Jul  2 01:41:32 combo sshd(pam_unix)[23536]: session closed for user test
Jul  2 01:41:33 combo sshd(pam_unix)[23544]: session opened for user test by (uid=509)
Jul  2 01:41:33 combo sshd(pam_unix)[23544]: session closed for user test
Jul  2 01:41:33 combo sshd(pam_unix)[23545]: session opened for user test by (uid=509)
Jul  2 01:41:33 combo sshd(pam_unix)[23546]: session opened for user test by (uid=509)
Jul  2 01:41:33 combo sshd(pam_unix)[23547]: session opened for user test by (uid=509)
Jul  2 01:41:33 combo sshd(pam_unix)[23545]: session closed for user test
Jul  2 01:41:33 combo sshd(pam_unix)[23546]: session closed for user test
Jul  2 01:41:33 combo sshd(pam_unix)[23547]: session closed for user test
Jul  2 04:04:02 combo su(pam_unix)[24117]: session opened for user cyrus by (uid=0)
Jul  2 04:04:02 combo su(pam_unix)[24117]: session closed for user cyrus
Jul  2 04:04:03 combo logrotate: ALERT exited abnormally with [1]
Jul  2 04:09:53 combo su(pam_unix)[24511]: session opened for user news by (uid=0)
Jul  2 04:09:54 combo su(pam_unix)[24511]: session closed for user news
Jul  2 04:15:33 combo sshd(pam_unix)[24588]: check pass; user unknown
Jul  2 04:15:33 combo sshd(pam_unix)[24588]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=zummit.com
Jul  2 04:15:33 combo sshd(pam_unix)[24587]: check pass; user unknown
Jul  2 04:15:33 combo sshd(pam_unix)[24587]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=zummit.com
Jul  2 04:15:33 combo sshd(pam_unix)[24590]: check pass; user unknown
Jul  2 04:15:33 combo sshd(pam_unix)[24590]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=zummit.com
Jul  2 04:15:43 combo sshd(pam_unix)[24573]: check pass; user unknown
Jul  2 04:15:43 combo sshd(pam_unix)[24573]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=zummit.com
Jul  2 04:15:43 combo sshd(pam_unix)[24574]: check pass; user unknown
Jul  2 04:15:43 combo sshd(pam_unix)[24574]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=zummit.com
Jul  2 04:15:43 combo sshd(pam_unix)[24576]: check pass; user unknown

Explanation: System logs from Linux containing authentication failure events. Found 1 security-relevant log entries. These logs may reveal information about authentication attempts and network access patterns.


20171223-22:20:13:184|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:20:15:873|Step_LSC|30002312|onStandStepChanged 3761
20171223-22:20:15:885|Step_LSC|30002312|onExtend:1514038816000 0 0 5
20171223-22:20:16:175|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514038740000##7189##549608##8661##16256##27457484
20171223-22:20:16:175|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514038740000##7189##549659##8661##16256##27460494
20171223-22:20:16:186|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=130673
20171223-22:20:16:194|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:20:18:586|Step_StandReportReceiver|30002312|onReceive action: android.intent.action.SCREEN_OFF
20171223-22:22:37:638|Step_LSC|30002312|processHandleBroadcastAction action:android.intent.action.TIME_TICK
20171223-22:23:41:831|Step_LSC|30002312|processHandleBroadcastAction action:android.intent.action.TIME_TICK
20171223-22:24:22:157|Step_LSC|30002312|onStandStepChanged 3761
20171223-22:24:22:165|Step_LSC|30002312|onExtend:1514038819000 0 0 5
20171223-22:24:22:165|Step_LSC|30002312|onExtend:1514038879000 0 0 5
20171223-22:24:22:165|Step_LSC|30002312|onExtend:1514038939000 0 0 5
20171223-22:24:22:165|Step_LSC|30002312|onExtend:1514038999000 0 0 5
20171223-22:24:22:165|Step_LSC|30002312|onExtend:1514039059000 0 0 0
20171223-22:24:22:204|Step_StandReportReceiver|30002312|onReceive action: android.intent.action.SCREEN_ON
20171223-22:24:22:206|Step_LSC|30002312|processHandleBroadcastAction action:android.intent.action.SCREEN_ON
20171223-22:24:22:206|Step_StandStepCounter|30002312|flush sensor data
20171223-22:24:22:207|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514038740000##7189##549659##8661##16256##27460494
20171223-22:24:22:207|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514038980000##7189##549659##8661##16256##27706526
20171223-22:24:22:208|Step_LSC|30002312|onStandStepChanged 3761
20171223-22:24:22:214|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=130673
20171223-22:24:22:215|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:24:22:215|Step_StandReportReceiver|30002312|REPORT : 7189 5132 153988 240

Explanation: Standard HealthApp system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


081111 081702 24075 INFO dfs.DataNode$PacketResponder: Received block blk_-7630699912570186723 of size 67108864 from /10.251.71.240
081111 081847 24224 INFO dfs.DataNode$DataXceiver: Receiving block blk_1512136249403454074 src: /10.250.7.244:47958 dest: /10.250.7.244:50010
081111 081938 23963 INFO dfs.DataNode$PacketResponder: Received block blk_8655748951361667770 of size 67108864 from /10.251.109.236
081111 081954 24553 INFO dfs.DataNode$PacketResponder: PacketResponder 2 for block blk_8487226415276391460 terminating
081111 082005 23974 INFO dfs.DataNode$DataXceiver: Receiving block blk_-8162657657061473938 src: /10.251.26.131:35484 dest: /10.251.26.131:50010
081111 082039 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.addStoredBlock: blockMap updated: 10.251.66.3:50010 is added to blk_-4970213618915792510 size 67108864
081111 082108 24348 INFO dfs.DataNode$DataXceiver: Receiving block blk_9034824096129858680 src: /10.250.6.223:45371 dest: /10.250.6.223:50010
081111 082322 24292 INFO dfs.DataNode$PacketResponder: Received block blk_-4775386099844009890 of size 67108864 from /10.251.107.19
081111 082527 31 INFO dfs.FSNamesystem: BLOCK* NameSystem.allocateBlock: /user/root/rand7/_temporary/_task_200811101024_0014_m_001049_0/part-01049. blk_-1533191386601391937
081111 082528 24365 INFO dfs.DataNode$PacketResponder: PacketResponder 0 for block blk_2096199637324483321 terminating
081111 082541 24284 INFO dfs.DataNode$PacketResponder: PacketResponder 2 for block blk_3433046099598424314 terminating
081111 082650 32 INFO dfs.FSNamesystem: BLOCK* NameSystem.addStoredBlock: blockMap updated: 10.250.13.240:50010 is added to blk_4170936278386288557 size 67108864
081111 082730 24531 INFO dfs.DataNode$PacketResponder: Received block blk_-3023983271692989109 of size 67108864 from /10.251.110.68
081111 082809 24442 INFO dfs.DataNode$DataXceiver: Receiving block blk_469126362137371425 src: /10.251.199.245:53897 dest: /10.251.199.245:50010
081111 082902 24331 INFO dfs.DataNode$PacketResponder: PacketResponder 1 for block blk_3922791077126964673 terminating
081111 082952 24363 INFO dfs.DataNode$PacketResponder: Received block blk_5813923864071791162 of size 67108864 from /10.251.125.193
081111 082955 24432 INFO dfs.DataNode$PacketResponder: PacketResponder 0 for block blk_7412933088374169877 terminating
081111 083120 26 INFO dfs.FSNamesystem: BLOCK* NameSystem.addStoredBlock: blockMap updated: 10.251.39.192:50010 is added to blk_-3888538223380979891 size 67108864
081111 083143 24261 INFO dfs.DataNode$PacketResponder: Received block blk_-5970165518655489569 of size 67108864 from /10.250.14.196
081111 083148 24344 INFO dfs.DataNode$PacketResponder: PacketResponder 2 for block blk_-7319442762668598889 terminating
081111 083212 30 INFO dfs.FSNamesystem: BLOCK* NameSystem.allocateBlock: /user/root/rand7/_temporary/_task_200811101024_0014_m_000973_0/part-00973. blk_5844313985011885282
081111 083219 35 INFO dfs.FSNamesystem: BLOCK* NameSystem.allocateBlock: /user/root/rand7/_temporary/_task_200811101024_0014_m_001348_0/part-01348. blk_4531288786306744275
081111 083336 24444 INFO dfs.DataNode$PacketResponder: Received block blk_-3845286823494684378 of size 67108864 from /10.251.107.196
081111 083338 31 INFO dfs.FSNamesystem: BLOCK* NameSystem.addStoredBlock: blockMap updated: 10.251.203.129:50010 is added to blk_6170586659371027531 size 67108864
081111 083418 24490 INFO dfs.DataNode$PacketResponder: PacketResponder 1 for block blk_-808401720390253471 terminating

Explanation: Standard HDFS system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


[Mon Dec 05 10:38:04 2005] [error] mod_jk child workerEnv in error state 6
[Mon Dec 05 10:38:04 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Mon Dec 05 10:38:04 2005] [error] mod_jk child workerEnv in error state 7
[Mon Dec 05 10:41:14 2005] [notice] jk2_init() Found child 5470 in scoreboard slot 9
[Mon Dec 05 10:41:14 2005] [notice] jk2_init() Found child 5469 in scoreboard slot 8
[Mon Dec 05 10:42:23 2005] [notice] jk2_init() Found child 5474 in scoreboard slot 9
[Mon Dec 05 10:42:23 2005] [notice] jk2_init() Found child 5475 in scoreboard slot 6
[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5482 in scoreboard slot 9
[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5480 in scoreboard slot 7
[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5479 in scoreboard slot 6
[Mon Dec 05 10:43:19 2005] [notice] jk2_init() Found child 5481 in scoreboard slot 8
[Mon Dec 05 10:43:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Mon Dec 05 10:43:34 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Mon Dec 05 10:43:39 2005] [error] mod_jk child workerEnv in error state 8
[Mon Dec 05 10:43:41 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Mon Dec 05 10:43:41 2005] [error] mod_jk child workerEnv in error state 7
[Mon Dec 05 10:43:48 2005] [notice] jk2_init() Found child 5484 in scoreboard slot 7
[Mon Dec 05 10:43:48 2005] [notice] jk2_init() Found child 5483 in scoreboard slot 6
[Mon Dec 05 10:43:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Mon Dec 05 10:43:51 2005] [error] mod_jk child workerEnv in error state 7
[Mon Dec 05 10:43:51 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Mon Dec 05 10:43:51 2005] [error] mod_jk child workerEnv in error state 8
[Mon Dec 05 10:46:55 2005] [notice] jk2_init() Found child 5497 in scoreboard slot 7
[Mon Dec 05 10:46:55 2005] [notice] jk2_init() Found child 5495 in scoreboard slot 9
[Mon Dec 05 10:46:55 2005] [notice] jk2_init() Found child 5494 in scoreboard slot 8

Explanation: Standard Apache system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


- 1131567158 2005.11.09 tbird-admin1 Nov 9 12:12:38 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_B6] datasource
- 1131567159 2005.11.09 bn10 Nov 9 12:12:39 bn10/bn10 ntpd[22328]: synchronized to 10.100.20.250, stratum 3
- 1131567159 2005.11.09 tbird-admin1 Nov 9 12:12:39 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_C8] datasource
- 1131567160 2005.11.09 bn810 Nov 9 12:12:40 bn810/bn810 ntpd[14397]: synchronized to 10.100.22.250, stratum 3
- 1131567160 2005.11.09 tbird-sm1 Nov 9 12:12:40 src@tbird-sm1 ib_sm.x[24904]: [ib_sm_sweep.c:1455]: No topology change
- 1131567160 2005.11.09 tbird-sm1 Nov 9 12:12:40 src@tbird-sm1 ib_sm.x[24904]: [ib_sm_sweep.c:1482]: No configuration change required
- 1131567161 2005.11.09 cn748 Nov 9 12:12:41 cn748/cn748 ntpd[29307]: synchronized to 10.100.18.250, stratum 3
- 1131567161 2005.11.09 tbird-admin1 Nov 9 12:12:41 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_A6] datasource
- 1131567164 2005.11.09 cn26 Nov 9 12:12:44 cn26/cn26 ntpd[30974]: synchronized to 10.100.20.250, stratum 3
- 1131567164 2005.11.09 cn702 Nov 9 12:12:44 cn702/cn702 ntpd[19341]: synchronized to 10.100.22.250, stratum 3
- 1131567165 2005.11.09 bn772 Nov 9 12:12:45 bn772/bn772 ntpd[3214]: synchronized to 10.100.18.250, stratum 3
- 1131567165 2005.11.09 tbird-admin1 Nov 9 12:12:45 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_B4] datasource
- 1131567165 2005.11.09 tbird-admin1 Nov 9 12:12:45 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_C1] datasource
- 1131567166 2005.11.09 tbird-admin1 Nov 9 12:12:46 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_B8] datasource
- 1131567166 2005.11.09 tbird-admin1 Nov 9 12:12:46 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_C2] datasource
- 1131567167 2005.11.09 tbird-admin1 Nov 9 12:12:47 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_C4] datasource
- 1131567168 2005.11.09 bn312 Nov 9 12:12:48 bn312/bn312 ntpd[29740]: synchronized to 10.100.20.250, stratum 3
- 1131567168 2005.11.09 tbird-admin1 Nov 9 12:12:48 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_A4] datasource
- 1131567169 2005.11.09 cn884 Nov 9 12:12:49 cn884/cn884 ntpd[32661]: synchronized to 10.100.20.250, stratum 3
- 1131567169 2005.11.09 tbird-admin1 Nov 9 12:12:49 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_D8] datasource
- 1131567170 2005.11.09 cn720 Nov 9 12:12:50 cn720/cn720 ntpd[27541]: synchronized to 10.100.20.250, stratum 3
- 1131567170 2005.11.09 tbird-admin1 Nov 9 12:12:50 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_B7] datasource
- 1131567170 2005.11.09 tbird-admin1 Nov 9 12:12:50 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_D4] datasource
- 1131567170 2005.11.09 tbird-sm1 Nov 9 12:12:50 src@tbird-sm1 ib_sm.x[24904]: [ib_sm_sweep.c:1831]: ********************** NEW SWEEP ********************
- 1131567171 2005.11.09 tbird-admin1 Nov 9 12:12:51 local@tbird-admin1 /apps/x86_64/system/ganglia-3.0.1/sbin/gmetad[1682]: data_thread() got not answer from any [Thunderbird_B5] datasource

Explanation: Standard Thunderbird system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


2015-10-18 18:01:53,869 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-39.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,869 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-41.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,869 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskImpl: task_1445144423722_0020_m_000004 Task Transitioned from NEW to SCHEDULED
2015-10-18 18:01:53,869 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-39.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,869 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-41.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,869 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskImpl: task_1445144423722_0020_m_000005 Task Transitioned from NEW to SCHEDULED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-39.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-41.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskImpl: task_1445144423722_0020_m_000006 Task Transitioned from NEW to SCHEDULED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-39.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-41.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskImpl: task_1445144423722_0020_m_000007 Task Transitioned from NEW to SCHEDULED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-39.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-41.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskImpl: task_1445144423722_0020_m_000008 Task Transitioned from NEW to SCHEDULED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-39.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.yarn.util.RackResolver: Resolved MSRA-SA-41.fareast.corp.microsoft.com to /default-rack
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskImpl: task_1445144423722_0020_m_000009 Task Transitioned from NEW to SCHEDULED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskImpl: task_1445144423722_0020_r_000000 Task Transitioned from NEW to SCHEDULED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskAttemptImpl: attempt_1445144423722_0020_m_000000_0 TaskAttempt Transitioned from NEW to UNASSIGNED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskAttemptImpl: attempt_1445144423722_0020_m_000001_0 TaskAttempt Transitioned from NEW to UNASSIGNED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event handler] org.apache.hadoop.mapreduce.v2.app.job.impl.TaskAttemptImpl: attempt_1445144423722_0020_m_000002_0 TaskAttempt Transitioned from NEW to UNASSIGNED
2015-10-18 18:01:53,885 INFO [AsyncDispatcher event hand

Explanation: Standard Hadoop system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


Dec 10 09:31:24 LabSZ sshd[24676]: Failed password for invalid user FILTER from 104.192.3.34 port 33738 ssh2
Dec 10 09:31:24 LabSZ sshd[24676]: Received disconnect from 104.192.3.34: 11: Bye Bye [preauth]
Dec 10 09:31:32 LabSZ sshd[24678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.192.3.34  user=root
Dec 10 09:31:34 LabSZ sshd[24678]: Failed password for root from 104.192.3.34 port 56524 ssh2
Dec 10 09:31:34 LabSZ sshd[24678]: Connection closed by 104.192.3.34 [preauth]
Dec 10 09:32:20 LabSZ sshd[24680]: Accepted password for fztu from 119.137.62.142 port 49116 ssh2
Dec 10 09:32:20 LabSZ sshd[24680]: pam_unix(sshd:session): session opened for user fztu by (uid=0)
Dec 10 09:32:35 LabSZ sshd[24787]: Invalid user matlab from 52.80.34.196
Dec 10 09:32:35 LabSZ sshd[24787]: input_userauth_request: invalid user matlab [preauth]
Dec 10 09:32:35 LabSZ sshd[24787]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:32:35 LabSZ sshd[24787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-80-34-196.cn-north-1.compute.amazonaws.com.cn
Dec 10 09:32:42 LabSZ sshd[24787]: Failed password for invalid user matlab from 52.80.34.196 port 36060 ssh2
Dec 10 09:32:42 LabSZ sshd[24787]: Received disconnect from 52.80.34.196: 11: Bye Bye [preauth]
Dec 10 09:45:06 LabSZ sshd[24761]: Received disconnect from 119.137.62.142: 11: disconnected by user
Dec 10 09:45:06 LabSZ sshd[24680]: pam_unix(sshd:session): session closed for user fztu
Dec 10 09:48:23 LabSZ sshd[24806]: Invalid user 0 from 181.214.87.4
Dec 10 09:48:23 LabSZ sshd[24806]: input_userauth_request: invalid user 0 [preauth]
Dec 10 09:48:23 LabSZ sshd[24806]: Failed none for invalid user 0 from 181.214.87.4 port 51889 ssh2
Dec 10 09:48:24 LabSZ sshd[24806]: Connection closed by 181.214.87.4 [preauth]
Dec 10 09:48:32 LabSZ sshd[24808]: Did not receive identification string from 181.214.87.4
Dec 10 10:04:52 LabSZ sshd[24809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.2.12.12  user=root
Dec 10 10:04:54 LabSZ sshd[24809]: Failed password for root from 60.2.12.12 port 63646 ssh2
Dec 10 10:04:54 LabSZ sshd[24809]: Received disconnect from 60.2.12.12: 11: Bye Bye [preauth]
Dec 10 10:04:54 LabSZ sshd[24811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.2.12.12  user=root
Dec 10 10:04:56 LabSZ sshd[24811]: Failed password for root from 60.2.12.12 port 65244 ssh2

Explanation: System logs from OpenSSH containing authentication failure events. Found 3 security-relevant log entries from 5 unique IP addresses. These logs may reveal information about authentication attempts and network access patterns.


17/06/09 20:10:55 INFO executor.CoarseGrainedExecutorBackend: Got assigned task 638
17/06/09 20:10:55 INFO executor.Executor: Running task 3.0 in stage 15.0 (TID 638)
17/06/09 20:10:55 INFO executor.CoarseGrainedExecutorBackend: Got assigned task 639
17/06/09 20:10:55 INFO executor.Executor: Running task 4.0 in stage 15.0 (TID 639)
17/06/09 20:10:55 INFO broadcast.TorrentBroadcast: Started reading broadcast variable 24
17/06/09 20:10:55 INFO storage.MemoryStore: Block broadcast_24_piece0 stored as bytes in memory (estimated size 5.6 KB, free 393.0 KB)
17/06/09 20:10:55 INFO broadcast.TorrentBroadcast: Reading broadcast variable 24 took 10 ms
17/06/09 20:10:55 INFO storage.MemoryStore: Block broadcast_24 stored as values in memory (estimated size 9.8 KB, free 402.8 KB)
17/06/09 20:10:55 INFO spark.CacheManager: Partition rdd_21_1 not found, computing it
17/06/09 20:10:55 INFO spark.CacheManager: Partition rdd_21_4 not found, computing it
17/06/09 20:10:55 INFO spark.CacheManager: Partition rdd_21_3 not found, computing it
17/06/09 20:10:55 INFO spark.CacheManager: Partition rdd_21_2 not found, computing it
17/06/09 20:10:55 INFO spark.CacheManager: Partition rdd_21_0 not found, computing it
17/06/09 20:10:55 INFO storage.BlockManager: Found block rdd_2_1 locally
17/06/09 20:10:55 INFO storage.BlockManager: Found block rdd_2_4 locally
17/06/09 20:10:55 INFO storage.BlockManager: Found block rdd_2_3 locally
17/06/09 20:10:55 INFO storage.BlockManager: Found block rdd_2_2 locally
17/06/09 20:10:55 INFO storage.BlockManager: Found block rdd_2_0 locally
17/06/09 20:10:55 INFO python.PythonRunner: Times: total = 40, boot = -95, init = 135, finish = 0
17/06/09 20:10:55 INFO python.PythonRunner: Times: total = 39, boot = -96, init = 135, finish = 0
17/06/09 20:10:55 INFO python.PythonRunner: Times: total = 41, boot = -98, init = 139, finish = 0
17/06/09 20:10:55 INFO python.PythonRunner: Times: total = 40, boot = -99, init = 139, finish = 0
17/06/09 20:10:55 INFO python.PythonRunner: Times: total = 40, boot = -95, init = 135, finish = 0
17/06/09 20:10:55 INFO storage.MemoryStore: Block rdd_21_1 stored as bytes in memory (estimated size 162.0 B, free 403.0 KB)
17/06/09 20:10:55 INFO storage.MemoryStore: Block rdd_21_4 stored as bytes in memory (estimated size 200.0 B, free 403.2 KB)

Explanation: Standard Spark system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


Jul  7 08:09:11 combo udev[12754]: removing device node '/udev/vcsa2'
Jul  7 08:09:11 combo udev[12753]: removing device node '/udev/vcs2'
Jul  7 08:09:11 combo udev[12777]: creating device node '/udev/vcs2'
Jul  7 08:09:11 combo udev[12778]: creating device node '/udev/vcsa2'
Jul  7 08:09:11 combo udev[12786]: removing device node '/udev/vcs2'
Jul  7 08:09:11 combo udev[12790]: removing device node '/udev/vcsa2'
Jul  7 08:09:11 combo udev[12795]: creating device node '/udev/vcs2'
Jul  7 08:09:11 combo udev[12798]: creating device node '/udev/vcsa2'
Jul  7 14:18:55 combo sshd(pam_unix)[13317]: check pass; user unknown
Jul  7 14:18:55 combo sshd(pam_unix)[13317]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=c9063558.virtua.com.br
Jul  7 14:18:57 combo sshd(pam_unix)[13321]: check pass; user unknown
Jul  7 14:18:57 combo sshd(pam_unix)[13321]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=c9063558.virtua.com.br
Jul  7 14:18:58 combo sshd(pam_unix)[13318]: check pass; user unknown
Jul  7 14:18:58 combo sshd(pam_unix)[13318]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=c9063558.virtua.com.br
Jul  7 14:18:59 combo sshd(pam_unix)[13323]: check pass; user unknown
Jul  7 14:18:59 combo sshd(pam_unix)[13323]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=c9063558.virtua.com.br
Jul  7 16:33:52 combo ftpd[13521]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13513]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13511]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13512]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13516]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13515]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13518]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13522]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005
Jul  7 16:33:52 combo ftpd[13517]: connection from 202.82.200.188 () at Thu Jul  7 16:33:52 2005

Explanation: System logs from Linux containing authentication failure events. Found 1 security-relevant log entries from 1 unique IP addresses. These logs may reveal information about authentication attempts and network access patterns.


20171223-22:53:12:731|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=130673
20171223-22:53:12:737|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:53:12:737|Step_StandReportReceiver|30002312|REPORT : 7189 5132 153988 240
20171223-22:53:12:818|Step_LSC|30002312|onStandStepChanged 3761
20171223-22:53:12:820|Step_LSC|30002312|onExtend:1514040793000 0 0 5
20171223-22:53:13:15|Step_LSC|30002312|onStandStepChanged 3761
20171223-22:53:13:16|Step_LSC|30002312|onExtend:1514040793000 0 0 0
20171223-22:53:13:38|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514040720000##7189##549659##8661##16256##29437037
20171223-22:53:13:39|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514040720000##7189##549659##8661##16256##29437358
20171223-22:53:13:45|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=130673
20171223-22:53:13:48|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:54:0:118|Step_LSC|30002312|processHandleBroadcastAction action:android.intent.action.TIME_TICK
20171223-22:54:55:20|Step_LSC|30002312|onStandStepChanged 3761
20171223-22:54:55:29|Step_LSC|30002312|onExtend:1514040895000 0 0 5
20171223-22:54:55:330|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514040720000##7189##549659##8661##16256##29437358
20171223-22:54:55:331|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514040780000##7189##549659##8661##16256##29539649
20171223-22:54:55:346|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=130673
20171223-22:54:55:361|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:55:0:140|Step_LSC|30002312|processHandleBroadcastAction action:android.intent.action.TIME_TICK
20171223-22:55:20:126|Step_StandReportReceiver|30002312|onReceive action: android.intent.action.SCREEN_OFF
20171223-22:55:55:699|Step_LSC|30002312|onStandStepChanged 3761
20171223-22:55:55:702|Step_LSC|30002312|onExtend:1514040956000 0 0 5
20171223-22:55:55:730|Step_StandReportReceiver|30002312|onReceive action: android.intent.action.SCREEN_ON
20171223-22:55:55:733|Step_LSC|30002312|processHandleBroadcastAction action:android.intent.action.SCREEN_ON
20171223-22:55:55:733|Step_StandStepCounter|30002312|flush sensor data


[10.30 20:43:44] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:45] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 3254 bytes (3.17 KB) sent, 5295 bytes (5.17 KB) received, lifetime 00:04
[10.30 20:43:45] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 553 bytes sent, 1424 bytes (1.39 KB) received, lifetime <1 sec
[10.30 20:43:45] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 3205 bytes (3.12 KB) sent, 15704 bytes (15.3 KB) received, lifetime <1 sec
[10.30 20:43:45] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 1341 bytes (1.30 KB) sent, 290 bytes received, lifetime 00:01
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 1023 bytes sent, 4076 bytes (3.98 KB) received, lifetime 00:01
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 553 bytes sent, 28794 bytes (28.1 KB) received, lifetime <1 sec
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 996 bytes sent, 367 bytes received, lifetime 00:01
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 1536 bytes (1.50 KB) sent, 5325 bytes (5.20 KB) received, lifetime 00:01
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 0 bytes sent, 0 bytes received, lifetime <1 sec
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:46] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:47] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:47] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:47] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:47] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:43:49] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 0 bytes sent, 0 bytes received, lifetime 00:02
[10.30 20:43:50] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 20:44:42] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 2735 bytes (2.67 KB) sent, 79708 bytes (77.8 KB) received, lifetime 00:55

Explanation: Standard Proxifier system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


26628 full partition status 1124999460 1 blocked
46680 node-126 node status 1126168979 1 running
46615 node-181 node status 1126168951 1 running
56225 node-74 node status 1126814969 1 running
56504 node-55 node status 1126815181 1 configured out
58843 full partition status 1126818053 1 closing
56256 node-105 node status 1126814969 0 running
56261 node-110 node status 1126814969 0 running
56327 node-175 node status 1126814970 0 running
89931 full partition status 1128014704 1 running
98836 node-83 node status 1128237754 1 running
56298 node-146 node status 1126814970 0 running
56335 node-183 node status 1126814970 0 running
56329 node-177 node status 1126814970 0 running
56404 node-254 node status 1126814970 0 running
116947 node-202 node status 1128899526 1 running
56349 node-198 node status 1126814970 1 running
46114 node-182 node status 1126165404 -1 configured out
169688 node-44 node status 1131210631 1 not responding
169664 node-40 node status 1131210631 1 not responding
168084 full partition status 1131032850 1 blocked
197110 node-253 node status 1131247704 1 running
205176 node-15 node status 1131532770 1 not responding
205095 full partition status 1131530296 1 running
204732 node-44 node status 1131527920 1 active

Explanation: Standard HPC system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


2016-09-29 02:04:38, Info                  CBS    Session: 30546354_3343653427 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:38, Info                  CBS    Read out cached package applicability for package: Package_for_KB2978120~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:38, Info                  CBS    Session: 30546354_3344023448 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:38, Info                  CBS    Read out cached package applicability for package: Package_for_KB3140245~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:38, Info                  CBS    Session: 30546354_3344103452 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:38, Info                  CBS    Read out cached package applicability for package: Package_for_KB3010788~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:38, Info                  CBS    Session: 30546354_3344683485 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:38, Info                  CBS    Read out cached package applicability for package: Package_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:38, Info                  CBS    Session: 30546354_3345573536 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:38, Info                  CBS    Read out cached package applicability for package: Package_for_KB2705219~31bf3856ad364e35~amd64~~6.1.2.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:38, Info                  CBS    Session: 30546354_3345633540 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:38, Info                  CBS    Session: 30546354_3347003618 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3004375~31bf3856ad364e35~amd64~~6.1.3.1, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:39, Info                  CBS    Session: 30546354_3350523820 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3138378~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:39, Info                  CBS    Session: 30546354_3350703830 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2506928~31bf3856ad364e35~amd64~~6.1.2.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:39, Info                  CBS    Session: 30546354_3350783834 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2799926~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:39, Info                  CBS    Session: 30546354_3350953844 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:39, Info                  CBS    Session: 30546354_3351103853 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:39, Info                  CBS    Session: 30546354_3351293864 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3004361~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112

Explanation: Standard Windows system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


142130 Interconnect-0N01 switch_module error 1077815632 1 Linkerror event interval expired
142380 Interconnect-1N01 switch_module error 1077815724 1 Linkerror event interval expired
142698 Interconnect-1N02 switch_module error 1077815841 1 Linkerror event interval expired
142994 Interconnect-0N03 switch_module error 1077816061 1 Linkerror event interval expired
145825 Interconnect-1N02 switch_module error 1077817398 1 Linkerror event interval expired
156575 Interconnect-1N03 switch_module error 1077865581 1 Linkerror event interval expired
157160 Interconnect-1N03 switch_module error 1077867221 1 Linkerror event interval expired
157378 Interconnect-1N03 switch_module error 1077868285 1 Linkerror event interval expired
157601 Interconnect-1N03 switch_module error 1077873194 1 Linkerror event interval expired
160886 Interconnect-1N01 switch_module error 1077875763 1 Linkerror event interval expired
161403 Interconnect-0N03 switch_module error 1077876337 1 Linkerror event interval expired
161699 Interconnect-1N00 switch_module error 1077877379 1 Linkerror event interval expired
162068 Interconnect-1N00 switch_module error 1077877486 1 Linkerror event interval expired
162291 Interconnect-1N02 switch_module error 1077877544 1 Linkerror event interval expired
162735 Interconnect-0N03 switch_module error 1077877671 1 Linkerror event interval expired
163650 Interconnect-1N03 switch_module error 1077878624 1 Linkerror event interval expired
163677 Interconnect-1T01 switch_module error 1077878640 1 Linkerror event interval expired
165107 Interconnect-1N00 switch_module error 1077881440 1 Linkerror event interval expired
173860 Interconnect-0N00 switch_module error 1077892961 1 Linkerror event interval expired
174001 Interconnect-0N00 switch_module error 1077893002 1 Linkerror event interval expired
174925 Interconnect-0N03 switch_module error 1077893261 1 Linkerror event interval expired
176394 Interconnect-1N01 switch_module error 1077893959 1 Linkerror event interval expired
176521 Interconnect-0N00 switch_module error 1077893995 1 Linkerror event interval expired
177328 Interconnect-0N01 switch_module error 1077894231 1 Linkerror event interval expired
178485 Interconnect-1N01 switch_module error 1077896308 1 Linkerror event interval expired


2015-10-18 18:06:44,156 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.hdfs.LeaseRenewer: Failed to renew lease for [DFSClient_NONMAPREDUCE_1537864556_1] for 106 seconds.  Will retry shortly ...
2015-10-18 18:06:45,124 WARN [RMCommunicator Allocator] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:8030 New: msra-sa-41:8030
2015-10-18 18:06:45,156 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:9000 New: msra-sa-41:9000
2015-10-18 18:06:45,156 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.hdfs.LeaseRenewer: Failed to renew lease for [DFSClient_NONMAPREDUCE_1537864556_1] for 107 seconds.  Will retry shortly ...
2015-10-18 18:06:46,124 INFO [RMCommunicator Allocator] org.apache.hadoop.ipc.Client: Retrying connect to server: msra-sa-41:8030. Already tried 0 time(s); retry policy is RetryUpToMaximumCountWithFixedSleep(maxRetries=10, sleepTime=1000 MILLISECONDS)
2015-10-18 18:06:46,124 ERROR [RMCommunicator Allocator] org.apache.hadoop.mapreduce.v2.app.rm.RMContainerAllocator: ERROR IN CONTACTING RM.
2015-10-18 18:06:46,156 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:9000 New: msra-sa-41:9000
2015-10-18 18:06:46,156 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.hdfs.LeaseRenewer: Failed to renew lease for [DFSClient_NONMAPREDUCE_1537864556_1] for 108 seconds.  Will retry shortly ...
2015-10-18 18:06:47,125 WARN [RMCommunicator Allocator] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:8030 New: msra-sa-41:8030
2015-10-18 18:06:47,156 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:9000 New: msra-sa-41:9000
2015-10-18 18:06:47,156 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.hdfs.LeaseRenewer: Failed to renew lease for [DFSClient_NONMAPREDUCE_1537864556_1] for 109 seconds.  Will retry shortly ...
2015-10-18 18:06:48,140 INFO [RMCommunicator Allocator] org.apache.hadoop.ipc.Client: Retrying connect to server: msra-sa-41:8030. Already tried 0 time(s); retry policy is RetryUpToMaximumCountWithFixedSleep(maxRetries=10, sleepTime=1000 MILLISECONDS)
2015-10-18 18:06:48,140 ERROR [RMCommunicator Allocator] org.apache.hadoop.mapreduce.v2.app.rm.RMContainerAllocator: ERROR IN CONTACTING RM.
2015-10-18 18:06:48,203 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:9000 New: msra-sa-41:9000
2015-10-18 18:06:48,203 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.hdfs.LeaseRenewer: Failed to renew lease for [DFSClient_NONMAPREDUCE_1537864556_1] for 110 seconds.  Will retry shortly ...
2015-10-18 18:06:49,140 WARN [RMCommunicator Allocator] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:8030 New: msra-sa-41:8030
2015-10-18 18:06:49,203 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:9000 New: msra-sa-41:9000
2015-10-18 18:06:49,203 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.hdfs.LeaseRenewer: Failed to renew lease for [DFSClient_NONMAPREDUCE_1537864556_1] for 111 seconds.  Will retry shortly ...
2015-10-18 18:06:50,140 INFO [RMCommunicator Allocator] org.apache.hadoop.ipc.Client: Retrying connect to server: msra-sa-41:8030. Already tried 0 time(s); retry policy is RetryUpToMaximumCountWithFixedSleep(maxRetries=10, sleepTime=1000 MILLISECONDS)
2015-10-18 18:06:50,140 ERROR [RMCommunicator Allocator] org.apache.hadoop.mapreduce.v2.app.rm.RMContainerAllocator: ERROR IN CONTACTING RM.
2015-10-18 18:06:50,203 WARN [LeaseRenewer:msrabi@msra-sa-41:9000] org.apache.hadoop.ipc.Client: Address change detected. Old: msra-sa-41/10.190.173.170:9000 New: ms


[10.30 21:19:22] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:19:22] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:19:29] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:19:29] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 1066 bytes (1.04 KB) sent, 3042 bytes (2.97 KB) received, lifetime 00:10
[10.30 21:19:32] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 0 bytes sent, 0 bytes received, lifetime 00:13
[10.30 21:19:34] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 3757 bytes (3.66 KB) sent, 1307 bytes (1.27 KB) received, lifetime 00:15
[10.30 21:19:34] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:20:30] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 0 bytes sent, 0 bytes received, lifetime 00:01
[10.30 21:20:31] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 1978 bytes (1.93 KB) sent, 29237 bytes (28.5 KB) received, lifetime 00:01
[10.30 21:21:33] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:33] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 1217 bytes (1.18 KB) sent, 592 bytes received, lifetime 01:02
[10.30 21:21:33] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 0 bytes sent, 0 bytes received, lifetime <1 sec
[10.30 21:21:33] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 1770 bytes (1.72 KB) sent, 1297 bytes (1.26 KB) received, lifetime 02:12
[10.30 21:21:33] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:33] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:33] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:34] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:34] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:35] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 0 bytes sent, 0 bytes received, lifetime 00:02
[10.30 21:21:35] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:36] chrome.exe - proxy.cse.cuhk.edu.hk:5070 close, 564 bytes sent, 28902 bytes (28.2 KB) received, lifetime <1 sec
[10.30 21:21:36] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[10.30 21:21:48] chrome.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 13:30:34] chrome.exe *64 - www.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 13:30:34] chrome.exe *64 - c.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS


297179 Interconnect-1N01 switch_module error 1081658335 1 Linkerror event interval expired
296875 Interconnect-1T03 switch_module error 1081595628 1 Linkerror event interval expired
296699 Interconnect-1N01 switch_module error 1081573002 1 Linkerror event interval expired
295833 Interconnect-1N01 switch_module error 1081511496 1 Linkerror event interval expired
295149 Interconnect-1T03 switch_module error 1081396012 1 Linkerror event interval expired
295144 Interconnect-1N01 switch_module error 1081395907 1 Linkerror event interval expired
293808 Interconnect-1T01 switch_module error 1081373483 1 Linkerror event interval expired
293029 Interconnect-1N01 switch_module error 1081284631 1 Linkerror event interval expired
292872 Interconnect-1N01 switch_module error 1081271905 1 Linkerror event interval expired
292868 Interconnect-1N01 switch_module error 1081270739 1 Linkerror event interval expired
292481 Interconnect-1T02 switch_module error 1081214271 1 Linkerror event interval expired
291882 Interconnect-1N01 switch_module error 1081122675 1 Linkerror event interval expired
291723 Interconnect-1T01 switch_module error 1081100411 1 Linkerror event interval expired
306222 Interconnect-1N03 switch_module error 1082037261 1 Linkerror event interval expired
306105 Interconnect-1N03 switch_module error 1082037229 1 Linkerror event interval expired
305664 Interconnect-0N01 switch_module error 1082037120 1 Linkerror event interval expired
305641 Interconnect-1N00 switch_module error 1082037113 1 Linkerror event interval expired
305545 Interconnect-0N01 switch_module error 1082037074 1 Linkerror event interval expired
305459 Interconnect-0N01 switch_module error 1082037037 1 Linkerror event interval expired
305441 Interconnect-1N00 switch_module error 1082037026 1 Linkerror event interval expired
303847 Interconnect-1T01 switch_module error 1082033407 1 Linkerror event interval expired
303819 Interconnect-1T03 switch_module error 1082033397 1 Linkerror event interval expired
303756 Interconnect-1T02 switch_module error 1082033374 1 Linkerror event interval expired
303530 Interconnect-1T00 switch_module error 1082033291 1 Linkerror event interval expired
303519 Interconnect-1T03 switch_module error 1082033288 1 Linkerror event interval expired


Dec 10 09:17:26 LabSZ sshd[24612]: Invalid user postgres from 187.141.143.180
Dec 10 09:17:26 LabSZ sshd[24612]: input_userauth_request: invalid user postgres [preauth]
Dec 10 09:17:26 LabSZ sshd[24612]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:17:26 LabSZ sshd[24612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.143.180
Dec 10 09:17:28 LabSZ sshd[24612]: Failed password for invalid user postgres from 187.141.143.180 port 54596 ssh2
Dec 10 09:17:28 LabSZ sshd[24612]: Received disconnect from 187.141.143.180: 11: Bye Bye [preauth]
Dec 10 09:17:31 LabSZ sshd[24614]: reverse mapping checking getaddrinfo for customer-187-141-143-180-sta.uninet-ide.com.mx [187.141.143.180] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 10 09:17:31 LabSZ sshd[24614]: Invalid user nagios from 187.141.143.180
Dec 10 09:17:31 LabSZ sshd[24614]: input_userauth_request: invalid user nagios [preauth]
Dec 10 09:17:31 LabSZ sshd[24614]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:17:31 LabSZ sshd[24614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.143.180
Dec 10 09:17:33 LabSZ sshd[24614]: Failed password for invalid user nagios from 187.141.143.180 port 55761 ssh2
Dec 10 09:17:33 LabSZ sshd[24614]: Received disconnect from 187.141.143.180: 11: Bye Bye [preauth]
Dec 10 09:17:36 LabSZ sshd[24616]: reverse mapping checking getaddrinfo for customer-187-141-143-180-sta.uninet-ide.com.mx [187.141.143.180] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 10 09:17:36 LabSZ sshd[24616]: Invalid user www from 187.141.143.180
Dec 10 09:17:36 LabSZ sshd[24616]: input_userauth_request: invalid user www [preauth]
Dec 10 09:17:36 LabSZ sshd[24616]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:17:36 LabSZ sshd[24616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.143.180
Dec 10 09:17:38 LabSZ sshd[24616]: Failed password for invalid user www from 187.141.143.180 port 56816 ssh2
Dec 10 09:17:38 LabSZ sshd[24616]: Received disconnect from 187.141.143.180: 11: Bye Bye [preauth]
Dec 10 09:17:41 LabSZ sshd[24618]: reverse mapping checking getaddrinfo for customer-187-141-143-180-sta.uninet-ide.com.mx [187.141.143.180] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 10 09:17:41 LabSZ sshd[24618]: Invalid user abc from 187.141.143.180
Dec 10 09:17:41 LabSZ sshd[24618]: input_userauth_request: invalid user abc [preauth]
Dec 10 09:17:41 LabSZ sshd[24618]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:17:41 LabSZ sshd[24618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.143.180

Explanation: System logs from OpenSSH containing authentication failure events. Found 3 security-relevant log entries from 1 unique IP addresses. These logs may reveal information about authentication attempts and network access patterns.


nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:09:58.744 2931 INFO nova.compute.manager [req-ea160a5d-14a4-4637-b413-119173854b09 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] [instance: bf8c824d-f099-4433-a41e-e3da7578262e] Took 1.00 seconds to destroy the instance on the hypervisor.
nova-api.log.1.2017-05-16_13:53:08 2017-05-16 00:09:59.202 25746 INFO nova.osapi_compute.wsgi.server [req-ee8bc8ba-9265-4280-9215-dbe000a41209 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] 10.11.10.1 "GET /v2/54fadb412c4e40cdbaed9335e4c35a9e/servers/detail HTTP/1.1" status: 200 len: 1874 time: 0.2280791
nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:09:59.276 2931 INFO nova.compute.manager [req-ea160a5d-14a4-4637-b413-119173854b09 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] [instance: bf8c824d-f099-4433-a41e-e3da7578262e] Took 0.53 seconds to deallocate network for instance.
nova-api.log.1.2017-05-16_13:53:08 2017-05-16 00:10:00.303 25746 INFO nova.osapi_compute.wsgi.server [req-4895c258-b2f8-488f-a2a3-4fae63982e48 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] 10.11.10.1 "GET /v2/54fadb412c4e40cdbaed9335e4c35a9e/servers/detail HTTP/1.1" status: 200 len: 211 time: 0.0968180
nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:10:00.349 2931 WARNING nova.virt.libvirt.imagecache [req-addc1839-2ed5-4778-b57e-5854eb7b8b09 - - - - -] Unknown base file: /var/lib/nova/instances/_base/a489c868f0c37da93b76227c91bb03908ac0e742
nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:10:00.349 2931 INFO nova.virt.libvirt.imagecache [req-addc1839-2ed5-4778-b57e-5854eb7b8b09 - - - - -] Removable base files: /var/lib/nova/instances/_base/a489c868f0c37da93b76227c91bb03908ac0e742
nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:10:00.350 2931 INFO nova.virt.libvirt.imagecache [req-addc1839-2ed5-4778-b57e-5854eb7b8b09 - - - - -] Removing base or swap file: /var/lib/nova/instances/_base/a489c868f0c37da93b76227c91bb03908ac0e742
nova-api.log.1.2017-05-16_13:53:08 2017-05-16 00:10:01.301 25746 INFO nova.api.openstack.wsgi [req-a237c1a8-c823-4154-927b-ebcd741f6fbf f7b8d1f1d4d44643b07fa10ca7d021fb e9746973ac574c6b8a9e8857f56a7608 - - -] HTTP exception thrown: No instances found for any event
nova-api.log.1.2017-05-16_13:53:08 2017-05-16 00:10:01.303 25746 INFO nova.osapi_compute.wsgi.server [req-a237c1a8-c823-4154-927b-ebcd741f6fbf f7b8d1f1d4d44643b07fa10ca7d021fb e9746973ac574c6b8a9e8857f56a7608 - - -] 10.11.10.1 "POST /v2/e9746973ac574c6b8a9e8857f56a7608/os-server-external-events HTTP/1.1" status: 404 len: 296 time: 0.0892961
nova-api.log.1.2017-05-16_13:53:08 2017-05-16 00:10:10.771 25746 INFO nova.osapi_compute.wsgi.server [req-9118475d-6e72-48fa-9dee-e6b7d957dcd6 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] 10.11.10.1 "POST /v2/54fadb412c4e40cdbaed9335e4c35a9e/servers HTTP/1.1" status: 202 len: 733 time: 0.4532349
nova-api.log.1.2017-05-16_13:53:08 2017-05-16 00:10:10.965 25746 INFO nova.osapi_compute.wsgi.server [req-fbfbe68a-3fb6-4132-b139-e707f5534120 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] 10.11.10.1 "GET /v2/54fadb412c4e40cdbaed9335e4c35a9e/servers/detail HTTP/1.1" status: 200 len: 1583 time: 0.1882150
nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:10:11.073 2931 INFO nova.compute.claims [req-9118475d-6e72-48fa-9dee-e6b7d957dcd6 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] [instance: be793e89-2cc3-4f99-9884-9c6a624a84bc] Attempting claim: memory 2048 MB, disk 20 GB, vcpus 1 CPU
nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:10:11.074 2931 INFO nova.compute.claims [req-9118475d-6e72-48fa-9dee-e6b7d957dcd6 113d3a99c3da401fbd62cc2caa5b96d2 54fadb412c4e40cdbaed9335e4c35a9e - - -] [instance: be793e89-2cc3-4f99-9884-9c6a624a84bc] Total memory: 64172 MB, used: 512.00 MB
nova-compute.log.1.2017-05-16_13:55:31 2017-05-16 00:10:11.075 2931 INFO nova.c

Explanation: Standard OpenStack system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3118401~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_44469550 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2585542~31bf3856ad364e35~amd64~~6.1.1.3, ApplicableState: 80, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_44629559 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2931356~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_45239594 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2900986~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_45309598 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2985461~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_46439663 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3092601~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_46879688 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2836942~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 80, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_46979694 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2937610~31bf3856ad364e35~amd64~~6.1.1.3, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_48029754 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3035126~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_48659790 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3076895~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 80, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_48769796 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB3021674~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_48809798 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2919469~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-28 04:30:39, Info                  CBS    Session: 30546174_49059813 initialized by client WindowsUpdateAgent.
2016-09-28 04:30:39, Info                  CBS    Read out cached package applicability for package: Package_for_KB2823180~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 0, CurrentState:0


2016-09-29 02:04:02, Info                  CBS    Session: 30546354_2986352990 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:02, Info                  CBS    Read out cached package applicability for package: Package_for_KB3138612~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:03, Info                  CBS    Session: 30546354_2988103090 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:03, Info                  CBS    Read out cached package applicability for package: Microsoft-Hyper-V-Integration-Services-Package~31bf3856ad364e35~amd64~~6.3.9600.17681, ApplicableState: 112, CurrentState:0
2016-09-29 02:04:03, Info                  CBS    Session: 30546354_2989623177 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:03, Info                  CBS    Read out cached package applicability for package: Package_for_KB3107998~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:04, Info                  CBS    Session: 30546354_2999883764 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:04, Info                  CBS    Read out cached package applicability for package: Package_for_KB3071756~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:04, Info                  CBS    Session: 30546354_3005294074 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:04, Info                  CBS    Read out cached package applicability for package: Package_for_KB2840631~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:04, Info                  CBS    Session: 30546354_3007094176 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:04, Info                  CBS    Read out cached package applicability for package: Package_for_KB2631813~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:04, Info                  CBS    Session: 30546354_3007214183 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:04, Info                  CBS    Read out cached package applicability for package: Package_for_KB2640148~31bf3856ad364e35~amd64~~6.1.2.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:05, Info                  CBS    Session: 30546354_3008284245 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:05, Info                  CBS    Read out cached package applicability for package: Package_for_KB3093513~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:05, Info                  CBS    Session: 30546354_3008494257 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:05, Info                  CBS    Read out cached package applicability for package: Package_for_KB2894844~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:05, Info                  CBS    Session: 30546354_3009694325 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:05, Info                  CBS    Read out cached package applicability for package: Package_for_KB3108670~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:07, Info                  CBS    Session: 30546354_3037265902 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:07, Info                  CBS    Read out cached package applicability for package: Package_for_KB2547666~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112
2016-09-29 02:04:08, Info                  CBS    Session: 30546354_3041116122 initialized by client WindowsUpdateAgent.
2016-09-29 02:04:08, Info                  CBS    Read out cached package applicability for package: Package_for_KB2798162~31bf3856ad364e35~amd64~~6.1.1.5, ApplicableState: 80, CurrentState:112
2016-09-29 02:04:08, Info                  CBS    Session: 30546354_3044096293 initialized by client WindowsUpdateAgent.


[07.26 14:45:39] chrome.exe *64 - suggestion.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:39] chrome.exe *64 - suggestion.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:39] chrome.exe *64 - sclick.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:40] chrome.exe *64 - ss.bdimg.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:41] chrome.exe *64 - www.baidu.com:80 close, 9987 bytes (9.75 KB) sent, 148343 bytes (144 KB) received, lifetime 00:03
[07.26 14:45:43] chrome.exe *64 - dj1.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:49] chrome.exe *64 - t12.baidu.com:80 close, 0 bytes sent, 0 bytes received, lifetime 00:11
[07.26 14:45:49] chrome.exe *64 - t12.baidu.com:80 close, 0 bytes sent, 0 bytes received, lifetime 00:11
[07.26 14:45:50] chrome.exe *64 - ss0.baidu.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:50] chrome.exe *64 - hpd.baidu.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:52] chrome.exe *64 - ubmcmm.baidustatic.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:45:52] chrome.exe *64 - eclick.baidu.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:46:05] chrome.exe *64 - dup.baidustatic.com:443 close, 333 bytes sent, 3697 bytes (3.61 KB) received, lifetime 00:14
[07.26 14:46:13] chrome.exe *64 - dj1.baidu.com:80 close, 1369 bytes (1.33 KB) sent, 289 bytes received, lifetime 00:30
[07.26 14:50:09] Dropbox.exe - client-lb.dropbox.com:443 close, 0 bytes sent, 0 bytes received, lifetime <1 sec
[07.26 14:50:44] WeChat.exe - short.weixin.qq.com:80 close, 785 bytes sent, 145 bytes received, lifetime <1 sec
[07.26 14:51:20] chrome.exe *64 - clients5.google.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:21] chrome.exe *64 - www.google.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:22] chrome.exe *64 - s1.bdstatic.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:22] chrome.exe *64 - t12.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:24] chrome.exe *64 - ss.bdimg.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:25] chrome.exe *64 - i7.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:25] chrome.exe *64 - i7.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:26] chrome.exe *64 - www.evernote.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 14:51:31] chrome.exe *64 - dj1.baidu.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS


2015-07-29 19:20:16,690 - ERROR [LearnerHandler-/10.10.34.12:59455:LearnerHandler@562] - Unexpected exception causing shutdown while sock still open
2015-07-29 19:20:16,794 - WARN  [LearnerHandler-/10.10.34.13:57580:LearnerHandler@575] - ******* GOODBYE /10.10.34.13:57580 ********
2015-07-29 19:20:36,704 - ERROR [LearnerHandler-/10.10.34.12:59480:LearnerHandler@562] - Unexpected exception causing shutdown while sock still open
2015-07-29 19:20:46,814 - ERROR [LearnerHandler-/10.10.34.13:57617:LearnerHandler@562] - Unexpected exception causing shutdown while sock still open
2015-07-29 19:20:56,605 - ERROR [LearnerHandler-/10.10.34.11:52814:LearnerHandler@562] - Unexpected exception causing shutdown while sock still open
2015-07-29 19:20:56,608 - WARN  [LearnerHandler-/10.10.34.11:52818:LearnerHandler@575] - ******* GOODBYE /10.10.34.11:52818 ********
2015-07-29 19:21:16,619 - WARN  [LearnerHandler-/10.10.34.11:52844:LearnerHandler@575] - ******* GOODBYE /10.10.34.11:52844 ********
2015-07-29 19:21:16,835 - WARN  [LearnerHandler-/10.10.34.13:57653:LearnerHandler@575] - ******* GOODBYE /10.10.34.13:57653 ********
2015-07-29 19:21:26,625 - ERROR [LearnerHandler-/10.10.34.11:52855:LearnerHandler@562] - Unexpected exception causing shutdown while sock still open
2015-07-29 19:21:31,738 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:21:31,836 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.12:54788
2015-07-29 19:21:35,084 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:21:35,284 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:42624
2015-07-29 19:21:35,292 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:21:38,426 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:21:38,625 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:42634
2015-07-29 19:21:38,626 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:21:41,969 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:21:41,976 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:21:41,976 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:21:45,107 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@688] - Send worker leaving thread
2015-07-29 19:21:45,109 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@688] - Send worker leaving thread
2015-07-29 19:21:45,200 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.12:54830
2015-07-29 19:21:48,542 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:21:48,545 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue

Explanation: Standard Zookeeper system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


2015-07-29 19:36:43,049 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:33225
2015-07-29 19:36:43,054 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:36:49,620 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@688] - Send worker leaving thread
2015-07-29 19:36:49,623 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:36:49,730 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:33250
2015-07-29 19:36:49,735 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:33255
2015-07-29 19:36:52,879 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 1, error =
2015-07-29 19:36:53,074 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:33266
2015-07-29 19:36:56,220 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:36:56,302 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.12:51296
2015-07-29 19:36:56,303 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 1, error =
2015-07-29 19:36:59,746 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:33282
2015-07-29 19:37:02,901 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:37:09,774 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 1, error =
2015-07-29 19:37:12,919 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:37:12,920 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.11:49518
2015-07-29 19:37:13,114 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:37:19,676 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:37:19,683 - INFO  [/10.10.34.11:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.12:51380
2015-07-29 19:52:04,792 - INFO  [NIOServerCxn.Factory:0.0.0.0/0.0.0.0:2181:NIOServerCnxn@1001] - Closed socket connection for client /10.10.34.18:42772 which had sessionid 0x14ed93111f20005
2015-07-29 19:52:05,118 - WARN  [NIOServerCxn.Factory:0.0.0.0/0.0.0.0:2181:NIOServerCnxn@349] - caught end of stream exception
2015-07-29 19:52:09,519 - INFO  [NIOServerCxn.Factory:0.0.0.0/0.0.0.0:2181:NIOServerCnxn@1001] - Closed socket connection for client /10.10.34.12:45542 which had sessionid 0x14ed93111f20002
2015-07-29 19:54:13,615 - INFO  [NIOServerCxn.Factory:0.0.0.0/0.0.0.0:2181:ZooKeeperServer@832] - Client attempting to renew session 0x24ed93119420016 at /10.10.34.13:37115
2015-07-29 19:54:45,337 - INFO  [NIOServerCxn.Factory:0.0.0.0/0.0.0.0:2181:NIOServerCnxn@1001] - Closed socket connection for client /10.10.34.13:37106 which had sessionid 0x14ed93111f20010
2015-07-29 21:01:41,504 - INFO  [NIOServerCxn.Factory:0.0.0.0/0.0.0.0:2181:ZooKeeperServer@839] - Client attempting to establish new session at /10.10.34.19:33425


20171223-22:19:9:859|Step_LSC|30002312|onExtend:1514038750000 2 0 4
20171223-22:19:10:149|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514038680000##7126##548880##8661##16256##27393971
20171223-22:19:10:150|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514038680000##7128##548885##8661##16256##27394469
20171223-22:19:10:160|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=129366
20171223-22:19:10:164|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:19:10:165|Step_StandReportReceiver|30002312|REPORT : 7128 5089 152681 240
20171223-22:19:10:348|Step_LSC|30002312|onStandStepChanged 3702
20171223-22:19:10:362|Step_LSC|30002312|onExtend:1514038751000 2 0 4
20171223-22:19:10:650|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514038680000##7128##548885##8661##16256##27394469
20171223-22:19:10:650|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514038680000##7130##548890##8661##16256##27394969
20171223-22:19:10:658|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=129409
20171223-22:19:10:661|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:19:10:664|Step_StandReportReceiver|30002312|REPORT : 7130 5090 152724 240
20171223-22:19:10:848|Step_LSC|30002312|onStandStepChanged 3704
20171223-22:19:10:858|Step_LSC|30002312|onExtend:1514038751000 2 0 4
20171223-22:19:11:149|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514038680000##7130##548890##8661##16256##27394969
20171223-22:19:11:150|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514038680000##7132##548895##8661##16256##27395468
20171223-22:19:11:160|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=129452
20171223-22:19:11:164|Step_ExtSDM|30002312|calculateAltitudeWithCache totalAltitude=240
20171223-22:19:11:164|Step_StandReportReceiver|30002312|REPORT : 7132 5092 152767 240
20171223-22:19:11:349|Step_LSC|30002312|onStandStepChanged 3707
20171223-22:19:11:358|Step_LSC|30002312|onExtend:1514038752000 3 0 4
20171223-22:19:11:650|Step_SPUtils|30002312| getTodayTotalDetailSteps = 1514038680000##7132##548895##8661##16256##27395468
20171223-22:19:11:651|Step_SPUtils|30002312|setTodayTotalDetailSteps=1514038680000##7135##548900##8661##16256##27395969
20171223-22:19:11:658|Step_ExtSDM|30002312|calculateCaloriesWithCache totalCalories=129516


Dec 10 09:12:27 LabSZ sshd[24455]: PAM 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.190.58.151
Dec 10 09:12:27 LabSZ sshd[24485]: error: Received disconnect from 103.99.0.122: 14: No more user authentication methods available. [preauth]
Dec 10 09:12:28 LabSZ sshd[24488]: Invalid user monitor from 103.99.0.122
Dec 10 09:12:28 LabSZ sshd[24488]: input_userauth_request: invalid user monitor [preauth]
Dec 10 09:12:28 LabSZ sshd[24488]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:12:28 LabSZ sshd[24488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.0.122
Dec 10 09:12:30 LabSZ sshd[24488]: Failed password for invalid user monitor from 103.99.0.122 port 59812 ssh2
Dec 10 09:12:30 LabSZ sshd[24488]: error: Received disconnect from 103.99.0.122: 14: No more user authentication methods available. [preauth]
Dec 10 09:12:30 LabSZ sshd[24490]: Invalid user ftpuser from 103.99.0.122
Dec 10 09:12:30 LabSZ sshd[24490]: input_userauth_request: invalid user ftpuser [preauth]
Dec 10 09:12:30 LabSZ sshd[24490]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:12:30 LabSZ sshd[24490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.0.122
Dec 10 09:12:32 LabSZ sshd[24490]: Failed password for invalid user ftpuser from 103.99.0.122 port 62891 ssh2
Dec 10 09:12:32 LabSZ sshd[24490]: error: Received disconnect from 103.99.0.122: 14: No more user authentication methods available. [preauth]
Dec 10 09:12:33 LabSZ sshd[24492]: Invalid user pi from 103.99.0.122
Dec 10 09:12:33 LabSZ sshd[24492]: input_userauth_request: invalid user pi [preauth]
Dec 10 09:12:33 LabSZ sshd[24492]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:12:33 LabSZ sshd[24492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.0.122
Dec 10 09:12:35 LabSZ sshd[24492]: Failed password for invalid user pi from 103.99.0.122 port 49289 ssh2
Dec 10 09:12:35 LabSZ sshd[24492]: error: Received disconnect from 103.99.0.122: 14: No more user authentication methods available. [preauth]
Dec 10 09:12:35 LabSZ sshd[24494]: Invalid user PlcmSpIp from 103.99.0.122
Dec 10 09:12:35 LabSZ sshd[24494]: input_userauth_request: invalid user PlcmSpIp [preauth]
Dec 10 09:12:35 LabSZ sshd[24494]: pam_unix(sshd:auth): check pass; user unknown
Dec 10 09:12:35 LabSZ sshd[24494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.0.122
Dec 10 09:12:37 LabSZ sshd[24494]: Failed password for invalid user PlcmSpIp from 103.99.0.122 port 51966 ssh2

Explanation: System logs from OpenSSH containing authentication failure events. Found 3 security-relevant log entries from 2 unique IP addresses. These logs may reveal information about authentication attempts and network access patterns.


Jul  2 20:15:26 calvisitor-10-105-163-202 kernel[0]: IOThunderboltSwitch<0>(0x0)::listenerCallback - Thunderbolt HPD packet for route = 0x0 port = 11 unplug = 0
Jul  2 20:15:26 calvisitor-10-105-163-202 kernel[0]: AppleCamIn::wakeEventHandlerThread
Jul  2 20:22:06 calvisitor-10-105-163-202 Dock[307]: -[UABestAppSuggestionManager notifyBestAppChanged:type:options:bundleIdentifier:activityType:dynamicIdentifier:when:confidence:deviceName:deviceIdentifier:deviceType:] (null) UASuggestedActionType=0 (null)/(null) opts=(null) when=2017-07-03 03:22:06 +0000 confidence=1 from=(null)/(null) (UABestAppSuggestionManager.m #319)
Jul  2 20:22:38 calvisitor-10-105-163-202 WindowServer[184]: device_generate_lock_screen_screenshot: authw 0x7fa823962400(2000)[0, 0, 1440, 900] shield 0x7fa82d372000(2001), dev [1440,900]
Jul  2 20:43:36 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Active'
Jul  2 20:50:47 calvisitor-10-105-163-202 ksfetch[32776]: 2017-07-02 20:50:47.457 ksfetch[32776/0x7fff79824000] [lvl=2] KSHelperReceiveAllData() KSHelperTool read 1926 bytes from stdin.
Jul  2 21:17:07 calvisitor-10-105-163-202 com.apple.WebKit.WebContent[32778]: [21:17:07.529] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.207/Prototypes/LegibleOutput/FigAgglomerator.c line 92
Jul  2 21:43:56 calvisitor-10-105-163-202 locationd[82]: Location icon should now be in state 'Inactive'
Jul  2 21:44:16 calvisitor-10-105-163-202 Safari[9852]: tcp_connection_tls_session_error_callback_imp 2103 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22
Jul  2 21:46:49 calvisitor-10-105-163-202 syslogd[44]: ASL Sender Statistics
Jul  2 21:48:53 calvisitor-10-105-163-202 sharingd[30299]: 21:48:53.041 : BTLE scanner Powered Off
Jul  2 22:09:17 calvisitor-10-105-163-202 WindowServer[184]: send_datagram_available_ping: pid 445 failed to act on a ping it dequeued before timing out.
Jul  2 22:24:03 authorMacBook-Pro com.apple.geod[30311]: PBRequester failed with Error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo={NSUnderlyingError=0x7fe13512cf70 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "The Internet connection appears to be offline." UserInfo={NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12, NSLocalizedDescription=The Internet connection appears to be offline.}}, NSErrorFailingURLStringKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, NSErrorFailingURLKey=https://gsp-ssl.ls.apple.com/dispatcher.arpc, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.}
Jul  2 22:24:03 authorMacBook-Pro kernel[0]: ARPT: 669592.164786: AQM agg params 0xfc0 maxlen hi/lo 0x0 0xffff minlen 0x0 adjlen 0x0
Jul  2 22:24:04 authorMacBook-Pro corecaptured[32877]: Received Capture Event
Jul  2 22:24:14 authorMacBook-Pro UserEventAgent[43]: Captive: CNPluginHandler en0: Evaluating
Jul  2 22:24:15 authorMacBook-Pro kernel[0]: Sandbox: QQ(10018) deny(1) mach-lookup com.apple.networking.captivenetworksupport
Jul  2 22:24:18 authorMacBook-Pro com.apple.AddressBook.InternetAccountsBridge[32885]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1
Jul  2 22:24:25 authorMacBook-Pro kernel[0]: Sandbox: com.apple.Addres(32885) deny(1) network-outbound /private/var/run/mDNSResponder
Jul  2 22:24:43 authorMacBook-Pro corecaptured[32877]: CCFile::captureLogRun() Exiting CCFile::captureLogRun
Jul  2 22:32:34 authorMacBook-Pro com.apple.WebKit.WebContent[32778]: [22:32:34.846] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
Jul  2 22:44:55 authorMacBook-Pro locationd[82]: Location icon should now be in state 'Active'
Jul  2 23:21:

Explanation: Standard Mac system log output. Contains operational log messages with no sensitive credentials, PII, or security-critical information.


[Sun Dec 04 19:51:54 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 19:51:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 19:51:54 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 19:51:54 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 19:51:54 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1851 in scoreboard slot 6
[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1852 in scoreboard slot 9
[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1853 in scoreboard slot 7
[Sun Dec 04 19:56:51 2005] [notice] jk2_init() Found child 1850 in scoreboard slot 8
[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 19:56:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 19:56:53 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 20:01:00 2005] [notice] jk2_init() Found child 1861 in scoreboard slot 8
[Sun Dec 04 20:01:00 2005] [notice] jk2_init() Found child 1862 in scoreboard slot 6
[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1867 in scoreboard slot 8
[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1864 in scoreboard slot 7
[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1868 in scoreboard slot 6
[Sun Dec 04 20:01:30 2005] [notice] jk2_init() Found child 1863 in scoreboard slot 9
[Sun Dec 04 20:01:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 20:01:37 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties


2015-07-29 19:24:48,888 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:24:48,958 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:24:52,310 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:24:52,417 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@688] - Send worker leaving thread
2015-07-29 19:24:55,555 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.11:58823
2015-07-29 19:24:55,570 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:24:55,669 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@688] - Send worker leaving thread
2015-07-29 19:24:58,991 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:24:59,099 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.13:43358
2015-07-29 19:25:02,441 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:25:02,441 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:25:05,591 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.11:58865
2015-07-29 19:25:05,661 - INFO  [/10.10.34.12:3888:QuorumCnxManager$Listener@493] - Received connection request /10.10.34.12:55548
2015-07-29 19:25:05,783 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:25:09,110 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:25:09,122 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:25:12,262 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue
2015-07-29 19:25:15,614 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:25:15,695 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:25:15,711 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:25:15,802 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@762] - Connection broken for id 188978561024, my id = 2, error =
2015-07-29 19:25:15,803 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:25:19,035 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:25:25,630 - WARN  [RecvWorker:188978561024:QuorumCnxManager$RecvWorker@765] - Interrupting SendWorker
2015-07-29 19:25:29,074 - WARN  [SendWorker:188978561024:QuorumCnxManager$SendWorker@679] - Interrupted while waiting for message on queue


[Sun Dec 04 06:17:55 2005] [notice] jk2_init() Found child 32443 in scoreboard slot 8
[Sun Dec 04 06:17:55 2005] [notice] jk2_init() Found child 32444 in scoreboard slot 9
[Sun Dec 04 06:18:08 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:18:08 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:18:11 2005] [error] mod_jk child workerEnv in error state 7
[Sun Dec 04 06:18:11 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 06:18:12 2005] [notice] jk2_init() Found child 32445 in scoreboard slot 10
[Sun Dec 04 06:18:23 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:18:31 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 06:18:41 2005] [notice] jk2_init() Found child 32447 in scoreboard slot 7
[Sun Dec 04 06:18:39 2005] [notice] jk2_init() Found child 32446 in scoreboard slot 6
[Sun Dec 04 06:18:40 2005] [notice] jk2_init() Found child 32448 in scoreboard slot 8
[Sun Dec 04 06:18:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:18:53 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:18:55 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 06:18:55 2005] [error] mod_jk child workerEnv in error state 7
[Sun Dec 04 06:19:05 2005] [notice] jk2_init() Found child 32449 in scoreboard slot 9
[Sun Dec 04 06:19:15 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:19:19 2005] [notice] jk2_init() Found child 32450 in scoreboard slot 10
[Sun Dec 04 06:19:18 2005] [error] mod_jk child workerEnv in error state 6
[Sun Dec 04 06:19:19 2005] [notice] jk2_init() Found child 32452 in scoreboard slot 7
[Sun Dec 04 06:19:19 2005] [notice] jk2_init() Found child 32451 in scoreboard slot 6
[Sun Dec 04 06:19:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:19:31 2005] [notice] workerEnv.init() ok /etc/httpd/conf/workers2.properties
[Sun Dec 04 06:19:34 2005] [error] mod_jk child workerEnv in error state 6


081111 075114 23523 INFO dfs.DataNode$PacketResponder: PacketResponder 1 for block blk_703049809255765647 terminating
081111 075129 23397 INFO dfs.DataNode$DataXceiver: Receiving block blk_-7460532841070848624 src: /10.250.15.67:55076 dest: /10.250.15.67:50010
081111 075151 23925 INFO dfs.DataNode$DataXceiver: Receiving block blk_-7623732795385061487 src: /10.251.122.65:40641 dest: /10.251.122.65:50010
081111 075158 33 INFO dfs.FSNamesystem: BLOCK* NameSystem.allocateBlock: /user/root/rand6/_temporary/_task_200811101024_0013_m_002009_1/part-02009. blk_-7367386750462511488
081111 075212 30 INFO dfs.FSNamesystem: BLOCK* NameSystem.addStoredBlock: blockMap updated: 10.251.111.228:50010 is added to blk_-1237539644269634790 size 67108864
081111 075317 23851 INFO dfs.DataNode$DataXceiver: Receiving block blk_7713504868233504097 src: /10.251.127.191:36437 dest: /10.251.127.191:50010
081111 075345 29 INFO dfs.FSNamesystem: BLOCK* NameSystem.addStoredBlock: blockMap updated: 10.251.65.203:50010 is added to blk_8005746184358076390 size 67108864
081111 075408 23362 INFO dfs.DataNode$PacketResponder: Received block blk_955083461510572332 of size 41287838 from /10.251.107.242
081111 075537 23945 INFO dfs.DataNode$PacketResponder: PacketResponder 0 for block blk_283922378823540530 terminating
081111 075616 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_4471044334742081825 is added to invalidSet of 10.250.15.198:50010
081111 075619 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_-3671953658029337449 is added to invalidSet of 10.250.14.143:50010
081111 075623 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_-75893538967225087 is added to invalidSet of 10.250.15.198:50010
081111 075626 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_805187982300776163 is added to invalidSet of 10.251.73.188:50010
081111 075628 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_4631777956354958682 is added to invalidSet of 10.251.30.134:50010
081111 075629 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_-7595375726951801956 is added to invalidSet of 10.251.122.79:50010
081111 075631 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_-4681205519208992498 is added to invalidSet of 10.250.6.191:50010
081111 075632 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_5702487846232575705 is added to invalidSet of 10.250.14.38:50010
081111 075634 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_4834069779372284635 is added to invalidSet of 10.251.71.97:50010
081111 075636 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_3735517274901501821 is added to invalidSet of 10.250.6.4:50010
081111 075637 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_5018797996887008111 is added to invalidSet of 10.251.89.155:50010
081111 075638 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_-566178736644429906 is added to invalidSet of 10.251.70.37:50010
081111 075640 28 INFO dfs.FSNamesystem: BLOCK* NameSystem.delete: blk_-8121498678081035000 is added to invalidSet of 10.250.11.100:50010
081111 075657 23748 INFO dfs.DataNode$DataXceiver: Receiving block blk_7996616083434301906 src: /10.251.123.195:53947 dest: /10.251.123.195:50010
081111 075727 19 INFO dfs.FSDataset: Deleting block blk_6888300867578983331 file /mnt/hadoop/dfs/data/current/subdir46/blk_6888300867578983331
081111 075743 23596 INFO dfs.DataNode$PacketResponder: PacketResponder 0 for block blk_7625391056418655045 terminating


[07.26 15:35:16] chrome.exe *64 - notifications.google.com:443 close, 19334 bytes (18.8 KB) sent, 8031 bytes (7.84 KB) received, lifetime 09:21
[07.26 15:35:27] chrome.exe *64 - collector.githubapp.com:443 close, 0 bytes sent, 0 bytes received, lifetime 00:16
[07.26 15:35:28] chrome.exe *64 - live.github.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 15:35:42] chrome.exe *64 - data.grammarly.com:443 close, 1277 bytes (1.24 KB) sent, 3833 bytes (3.74 KB) received, lifetime 00:11
[07.26 15:35:43] chrome.exe *64 - github.com:443 close, 9626 bytes (9.40 KB) sent, 287127 bytes (280 KB) received, lifetime 00:34
[07.26 15:36:25] chrome.exe *64 - github.com:443 close, 0 bytes sent, 0 bytes received, lifetime 00:30
[07.26 15:36:28] chrome.exe *64 - ssl.gstatic.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 15:38:02] chrome.exe *64 - 13.client-channel.google.com:443 close, 474 bytes sent, 4464 bytes (4.35 KB) received, lifetime 01:30
[07.26 15:38:33] MobaXterm.exe - 183.62.156.108:22 open through proxy socks.cse.cuhk.edu.hk:5070 SOCKS5
[07.26 15:39:37] git-remote-https.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 15:40:32] chrome.exe *64 - people-pa.clients6.google.com:443 close, 5267 bytes (5.14 KB) sent, 17802 bytes (17.3 KB) received, lifetime 04:01
[07.26 15:41:36] chrome.exe *64 - assets-cdn.github.com:443 close, 1227 bytes (1.19 KB) sent, 4890 bytes (4.77 KB) received, lifetime 06:19
[07.26 15:42:02] chrome.exe *64 - lh3.googleusercontent.com:443 close, 2694 bytes (2.63 KB) sent, 8050 bytes (7.86 KB) received, lifetime 07:03
[07.26 15:43:25] YodaoDict.exe - icauh.youdao.com:80 close, 413 bytes sent, 534 bytes received, lifetime 00:05
[07.26 15:44:44] GitHub.exe - api.github.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 15:49:55] GitHub.exe - api.github.com:443 close, 797 bytes sent, 4814 bytes (4.70 KB) received, lifetime 00:11
[07.26 15:52:01] WeChat.exe - short.weixin.qq.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 15:53:17] WeChat.exe - mmbiz.qpic.cn:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 15:55:21] GitHub.exe - api.github.com:443 close, 797 bytes sent, 4814 bytes (4.70 KB) received, lifetime 00:11
[07.26 15:55:32] chrome.exe *64 - www.evernote.com:443 close, 2487 bytes (2.42 KB) sent, 2361 bytes (2.30 KB) received, lifetime 04:00
[07.26 15:56:57] chrome.exe *64 - safebrowsing.googleapis.com:443 close, 1848 bytes (1.80 KB) sent, 3191 bytes (3.11 KB) received, lifetime 04:00
[07.26 16:00:23] git-remote-https.exe - proxy.cse.cuhk.edu.hk:5070 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 16:00:34] GitHub.exe - api.github.com:443 close, 781 bytes sent, 6147 bytes (6.00 KB) received, lifetime 00:10
[07.26 16:01:10] GoogleUpdate.exe - tools.google.com:443 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS
[07.26 16:03:33] WeChat.exe - short.weixin.qq.com:80 open through proxy proxy.cse.cuhk.edu.hk:5070 HTTPS


2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-09-28 04:30:33, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-09-28 04:30:33, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]