG Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Detect Proxy Usage: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: IIS Unicode Map Filename: /etc/snort/unicode.map Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: IIS Unicode Map Codepage: 1252 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Memcap used for logging URI and Hostname: 150994944 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Gzip Memory: 838860 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Gzip Sessions: 1807 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Gzip Compress Depth: 65535 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Gzip Decompress Depth: 65535 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: DEFAULT SERVER CONFIG: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Server profile: All Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports (PAF): 36 80 81 82 83 84 85 86 87 88 89 90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000 7001 7071 7144 7145 7510 7770 7777 7778 7779 8000 8008 8014 8028 8080 8081 8082 8085 8088 8090 8118 8123 8180 8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090 9091 9111 9290 9443 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Server Flow Depth: 0 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Client Flow Depth: 0 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Chunk Length: 500000 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Small Chunk Length Evasion: chunk size <= 10, threshold >= 5 times Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Header Field Length: 750 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Number Header Fields: 100 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Number of WhiteSpaces allowed with header folding: 200 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Inspect Pipeline Requests: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: URI Discovery Strict Mode: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Allow Proxy Usage: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Disable Alerting: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Oversize Dir Length: 500 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Only inspect URI: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalize HTTP Headers: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Inspect HTTP Cookies: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Inspect HTTP Responses: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Extract Gzip from responses: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Decompress response files: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Unlimited decompression of gzip data from responses: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalize Javascripts in HTTP Responses: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Number of WhiteSpaces allowed with Javascript Obfuscation in HTTP responses: 200 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalize HTTP Cookies: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Enable XFF and True Client IP: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Log HTTP URI data: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Log HTTP Hostname data: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Extended ASCII code support in URI: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ascii: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Double Decoding: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: %U Encoding: YES alert: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Bare Byte: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: UTF 8: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: IIS Unicode: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Multiple Slash: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: IIS Backslash: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Directory Traversal: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Web Root Traversal: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Apache WhiteSpace: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: IIS Delimiter: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: IIS Unicode Map: GLOBAL IIS UNICODE MAP CONFIG Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Non-RFC Compliant Characters: 0x00 0x01 0x02 0x03 0x04 0x05 0x06 0x07 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Whitespace Characters: 0x09 0x0b 0x0c 0x0d Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: rpc_decode arguments: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports to decode RPC on: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: alert_fragments: INACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: alert_large_fragments: INACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: alert_incomplete: INACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: alert_multiple_requests: INACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Portscan Detection Config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Detect Protocols: TCP UDP ICMP IP Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Detect Scan Type: portscan portsweep decoy_portscan distributed_portscan Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Sensitivity Level: Medium Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Memcap (in bytes): 500000 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Number of Nodes: 978 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: FTPTelnet Config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: GLOBAL CONFIG Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Inspection Type: stateful Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Check for Encrypted Traffic: YES alert: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Continue to check encrypted data: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: TELNET CONFIG: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports: 23 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Are You There Threshold: 20 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Normalize: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Detect Anomalies: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: FTP CONFIG: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: FTP Server: default Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports (PAF): 21 2100 3535 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Check for Telnet Cmds: YES alert: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ignore Telnet Cmd Operations: YES alert: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ignore open data channels: NO Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: FTP Client: default Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Check for Bounce Attacks: YES alert: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Check for Telnet Cmds: YES alert: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ignore Telnet Cmd Operations: YES alert: YES Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Response Length: 256 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SSH config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Autodetection: ENABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Challenge-Response Overflow Alert: ENABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SSH1 CRC32 Alert: ENABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Server Version String Overflow Alert: ENABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Protocol Mismatch Alert: ENABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Bad Message Direction Alert: DISABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Bad Payload Size Alert: DISABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Unrecognized Version Alert: DISABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Encrypted Packets: 20 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Server Version String Length: 100 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: MaxClientBytes: 19600 (Default) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 22 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: DCE/RPC 2 Preprocessor Configuration Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Global Configuration Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: DCE/RPC Defragmentation: Enabled Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Memcap: 102400 KB Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Events: co Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SMB Fingerprint policy: Disabled Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Server Default Configuration Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Policy: WinXP Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Detect ports (PAF) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SMB: 139 445 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: TCP: 135 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: UDP: 135 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: RPC over HTTP server: 593 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: RPC over HTTP proxy: None Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Autodetect ports (PAF) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SMB: None Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: TCP: 1025-65535 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: UDP: 1025-65535 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: RPC over HTTP server: 1025-65535 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: RPC over HTTP proxy: None Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Invalid SMB shares: C$ D$ ADMIN$ Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Maximum SMB command chaining: 3 commands Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SMB file inspection: Disabled Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: DNS config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: DNS Client rdata txt Overflow Alert: ACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Obsolete DNS RR Types Alert: INACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Experimental DNS RR Types Alert: INACTIVE Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 53 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SSLPP config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Encrypted packets: not inspected Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 443 465 563 636 989 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 992 993 994 995 7801 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 7802 7900 7901 7902 7903 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 7904 7905 7906 7907 7908 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 7909 7910 7911 7912 7913 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 7914 7915 7916 7917 7918 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 7919 7920 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Server side data is trusted Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Maximum SSL Heartbeat length: 0 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Sensitive Data preprocessor config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Global Alert Threshold: 25 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Masked Output: DISABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: SIP config: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max number of sessions: 1024 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max number of dialogs in a session: 4 (Default) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Status: ENABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ignore media channel: DISABLED Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max URI length: 512 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Call ID length: 80 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Request name length: 20 (Default) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max From length: 256 (Default) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max To length: 256 (Default) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Via length: 1024 (Default) Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Contact length: 512 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Max Content length: 2048 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Ports: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 5060 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 5061 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: 5600 Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Methods: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: invite Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: cancel Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: ack Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: bye Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: register Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: options Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: refer Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: subscribe Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: update Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: join Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: info Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: message Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: notify Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: benotify Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: do Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: qauth Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: sprack Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: publish Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: service Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: unsubscribe Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: prack Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Wed Apr 27 18:31:14 2016 daemon.notice snort[3435]: Initializing rule chains... Wed Apr 27 18:31:15 2016 daemon.notice snort[3435]: WARNING: /etc/snort/rules/snort.rules(1218) threshold (in rule) is deprecated; use detection_filter instead. Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'blockdomain' is now down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'loopback' is now down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'loopback' is disabled Wed Apr 27 18:31:17 2016 daemon.notice netifd: Network device 'lo' link is down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'loopback' has link connectivity loss Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'wan' is now down Wed Apr 27 18:31:17 2016 kern.notice kernel: [ 65.727196] eth0: Link down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'wan' is disabled Wed Apr 27 18:31:17 2016 daemon.notice netifd: lan (3347): Received SIGTERM Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'lan' is now down Wed Apr 27 18:31:17 2016 kern.info kernel: [ 65.747238] br-lan: port 1(eth1) entered disabled state Wed Apr 27 18:31:17 2016 kern.info kernel: [ 65.748630] device eth1 left promiscuous mode Wed Apr 27 18:31:17 2016 kern.info kernel: [ 65.748651] br-lan: port 1(eth1) entered disabled state Wed Apr 27 18:31:17 2016 kern.notice kernel: [ 65.768804] eth1: Link down Wed Apr 27 18:31:17 2016 kern.info kernel: [ 65.770900] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'lan' is disabled Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'blockdomain' is disabled Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'wan6' is now down Wed Apr 27 18:31:17 2016 kern.notice kernel: [ 65.867651] eth2: Link down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'wan6' is disabled Wed Apr 27 18:31:17 2016 daemon.notice netifd: Network device 'eth0' link is down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'wan' has link connectivity loss Wed Apr 27 18:31:17 2016 daemon.notice netifd: Network device 'eth1' link is down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Bridge 'br-lan' link is down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'lan' has link connectivity loss Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'blockdomain' has link connectivity loss Wed Apr 27 18:31:17 2016 daemon.notice netifd: Network device 'eth2' link is down Wed Apr 27 18:31:17 2016 daemon.notice netifd: Interface 'wan6' has link connectivity loss Wed Apr 27 18:31:18 2016 daemon.info dnsmasq[3508]: started, version 2.73rc7 cachesize 150 Wed Apr 27 18:31:18 2016 daemon.info dnsmasq[3508]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-DNSSEC loop-detect inotify Wed Apr 27 18:31:18 2016 daemon.info dnsmasq[3508]: DNS service limited to local subnets Wed Apr 27 18:31:18 2016 daemon.info dnsmasq[3508]: using local addresses only for domain lan Wed Apr 27 18:31:18 2016 daemon.warn dnsmasq[3508]: no servers found in /tmp/resolv.conf.auto, will retry Wed Apr 27 18:31:18 2016 daemon.info dnsmasq[3508]: read /etc/hosts - 1 addresses Wed Apr 27 18:31:18 2016 daemon.info dnsmasq[3508]: read /tmp/hosts/dhcp - 1 addresses Wed Apr 27 18:31:18 2016 daemon.warn netifd: You have delegated IPv6-prefixes but haven't assigned them to any interface. Did you forget to set option ip6assign on your lan-interfaces? Wed Apr 27 18:31:18 2016 daemon.notice netifd: Interface 'lan' is enabled Wed Apr 27 18:31:18 2016 kern.notice kernel: [ 67.262249] eth1: 1000 Mbps Full duplex, port 1 Wed Apr 27 18:31:18 2016 kern.info kernel: [ 67.263153] device eth1 entered promiscuous mode Wed Apr 27 18:31:18 2016 kern.info kernel: [ 67.264954] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:18 2016 kern.info kernel: [ 67.264980] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'loopback' is enabled Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'loopback' is setting up now Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'loopback' is now up Wed Apr 27 18:31:19 2016 kern.notice kernel: [ 67.291982] eth0: 1000 Mbps Full duplex, port 0 Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan' is enabled Wed Apr 27 18:31:19 2016 kern.notice kernel: [ 67.318082] eth2: 1000 Mbps Full duplex, port 2 Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan6' is enabled Wed Apr 27 18:31:19 2016 daemon.notice netifd: Bridge 'br-lan' link is up Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'lan' has link connectivity Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'lan' is setting up now Wed Apr 27 18:31:19 2016 daemon.notice netifd: Network device 'eth1' link is up Wed Apr 27 18:31:19 2016 daemon.notice netifd: Network device 'lo' link is up Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'loopback' has link connectivity Wed Apr 27 18:31:19 2016 daemon.notice netifd: Network device 'eth0' link is up Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan' has link connectivity Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan' is setting up now Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan' is now up Wed Apr 27 18:31:19 2016 daemon.notice netifd: Network device 'eth2' link is up Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan6' has link connectivity Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan6' is setting up now Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'wan6' is now up Wed Apr 27 18:31:19 2016 daemon.notice netifd: lan (3754): udhcpc (v1.23.2) started Wed Apr 27 18:31:19 2016 daemon.notice netifd: lan (3754): Sending discover... Wed Apr 27 18:31:19 2016 daemon.notice netifd: lan (3754): Performing a DHCP renew Wed Apr 27 18:31:19 2016 daemon.notice netifd: lan (3754): Sending discover... Wed Apr 27 18:31:19 2016 daemon.notice netifd: lan (3754): Sending select for 192.168.1.111... Wed Apr 27 18:31:19 2016 daemon.notice netifd: lan (3754): Lease of 192.168.1.111 obtained, lease time 86400 Wed Apr 27 18:31:19 2016 daemon.notice netifd: Interface 'lan' is now up Wed Apr 27 18:31:19 2016 daemon.info dnsmasq[3508]: reading /tmp/resolv.conf.auto Wed Apr 27 18:31:19 2016 daemon.info dnsmasq[3508]: using local addresses only for domain lan Wed Apr 27 18:31:19 2016 daemon.info dnsmasq[3508]: using nameserver 192.168.1.1#53 Wed Apr 27 18:31:20 2016 kern.notice kernel: [ 68.316424] eth2: Link down Wed Apr 27 18:31:20 2016 kern.info kernel: [ 69.256615] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:22 2016 user.notice firewall: Reloading firewall due to ifup of wan (eth0) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Enabling inline operation Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Found pid path directive (/var/snort/) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Running in IDS mode Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: --== Initializing Snort ==-- Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Initializing Output Plugins! Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Initializing Preprocessors! Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Initializing Plug-ins! Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Parsing Rules file "/etc/snort/snort_bridge.conf" Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'HTTP_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 36 80:90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 33300 34412 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'SHELLCODE_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 1:65535 ] Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'ORACLE_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 1024:65535 ] Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'SSH_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 22 ] Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'FTP_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 21 2100 3535 ] Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'SIP_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 5060:5061 5600 ] Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'FILE_DATA_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 36 80:90 110 143 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 3330Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: PortVar 'GTP_PORTS' defined : Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: [ 2123 2152 3386 ] Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Detection: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Search-Method = AC-Full Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Search-Method-Optimizations = enabled Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Maximum pattern length = 20 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Found pid path directive (/var/snort/) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Tagged Packet Limit: 256 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic engine /usr/lib/snort_dynamicengine/libsf_engine.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: done Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Finished Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/ Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Log directory = /tmp/snort/ Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalizer config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip4: on Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip4::df: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip4::rf: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip4::tos: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip4::trim: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip4::ttl: on (min=1, new=5) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalizer config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp: on Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::ecn: stream Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::block: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::rsv: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::pad: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::req_urg: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::req_pay: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::req_urp: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::urp: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::opt: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::ips: on Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::trim_syn: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::trim_rst: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::trim_win: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: tcp::trim_mss: off Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalizer config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: icmp4: on Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalizer config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip6: on Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ip6::hops: on (min=1, new=5) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalizer config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: icmp6: on Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Frag3 global config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max frags: 65536 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Fragment memory cap: 4194304 bytes Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Frag3 engine config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Bound Address: default Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Target-based policy: WINDOWS Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Fragment timeout: 180 seconds Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Fragment min_ttl: 1 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Fragment Anomalies: Alert Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Overlap Limit: 10 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Min fragment Length: 100 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Expected Streams: 39 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Stream global config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Track TCP sessions: ACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max TCP sessions: 10000 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: TCP cache pruning timeout: 30 seconds Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: TCP cache nominal timeout: 3600 seconds Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Memcap (for reassembly packet storage): 8388608 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Track UDP sessions: ACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max UDP sessions: 10000 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: UDP cache pruning timeout: 30 seconds Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: UDP cache nominal timeout: 180 seconds Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Track ICMP sessions: ACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max ICMP sessions: 65536 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Track IP sessions: INACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Log info if session memory consumption exceeds 1048576 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Send up to 2 active responses Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wait at least 5 seconds between responses Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Protocol Aware Flushing: ACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Maximum Flush Point: 16000 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Stream TCP Policy config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Bound Address: default Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Reassembly Policy: WINDOWS Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Timeout: 180 seconds Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Limit on TCP Overlaps: 10 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Maximum number of bytes to queue per session: 1048576 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Maximum number of segs to queue per session: 2621 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Options: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Require 3-Way Handshake: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 3-Way Handshake Timeout: 180 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Detect Anomalies: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Reassembly Ports: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 21 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 22 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 23 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 25 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 36 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 42 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 53 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 70 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 79 client (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 80 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 81 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 82 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 83 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 84 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 85 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 86 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 87 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 88 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 89 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 90 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: additional ports configured but not printed. Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Stream UDP Policy config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Timeout: 180 seconds Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: HttpInspect Config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: GLOBAL CONFIG Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Detect Proxy Usage: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: IIS Unicode Map Filename: /etc/snort/unicode.map Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: IIS Unicode Map Codepage: 1252 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Memcap used for logging URI and Hostname: 150994944 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Gzip Memory: 838860 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Gzip Sessions: 1807 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Gzip Compress Depth: 65535 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Gzip Decompress Depth: 65535 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: DEFAULT SERVER CONFIG: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Server profile: All Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports (PAF): 36 80 81 82 83 84 85 86 87 88 89 90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000 7001 7071 7144 7145 7510 7770 7777 7778 7779 8000 8008 8014 8028 8080 8081 8082 8085 8088 8090 8118 8123 8180 8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090 9091 9111 9290 9443 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Server Flow Depth: 0 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Client Flow Depth: 0 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Chunk Length: 500000 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Small Chunk Length Evasion: chunk size <= 10, threshold >= 5 times Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Header Field Length: 750 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Number Header Fields: 100 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Number of WhiteSpaces allowed with header folding: 200 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Inspect Pipeline Requests: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: URI Discovery Strict Mode: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Allow Proxy Usage: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Disable Alerting: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Oversize Dir Length: 500 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Only inspect URI: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalize HTTP Headers: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Inspect HTTP Cookies: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Inspect HTTP Responses: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Extract Gzip from responses: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Decompress response files: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Unlimited decompression of gzip data from responses: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalize Javascripts in HTTP Responses: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Number of WhiteSpaces allowed with Javascript Obfuscation in HTTP responses: 200 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalize HTTP Cookies: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Enable XFF and True Client IP: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Log HTTP URI data: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Log HTTP Hostname data: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Extended ASCII code support in URI: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ascii: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Double Decoding: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: %U Encoding: YES alert: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Bare Byte: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: UTF 8: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: IIS Unicode: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Multiple Slash: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: IIS Backslash: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Directory Traversal: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Web Root Traversal: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Apache WhiteSpace: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: IIS Delimiter: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: IIS Unicode Map: GLOBAL IIS UNICODE MAP CONFIG Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Non-RFC Compliant Characters: 0x00 0x01 0x02 0x03 0x04 0x05 0x06 0x07 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Whitespace Characters: 0x09 0x0b 0x0c 0x0d Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: rpc_decode arguments: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports to decode RPC on: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: alert_fragments: INACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: alert_large_fragments: INACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: alert_incomplete: INACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: alert_multiple_requests: INACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Portscan Detection Config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Detect Protocols: TCP UDP ICMP IP Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Detect Scan Type: portscan portsweep decoy_portscan distributed_portscan Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Sensitivity Level: Medium Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Memcap (in bytes): 500000 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Number of Nodes: 978 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: FTPTelnet Config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: GLOBAL CONFIG Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Inspection Type: stateful Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Check for Encrypted Traffic: YES alert: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Continue to check encrypted data: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: TELNET CONFIG: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports: 23 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Are You There Threshold: 20 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Normalize: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Detect Anomalies: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: FTP CONFIG: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: FTP Server: default Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports (PAF): 21 2100 3535 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Check for Telnet Cmds: YES alert: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ignore Telnet Cmd Operations: YES alert: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ignore open data channels: NO Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: FTP Client: default Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Check for Bounce Attacks: YES alert: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Check for Telnet Cmds: YES alert: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ignore Telnet Cmd Operations: YES alert: YES Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Response Length: 256 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SSH config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Autodetection: ENABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Challenge-Response Overflow Alert: ENABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SSH1 CRC32 Alert: ENABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Server Version String Overflow Alert: ENABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Protocol Mismatch Alert: ENABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Bad Message Direction Alert: DISABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Bad Payload Size Alert: DISABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Unrecognized Version Alert: DISABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Encrypted Packets: 20 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Server Version String Length: 100 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: MaxClientBytes: 19600 (Default) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 22 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: DCE/RPC 2 Preprocessor Configuration Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Global Configuration Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: DCE/RPC Defragmentation: Enabled Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Memcap: 102400 KB Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Events: co Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SMB Fingerprint policy: Disabled Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Server Default Configuration Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Policy: WinXP Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Detect ports (PAF) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SMB: 139 445 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: TCP: 135 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: UDP: 135 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: RPC over HTTP server: 593 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: RPC over HTTP proxy: None Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Autodetect ports (PAF) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SMB: None Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: TCP: 1025-65535 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: UDP: 1025-65535 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: RPC over HTTP server: 1025-65535 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: RPC over HTTP proxy: None Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Invalid SMB shares: C$ D$ ADMIN$ Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Maximum SMB command chaining: 3 commands Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SMB file inspection: Disabled Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: DNS config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: DNS Client rdata txt Overflow Alert: ACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Obsolete DNS RR Types Alert: INACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Experimental DNS RR Types Alert: INACTIVE Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 53 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SSLPP config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Encrypted packets: not inspected Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 443 465 563 636 989 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 992 993 994 995 7801 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 7802 7900 7901 7902 7903 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 7904 7905 7906 7907 7908 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 7909 7910 7911 7912 7913 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 7914 7915 7916 7917 7918 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 7919 7920 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Server side data is trusted Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Maximum SSL Heartbeat length: 0 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Sensitive Data preprocessor config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Global Alert Threshold: 25 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Masked Output: DISABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: SIP config: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max number of sessions: 1024 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max number of dialogs in a session: 4 (Default) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Status: ENABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ignore media channel: DISABLED Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max URI length: 512 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Call ID length: 80 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Request name length: 20 (Default) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max From length: 256 (Default) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max To length: 256 (Default) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Via length: 1024 (Default) Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Contact length: 512 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Max Content length: 2048 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Ports: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 5060 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 5061 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: 5600 Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Methods: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: invite Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: cancel Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: ack Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: bye Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: register Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: options Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: refer Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: subscribe Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: update Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: join Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: info Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: message Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: notify Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: benotify Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: do Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: qauth Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: sprack Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: publish Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: service Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: unsubscribe Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: prack Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Wed Apr 27 18:31:25 2016 daemon.notice snort[3981]: Initializing rule chains... Wed Apr 27 18:31:26 2016 daemon.notice snort[3981]: WARNING: /etc/snort/rules/snort.rules(1218) threshold (in rule) is deprecated; use detection_filter instead. Wed Apr 27 18:31:26 2016 user.notice ddns-scripts[4043]: myddns_ipv4: PID '4043' started at 2016-04-28 01:31 Wed Apr 27 18:31:26 2016 user.notice firewall: Reloading firewall due to ifup of wan6 (eth2) Wed Apr 27 18:31:26 2016 user.warn ddns-scripts[4043]: myddns_ipv4: Service section disabled! - TERMINATE Wed Apr 27 18:31:26 2016 user.warn ddns-scripts[4043]: myddns_ipv4: PID '4043' exit WITH ERROR '1' at 2016-04-28 01:31 Wed Apr 27 18:31:26 2016 daemon.info dnsmasq[3508]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:26 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:26 2016 daemon.info dnsmasq[3508]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:31:26 2016 daemon.info dnsmasq[3508]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:26 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:27 2016 daemon.info dnsmasq[3508]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:31:27 2016 daemon.info dnsmasq[3508]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:31:27 2016 daemon.info dnsmasq[3508]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:31:30 2016 user.notice firewall: Reloading firewall due to ifup of lan (br-lan) Wed Apr 27 18:31:30 2016 user.emerg procd: Cannot change large-receive-offload Wed Apr 27 18:31:30 2016 user.notice ddns-scripts[4266]: myddns_ipv6: PID '4266' started at 2016-04-28 01:31 Wed Apr 27 18:31:30 2016 user.warn ddns-scripts[4266]: myddns_ipv6: Service section disabled! - TERMINATE Wed Apr 27 18:31:30 2016 user.warn ddns-scripts[4266]: myddns_ipv6: PID '4266' exit WITH ERROR '1' at 2016-04-28 01:31 Wed Apr 27 18:31:31 2016 daemon.info dnsmasq[3508]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:31 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:31 2016 daemon.info dnsmasq[3508]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:31:31 2016 daemon.info dnsmasq[3508]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:31 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:32 2016 kern.notice kernel: [ 80.306403] eth0: Link down Wed Apr 27 18:31:33 2016 daemon.notice netifd: Network device 'eth0' link is down Wed Apr 27 18:31:33 2016 daemon.notice netifd: Interface 'wan' has link connectivity loss Wed Apr 27 18:31:33 2016 daemon.notice netifd: Interface 'wan' is now down Wed Apr 27 18:31:33 2016 daemon.notice netifd: Interface 'wan' is disabled Wed Apr 27 18:31:33 2016 daemon.notice netifd: Interface 'wan' is enabled Wed Apr 27 18:31:33 2016 kern.info kernel: [ 81.300171] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Wed Apr 27 18:31:33 2016 user.emerg procd: Cannot change large-receive-offload Wed Apr 27 18:31:35 2016 kern.notice kernel: [ 83.276351] eth1: Link down Wed Apr 27 18:31:35 2016 daemon.notice netifd: Network device 'eth0' link is up Wed Apr 27 18:31:35 2016 daemon.notice netifd: Interface 'wan' has link connectivity Wed Apr 27 18:31:35 2016 daemon.notice netifd: Interface 'wan' is setting up now Wed Apr 27 18:31:35 2016 daemon.notice netifd: Interface 'wan' is now up Wed Apr 27 18:31:35 2016 kern.notice kernel: [ 83.326681] eth0: 1000 Mbps Full duplex, port 0 Wed Apr 27 18:31:35 2016 kern.info kernel: [ 83.326706] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Wed Apr 27 18:31:35 2016 user.notice firewall: Reloading firewall due to ifup of wan (eth0) Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: 13285 Snort rules read Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: 13285 detection rules Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: 0 decoder rules Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: 0 preprocessor rules Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: 13285 Option Chains linked into 252 Chain Headers Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: 0 Dynamic rules Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Wed Apr 27 18:31:35 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:36 2016 daemon.notice netifd: Network device 'eth1' link is down Wed Apr 27 18:31:36 2016 kern.info kernel: [ 84.326659] br-lan: port 1(eth1) entered disabled state Wed Apr 27 18:31:36 2016 user.emerg procd: Cannot change large-receive-offload Wed Apr 27 18:31:37 2016 daemon.notice netifd: Bridge 'br-lan' link is down Wed Apr 27 18:31:37 2016 daemon.notice netifd: Interface 'lan' has link connectivity loss Wed Apr 27 18:31:37 2016 daemon.notice netifd: lan (3754): Received SIGTERM Wed Apr 27 18:31:38 2016 daemon.notice netifd: Network device 'eth1' link is up Wed Apr 27 18:31:38 2016 daemon.notice netifd: Bridge 'br-lan' link is up Wed Apr 27 18:31:38 2016 daemon.notice netifd: Interface 'lan' has link connectivity Wed Apr 27 18:31:38 2016 daemon.notice netifd: Interface 'lan' is setting up now Wed Apr 27 18:31:38 2016 kern.notice kernel: [ 86.296685] eth1: 1000 Mbps Full duplex, port 1 Wed Apr 27 18:31:38 2016 kern.info kernel: [ 86.296720] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:38 2016 kern.info kernel: [ 86.296755] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:38 2016 daemon.notice netifd: lan (4648): udhcpc (v1.23.2) started Wed Apr 27 18:31:38 2016 daemon.notice netifd: lan (4648): Sending discover... Wed Apr 27 18:31:38 2016 daemon.notice netifd: lan (4648): Sending select for 192.168.1.111... Wed Apr 27 18:31:38 2016 daemon.notice netifd: lan (4648): Lease of 192.168.1.111 obtained, lease time 86400 Wed Apr 27 18:31:38 2016 daemon.notice netifd: Interface 'lan' is now up Wed Apr 27 18:31:38 2016 daemon.info dnsmasq[3508]: reading /tmp/resolv.conf.auto Wed Apr 27 18:31:38 2016 daemon.info dnsmasq[3508]: using local addresses only for domain lan Wed Apr 27 18:31:38 2016 daemon.info dnsmasq[3508]: using nameserver 192.168.1.1#53 Wed Apr 27 18:31:38 2016 user.notice ddns-scripts[4698]: myddns_ipv4: PID '4698' started at 2016-04-28 01:31 Wed Apr 27 18:31:38 2016 user.notice firewall: Reloading firewall due to ifup of lan (br-lan) Wed Apr 27 18:31:38 2016 user.warn ddns-scripts[4698]: myddns_ipv4: Service section disabled! - TERMINATE Wed Apr 27 18:31:38 2016 user.warn ddns-scripts[4698]: myddns_ipv4: PID '4698' exit WITH ERROR '1' at 2016-04-28 01:31 Wed Apr 27 18:31:39 2016 daemon.notice netifd: Network device 'eth2' link is down Wed Apr 27 18:31:39 2016 daemon.notice netifd: Interface 'wan6' has link connectivity loss Wed Apr 27 18:31:39 2016 daemon.notice netifd: Interface 'wan6' is now down Wed Apr 27 18:31:39 2016 daemon.notice netifd: Interface 'wan6' is disabled Wed Apr 27 18:31:39 2016 daemon.notice netifd: Interface 'wan6' is enabled Wed Apr 27 18:31:39 2016 kern.info kernel: [ 87.340399] IPv6: ADDRCONF(NETDEV_UP): eth2: link is not ready Wed Apr 27 18:31:39 2016 daemon.info dnsmasq[3508]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:39 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:39 2016 daemon.info dnsmasq[3508]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:31:40 2016 kern.info kernel: [ 88.296619] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:31:40 2016 daemon.info dnsmasq[3508]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:40 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:40 2016 daemon.notice vnstatd[4894]: vnStat daemon 1.12 started. (uid:0 gid:0) Wed Apr 27 18:31:40 2016 daemon.notice vnstatd[4894]: Monitoring: br-lan (100 Mbit) eth0 (100 Mbit) Wed Apr 27 18:31:40 2016 user.emerg procd: Stopping strongSwan IPsec failed: starter is not running Wed Apr 27 18:31:41 2016 kern.notice kernel: [ 89.356925] eth2: 1000 Mbps Full duplex, port 2 Wed Apr 27 18:31:41 2016 daemon.notice netifd: Network device 'eth2' link is up Wed Apr 27 18:31:41 2016 daemon.notice netifd: Interface 'wan6' has link connectivity Wed Apr 27 18:31:41 2016 daemon.notice netifd: Interface 'wan6' is setting up now Wed Apr 27 18:31:41 2016 kern.info kernel: [ 89.386651] IPv6: ADDRCONF(NETDEV_CHANGE): eth2: link becomes ready Wed Apr 27 18:31:41 2016 daemon.notice netifd: Interface 'wan6' is now up Wed Apr 27 18:31:41 2016 daemon.info dnsmasq[3508]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:41 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:41 2016 daemon.info dnsmasq[3508]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:31:41 2016 daemon.info dnsmasq[3508]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:41 2016 daemon.info dnsmasq[3508]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:41 2016 daemon.info dnsmasq[3508]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:31:41 2016 daemon.info dnsmasq[3508]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[3508]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[3508]: exiting on receipt of SIGTERM Wed Apr 27 18:31:42 2016 user.emerg procd: uci: Entry not found Wed Apr 27 18:31:42 2016 user.emerg procd: sh: 192.168.1.112: unknown operand Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: started, version 2.73rc7 cachesize 150 Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-DNSSEC loop-detect inotify Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: DNS service limited to local subnets Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: using local addresses only for domain lan Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: reading /tmp/resolv.conf.auto Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: using local addresses only for domain lan Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: using nameserver 192.168.1.1#53 Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: read /etc/hosts - 1 addresses Wed Apr 27 18:31:42 2016 daemon.info dnsmasq[5017]: read /tmp/hosts/dhcp - 1 addresses Wed Apr 27 18:31:43 2016 user.notice firewall: Reloading firewall due to ifup of wan6 (eth2) Wed Apr 27 18:31:47 2016 daemon.info dnsmasq[5017]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:47 2016 daemon.info dnsmasq[5017]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:47 2016 daemon.info dnsmasq[5017]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:31:47 2016 daemon.info dnsmasq[5017]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:47 2016 daemon.info dnsmasq[5017]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-------------------[Rule Port Counts]--------------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | tcp udp icmp ip Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | src 1980 40 0 0 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | dst 10553 492 0 0 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | any 206 16 0 0 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | nc 7 1 0 0 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | s+d 46 15 0 0 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +---------------------------------------------------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[detection-filter-config]------------------------------ Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | memory-cap : 1048576 bytes Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[detection-filter-rules]------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: ------------------------------------------------------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[rate-filter-config]----------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | memory-cap : 1048576 bytes Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[rate-filter-rules]------------------------------------ Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | none Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: ------------------------------------------------------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[event-filter-config]---------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | memory-cap : 1048576 bytes Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[event-filter-global]---------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | none Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[event-filter-local]----------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008914 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008913 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011887 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008912 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008919 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008916 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008734 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008749 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008756 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008797 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011585 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008603 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008609 type=Threshold tracking=src count=3 seconds=10 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003566 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008643 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003586 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003585 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003583 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008658 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008657 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008663 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003622 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016101 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021171 type=Both tracking=src count=10 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021170 type=Both tracking=src count=10 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003657 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021172 type=Both tracking=dst count=10 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008073 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008084 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021691 type=Limit tracking=src count=3 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008085 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008096 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008098 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008097 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008147 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018978 type=Both tracking=dst count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018977 type=Both tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008184 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008181 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018984 type=Both tracking=src count=1 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019010 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019014 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019013 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019012 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019011 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019018 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019017 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019016 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019015 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019022 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019021 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019020 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019019 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016016 type=Both tracking=dst count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016031 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016030 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010953 type=Limit tracking=src count=10 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016033 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021125 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021124 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018432 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018431 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018430 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018433 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018455 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011030 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011029 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2013385 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003171 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2013416 type=Threshold tracking=dst count=10 seconds=20 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021260 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018316 type=Both tracking=dst count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016212 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010487 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010486 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010494 type=Threshold tracking=src count=5 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008199 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010508 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008208 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008211 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008209 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008216 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008215 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008214 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021327 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021326 type=Limit tracking=src count=3 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021331 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021330 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021329 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008228 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021328 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018372 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021333 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2002664 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021332 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008231 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018374 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018373 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2002677 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018383 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018382 type=Limit tracking=dst count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018388 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018389 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008255 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008253 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008259 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008257 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008264 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008262 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008266 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008276 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020741 type=Both tracking=src count=3 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020742 type=Both tracking=src count=3 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2005320 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020853 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020633 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020632 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020631 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020630 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2015577 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010513 type=Threshold tracking=src count=10 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020661 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020660 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020659 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020665 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020664 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020663 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020662 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020669 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020668 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020667 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020666 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020702 type=Both tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020712 type=Limit tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2007583 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2002383 type=Threshold tracking=dst count=5 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2002400 type=Limit tracking=src count=2 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009646 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2002402 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001795 type=Limit tracking=src count=30 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001855 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001858 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019876 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019882 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001864 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019886 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019885 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019884 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019883 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019889 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019888 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019887 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001872 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019897 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019922 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014869 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019950 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009833 type=Threshold tracking=dst count=2 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019966 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019963 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011915 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011914 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017721 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017722 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009703 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017162 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017161 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001906 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009159 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020022 type=Both tracking=src count=2 seconds=10 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011975 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011974 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020069 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003493 type=Limit tracking=src count=2 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003497 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011497 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001316 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001315 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019348 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019347 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019346 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019350 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019349 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008578 type=Limit tracking=src count=1 seconds=10 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008577 type=Threshold tracking=dst count=5 seconds=15 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008579 type=Threshold tracking=dst count=20 seconds=15 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003257 type=Both tracking=src count=2 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003256 type=Both tracking=src count=2 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003255 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019418 type=Both tracking=src count=50 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003254 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003261 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003260 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003259 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003258 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003263 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003262 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003269 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003268 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003267 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003266 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003273 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014372 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003272 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003271 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003270 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003277 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003276 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003275 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003274 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003281 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003280 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003279 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003278 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003287 type=Both tracking=dst count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003286 type=Both tracking=dst count=1 seconds=900 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011403 type=Limit tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011402 type=Limit tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2006365 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021410 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021409 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021444 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021443 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008343 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008353 type=Limit tracking=src count=1 seconds=3600 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008352 type=Limit tracking=src count=1 seconds=3600 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008355 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008361 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008363 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014103 type=Both tracking=src count=15 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019166 type=Both tracking=src count=5 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014141 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014140 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019211 type=Both tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014153 type=Both tracking=src count=225 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019230 type=Both tracking=src count=50 seconds=10 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011146 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018607 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018666 type=Both tracking=dst count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008544 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008549 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003384 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003387 type=Limit tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008560 type=Threshold tracking=dst count=4 seconds=15 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003397 type=Both tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008564 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008571 type=Threshold tracking=dst count=2 seconds=5 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010642 type=Threshold tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010643 type=Threshold tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008391 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008400 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2002842 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008413 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008424 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008423 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018569 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008422 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018568 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008429 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2013492 type=Both tracking=src count=2 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008428 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008427 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008440 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008453 type=Threshold tracking=src count=5 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008455 type=Threshold tracking=src count=5 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008454 type=Threshold tracking=src count=5 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008460 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008464 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021572 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008463 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021575 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021574 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021573 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2013547 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008488 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008495 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008494 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008504 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008513 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008512 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008510 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008514 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2021018 type=Both tracking=dst count=10 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2013017 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2015986 type=Both tracking=src count=100 seconds=1 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018755 type=Both tracking=src count=5 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2010715 type=Limit tracking=src count=1 seconds=180 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018208 type=Both tracking=src count=100 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018277 type=Both tracking=src count=5 seconds=90 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018292 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2000031 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2000048 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2000049 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018090 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018088 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2018094 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2013036 type=Limit tracking=src count=1 seconds=3 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008043 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008048 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020167 type=Both tracking=src count=1 seconds=10 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017918 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017921 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017920 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017919 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009867 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017966 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017965 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2017967 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020338 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2012304 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2012303 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2012306 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2012305 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009356 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009355 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001562 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2001564 type=Limit tracking=src count=5 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020240 type=Limit tracking=src count=1 seconds=180 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2012204 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020306 type=Both tracking=dst count=30 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020305 type=Both tracking=src count=30 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2020323 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019692 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019749 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019748 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019778 type=Both tracking=dst count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011716 type=Limit tracking=src count=5 seconds=120 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011766 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011767 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2000929 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009481 type=Threshold tracking=dst count=20 seconds=40 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009480 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019609 type=Both tracking=src count=50 seconds=10 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009512 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2004443 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009537 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009534 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009538 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009544 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009547 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2006546 type=Both tracking=src count=5 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014002 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008941 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2014020 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008956 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2019102 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003927 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2003930 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2009040 type=Threshold tracking=src count=20 seconds=10 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016867 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011809 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2011808 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2008847 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=1 sig-id=2016897 type=Limit tracking=src count=2 seconds=60 Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: +-----------------------[suppression]------------------------------------------ Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=129 sig-id=20 tracking=none Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: | gen-id=129 sig-id=12 tracking=none Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: ------------------------------------------------------------------------------- Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: Rule application order: activation->dynamic->pass->drop->sdrop->reject->alert->log Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: Verifying Preprocessor Configurations! Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.http.binary' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.RDP.Morto' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.lizkebab' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'EXE2' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'et.WinHttpRequest' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.webc2ugx' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.http.javaclient.SakuraPorts' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'et.MS.XMLHTTP.no.exe.request' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.pdf.in.http' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'et.MS.XMLHTTP.ip.request' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'AnglerEK' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.JS.Obfus.Func' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.MSSQL' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.http.rtf.download' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.http.javaclient' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.Onelouder.bin' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'et.http.PK' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'NuclearEK' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.http.javaclient.vulnerable' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'FlimKit.SWF.Redirect' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'et.MCOFF' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.Fareit.chk' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.gadu.loggedin' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'et.JavaArchiveOrClass' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.autoit.ua' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'SunDown.EK' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.ButterflyJoin' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.wininet.UA' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ms.rdp.established' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.Adobe.Site.Download' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.lethic.established' is set but not ever checked. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: WARNING: flowbits key 'ET.invalid.cab' is checked but not ever set. Wed Apr 27 18:31:47 2016 daemon.notice snort[3981]: 131 out of 1024 flowbits in use. Wed Apr 27 18:31:50 2016 user.emerg procd: uci: Entry not found Wed Apr 27 18:31:52 2016 daemon.info dnsmasq[5017]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:52 2016 daemon.info dnsmasq[5017]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:52 2016 daemon.info dnsmasq[5017]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:31:52 2016 daemon.info dnsmasq[5017]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:52 2016 daemon.info dnsmasq[5017]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:53 2016 daemon.info dnsmasq[5017]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:31:53 2016 daemon.info dnsmasq[5017]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:31:53 2016 daemon.info dnsmasq[5017]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:31:54 2016 user.notice ddns-scripts[5407]: myddns_ipv6: PID '5407' started at 2016-04-28 01:31 Wed Apr 27 18:31:54 2016 daemon.notice netifd: Interface 'blockdomain' is enabled Wed Apr 27 18:31:54 2016 daemon.notice netifd: Interface 'blockdomain' has link connectivity Wed Apr 27 18:31:54 2016 daemon.notice netifd: Interface 'blockdomain' is setting up now Wed Apr 27 18:31:54 2016 daemon.notice netifd: Interface 'blockdomain' is now up Wed Apr 27 18:31:54 2016 daemon.notice netifd: Interface 'blockdomain' is now down Wed Apr 27 18:31:54 2016 daemon.notice netifd: Interface 'blockdomain' is setting up now Wed Apr 27 18:31:54 2016 daemon.notice netifd: Interface 'blockdomain' is now up Wed Apr 27 18:31:54 2016 user.warn ddns-scripts[5407]: myddns_ipv6: Service section disabled! - TERMINATE Wed Apr 27 18:31:54 2016 user.warn ddns-scripts[5407]: myddns_ipv6: PID '5407' exit WITH ERROR '1' at 2016-04-28 01:31 Wed Apr 27 18:31:56 2016 daemon.info dnsmasq[5017]: exiting on receipt of SIGTERM Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: started, version 2.73rc7 cachesize 150 Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-DNSSEC loop-detect inotify Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: DNS service limited to local subnets Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: using local addresses only for domain lan Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: reading /tmp/resolv.conf.auto Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: using local addresses only for domain lan Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: using nameserver 192.168.1.1#53 Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: read /etc/hosts - 1 addresses Wed Apr 27 18:31:57 2016 daemon.info dnsmasq[5665]: read /tmp/hosts/dhcp - 1 addresses Wed Apr 27 18:31:58 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:31:58 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:31:58 2016 user.notice update_webfilter: updated dnsmasq blacklist Wed Apr 27 18:31:59 2016 user.notice update_webfilter: updated network.interface.blockdomain: 192.168.1.112 Wed Apr 27 18:31:59 2016 user.notice update_webfilter: updated firewall.@redirect[0].Itusfilter: 192.168.1.112 Wed Apr 27 18:31:59 2016 user.notice update_webfilter: updated firewall.@redirect[1]dns-traffic-to-shield: 192.168.1.112 Wed Apr 27 18:31:59 2016 user.notice update_webfilter: updated uhttpd.Itusfilter Wed Apr 27 18:32:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:32:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:32:00 2016 cron.info crond[3170]: wakeup dt=50 Wed Apr 27 18:32:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:32:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:32:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:32:01 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:32:01 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:32:01 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:32:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:32:02 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:32:02 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:32:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:32:02 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:32:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:32:07 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:32:07 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:32:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:32:07 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:32:09 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:32:09 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:32:09 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:32:10 2016 kern.notice kernel: [ 118.376621] eth0: Link down Wed Apr 27 18:32:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:32:12 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:32:12 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:32:12 2016 daemon.notice netifd: Network device 'eth0' link is down Wed Apr 27 18:32:12 2016 daemon.notice netifd: Interface 'wan' has link connectivity loss Wed Apr 27 18:32:12 2016 daemon.notice netifd: Interface 'wan' is now down Wed Apr 27 18:32:12 2016 daemon.notice netifd: Interface 'wan' is disabled Wed Apr 27 18:32:12 2016 daemon.notice netifd: Interface 'wan' is enabled Wed Apr 27 18:32:12 2016 kern.info kernel: [ 120.395512] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Wed Apr 27 18:32:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:32:12 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:32:13 2016 kern.debug kernel: [ 121.356670] SGMII0: Port 1 link timeout Wed Apr 27 18:32:13 2016 kern.notice kernel: [ 121.356783] eth1: Link down Wed Apr 27 18:32:14 2016 daemon.notice netifd: Network device 'eth1' link is down Wed Apr 27 18:32:14 2016 kern.info kernel: [ 122.356805] br-lan: port 1(eth1) entered disabled state Wed Apr 27 18:32:14 2016 daemon.notice netifd: Network device 'eth0' link is up Wed Apr 27 18:32:14 2016 daemon.notice netifd: Interface 'wan' has link connectivity Wed Apr 27 18:32:14 2016 daemon.notice netifd: Interface 'wan' is setting up now Wed Apr 27 18:32:14 2016 kern.notice kernel: [ 122.406807] eth0: 1000 Mbps Full duplex, port 0 Wed Apr 27 18:32:14 2016 kern.info kernel: [ 122.409300] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Wed Apr 27 18:32:14 2016 daemon.notice netifd: Interface 'wan' is now up Wed Apr 27 18:32:14 2016 user.notice firewall: Reloading firewall due to ifup of wan (eth0) Wed Apr 27 18:32:15 2016 daemon.notice netifd: Bridge 'br-lan' link is down Wed Apr 27 18:32:15 2016 daemon.notice netifd: Interface 'lan' has link connectivity loss Wed Apr 27 18:32:15 2016 daemon.notice netifd: Interface 'blockdomain' has link connectivity loss Wed Apr 27 18:32:15 2016 kern.notice kernel: [ 123.396421] eth2: Link down Wed Apr 27 18:32:15 2016 daemon.notice netifd: lan (4648): Received SIGTERM Wed Apr 27 18:32:16 2016 kern.notice kernel: [ 124.376685] eth1: 1000 Mbps Full duplex, port 1 Wed Apr 27 18:32:16 2016 daemon.notice netifd: Network device 'eth1' link is up Wed Apr 27 18:32:16 2016 daemon.notice netifd: Bridge 'br-lan' link is up Wed Apr 27 18:32:16 2016 daemon.notice netifd: Interface 'lan' has link connectivity Wed Apr 27 18:32:16 2016 daemon.notice netifd: Interface 'lan' is setting up now Wed Apr 27 18:32:16 2016 daemon.notice netifd: Interface 'blockdomain' has link connectivity Wed Apr 27 18:32:16 2016 kern.info kernel: [ 124.396634] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:32:16 2016 kern.info kernel: [ 124.396674] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:32:16 2016 daemon.notice netifd: lan (6186): udhcpc (v1.23.2) started Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org.lan from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: config 0.us.pool.ntp.org.lan is NXDOMAIN Wed Apr 27 18:32:16 2016 daemon.notice netifd: lan (6186): Sending discover... Wed Apr 27 18:32:16 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org.lan from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: config 0.us.pool.ntp.org.lan is NXDOMAIN Wed Apr 27 18:32:16 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Wed Apr 27 18:32:16 2016 daemon.notice netifd: lan (6186): Sending select for 192.168.1.111... Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org.lan from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: config 0.us.pool.ntp.org.lan is NXDOMAIN Wed Apr 27 18:32:16 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org.lan from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: config 0.us.pool.ntp.org.lan is NXDOMAIN Wed Apr 27 18:32:16 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Wed Apr 27 18:32:16 2016 daemon.notice netifd: lan (6186): Lease of 192.168.1.111 obtained, lease time 86400 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org.lan from 127.0.0.1 Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: config 0.us.pool.ntp.org.lan is NXDOMAIN Wed Apr 27 18:32:16 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Wed Apr 27 18:32:16 2016 daemon.warn dnsmasq[5665]: no servers found in /tmp/resolv.conf.auto, will retry Wed Apr 27 18:32:16 2016 daemon.notice netifd: Interface 'lan' is now up Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: reading /tmp/resolv.conf.auto Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: using local addresses only for domain lan Wed Apr 27 18:32:16 2016 daemon.info dnsmasq[5665]: using nameserver 192.168.1.1#53 Wed Apr 27 18:32:16 2016 user.notice root: NTP eager clock adjust failed. Wed Apr 27 18:32:16 2016 daemon.info procd: - init complete - Wed Apr 27 18:32:17 2016 daemon.notice netifd: Network device 'eth2' link is down Wed Apr 27 18:32:17 2016 daemon.notice netifd: Interface 'wan6' has link connectivity loss Wed Apr 27 18:32:17 2016 daemon.notice netifd: Interface 'wan6' is now down Wed Apr 27 18:32:17 2016 daemon.notice netifd: Interface 'wan6' is disabled Wed Apr 27 18:32:17 2016 daemon.notice netifd: Interface 'wan6' is enabled Wed Apr 27 18:32:17 2016 kern.info kernel: [ 125.419501] IPv6: ADDRCONF(NETDEV_UP): eth2: link is not ready Wed Apr 27 18:32:18 2016 user.notice ddns-scripts[6280]: myddns_ipv4: PID '6280' started at 2016-04-28 01:32 Wed Apr 27 18:32:18 2016 user.notice firewall: Reloading firewall due to ifup of lan (br-lan) Wed Apr 27 18:32:18 2016 kern.info kernel: [ 126.396606] br-lan: port 1(eth1) entered forwarding state Wed Apr 27 18:32:18 2016 user.warn ddns-scripts[6280]: myddns_ipv4: Service section disabled! - TERMINATE Wed Apr 27 18:32:18 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:32:18 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:32:18 2016 user.warn ddns-scripts[6280]: myddns_ipv4: PID '6280' exit WITH ERROR '1' at 2016-04-28 01:32 Wed Apr 27 18:32:18 2016 daemon.err uhttpd[5596]: sh: write error: Broken pipe Wed Apr 27 18:32:21 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Wed Apr 27 18:32:21 2016 daemon.info dnsmasq[5665]: forwarded upgrade.meshare.com to 192.168.1.1 Wed Apr 27 18:32:21 2016 daemon.info dnsmasq[5665]: reply upgrade.meshare.com is 10.0.0.1 Wed Apr 27 18:32:29 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:32:29 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:32:29 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:32:35 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:32:35 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:32:35 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:32:51 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:32:51 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:32:51 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:33:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:33:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:33:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:33:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:33:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:33:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:33:03 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:33:03 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:33:03 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: [ Port Based Pattern Matching Memory ] Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: +- [ Aho-Corasick Summary ] ------------------------------------- Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Storage Format : Full Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Finite Automaton : DFA Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Alphabet Size : 256 Chars Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Sizeof State : Variable (1,2,4 bytes) Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Instances : 335 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | 1 byte states : 228 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | 2 byte states : 107 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | 4 byte states : 0 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Characters : 408795 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | States : 252270 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Transitions : 13611564 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | State Density : 21.1% Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Patterns : 34402 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Match States : 30013 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Memory (MB) : 134.67 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Patterns : 3.40 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | Match Lists : 8.23 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | DFA Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | 1 byte states : 3.38 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | 2 byte states : 119.41 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: | 4 byte states : 0.00 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: +---------------------------------------------------------------- Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: [ Number of patterns truncated to 20 bytes: 5427 ] Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: afpacket DAQ configured to inline. Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Acquiring network traffic from "eth0:eth2". Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Initializing daemon mode Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Daemon initialized, signaled parent pid: 1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Reload thread starting... Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Reload thread started, thread 0xfff2b5f210 (6530) Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Checking PID path... Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: PID path stat checked out ok, PID path set to /var/snort/ Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Writing PID "3981" to file "/var/snort//snort_eth0:eth2.pid" Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: --== Initialization Complete ==-- Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: ,,_ -*> Snort! <*- Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: o" )~ Version 2.9.7.2 GRE (Build 177) Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: '''' By Martin Roesch & The Snort Team: http://www.snort.org/contact#team Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Copyright (C) 2014 Cisco and/or its affiliates. All rights reserved. Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Copyright (C) 1998-2013 Sourcefire, Inc., et al. Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Using libpcap version 1.5.3 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Using PCRE version: 8.36 2014-09-26 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Using ZLIB version: 1.2.8 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Rules Engine: SF_SNORT_DETECTION_ENGINE Version 2.4 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_SDF Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_SIP Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_REPUTATION Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_GTP Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_DCERPC2 Version 1.0 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_FTPTELNET Version 1.2 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_SSLPP Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_POP Version 1.0 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_SMTP Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_DNP3 Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_DNS Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_SSH Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_MODBUS Version 1.1 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Preprocessor Object: SF_IMAP Version 1.0 Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Commencing packet processing (pid=3981) Wed Apr 27 18:33:05 2016 daemon.notice snort[3981]: Decoding Ethernet Wed Apr 27 18:33:05 2016 kern.info kernel: [ 173.986604] device eth2 entered promiscuous mode Wed Apr 27 18:33:05 2016 kern.info kernel: [ 174.126601] device eth0 entered promiscuous mode Wed Apr 27 18:33:19 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:33:19 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:33:19 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:33:30 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:33:30 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:33:30 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:33:39 2016 authpriv.info dropbear[6588]: Not backgrounding Wed Apr 27 18:33:39 2016 authpriv.info dropbear[6589]: Not backgrounding Wed Apr 27 18:33:40 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:33:40 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:33:40 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:33:58 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:33:58 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:33:58 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:33:59 2016 authpriv.info dropbear[6595]: Child connection from 192.168.1.237:56579 Wed Apr 27 18:34:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:34:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:34:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:34:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:34:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:34:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:34:04 2016 authpriv.warn dropbear[6595]: Bad password attempt for 'root' from 192.168.1.237:56579 Wed Apr 27 18:34:09 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:34:09 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:34:09 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:34:09 2016 authpriv.notice dropbear[6595]: Password auth succeeded for 'root' from 192.168.1.237:56579 Wed Apr 27 18:34:09 2016 authpriv.info dropbear[6595]: Exit (root): Exited normally Wed Apr 27 18:34:13 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:13 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:13 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:34:13 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:13 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:16 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:34:16 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:34:16 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:34:18 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:18 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:18 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:34:18 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:18 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:23 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:23 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:23 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:34:23 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:23 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:32 2016 authpriv.info dropbear[6776]: Child connection from 192.168.1.237:56664 Wed Apr 27 18:34:33 2016 authpriv.notice dropbear[6776]: Password auth succeeded for 'root' from 192.168.1.237:56664 Wed Apr 27 18:34:33 2016 authpriv.info dropbear[6776]: Exit (root): Exited normally Wed Apr 27 18:34:33 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:33 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:33 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:34:33 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:33 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:34 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:34:34 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:34:34 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:34:53 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:34:53 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:34:53 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:34:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:55 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:34:55 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:34:55 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:34:55 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:35:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:35:00 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:35:00 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:35:00 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:35:00 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:35:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:35:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:35:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:35:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:35:05 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:35:05 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:35:05 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: Warning: Unable to locate ipset utility, disabling ipset support Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: Warning: Section @redirect[0] (Itusfilter) does not specify a destination, assuming 'lan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: Warning: Section @redirect[1] (dns-traffic-to-shield) refers to a destination address on this router, assuming port redirection Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv4 filter table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv4 nat table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv4 mangle table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv4 raw table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv6 filter table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv6 nat table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv6 mangle table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing IPv6 raw table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Flushing conntrack table ... Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Populating IPv4 filter table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'lan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'wan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Rule 'Allow-DHCP-Renew' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Redirect 'Itusfilter' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Redirect 'dns-traffic-to-shield' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Forward 'lan' -> 'wan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Populating IPv4 nat table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'lan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'wan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Redirect 'Itusfilter' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Redirect 'dns-traffic-to-shield' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Populating IPv4 mangle table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'lan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'wan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Populating IPv4 raw table Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'lan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Zone 'wan' Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Set tcp_ecn to off Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Set tcp_syncookies to on Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Set tcp_window_scaling to on Wed Apr 27 18:35:12 2016 daemon.err uhttpd[5596]: * Running script '/etc/snort.user' Wed Apr 27 18:35:25 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:35:25 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:35:25 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:35:28 2016 authpriv.info dropbear[7362]: Child connection from 192.168.1.237:56787 Wed Apr 27 18:35:29 2016 authpriv.notice dropbear[7362]: Password auth succeeded for 'root' from 192.168.1.237:56787 Wed Apr 27 18:35:43 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:35:43 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:35:43 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:35:49 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:35:49 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:35:49 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:36:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:36:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:36:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:36:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:36:04 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:36:04 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:36:04 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:36:15 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:36:15 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:36:15 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:36:25 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:36:25 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:36:25 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:36:35 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:36:35 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:36:35 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:36:40 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:36:40 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:36:40 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:36:49 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:36:49 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:36:49 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:36:53 2016 authpriv.info dropbear[7362]: Exit (root): Exited normally Wed Apr 27 18:36:53 2016 authpriv.warn dropbear[7362]: Couldn't set SO_PRIORITY (Bad file descriptor) Wed Apr 27 18:36:54 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:36:54 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:36:54 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:37:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:37:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:37:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:37:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:37:07 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:37:07 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:37:07 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:37:24 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:37:24 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:37:24 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:37:35 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:37:35 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:37:35 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:37:46 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:37:46 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:37:46 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:37:47 2016 authpriv.info dropbear[7382]: Child connection from 192.168.1.237:57113 Wed Apr 27 18:37:54 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:37:54 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:37:54 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:37:54 2016 authpriv.notice dropbear[7382]: Password auth succeeded for 'root' from 192.168.1.237:57113 Wed Apr 27 18:38:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:38:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:38:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:38:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:38:01 2016 daemon.info dnsmasq[5665]: query[A] itus.accessinnov.com from 127.0.0.1 Wed Apr 27 18:38:01 2016 daemon.info dnsmasq[5665]: forwarded itus.accessinnov.com to 192.168.1.1 Wed Apr 27 18:38:01 2016 daemon.info dnsmasq[5665]: query[AAAA] itus.accessinnov.com from 127.0.0.1 Wed Apr 27 18:38:01 2016 daemon.info dnsmasq[5665]: forwarded itus.accessinnov.com to 192.168.1.1 Wed Apr 27 18:38:01 2016 daemon.info dnsmasq[5665]: reply itus.accessinnov.com is 10.0.0.1 Wed Apr 27 18:38:09 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:38:09 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:38:09 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:38:21 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:38:21 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:38:21 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:38:27 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:38:27 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:38:27 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:38:41 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:38:41 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:38:41 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:38:55 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:38:55 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:38:55 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:39:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:39:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:39:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:39:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:39:13 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:39:13 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:39:13 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:39:24 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:39:24 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:39:24 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:39:31 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:39:31 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:39:31 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:39:47 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:39:47 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:39:47 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:40:00 2016 cron.info crond[3170]: wakeup dt=60 Wed Apr 27 18:40:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:40:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:40:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:40:00 2016 cron.info crond[3170]: job: 0 /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:40:00 2016 cron.info crond[7394]: child running /bin/sh Wed Apr 27 18:40:00 2016 cron.info crond[3170]: USER root pid 7394 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:40:00 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:40:00 2016 daemon.info dnsmasq[5665]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Wed Apr 27 18:40:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 10.0.0.1 Wed Apr 27 18:40:03 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:40:03 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:40:03 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:40:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:40:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:40:21 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:40:21 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:40:21 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:40:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:40:33 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:40:33 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:40:33 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:40:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:40:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:40:50 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:40:50 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:40:50 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:40:55 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:41:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:41:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:41:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:41:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:41:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:00 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:00 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:05 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:05 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:05 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:41:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:10 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:10 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:11 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:13 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:41:13 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:41:13 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:41:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:15 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:15 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:16 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:41:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:20 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:20 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:21 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:25 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:25 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:26 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:41:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:30 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:30 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:32 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:41:32 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:41:32 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:41:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:35 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:35 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:36 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:41:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:40 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:40 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:41 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:45 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:45 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:46 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:46 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:41:46 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:41:46 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:41:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:41:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:50 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:50 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:51 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:55 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:41:55 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:41:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:41:56 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:42:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:42:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:42:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:42:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:00 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:00 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:01 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:42:01 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:42:01 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:42:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:05 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:05 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:06 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:42:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:10 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:10 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:11 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:13 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:42:13 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:42:13 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:42:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:42:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:20 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:20 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:21 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:21 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Wed Apr 27 18:42:21 2016 daemon.info dnsmasq[5665]: forwarded upgrade.meshare.com to 192.168.1.1 Wed Apr 27 18:42:21 2016 daemon.info dnsmasq[5665]: reply upgrade.meshare.com is 10.0.0.1 Wed Apr 27 18:42:22 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:42:22 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:42:22 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:42:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:25 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:25 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:26 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:42:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:30 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:30 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:35 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:35 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:36 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:42:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:40 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:40 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:41 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:41 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:42:41 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:42:41 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:42:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:45 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:45 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:46 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:50 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:42:50 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:42:50 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:42:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:42:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:50 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:50 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:51 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:55 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:42:55 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:42:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:42:56 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:43:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:43:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:43:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:43:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:00 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:00 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:43:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:05 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:43:05 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:43:05 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:43:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:43:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:10 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:10 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:43:10 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:10 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:15 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:15 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:43:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:16 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:18 2016 kern.notice kernel: [ 786.426501] eth0: Link down Wed Apr 27 18:43:18 2016 daemon.notice netifd: Network device 'eth0' link is down Wed Apr 27 18:43:18 2016 daemon.notice netifd: Interface 'wan' has link connectivity loss Wed Apr 27 18:43:18 2016 daemon.notice netifd: Interface 'wan' is now down Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Can't acquire (-1) - afpacket_daq_acquire: Encountered error condition on a packet socket! Wed Apr 27 18:43:18 2016 daemon.notice netifd: Interface 'wan' is disabled Wed Apr 27 18:43:18 2016 daemon.notice netifd: Interface 'wan' is enabled Wed Apr 27 18:43:18 2016 kern.info kernel: [ 786.430941] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Wed Apr 27 18:43:18 2016 kern.info kernel: [ 786.506900] device eth2 left promiscuous mode Wed Apr 27 18:43:18 2016 kern.info kernel: [ 786.616835] device eth0 left promiscuous mode Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Memory usage summary: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total non-mmapped bytes (arena): 242706464 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Bytes in mapped regions (hblkhd): 18939904 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total allocated space (uordblks): 229597008 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total free space (fordblks): 13109456 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Topmost releasable block (keepcost): 112 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Packet I/O Totals: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Received: 1272 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Analyzed: 1272 (100.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Dropped: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Filtered: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Outstanding: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Injected: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Breakdown by protocol (includes rebuilt packets): Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Eth: 1272 (100.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: VLAN: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP4: 5 ( 0.393%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Frag: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ICMP: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP6 Ext: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP6 Opts: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Frag6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ICMP6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Teredo: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ICMP-IP: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP4/IP4: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP4/IP6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP6/IP4: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP6/IP6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE Eth: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE VLAN: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE IP4: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE IP6: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE IP6 Ext: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE PPTP: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE ARP: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE IPX: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: GRE Loop: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: MPLS: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ARP: 1267 ( 99.607%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IPX: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Eth Loop: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Eth Disc: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP4 Disc: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP6 Disc: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Disc: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP Disc: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ICMP Disc: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: All Discard: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Other: 5 ( 0.393%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Bad Chk Sum: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Bad TTL: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: S5 G 1: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: S5 G 2: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total: 1272 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Action Stats: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Alerts: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Logged: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Passed: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Limits: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Match: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Queue: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Log: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Event: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Alert: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Verdicts: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Allow: 1267 ( 99.607%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Block: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Replace: 5 ( 0.393%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Whitelist: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Blacklist: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Ignore: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Retry: 0 ( 0.000%) Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Normalizer statistics: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip4::trim: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip4::trim: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip4::tos: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip4::tos: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip4::df: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip4::df: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip4::rf: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip4::rf: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip4::ttl: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip4::ttl: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip4::opts: 5 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip4::opts: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: icmp4::echo: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would icmp4::echo: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip6::ttl: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip6::ttl: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ip6::opts: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would ip6::opts: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: icmp6::echo: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would icmp6::echo: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::syn_opt: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::syn_opt: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::opt: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::opt: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::pad: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::pad: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::rsv: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::rsv: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::ns: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::ns: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::urp: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::urp: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::ecn_pkt: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::ecn_pkt: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::ts_ecr: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::ts_ecr: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::req_urg: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::req_urg: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::req_pay: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::req_pay: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::req_urp: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::req_urp: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::ecn_ssn: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::ecn_ssn: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::ts_nop: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::ts_nop: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::ips_data: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::ips_data: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::block: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::block: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::trim_syn: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::trim_syn: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::trim_rst: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::trim_rst: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::trim_win: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::trim_win: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: tcp::trim_mss: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Would tcp::trim_mss: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Frag3 statistics: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total Fragments: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Frags Reassembled: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Discards: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Memory Faults: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Timeouts: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Overlaps: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Anomalies: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Alerts: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Drops: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: FragTrackers Added: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: FragTrackers Dumped: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: FragTrackers Auto Freed: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Frag Nodes Inserted: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Frag Nodes Deleted: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Stream statistics: Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total sessions: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP sessions: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP sessions: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ICMP sessions: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP sessions: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Prunes: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP Prunes: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: ICMP Prunes: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: IP Prunes: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP StreamTrackers Created: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP StreamTrackers Deleted: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Timeouts: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Overlaps: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Segments Queued: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Segments Released: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Rebuilt Packets: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Segments Used: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Discards: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Gaps: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP Sessions Created: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP Sessions Deleted: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP Timeouts: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP Discards: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Events: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Internal Events: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: TCP Port Filter Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Filtered: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Inspected: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Tracked: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: UDP Port Filter Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Filtered: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Inspected: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Tracked: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: dcerpc2 Preprocessor Statistics Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total sessions: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: SIP Preprocessor Statistics Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: Total sessions: 0 Wed Apr 27 18:43:18 2016 daemon.notice snort[3981]: =============================================================================== Wed Apr 27 18:43:19 2016 daemon.notice snort[3981]: Snort exiting Wed Apr 27 18:43:19 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:43:19 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:43:19 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 10.0.0.1 Wed Apr 27 18:43:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:43:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:20 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:20 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:43:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:21 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Enabling inline operation Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Found pid path directive (/var/snort/) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Running in IDS mode Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: --== Initializing Snort ==-- Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Initializing Output Plugins! Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Initializing Preprocessors! Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Initializing Plug-ins! Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Parsing Rules file "/etc/snort/snort_bridge.conf" Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'HTTP_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 36 80:90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 33300 34412 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'SHELLCODE_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 1:65535 ] Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'ORACLE_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 1024:65535 ] Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'SSH_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 22 ] Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'FTP_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 21 2100 3535 ] Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'SIP_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 5060:5061 5600 ] Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'FILE_DATA_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 36 80:90 110 143 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 3330Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: PortVar 'GTP_PORTS' defined : Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: [ 2123 2152 3386 ] Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Detection: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Search-Method = AC-Full Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Search-Method-Optimizations = enabled Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Maximum pattern length = 20 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Found pid path directive (/var/snort/) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Tagged Packet Limit: 256 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic engine /usr/lib/snort_dynamicengine/libsf_engine.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: done Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Finished Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/ Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Log directory = /tmp/snort/ Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalizer config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip4: on Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip4::df: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip4::rf: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip4::tos: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip4::trim: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip4::ttl: on (min=1, new=5) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalizer config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp: on Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::ecn: stream Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::block: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::rsv: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::pad: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::req_urg: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::req_pay: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::req_urp: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::urp: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::opt: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::ips: on Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::trim_syn: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::trim_rst: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::trim_win: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: tcp::trim_mss: off Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalizer config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: icmp4: on Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalizer config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip6: on Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ip6::hops: on (min=1, new=5) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalizer config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: icmp6: on Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Frag3 global config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max frags: 65536 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Fragment memory cap: 4194304 bytes Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Frag3 engine config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Bound Address: default Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Target-based policy: WINDOWS Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Fragment timeout: 180 seconds Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Fragment min_ttl: 1 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Fragment Anomalies: Alert Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Overlap Limit: 10 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Min fragment Length: 100 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Expected Streams: 39 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Stream global config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Track TCP sessions: ACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max TCP sessions: 10000 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: TCP cache pruning timeout: 30 seconds Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: TCP cache nominal timeout: 3600 seconds Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Memcap (for reassembly packet storage): 8388608 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Track UDP sessions: ACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max UDP sessions: 10000 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: UDP cache pruning timeout: 30 seconds Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: UDP cache nominal timeout: 180 seconds Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Track ICMP sessions: ACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max ICMP sessions: 65536 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Track IP sessions: INACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Log info if session memory consumption exceeds 1048576 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Send up to 2 active responses Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wait at least 5 seconds between responses Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Protocol Aware Flushing: ACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Maximum Flush Point: 16000 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Stream TCP Policy config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Bound Address: default Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Reassembly Policy: WINDOWS Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Timeout: 180 seconds Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Limit on TCP Overlaps: 10 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Maximum number of bytes to queue per session: 1048576 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Maximum number of segs to queue per session: 2621 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Options: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Require 3-Way Handshake: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 3-Way Handshake Timeout: 180 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Detect Anomalies: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Reassembly Ports: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 21 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 22 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 23 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 25 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 36 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 42 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 53 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 70 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 79 client (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 80 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 81 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 82 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 83 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 84 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 85 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 86 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 87 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 88 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 89 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 90 client (Footprint-IPS) server (Footprint-IPS) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: additional ports configured but not printed. Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Stream UDP Policy config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Timeout: 180 seconds Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: HttpInspect Config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: GLOBAL CONFIG Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Detect Proxy Usage: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: IIS Unicode Map Filename: /etc/snort/unicode.map Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: IIS Unicode Map Codepage: 1252 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Memcap used for logging URI and Hostname: 150994944 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Gzip Memory: 838860 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Gzip Sessions: 1807 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Gzip Compress Depth: 65535 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Gzip Decompress Depth: 65535 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: DEFAULT SERVER CONFIG: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Server profile: All Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports (PAF): 36 80 81 82 83 84 85 86 87 88 89 90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000 7001 7071 7144 7145 7510 7770 7777 7778 7779 8000 8008 8014 8028 8080 8081 8082 8085 8088 8090 8118 8123 8180 8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090 9091 9111 9290 9443 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Server Flow Depth: 0 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Client Flow Depth: 0 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Chunk Length: 500000 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Small Chunk Length Evasion: chunk size <= 10, threshold >= 5 times Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Header Field Length: 750 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Number Header Fields: 100 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Number of WhiteSpaces allowed with header folding: 200 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Inspect Pipeline Requests: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: URI Discovery Strict Mode: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Allow Proxy Usage: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Disable Alerting: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Oversize Dir Length: 500 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Only inspect URI: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalize HTTP Headers: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Inspect HTTP Cookies: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Inspect HTTP Responses: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Extract Gzip from responses: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Decompress response files: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Unlimited decompression of gzip data from responses: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalize Javascripts in HTTP Responses: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Number of WhiteSpaces allowed with Javascript Obfuscation in HTTP responses: 200 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalize HTTP Cookies: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Enable XFF and True Client IP: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Log HTTP URI data: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Log HTTP Hostname data: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Extended ASCII code support in URI: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ascii: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Double Decoding: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: %U Encoding: YES alert: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Bare Byte: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: UTF 8: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: IIS Unicode: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Multiple Slash: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: IIS Backslash: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Directory Traversal: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Web Root Traversal: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Apache WhiteSpace: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: IIS Delimiter: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: IIS Unicode Map: GLOBAL IIS UNICODE MAP CONFIG Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Non-RFC Compliant Characters: 0x00 0x01 0x02 0x03 0x04 0x05 0x06 0x07 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Whitespace Characters: 0x09 0x0b 0x0c 0x0d Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: rpc_decode arguments: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports to decode RPC on: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: alert_fragments: INACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: alert_large_fragments: INACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: alert_incomplete: INACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: alert_multiple_requests: INACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Portscan Detection Config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Detect Protocols: TCP UDP ICMP IP Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Detect Scan Type: portscan portsweep decoy_portscan distributed_portscan Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Sensitivity Level: Medium Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Memcap (in bytes): 500000 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Number of Nodes: 978 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: FTPTelnet Config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: GLOBAL CONFIG Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Inspection Type: stateful Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Check for Encrypted Traffic: YES alert: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Continue to check encrypted data: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: TELNET CONFIG: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports: 23 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Are You There Threshold: 20 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Normalize: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Detect Anomalies: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: FTP CONFIG: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: FTP Server: default Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports (PAF): 21 2100 3535 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Check for Telnet Cmds: YES alert: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ignore Telnet Cmd Operations: YES alert: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ignore open data channels: NO Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: FTP Client: default Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Check for Bounce Attacks: YES alert: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Check for Telnet Cmds: YES alert: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ignore Telnet Cmd Operations: YES alert: YES Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Response Length: 256 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SSH config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Autodetection: ENABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Challenge-Response Overflow Alert: ENABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SSH1 CRC32 Alert: ENABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Server Version String Overflow Alert: ENABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Protocol Mismatch Alert: ENABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Bad Message Direction Alert: DISABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Bad Payload Size Alert: DISABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Unrecognized Version Alert: DISABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Encrypted Packets: 20 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Server Version String Length: 100 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: MaxClientBytes: 19600 (Default) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 22 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: DCE/RPC 2 Preprocessor Configuration Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Global Configuration Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: DCE/RPC Defragmentation: Enabled Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Memcap: 102400 KB Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Events: co Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SMB Fingerprint policy: Disabled Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Server Default Configuration Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Policy: WinXP Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Detect ports (PAF) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SMB: 139 445 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: TCP: 135 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: UDP: 135 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: RPC over HTTP server: 593 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: RPC over HTTP proxy: None Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Autodetect ports (PAF) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SMB: None Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: TCP: 1025-65535 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: UDP: 1025-65535 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: RPC over HTTP server: 1025-65535 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: RPC over HTTP proxy: None Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Invalid SMB shares: C$ D$ ADMIN$ Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Maximum SMB command chaining: 3 commands Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SMB file inspection: Disabled Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: DNS config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: DNS Client rdata txt Overflow Alert: ACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Obsolete DNS RR Types Alert: INACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Experimental DNS RR Types Alert: INACTIVE Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 53 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SSLPP config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Encrypted packets: not inspected Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 443 465 563 636 989 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 992 993 994 995 7801 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 7802 7900 7901 7902 7903 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 7904 7905 7906 7907 7908 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 7909 7910 7911 7912 7913 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 7914 7915 7916 7917 7918 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 7919 7920 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Server side data is trusted Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Maximum SSL Heartbeat length: 0 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Sensitive Data preprocessor config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Global Alert Threshold: 25 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Masked Output: DISABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: SIP config: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max number of sessions: 1024 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max number of dialogs in a session: 4 (Default) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Status: ENABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ignore media channel: DISABLED Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max URI length: 512 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Call ID length: 80 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Request name length: 20 (Default) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max From length: 256 (Default) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max To length: 256 (Default) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Via length: 1024 (Default) Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Contact length: 512 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Max Content length: 2048 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Ports: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 5060 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 5061 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: 5600 Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Methods: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: invite Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: cancel Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: ack Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: bye Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: register Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: options Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: refer Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: subscribe Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: update Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: join Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: info Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: message Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: notify Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: benotify Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: do Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: qauth Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: sprack Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: publish Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: service Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: unsubscribe Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: prack Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Wed Apr 27 18:43:24 2016 daemon.notice snort[8915]: Initializing rule chains... Wed Apr 27 18:43:25 2016 daemon.notice snort[8915]: WARNING: /etc/snort/rules/snort.rules(1218) threshold (in rule) is deprecated; use detection_filter instead. Wed Apr 27 18:43:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:26 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:26 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is 10.0.0.1 Wed Apr 27 18:43:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:26 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:43:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:31 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:43:31 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: 13285 Snort rules read Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: 13285 detection rules Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: 0 decoder rules Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: 0 preprocessor rules Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: 13285 Option Chains linked into 252 Chain Headers Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: 0 Dynamic rules Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Wed Apr 27 18:43:34 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:36 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:43:36 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Wed Apr 27 18:43:37 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 192.241.59.218 Wed Apr 27 18:43:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:43:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-------------------[Rule Port Counts]--------------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | tcp udp icmp ip Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | src 1980 40 0 0 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | dst 10553 492 0 0 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | any 206 16 0 0 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | nc 7 1 0 0 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | s+d 46 15 0 0 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +---------------------------------------------------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[detection-filter-config]------------------------------ Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | memory-cap : 1048576 bytes Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[detection-filter-rules]------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: ------------------------------------------------------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[rate-filter-config]----------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | memory-cap : 1048576 bytes Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[rate-filter-rules]------------------------------------ Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | none Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: ------------------------------------------------------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[event-filter-config]---------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | memory-cap : 1048576 bytes Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[event-filter-global]---------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | none Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[event-filter-local]----------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020022 type=Both tracking=src count=2 seconds=10 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009646 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019966 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019963 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019950 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009833 type=Threshold tracking=dst count=2 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018090 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021018 type=Both tracking=dst count=10 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018094 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018088 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003280 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003281 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003286 type=Both tracking=dst count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003287 type=Both tracking=dst count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003272 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003273 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003274 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003275 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003276 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003277 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003278 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003279 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003266 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003267 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018292 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003268 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003269 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003270 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003271 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003256 type=Both tracking=src count=2 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003257 type=Both tracking=src count=2 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003258 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003259 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003260 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003261 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003262 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003263 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018277 type=Both tracking=src count=5 seconds=90 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018208 type=Both tracking=src count=100 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003397 type=Both tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003384 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003387 type=Limit tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010642 type=Threshold tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010643 type=Threshold tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008043 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2013547 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001562 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001564 type=Limit tracking=src count=5 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008048 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2004443 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2013492 type=Both tracking=src count=2 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003254 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003255 type=Both tracking=src count=1 seconds=900 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010715 type=Limit tracking=src count=1 seconds=180 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019102 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011808 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011809 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011766 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011767 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008919 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008912 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008913 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008914 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008916 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019230 type=Both tracking=src count=50 seconds=10 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011716 type=Limit tracking=src count=5 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019211 type=Both tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008847 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019166 type=Both tracking=src count=5 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011887 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009040 type=Threshold tracking=src count=20 seconds=10 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020240 type=Limit tracking=src count=1 seconds=180 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008956 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008941 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020167 type=Both tracking=src count=1 seconds=10 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2002677 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2002664 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020338 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020323 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020306 type=Both tracking=dst count=30 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020305 type=Both tracking=src count=30 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018455 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018431 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018432 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018433 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003657 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2015577 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003622 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008276 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008264 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008266 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008255 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008257 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008259 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008262 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008253 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021170 type=Both tracking=src count=10 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021171 type=Both tracking=src count=10 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021172 type=Both tracking=dst count=10 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009867 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001906 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021124 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021125 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010953 type=Limit tracking=src count=10 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018430 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008096 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021326 type=Limit tracking=src count=3 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008097 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021327 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008098 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021328 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021329 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021330 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021331 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021332 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021333 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018383 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008084 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008085 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018388 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018389 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008073 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018382 type=Limit tracking=dst count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018372 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018373 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018374 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003583 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003585 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003586 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003566 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021260 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018316 type=Both tracking=dst count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2005320 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008231 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008228 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003493 type=Limit tracking=src count=2 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008215 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008216 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003497 type=Limit tracking=src count=3 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008208 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008209 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008211 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008214 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008199 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011030 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011029 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008184 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008181 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019418 type=Both tracking=src count=50 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008147 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2006365 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001872 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019347 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001858 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019348 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019349 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019350 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001864 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001855 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001795 type=Limit tracking=src count=30 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017721 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017722 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011914 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011915 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2002842 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019346 type=Both tracking=dst count=500 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2000048 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2000049 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009159 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2000031 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011974 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011975 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014869 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2015986 type=Both tracking=src count=100 seconds=1 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2013036 type=Limit tracking=src count=1 seconds=3 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2013017 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2000929 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018607 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018568 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018569 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021443 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021444 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008460 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008463 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008464 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008453 type=Threshold tracking=src count=5 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008454 type=Threshold tracking=src count=5 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008455 type=Threshold tracking=src count=5 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018755 type=Both tracking=src count=5 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008440 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008428 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008429 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008422 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008423 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008424 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008427 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008413 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003930 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008400 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008391 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003927 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008361 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018666 type=Both tracking=dst count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008363 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008352 type=Limit tracking=src count=1 seconds=3600 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008353 type=Limit tracking=src count=1 seconds=3600 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008355 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021572 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021573 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021574 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021575 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016897 type=Limit tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008564 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008571 type=Threshold tracking=dst count=2 seconds=5 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008560 type=Threshold tracking=dst count=4 seconds=15 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008549 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008544 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016867 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014020 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019778 type=Both tracking=dst count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008510 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008512 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008513 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008514 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014002 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008504 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008494 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008495 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019748 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008488 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019749 type=Limit tracking=src count=1 seconds=600 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021409 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021410 type=Both tracking=src count=10 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009544 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014153 type=Both tracking=src count=225 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014140 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009547 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014141 type=Both tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009537 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009538 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009534 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008343 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014103 type=Both tracking=src count=15 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011146 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2012204 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2003171 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009355 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009356 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019692 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009512 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019609 type=Both tracking=src count=50 seconds=10 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009480 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020741 type=Both tracking=src count=3 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009481 type=Threshold tracking=dst count=20 seconds=40 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020742 type=Both tracking=src count=3 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2012303 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2012304 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2006546 type=Both tracking=src count=5 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2012305 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2012306 type=Limit tracking=dst count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020712 type=Limit tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020702 type=Both tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2013416 type=Threshold tracking=dst count=10 seconds=20 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020668 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020669 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020660 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020661 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020662 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020663 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020664 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020665 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020666 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020667 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020659 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2013385 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017965 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017966 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017967 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020630 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020631 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020632 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020633 type=Limit tracking=dst count=1 seconds=1200 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010508 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2007583 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010513 type=Threshold tracking=src count=10 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020853 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010494 type=Threshold tracking=src count=5 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017918 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017919 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017920 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017921 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010486 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2010487 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019010 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019011 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019012 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019013 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019014 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019015 type=Both tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019016 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018977 type=Both tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018978 type=Both tracking=dst count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2018984 type=Both tracking=src count=1 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016101 type=Limit tracking=src count=1 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016030 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016031 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016033 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008797 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016016 type=Both tracking=dst count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008756 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008749 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2016212 type=Limit tracking=src count=1 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008734 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019017 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019018 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019019 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019020 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019021 type=Both tracking=dst count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019022 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001315 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2001316 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2014372 type=Both tracking=src count=2 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2002400 type=Limit tracking=src count=2 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2002402 type=Limit tracking=src count=1 seconds=360 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011402 type=Limit tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011403 type=Limit tracking=src count=5 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017161 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2017162 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2002383 type=Threshold tracking=dst count=5 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2020069 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011585 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2021691 type=Limit tracking=src count=3 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2011497 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008657 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008658 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019922 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008663 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008643 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019897 type=Limit tracking=src count=1 seconds=60 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019885 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019886 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019887 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019888 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019889 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019882 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019883 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019884 type=Both tracking=src count=12 seconds=120 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008609 type=Threshold tracking=src count=3 seconds=10 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2019876 type=Limit tracking=src count=1 seconds=30 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008603 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008577 type=Threshold tracking=dst count=5 seconds=15 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008578 type=Limit tracking=src count=1 seconds=10 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2008579 type=Threshold tracking=dst count=20 seconds=15 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=1 sig-id=2009703 type=Limit tracking=src count=2 seconds=300 Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: +-----------------------[suppression]------------------------------------------ Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=129 sig-id=20 tracking=none Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: | gen-id=129 sig-id=12 tracking=none Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: ------------------------------------------------------------------------------- Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: Rule application order: activation->dynamic->pass->drop->sdrop->reject->alert->log Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: Verifying Preprocessor Configurations! Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.autoit.ua' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.http.javaclient' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.lethic.established' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ms.rdp.established' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'et.http.PK' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'AnglerEK' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'et.MS.XMLHTTP.no.exe.request' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'et.MS.XMLHTTP.ip.request' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'et.JavaArchiveOrClass' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.http.javaclient.vulnerable' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.http.binary' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.invalid.cab' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.MSSQL' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.pdf.in.http' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'et.MCOFF' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.Onelouder.bin' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.webc2ugx' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.RDP.Morto' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.Adobe.Site.Download' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.JS.Obfus.Func' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'FlimKit.SWF.Redirect' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'NuclearEK' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.Fareit.chk' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'SunDown.EK' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.gadu.loggedin' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.lizkebab' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'et.WinHttpRequest' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.http.rtf.download' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.ButterflyJoin' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.http.javaclient.SakuraPorts' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'EXE2' is set but not ever checked. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: WARNING: flowbits key 'ET.wininet.UA' is checked but not ever set. Wed Apr 27 18:43:42 2016 daemon.notice snort[8915]: 131 out of 1024 flowbits in use. Wed Apr 27 18:43:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:43:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:43:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:43:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:44:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:44:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:44:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:44:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:44:01 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:44:01 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:44:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:44:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:44:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:44:31 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:44:31 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:44:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:44:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:44:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: [ Port Based Pattern Matching Memory ] Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: +- [ Aho-Corasick Summary ] ------------------------------------- Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Storage Format : Full Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Finite Automaton : DFA Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Alphabet Size : 256 Chars Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Sizeof State : Variable (1,2,4 bytes) Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Instances : 335 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | 1 byte states : 228 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | 2 byte states : 107 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | 4 byte states : 0 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Characters : 408795 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | States : 252270 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Transitions : 13611564 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | State Density : 21.1% Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Patterns : 34402 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Match States : 30013 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Memory (MB) : 134.67 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Patterns : 3.40 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | Match Lists : 8.23 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | DFA Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | 1 byte states : 3.38 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | 2 byte states : 119.41 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: | 4 byte states : 0.00 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: +---------------------------------------------------------------- Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: [ Number of patterns truncated to 20 bytes: 5427 ] Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: afpacket DAQ configured to inline. Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Acquiring network traffic from "eth0:eth2". Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Initializing daemon mode Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Daemon initialized, signaled parent pid: 1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Reload thread starting... Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Reload thread started, thread 0xffe82ef210 (9868) Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Checking PID path... Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: PID path stat checked out ok, PID path set to /var/snort/ Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Writing PID "8915" to file "/var/snort//snort_eth0:eth2.pid" Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: --== Initialization Complete ==-- Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: ,,_ -*> Snort! <*- Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: o" )~ Version 2.9.7.2 GRE (Build 177) Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: '''' By Martin Roesch & The Snort Team: http://www.snort.org/contact#team Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Copyright (C) 2014 Cisco and/or its affiliates. All rights reserved. Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Copyright (C) 1998-2013 Sourcefire, Inc., et al. Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Using libpcap version 1.5.3 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Using PCRE version: 8.36 2014-09-26 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Using ZLIB version: 1.2.8 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Rules Engine: SF_SNORT_DETECTION_ENGINE Version 2.4 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_SDF Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_SIP Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_REPUTATION Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_GTP Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_DCERPC2 Version 1.0 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_FTPTELNET Version 1.2 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_SSLPP Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_POP Version 1.0 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_SMTP Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_DNP3 Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_DNS Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_SSH Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_MODBUS Version 1.1 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Preprocessor Object: SF_IMAP Version 1.0 Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Commencing packet processing (pid=8915) Wed Apr 27 18:44:58 2016 daemon.notice snort[8915]: Decoding Ethernet Wed Apr 27 18:44:58 2016 kern.info kernel: [ 887.216605] device eth2 entered promiscuous mode Wed Apr 27 18:44:59 2016 kern.info kernel: [ 887.366603] device eth0 entered promiscuous mode Wed Apr 27 18:45:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:45:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:45:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:45:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:45:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:45:01 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:05 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Wed Apr 27 18:45:05 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:06 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:45:06 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Wed Apr 27 18:45:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:45:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:45:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:45:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:35 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:45:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:45:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:45:55 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:45:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:46:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:46:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:46:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:46:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:00 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:46:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:46:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:46:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:46:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:46:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:46:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:46:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:47:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:47:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:47:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:47:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:00 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:47:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:10 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:47:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:47:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:30 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:47:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:47:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:50 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:47:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:47:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:48:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:48:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:48:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:48:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:48:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:10 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:48:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:20 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:25 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:48:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:30 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:48:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:44 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Wed Apr 27 18:48:44 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Wed Apr 27 18:48:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:45 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:48:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:48:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:48:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:49:00 2016 cron.info crond[3170]: user:root entry:(null) Wed Apr 27 18:49:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:49:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:49:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:49:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:49:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:49:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:10 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:49:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:10 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:20 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:49:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:30 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:49:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:40 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:49:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:45 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:50 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:49:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:49:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Wed Apr 27 18:49:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Wed Apr 27 18:50:00 2016 cron.info crond[3170]: wakeup dt=10 Wed Apr 27 18:50:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:50:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Wed Apr 27 18:50:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:50:00 2016 cron.info crond[3170]: job: 0 /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:50:00 2016 cron.info crond[3170]: file root: Wed Apr 27 18:50:00 2016 cron.info crond[12632]: child running /bin/sh Wed Apr 27 18:50:00 2016 cron.info crond[3170]: USER root pid 12632 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Wed Apr 27 18:50:00 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Wed Apr 27 18:50:00 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Wed Apr 27 18:50:00 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Wed Apr 27 18:50:00 2016 daemon.info dnsmasq[5665]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Wed Apr 27 18:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 173.44.32.10 Wed Apr 27 18:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 4.53.160.75 Wed Apr 27 18:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 104.131.53.252 Wed Apr 27 18:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 108.61.73.243 Thu Apr 28 11:11:24 2016 user.notice root: Successful NTP clock adjust (0.us.pool.ntp.org). Thu Apr 28 11:11:24 2016 user.notice root: Restarted ntpclient. NTP server #1 of 4. Thu Apr 28 11:11:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:11:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:11:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:33 2016 cron.info crond[3170]: user:root entry:(null) Thu Apr 28 11:11:33 2016 cron.info crond[3170]: user:root entry:(null) Thu Apr 28 11:11:33 2016 cron.info crond[3170]: wakeup dt=58893 Thu Apr 28 11:11:33 2016 cron.err crond[3170]: time disparity of 981 minutes detected Thu Apr 28 11:11:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:40 2016 cron.info crond[3170]: user:root entry:(null) Thu Apr 28 11:11:40 2016 cron.info crond[3170]: user:root entry:(null) Thu Apr 28 11:11:40 2016 cron.info crond[3170]: wakeup dt=7 Thu Apr 28 11:11:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:11:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:11:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:11:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:11:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:00 2016 cron.info crond[3170]: wakeup dt=20 Thu Apr 28 11:12:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:12:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:12:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:12:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:12:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:12:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:12:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:12:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:12:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:12:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:12:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:12:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:13:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:13:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:13:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:13:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:13:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:13:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:22 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:13:22 2016 daemon.info dnsmasq[5665]: forwarded openapi.meshare.com to 192.168.1.1 Thu Apr 28 11:13:22 2016 daemon.info dnsmasq[5665]: reply openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:13:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:13:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:13:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:45 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Thu Apr 28 11:13:45 2016 daemon.info dnsmasq[5665]: forwarded upgrade.meshare.com to 192.168.1.1 Thu Apr 28 11:13:45 2016 daemon.info dnsmasq[5665]: reply upgrade.meshare.com is 192.241.59.218 Thu Apr 28 11:13:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:13:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:13:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:13:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:13:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:14:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:14:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:14:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:14:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:14:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:14:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:14:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:14:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:14:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:14:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:14:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:14:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:15:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:15:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:15:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:15:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:15:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:15:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:15:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:15:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:15:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:15:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:15:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:15:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:16:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:16:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:16:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:16:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:16:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:16:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:16:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:16:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:53 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:16:53 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:16:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:16:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:16:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:16:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:16:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:17:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:17:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:17:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:17:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:17:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:17:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:17:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:17:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:17:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:17:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:17:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:17:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:18:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:18:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:18:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:18:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:18:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:18:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:18:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:18:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:18:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:18:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:18:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:18:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:19:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:19:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:19:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:19:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:19:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:19:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:19:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:19:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:19:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:19:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:20:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:20:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:20:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:20:00 2016 cron.info crond[3170]: job: 0 /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:20:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:20:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:20:00 2016 cron.info crond[17440]: child running /bin/sh Thu Apr 28 11:20:00 2016 cron.info crond[3170]: USER root pid 17440 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:20:00 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Thu Apr 28 11:20:00 2016 daemon.info dnsmasq[5665]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Thu Apr 28 11:20:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 108.61.194.85 Thu Apr 28 11:20:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 129.250.35.250 Thu Apr 28 11:20:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 198.211.106.151 Thu Apr 28 11:20:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 45.127.112.2 Thu Apr 28 11:20:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:10 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:20:10 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:20:10 2016 cron.info crond[3170]: wakeup dt=10 Thu Apr 28 11:20:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:24 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:20:24 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:54 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 11:20:54 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:20:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:20:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:00 2016 cron.info crond[3170]: wakeup dt=50 Thu Apr 28 11:21:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:21:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:21:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:21:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:21:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:21:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:21:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:21:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:22:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:22:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:22:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:22:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:22:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:22:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:22:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:22:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:23:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:23:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:23:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:23:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:23:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:23:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:21 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:23:21 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:23:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:45 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Thu Apr 28 11:23:45 2016 daemon.info dnsmasq[5665]: cached upgrade.meshare.com is 192.241.59.218 Thu Apr 28 11:23:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:23:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:23:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:24:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:24:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:24:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:24:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:24:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:24:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:44 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:44 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:44 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:24:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:24:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:25:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:25:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:25:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:25:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:25:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:25:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:09 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:09 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:09 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:49 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:49 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:49 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:54 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:54 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:54 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:59 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:25:59 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:25:59 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:26:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:26:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:26:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:26:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:26:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:26:04 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:04 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:04 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:14 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:14 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:14 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:19 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:19 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:19 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:24 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:24 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:24 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:29 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:29 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:29 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:34 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:34 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:34 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:39 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:39 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:39 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:45 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:46 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:26:46 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:26:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:50 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:26:55 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:26:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:00 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:27:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:27:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:27:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:27:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:27:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:27:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:10 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:10 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:10 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:15 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:20 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:25 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:30 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:35 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:40 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:45 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:50 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:27:55 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:27:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:28:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:28:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:28:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:28:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:28:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:28:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:15 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:20 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:25 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:30 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:35 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:40 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:45 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:50 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:28:55 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:28:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:00 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:00 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:00 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:29:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:29:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:29:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:29:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:29:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:29:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:15 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:20 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:20 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:20 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:25 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:25 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:25 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:30 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:35 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:40 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:29:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:29:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:30:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:30:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:30:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:30:00 2016 cron.info crond[3170]: job: 0 /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:30:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:30:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:30:00 2016 cron.info crond[22916]: child running /bin/sh Thu Apr 28 11:30:00 2016 cron.info crond[3170]: USER root pid 22916 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:30:00 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Thu Apr 28 11:30:00 2016 daemon.info dnsmasq[5665]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Thu Apr 28 11:30:01 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 204.2.134.163 Thu Apr 28 11:30:01 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 52.0.56.137 Thu Apr 28 11:30:01 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 64.6.144.6 Thu Apr 28 11:30:01 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 71.248.190.29 Thu Apr 28 11:30:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:11 2016 cron.info crond[3170]: wakeup dt=11 Thu Apr 28 11:30:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:20 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:30:20 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:30:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:30:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:30:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:00 2016 cron.info crond[3170]: wakeup dt=49 Thu Apr 28 11:31:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:31:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:31:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:31:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:31:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:31:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:31:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:31:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:32:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:32:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:32:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:32:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:32:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:32:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:32:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:32:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:33:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:33:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:33:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:33:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:33:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:33:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:42 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:33:42 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:33:45 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Thu Apr 28 11:33:45 2016 daemon.info dnsmasq[5665]: cached upgrade.meshare.com is 192.241.59.218 Thu Apr 28 11:33:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:33:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:33:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:34:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:34:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:34:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:34:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:34:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:34:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:34:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:34:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:35:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:35:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:35:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:35:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:35:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:35:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:35:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:35:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:36:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:36:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:36:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:36:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:36:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:36:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:36:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:36:57 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:36:57 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:37:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:37:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:37:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:37:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:37:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:37:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:37:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:37:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:37:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:38:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:38:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:38:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:38:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:38:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:38:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:38:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:38:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:39:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:39:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:39:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:39:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:39:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:39:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:39:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:39:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:40:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:40:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:40:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:40:00 2016 cron.info crond[3170]: job: 0 /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:40:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:40:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:40:00 2016 cron.info crond[28651]: child running /bin/sh Thu Apr 28 11:40:00 2016 cron.info crond[3170]: USER root pid 28651 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:40:00 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Thu Apr 28 11:40:00 2016 daemon.info dnsmasq[5665]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Thu Apr 28 11:40:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 45.79.10.228 Thu Apr 28 11:40:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 64.71.128.26 Thu Apr 28 11:40:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 198.55.111.5 Thu Apr 28 11:40:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 208.75.89.4 Thu Apr 28 11:40:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:07 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:40:07 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:40:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:10 2016 cron.info crond[3170]: wakeup dt=10 Thu Apr 28 11:40:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:40:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:40:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:00 2016 cron.info crond[3170]: wakeup dt=50 Thu Apr 28 11:41:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:41:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:41:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:41:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:41:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:41:30 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:30 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:30 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:35 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:40 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:40 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:40 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:45 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:45 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:45 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:50 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:50 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:50 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:55 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:41:55 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:41:55 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:42:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:42:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:42:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:42:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:42:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:42:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:42:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:42:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:43:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:43:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:43:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:43:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:43:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:43:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:19 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:43:19 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:43:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:45 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Thu Apr 28 11:43:45 2016 daemon.info dnsmasq[5665]: cached upgrade.meshare.com is 192.241.59.218 Thu Apr 28 11:43:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:43:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:43:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:44:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:44:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:44:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:44:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:44:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:44:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:44:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:44:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:45:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:45:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:45:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:45:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:45:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:45:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:45:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:45:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:46:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:46:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:46:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:46:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:46:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:46:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:37 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:46:37 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:46:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:46:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:46:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:47:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:47:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:47:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:47:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:47:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:47:00 2016 daemon.info dnsmasq[5665]: query[A] itus.accessinnov.com from 127.0.0.1 Thu Apr 28 11:47:00 2016 daemon.info dnsmasq[5665]: forwarded itus.accessinnov.com to 192.168.1.1 Thu Apr 28 11:47:00 2016 daemon.info dnsmasq[5665]: query[AAAA] itus.accessinnov.com from 127.0.0.1 Thu Apr 28 11:47:00 2016 daemon.info dnsmasq[5665]: forwarded itus.accessinnov.com to 192.168.1.1 Thu Apr 28 11:47:00 2016 daemon.info dnsmasq[5665]: reply itus.accessinnov.com is 104.28.28.59 Thu Apr 28 11:47:00 2016 daemon.info dnsmasq[5665]: reply itus.accessinnov.com is 104.28.29.59 Thu Apr 28 11:47:00 2016 daemon.info dnsmasq[5665]: reply itus.accessinnov.com is NODATA-IPv6 Thu Apr 28 11:47:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:53 2016 daemon.notice netifd: Network device 'eth2' link is up Thu Apr 28 11:47:53 2016 daemon.notice netifd: Interface 'wan6' has link connectivity Thu Apr 28 11:47:53 2016 daemon.notice netifd: Interface 'wan6' is setting up now Thu Apr 28 11:47:53 2016 daemon.notice netifd: Interface 'wan6' is now up Thu Apr 28 11:47:53 2016 kern.notice kernel: [ 3378.446698] eth2: 1000 Mbps Full duplex, port 2 Thu Apr 28 11:47:53 2016 kern.info kernel: [ 3378.446722] IPv6: ADDRCONF(NETDEV_CHANGE): eth2: link becomes ready Thu Apr 28 11:47:53 2016 user.notice firewall: Reloading firewall due to ifup of wan6 (eth2) Thu Apr 28 11:47:56 2016 daemon.notice netifd: Network device 'eth0' link is up Thu Apr 28 11:47:56 2016 daemon.notice netifd: Interface 'wan' has link connectivity Thu Apr 28 11:47:56 2016 daemon.notice netifd: Interface 'wan' is setting up now Thu Apr 28 11:47:56 2016 daemon.notice netifd: Interface 'wan' is now up Thu Apr 28 11:47:56 2016 kern.notice kernel: [ 3380.696914] eth0: 1000 Mbps Full duplex, port 0 Thu Apr 28 11:47:56 2016 kern.info kernel: [ 3380.696942] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Thu Apr 28 11:47:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:47:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:47:57 2016 user.notice ddns-scripts[607]: myddns_ipv6: PID '607' started at 2016-04-28 18:47 Thu Apr 28 11:47:57 2016 user.notice firewall: Reloading firewall due to ifup of wan (eth0) Thu Apr 28 11:47:57 2016 user.warn ddns-scripts[607]: myddns_ipv6: Service section disabled! - TERMINATE Thu Apr 28 11:47:57 2016 user.warn ddns-scripts[607]: myddns_ipv6: PID '607' exit WITH ERROR '1' at 2016-04-28 18:47 Thu Apr 28 11:48:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:48:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:48:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:48:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:48:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:48:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:48:00 2016 user.notice ddns-scripts[781]: myddns_ipv4: PID '781' started at 2016-04-28 18:48 Thu Apr 28 11:48:00 2016 user.warn ddns-scripts[781]: myddns_ipv4: Service section disabled! - TERMINATE Thu Apr 28 11:48:00 2016 user.warn ddns-scripts[781]: myddns_ipv4: PID '781' exit WITH ERROR '1' at 2016-04-28 18:48 Thu Apr 28 11:48:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:48:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:48:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:49:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:49:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:49:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:49:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:49:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:49:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:03 2016 authpriv.info dropbear[7382]: Exit (root): Disconnect received Thu Apr 28 11:49:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:35 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:49:35 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:49:35 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:50:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:50:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:50:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:50:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:50:00 2016 cron.info crond[3170]: job: 0 /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:50:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:50:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:50:00 2016 cron.info crond[1867]: child running /bin/sh Thu Apr 28 11:50:00 2016 cron.info crond[3170]: USER root pid 1867 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:50:00 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Thu Apr 28 11:50:00 2016 daemon.info dnsmasq[5665]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Thu Apr 28 11:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 50.116.2.10 Thu Apr 28 11:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 66.228.42.59 Thu Apr 28 11:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 108.61.73.243 Thu Apr 28 11:50:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 199.102.46.78 Thu Apr 28 11:50:05 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:50:05 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:50:10 2016 cron.info crond[3170]: wakeup dt=10 Thu Apr 28 11:50:58 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:50:58 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:50:58 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:50:58 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:00 2016 cron.info crond[3170]: wakeup dt=50 Thu Apr 28 11:51:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:51:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:51:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:51:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:51:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:51:03 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:03 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:03 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:03 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:08 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:08 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:08 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:08 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:17 2016 daemon.notice snort[8915]: S5: Session exceeded configured max bytes to queue 1048576 using 1049092 bytes (server queue). 66.234.206.237 53072 --> 208.69.40.37 8080 (0) : LWstate 0x9 LWFlags 0x6007 Thu Apr 28 11:51:18 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:18 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:18 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:18 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:19 2016 daemon.notice snort[8915]: S5: Session exceeded configured max bytes to queue 1048576 using 1049885 bytes (server queue). 66.234.206.237 53070 --> 208.69.40.37 8080 (0) : LWstate 0x9 LWFlags 0x6007 Thu Apr 28 11:51:23 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:23 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:23 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:23 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:28 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:28 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:28 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:28 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:33 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:33 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:33 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:33 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:38 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:38 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:38 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:38 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:43 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:43 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:43 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:43 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:48 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:48 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:48 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:48 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:53 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:53 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:53 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:53 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:58 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:58 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:51:58 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:51:58 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:52:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:52:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:52:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:52:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:52:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:52:03 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:03 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:03 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:03 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:08 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:08 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:08 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:08 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:13 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:13 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:13 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:13 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:23 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:23 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:23 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:23 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:28 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:28 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:28 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:28 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:33 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:33 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:33 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:33 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:38 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:38 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:38 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:38 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:43 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:43 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:43 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:43 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:48 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:48 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:48 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:48 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:53 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:53 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:53 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:53 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:58 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:58 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:52:58 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:52:58 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:53:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:53:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:53:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:53:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:53:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:53:03 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:03 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:03 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:03 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:08 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:08 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:08 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:08 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:13 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:13 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:13 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:13 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:18 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:18 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:18 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:18 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:23 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:23 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:23 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:23 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:28 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:28 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:28 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:28 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:33 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:33 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:33 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:33 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:38 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:38 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:38 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:38 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:39 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:53:39 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:53:43 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:43 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:43 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:53:43 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:53:45 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Thu Apr 28 11:53:45 2016 daemon.info dnsmasq[5665]: cached upgrade.meshare.com is 192.241.59.218 Thu Apr 28 11:54:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:54:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:54:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:54:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:54:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:54:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:55:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:55:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:55:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:55:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:55:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:55:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:56:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:56:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:56:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:56:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:56:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:56:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:56:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:39 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:56:39 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:56:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:56:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:56:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:57:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:57:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:57:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:57:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:57:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:57:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:07 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:57:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:57:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:58:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:58:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:58:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:58:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:58:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:58:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:07 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:07 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:58:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:58:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 11:59:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:59:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 11:59:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 11:59:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:59:00 2016 cron.info crond[3170]: file root: Thu Apr 28 11:59:02 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:02 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:02 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:12 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:12 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:12 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:17 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:17 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:17 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:22 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:22 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:22 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:27 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:27 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:27 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:32 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:32 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:32 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:37 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:37 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:37 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:42 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:42 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:42 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:47 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 11:59:47 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 11:59:47 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:47 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:47 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:52 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:52 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:52 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:57 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 11:59:57 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 11:59:57 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 12:00:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:00:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:00:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:00:00 2016 cron.info crond[3170]: job: 0 /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:00:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:00:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:00:00 2016 cron.info crond[5806]: child running /bin/sh Thu Apr 28 12:00:00 2016 cron.info crond[3170]: USER root pid 5806 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:00:00 2016 daemon.info dnsmasq[5665]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Thu Apr 28 12:00:00 2016 daemon.info dnsmasq[5665]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Thu Apr 28 12:00:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 204.2.134.162 Thu Apr 28 12:00:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 207.196.240.30 Thu Apr 28 12:00:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 209.244.0.3 Thu Apr 28 12:00:00 2016 daemon.info dnsmasq[5665]: reply 0.us.pool.ntp.org is 66.7.96.1 Thu Apr 28 12:00:05 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:05 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:05 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:10 2016 cron.info crond[3170]: wakeup dt=10 Thu Apr 28 12:00:10 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:10 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:10 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:10 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:15 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:15 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:15 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:00:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:00:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:00 2016 cron.info crond[3170]: wakeup dt=50 Thu Apr 28 12:01:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:01:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:01:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:01:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:01:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:01:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:01:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:01:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 12:02:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:02:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:02:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:02:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:02:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:02:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:02:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:02:58 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 12:02:58 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 12:03:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 12:03:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:03:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:03:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:03:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:03:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:03:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:45 2016 daemon.info dnsmasq[5665]: query[A] upgrade.meshare.com from 192.168.1.118 Thu Apr 28 12:03:45 2016 daemon.info dnsmasq[5665]: cached upgrade.meshare.com is 192.241.59.218 Thu Apr 28 12:03:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:03:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:03:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 12:04:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:04:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:04:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:04:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:04:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:04:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:04:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:04:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 12:05:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:05:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:05:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:05:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:05:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:05:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:26 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:26 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:26 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:31 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:05:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:05:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:00 2016 cron.info crond[3170]: user:root entry:(null) Thu Apr 28 12:06:00 2016 cron.info crond[3170]: user:root entry:(null) Thu Apr 28 12:06:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 12:06:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:06:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:06:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:06:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:01 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:06 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:06 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:06 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:11 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:11 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:11 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:16 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:16 2016 daemon.info dnsmasq[5665]: query[A] openapi.meshare.com from 192.168.1.118 Thu Apr 28 12:06:16 2016 daemon.info dnsmasq[5665]: cached openapi.meshare.com is 192.241.59.218 Thu Apr 28 12:06:16 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:16 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:21 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:21 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:21 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:31 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 12:06:31 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:31 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:31 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 12:06:31 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:36 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:36 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:36 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:41 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:41 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:41 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:46 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:46 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:46 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:51 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:51 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:51 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:56 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:06:56 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:06:56 2016 daemon.info dnsmasq[5665]: cached yourhost.example.com is NXDOMAIN Thu Apr 28 12:07:00 2016 cron.info crond[3170]: wakeup dt=60 Thu Apr 28 12:07:00 2016 cron.info crond[3170]: file root: Thu Apr 28 12:07:00 2016 cron.info crond[3170]: line sh /sbin/fw_upgrade Thu Apr 28 12:07:00 2016 cron.info crond[3170]: line /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Thu Apr 28 12:07:01 2016 daemon.info dnsmasq[5665]: query[A] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:07:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 12:07:01 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN Thu Apr 28 12:07:01 2016 daemon.info dnsmasq[5665]: query[AAAA] yourhost.example.com from 127.0.0.1 Thu Apr 28 12:07:01 2016 daemon.info dnsmasq[5665]: forwarded yourhost.example.com to 192.168.1.1 Thu Apr 28 12:07:01 2016 daemon.info dnsmasq[5665]: reply yourhost.example.com is NXDOMAIN