NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

1_0_1's avatar
1_0_1
Aspirant
Oct 04, 2014

Frontview webpage loading partial

I am unable to log onto my old ReadyNAS Pro 4 anymore after doing a factory reset. I can configure the unit via RAIDar but once I want to login to the web interface it gives a partial loaded page. It basically shows the Frontview template but does not show any buttons except the top right three.

I have tried the following with no success:

- Changed browser type and versions
- Changed computers and operating systems
- Upgraded and downgraded via the USB recovery with almost all versions
- Did several factory resets and OS re-install
- Checked disk
- Checked memory
- Formated drives
- Changed network ports on the unit
- Cannot see anything wrong in the frontview error log via tech support except some missing files like robot.txt from the frontview resource directory

I contact Netgear support and they said the device is EOD and I have to buy a support contract which is way to expensive for a normal person.

In tech support mode I use the following to get to the "live" disk to check for errors:

echo DEVICE partitions > /etc/mdadm.conf
mdadm --examine --scan >> /etc/mdadm.conf
mdadm --assemble --scan
mount /dev/md0 /mnt


The pages not found is me trying to test but seems all is fine in the error.log?

# cat error.log
[Sat Oct 04 01:46:11 2014] [notice] Apache/2.2.6 (Debian) mod_ssl/2.2.6 OpenSSL/0.9.8c DAV/2 mod_apreq2-20051231/2.6.0 mod_perl/2.0.2 Perl/v5.8.8 configured -- resuming normal operations
[Sat Oct 04 02:05:08 2014] [notice] caught SIGTERM, shutting down
[Sat Oct 04 03:13:56 2014] [warn] RSA server certificate CommonName (CN) `192.168.1.5' does NOT match server name!?
[Sat Oct 04 03:13:57 2014] [warn] RSA server certificate CommonName (CN) `192.168.1.5' does NOT match server name!?
[Sat Oct 04 03:13:57 2014] [notice] Apache/2.2.6 (Debian) mod_ssl/2.2.6 OpenSSL/0.9.8c DAV/2 mod_apreq2-20051231/2.6.0 mod_perl/2.0.2 Perl/v5.8.8 configured -- resuming normal operations
[Sat Oct 04 03:24:35 2014] [error] [client 192.168.1.4] File does not exist: /frontview/ui/resource/html/default
[Sat Oct 04 03:24:43 2014] [error] [client 192.168.1.4] File does not exist: /frontview/ui/resource/html/test
[Sat Oct 04 03:31:50 2014] [error] [client 192.168.1.4] File does not exist: /frontview/ui/resource/html/~
[Sat Oct 04 03:31:56 2014] [error] [client 192.168.1.4] File does not exist: /frontview/ui/resource/html/~
[Sat Oct 04 03:32:03 2014] [error] [client 192.168.1.4] File does not exist: /frontview/ui/resource/html/default.htm
[Sat Oct 04 03:32:50 2014] [notice] caught SIGTERM, shutting down
[Sat Oct 04 03:34:02 2014] [warn] RSA server certificate CommonName (CN) `192.168.1.5' does NOT match server name!?
[Sat Oct 04 03:34:03 2014] [warn] RSA server certificate CommonName (CN) `192.168.1.5' does NOT match server name!?
[Sat Oct 04 03:34:03 2014] [notice] Apache/2.2.6 (Debian) mod_ssl/2.2.6 OpenSSL/0.9.8c DAV/2 mod_apreq2-20051231/2.6.0 mod_perl/2.0.2 Perl/v5.8.8 configured -- resuming normal operations
[Sat Oct 04 03:35:00 2014] [notice] caught SIGTERM, shutting down


# cat enclosure.log
disk!!1!!status=ok::descr=Channel 1: WDC WD30EFRX-68AX9N0 2794 GB, 36C/96F
disk!!2!!status=ok::descr=Channel 2: WDC WD30EFRX-68AX9N0 2794 GB, 37C/98F
disk!!3!!status=ok::descr=Channel 3: WDC WD30EFRX-68AX9N0 2794 GB, 37C/98F
disk!!4!!status=ok::descr=Channel 4: WDC WD30EFRX-68AX9N0 2794 GB, 36C/96F


Some of the access.log:


192.168.1.4 - - [04/Oct/2014:03:34:35 -0700] "GET /images/Access/Writeable.gif HTTP/1.1" 200 1120 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_deep_shadow.gif HTTP/1.1" 200 1457 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/right_top_rounded_shadow.gif HTTP/1.1" 200 283 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/right_top_rounded_corner.gif HTTP/1.1" 200 172 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/middle_top_border.gif HTTP/1.1" 200 71 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_top_rounded_shadow.gif HTTP/1.1" 200 279 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_top_rounded_corner.gif HTTP/1.1" 200 172 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/background_left.gif HTTP/1.1" 200 92 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/body_left_next_notch.gif HTTP/1.1" 200 309 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/body_left_notch.gif HTTP/1.1" 200 310 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/main_logo.gif HTTP/1.1" 200 2682 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/background_right.gif HTTP/1.1" 200 818 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/body_middle_notch.gif HTTP/1.1" 200 859 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/body_right_next_notch.gif HTTP/1.1" 200 905 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/body_right_notch.gif HTTP/1.1" 200 916 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_top_left.gif HTTP/1.1" 200 70 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_top_middle.gif HTTP/1.1" 200 820 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_top_right.gif HTTP/1.1" 200 830 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_left_tile.gif HTTP/1.1" 200 814 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_right_tile.gif HTTP/1.1" 200 811 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_bottom_right.gif HTTP/1.1" 200 100 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_bottom_middle.gif HTTP/1.1" 200 820 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/left_nav_bottom_left.gif HTTP/1.1" 200 832 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_bottom_left.gif HTTP/1.1" 200 176 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_left_bottom.gif HTTP/1.1" 200 290 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_middle_bottom.gif HTTP/1.1" 200 845 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_bottom_right.gif HTTP/1.1" 200 182 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_right_bottom.gif HTTP/1.1" 200 291 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_copyright_new.gif HTTP/1.1" 200 149 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_left_copyright.gif HTTP/1.1" 200 206 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/footer_right_copyright.gif HTTP/1.1" 200 205 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/bottom_deep_shadow.gif HTTP/1.1" 200 2150 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/right_deep_shadow.gif HTTP/1.1" 200 1459 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:36 -0700] "GET /images/NG/background_inside_left.gif HTTP/1.1" 200 64 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:36 -0700] "GET /admin/blank.html HTTP/1.1" 200 115 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:36 -0700] "GET /admin/blank.html HTTP/1.1" 200 115 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:36 -0700] "GET /admin/blank.html HTTP/1.1" 200 115 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:36 -0700] "GET /admin/blank.html HTTP/1.1" 200 115 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:36 -0700] "GET /admin/blank.html HTTP/1.1" 200 115 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:36 -0700] "POST /get_handler/ HTTP/1.1" 200 6758 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:36 -0700] "POST /get_handler/ HTTP/1.1" 200 202 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - - [04/Oct/2014:03:34:37 -0700] "GET /language/en-us/Combined.str HTTP/1.1" 200 189190 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.1.4 - admin [04/Oct/2014:03:34:37 -0700] "GET /admin/dialog.xml HTTP/1.1" 200 76397 "https://192.168.1.3/admin/" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko"
127.0.0.1 - - [04/Oct/2014:03:34:37 -0700] "GET /" 400 454 "-" "-"
127.0.0.1 - - [04/Oct/2014:03:34:38 -0700] "GET /" 400 454 "-" "-"
127.0.0.1 - - [04/Oct/2014:03:34:54 -0700] "GET /" 400 454 "-" "-"
127.0.0.1 - - [04/Oct/2014:03:34:55 -0700] "GET /" 400 454 "-" "-"
127.0.0.1 - - [04/Oct/2014:03:34:56 -0700] "GET /" 400 454 "-" "-"
127.0.0.1 - - [04/Oct/2014:03:34:57 -0700] "GET /" 400 454 "-" "-"
127.0.0.1 - - [04/Oct/2014:03:34:58 -0700] "GET /" 400 454 "-" "-"
127.0.0.1 - - [04/Oct/2014:03:34:59 -0700] "GET /" 400 454 "-" "-"
#


# cat auth.log
Oct 4 01:45:53 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 01:45:56 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 01:45:57 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /etc/shadow
Oct 4 01:46:13 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/bin/cat /etc/shadow
Oct 4 01:46:13 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 01:46:13 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/frontview/bin/empty_spool
Oct 4 01:46:14 nas-26-EC-8A atd[3386]: (pam_unix) session opened for user root by (uid=1)
Oct 4 01:46:14 nas-26-EC-8A atd[3392]: (pam_unix) session opened for user root by (uid=1)
Oct 4 01:46:14 nas-26-EC-8A atd[3392]: (pam_unix) session closed for user root
Oct 4 01:46:15 nas-26-EC-8A atd[3386]: (pam_unix) session closed for user root
Oct 4 01:53:01 nas-26-EC-8A CRON[3675]: (pam_unix) session opened for user root by (uid=0)
Oct 4 01:53:05 nas-26-EC-8A CRON[3675]: (pam_unix) session closed for user root
Oct 4 01:56:00 nas-26-EC-8A atd[3680]: (pam_unix) session opened for user root by (uid=1)
Oct 4 01:56:00 nas-26-EC-8A atd[3680]: (pam_unix) session closed for user root
Oct 4 02:00:04 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth1
Oct 4 02:00:05 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:00:14 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth1
Oct 4 02:05:01 nas-26-EC-8A CRON[3889]: (pam_unix) session opened for user root by (uid=0)
Oct 4 02:05:02 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/root ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:05:02 nas-26-EC-8A CRON[3889]: (pam_unix) session closed for user root
Oct 4 02:05:06 nas-26-EC-8A sudo: root : TTY=console ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:18:47 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:18:47 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:18:48 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /etc/shadow
Oct 4 02:18:48 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:18:49 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:18:52 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/bin/cat /etc/shadow
Oct 4 02:18:53 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 02:18:53 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/frontview/bin/empty_spool
Oct 4 02:18:54 nas-26-EC-8A atd[2659]: (pam_unix) session opened for user root by (uid=1)
Oct 4 02:18:54 nas-26-EC-8A atd[2653]: (pam_unix) session opened for user root by (uid=1)
Oct 4 02:18:54 nas-26-EC-8A atd[2659]: (pam_unix) session closed for user root
Oct 4 02:18:55 nas-26-EC-8A atd[2653]: (pam_unix) session closed for user root
Oct 4 02:23:01 nas-26-EC-8A CRON[2910]: (pam_unix) session opened for user root by (uid=0)
Oct 4 02:23:01 nas-26-EC-8A CRON[2910]: (pam_unix) session closed for user root
Oct 4 02:33:00 nas-26-EC-8A atd[2915]: (pam_unix) session opened for user root by (uid=1)
Oct 4 02:33:01 nas-26-EC-8A atd[2915]: (pam_unix) session closed for user root
Oct 4 02:34:00 nas-26-EC-8A atd[2920]: (pam_unix) session opened for user root by (uid=1)
Oct 4 02:34:00 nas-26-EC-8A atd[2920]: (pam_unix) session closed for user root
Oct 4 02:35:00 nas-26-EC-8A atd[2926]: (pam_unix) session opened for user root by (uid=1)
Oct 4 02:35:00 nas-26-EC-8A atd[2926]: (pam_unix) session closed for user root
Oct 4 02:36:00 nas-26-EC-8A atd[2930]: (pam_unix) session opened for user root by (uid=1)
Oct 4 02:36:00 nas-26-EC-8A atd[2930]: (pam_unix) session closed for user root
Oct 4 02:38:01 nas-26-EC-8A CRON[2933]: (pam_unix) session opened for user root by (uid=0)
Oct 4 02:38:01 nas-26-EC-8A CRON[2933]: (pam_unix) session closed for user root
Oct 4 02:53:01 nas-26-EC-8A CRON[2939]: (pam_unix) session opened for user root by (uid=0)
Oct 4 02:53:01 nas-26-EC-8A CRON[2939]: (pam_unix) session closed for user root
Oct 4 03:08:01 nas-26-EC-8A CRON[2945]: (pam_unix) session opened for user root by (uid=0)
Oct 4 03:08:01 nas-26-EC-8A CRON[2945]: (pam_unix) session closed for user root
Oct 4 03:16:19 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:16:19 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:16:19 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:17:01 nas-26-EC-8A CRON[3226]: (pam_unix) session opened for user root by (uid=0)
Oct 4 03:17:01 nas-26-EC-8A CRON[3226]: (pam_unix) session closed for user root
Oct 4 03:23:01 nas-26-EC-8A CRON[3229]: (pam_unix) session opened for user root by (uid=0)
Oct 4 03:23:04 nas-26-EC-8A CRON[3229]: (pam_unix) session closed for user root
Oct 4 03:23:59 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:23:59 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:24:00 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:24:24 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/frontview/lib ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:24:24 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/frontview/lib ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:24:25 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/frontview/lib ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:24:26 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/frontview/lib ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:24:52 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:24:52 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:24:53 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:28:47 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:28:48 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:28:48 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:28:49 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:28:50 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:28:50 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:28:51 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:28:51 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:28:52 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:32:13 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:32:14 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:32:15 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:32:48 nas-26-EC-8A sudo: root : TTY=console ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:33:56 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:33:58 nas-26-EC-8A last message repeated 2 times
Oct 4 03:34:00 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:34:01 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /etc/shadow
Oct 4 03:34:07 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/bin/cat /etc/shadow
Oct 4 03:34:07 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:34:07 nas-26-EC-8A sudo: root : TTY=unknown ; PWD=/etc/default/config ; USER=root ; COMMAND=/frontview/bin/empty_spool
Oct 4 03:34:07 nas-26-EC-8A atd[2744]: (pam_unix) session opened for user root by (uid=1)
Oct 4 03:34:07 nas-26-EC-8A atd[2738]: (pam_unix) session opened for user root by (uid=1)
Oct 4 03:34:07 nas-26-EC-8A atd[2744]: (pam_unix) session closed for user root
Oct 4 03:34:08 nas-26-EC-8A atd[2738]: (pam_unix) session closed for user root
Oct 4 03:34:36 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:34:36 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t
Oct 4 03:34:37 nas-26-EC-8A sudo: admin : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ethtool eth0
Oct 4 03:34:59 nas-26-EC-8A sudo: root : TTY=console ; PWD=/ ; USER=root ; COMMAND=/sbin/mdconfig -t


# cat addons.conf
DAAPD!!FireFly!!1.0.3!!start-stop-daemon -S -q -x /usr/sbin/mt-daapd!!start-stop-daemon -K -n mt-daapd

17 Replies

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More