Sudo or su keeps flooding my /var/log/messages

Shell Programming and Scripting
1

It is crazy when you just entered a command example sudo or su or even ps. It will flood your /var/log/messages. Please see duplicate entries except for the pid. At 1 specific time.
Thanks

[user1@SERVER1:~]$ cat b
Jan 13 17:09:05 SERVER1 bash[727]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[731]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[735]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[739]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[745]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[749]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[753]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[757]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[761]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[765]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[769]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[773]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[783]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[787]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[791]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[795]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[801]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[805]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[809]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[813]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[823]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[827]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[831]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[835]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[841]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[845]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[849]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[854]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[858]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[862]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[866]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[870]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[874]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[884]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[888]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[892]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[896]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[900]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[904]: user1 as root:
[user1@SERVER1:~]$
2

You haven't stated your OS.
On most Linux OS the sudo logs to /var/log/sulog via PAM.
I have never seen your messages in /var/log/messages. Something unusual is going on.

3

Can you show us the ouput from

uname -a
trap
alias
echo $PATH

They may give us some clues to get started.

Kind regards,
Robin

4

OS is RHEL6.
I ahve another server where i just put sudo su or any commands. I only have 1 entry. But in some servers i have multiple entries in /var/log/messages when I put sudo or su or ps.