crash logs

Discussion in 'all things UNIX' started by Overkill, Jul 20, 2021.

  1. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA
    How do I check to see if there's any crash logs in Debian 10 MATE? I have googled and youtubed but can't figure it out :confused:
     
  2. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    702
    Location:
    EU
    Code:
    journalctl -f
    
     
  3. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA
    This is Russian to me :doubt:

    Code:
    family@hp-lin:~$ journalctl -f
    Hint: You are currently not seeing messages from other users and the system.
          Users in the 'systemd-journal' group can see all messages. Pass -q to
          turn off this notice.
    No journal files were opened due to insufficient permissions.
    family@hp-lin:~$ sudo journalctl -f
    [sudo] password for family:
    -- Logs begin at Wed 2021-07-21 13:21:46 EDT. --
    Jul 21 15:53:45 hp-lin nextdns[572]: Connected 209.208.110.56:443 (con=13ms tls=19ms, TCP, TLS13)
    Jul 21 15:53:45 hp-lin mateweather-app[1104]: Source ID 647 was not found when attempting to remove it
    Jul 21 15:54:31 hp-lin kernel: [UFW BLOCK] IN=enp1s8 OUT= MAC=00:1a:92:25:dd:cc:2c:64:1f:06:10:15:08:00 SRC=192.168.1.4 DST=192.168.1.42 LEN=541 TOS=0x00 PREC=0x00 TTL=64 ID=59425 DF PROTO=UDP SPT=53764 DPT=55478 LEN=521
    Jul 21 15:54:32 hp-lin kernel: [UFW BLOCK] IN=enp1s8 OUT= MAC=00:1a:92:25:dd:cc:d4:ab:cd:06:87:ff:08:00 SRC=192.168.1.6 DST=192.168.1.42 LEN=348 TOS=0x00 PREC=0x00 TTL=64 ID=53507 DF PROTO=UDP SPT=1900 DPT=55478 LEN=328
    Jul 21 15:54:32 hp-lin kernel: [UFW BLOCK] IN=enp1s8 OUT= MAC=00:1a:92:25:dd:cc:2c:64:1f:06:10:15:08:00 SRC=192.168.1.4 DST=192.168.1.42 LEN=541 TOS=0x00 PREC=0x00 TTL=64 ID=59490 DF PROTO=UDP SPT=50585 DPT=55478 LEN=521
    Jul 21 15:54:32 hp-lin kernel: [UFW BLOCK] IN=enp1s8 OUT= MAC=00:1a:92:25:dd:cc:d4:ab:cd:06:87:ff:08:00 SRC=192.168.1.6 DST=192.168.1.42 LEN=348 TOS=0x00 PREC=0x00 TTL=64 ID=53543 DF PROTO=UDP SPT=1900 DPT=55478 LEN=328
    Jul 21 15:54:33 hp-lin kernel: [UFW BLOCK] IN=enp1s8 OUT= MAC=00:1a:92:25:dd:cc:2c:64:1f:06:10:15:08:00 SRC=192.168.1.4 DST=192.168.1.42 LEN=541 TOS=0x00 PREC=0x00 TTL=64 ID=59649 DF PROTO=UDP SPT=56355 DPT=55478 LEN=521
    Jul 21 15:54:33 hp-lin kernel: [UFW BLOCK] IN=enp1s8 OUT= MAC=00:1a:92:25:dd:cc:d4:ab:cd:06:87:ff:08:00 SRC=192.168.1.6 DST=192.168.1.42 LEN=348 TOS=0x00 PREC=0x00 TTL=64 ID=53548 DF PROTO=UDP SPT=1900 DPT=55478 LEN=328
    Jul 21 15:54:53 hp-lin sudo[2849]:   family : TTY=pts/1 ; PWD=/home/family ; USER=root ; COMMAND=/usr/bin/journalctl -f
    Jul 21 15:54:53 hp-lin sudo[2849]: pam_unix(sudo:session): session opened for user root by (uid=0)
     
  4. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    702
    Location:
    EU

    So i will translate in Sudovien:argh:

    You have a trace a mateweather that's seems not on your computer.
    UFW (your firewall), block some TCP action on a machine or your machine who get enp1s8 as network adaptater

    Some tips :

    IN incoming interface
    OUT outgoing interface
    MAC hardware address
    SRC IP address in the source field in the IP header
    DST IP address in the destination field of the IP header
    LEN Length of the IP packet
    TOS originally called Type of service, these days it is the Differentiated Services Code Point
    TTL Time to live
    PROTO name of protocol tcp/udp are most common
    SPT Source port from tcp/udp header
    DPT Destination port from tcp/udp header
    DF TCP don't fragment flag
    SYN TCP Syn Flag
    ACK TCP Ack flag
    WINDOW TCP Window
    SEQ Sequency number


    Nothing wrong:thumb:
     
    Last edited: Jul 22, 2021
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.