老毛子一直刷这个LOG，有没有人知道原因

shb110119

Jul  8 06:07:41 dhcpd[12754]: This system doesn't provide enough entropy to quickly generate high-quality random numbers. Installing the rng-utils/rng-tools, jitterentropy or haveged packages may help. On virtualized Linux environments, also consider using virtio-rng. The service will not start until enough entropy has been collected.
Jul  8 06:07:41 dhcpd[12754]: tcp server listening at 0.0.0.0:1880
Jul  8 06:07:41 dhcpd[12754]: bind: Address in use
Jul  8 06:07:41 dhcpd[12754]: failed to bind address
Jul  8 06:08:00 crond[13893]: USER admin pid 12827 cmd sh /etc/storage/syslog.sh
Jul  8 06:10:00 crond[13893]: USER admin pid 13353 cmd sh /etc/storage/syslog.sh
Jul  8 06:12:00 crond[13893]: USER admin pid 13849 cmd sh /etc/storage/syslog.sh
Jul  8 06:12:41 dhcpd[14044]: UDP relay enabled
Jul  8 06:12:41 dhcpd[14044]: initializing ciphers... chacha20-ietf-poly1305
Jul  8 06:12:41 dhcpd[14044]: This system doesn't provide enough entropy to quickly generate high-quality random numbers. Installing the rng-utils/rng-tools, jitterentropy or haveged packages may help. On virtualized Linux environments, also consider using virtio-rng. The service will not start until enough entropy has been collected.
Jul  8 06:12:41 dhcpd[14044]: tcp server listening at 0.0.0.0:1880
Jul  8 06:12:41 dhcpd[14044]: bind: Address in use
Jul  8 06:12:41 dhcpd[14044]: failed to bind address
Jul  8 06:14:00 crond[13893]: USER admin pid 14395 cmd sh /etc/storage/syslog.sh
Jul  8 06:16:00 crond[13893]: USER admin pid 14892 cmd sh /etc/storage/syslog.sh

aisme

这段日志记录了系统运行过程中发生的一些事件。其中，以下几个关键信息可以解读：

This system doesn't provide enough entropy to quickly generate high-quality random numbers. 表示系统当前无法提供足够的熵来快速生成高质量的随机数。

Installing the rng-utils/rng-tools, jitterentropy or haveged packages may help. 建议安装 rng-utils/rng-tools、jitterentropy 或 haveged 等软件包来解决这个问题。

On virtualized Linux environments, also consider using virtio-rng. 在虚拟化的 Linux 环境中，还可以考虑使用 virtio-rng。

The service will not start until enough entropy has been collected. 当足够的熵被收集到后，服务将会启动。

bind: Address in use 和 failed to bind address 表示尝试绑定地址时遇到了问题，可能是由于该地址已经被占用。

USER admin pid 12827 cmd sh /etc/storage/syslog.sh 和 USER admin pid 13353 cmd sh /etc/storage/syslog.sh 是计划任务 crond 在指定时间执行的命令。

综上所述，这些日志信息提示了系统熵不足、地址绑定问题以及定时任务的执行情况。关于最后一条日志信息的含义，很可能是系统管理员用户 "admin" 使用进程ID（pid）执行了 sh /etc/storage/syslog.sh 命令。

shb110119

aisme 发表于 2023-7-8 08:19
这段日志记录了系统运行过程中发生的一些事件。其中，以下几个关键信息可以解读：

This system doesn't pr ...

谢谢大佬，我排查了下脚本，发现真的有个定时任务   sh /etc/storage/syslog.sh  
我觉得我没有添加过，我现在删了。。应该正常了。。

shb110119

我发现是被入侵中毒了。。别人添加了这个脚本文件做怪。