From owner-freebsd-questions@FreeBSD.ORG Fri Feb 13 07:16:38 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2365B16A4CE for ; Fri, 13 Feb 2004 07:16:38 -0800 (PST) Received: from web40611.mail.yahoo.com (web40611.mail.yahoo.com [66.218.78.148]) by mx1.FreeBSD.org (Postfix) with SMTP id 1F6D143D1D for ; Fri, 13 Feb 2004 07:16:38 -0800 (PST) (envelope-from deesto@yahoo.com) Message-ID: <20040213151638.26492.qmail@web40611.mail.yahoo.com> Received: from [66.133.138.130] by web40611.mail.yahoo.com via HTTP; Fri, 13 Feb 2004 07:16:38 PST Date: Fri, 13 Feb 2004 07:16:38 -0800 (PST) From: John DeStefano To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: reboot record information X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2004 15:16:38 -0000 I was interested to find from a system mail this morning that my system had been rebooted three days ago. As far as I was aware, the last reboot was about two months ago. The following lines in /var/log/messages give me a clue that the reboot happened after "Feb 10 02:51:52": Feb 10 02:51:52 zurg inetd[608]: netbios-ns/udp: bind: Address already in use [note: the "netbios-ns/udp" line is a system message that I get every 10 minutes... haven't been able to figure that one out either] Feb 10 03:02:37 zurg syslogd: kernel boot file is /boot/kernel/kernel Feb 10 03:02:37 zurg kernel: Copyright (c) 1992-2003 The FreeBSD Project.... But there's no sign of what happened to cause the reboot, or how it was done. Is there another log file that would store this information? I am mostly concerned because I'm fairly certain this reboot was not performed at the console: it was either a system reaction to a problem, or somebody poking around where they shouldn't be... Thanks, ~John --------------------------------- Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online