From owner-freebsd-questions@FreeBSD.ORG Fri Feb 13 07:56:54 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5B8A416A4CE for ; Fri, 13 Feb 2004 07:56:54 -0800 (PST) Received: from web40606.mail.yahoo.com (web40606.mail.yahoo.com [66.218.78.143]) by mx1.FreeBSD.org (Postfix) with SMTP id 56EB343D2F for ; Fri, 13 Feb 2004 07:56:54 -0800 (PST) (envelope-from deesto@yahoo.com) Message-ID: <20040213155654.64692.qmail@web40606.mail.yahoo.com> Received: from [66.133.138.130] by web40606.mail.yahoo.com via HTTP; Fri, 13 Feb 2004 07:56:54 PST Date: Fri, 13 Feb 2004 07:56:54 -0800 (PST) From: John DeStefano To: Barbish3@adelphia.net, freebsd-questions@freebsd.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: RE: reboot record information X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2004 15:56:54 -0000 JJB wrote: >All reboot messages go to /var/log/messages. The message file is >archived, so just go the /var/log directory and look at your message >files and look for msgs before the boot msgs of that date. That's what I thought too. However, according to my system status message this morning: "Local system status: 3:13AM up 3 days, 11 mins, 0 users, load averages: 0.00, 0.00, 0.00" My /var/log/messages still contains messages older than 3 days ago; it's from where I pulled the log lines from my original post. As you can see, there's no sign of a cause for reboot there. -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of John DeStefano Sent: Friday, February 13, 2004 10:17 AM To: freebsd-questions@freebsd.org Subject: reboot record information I was interested to find from a system mail this morning that my system had been rebooted three days ago. As far as I was aware, the last reboot was about two months ago. The following lines in /var/log/messages give me a clue that the reboot happened after "Feb 10 02:51:52": Feb 10 02:51:52 zurg inetd[608]: netbios-ns/udp: bind: Address already in use [note: the "netbios-ns/udp" line is a system message that I get every 10 minutes... haven't been able to figure that one out either] Feb 10 03:02:37 zurg syslogd: kernel boot file is /boot/kernel/kernel Feb 10 03:02:37 zurg kernel: Copyright (c) 1992-2003 The FreeBSD Project.... But there's no sign of what happened to cause the reboot, or how it was done. Is there another log file that would store this information? I am mostly concerned because I'm fairly certain this reboot was not performed at the console: it was either a system reaction to a problem, or somebody poking around where they shouldn't be... Thanks, ~John --------------------------------- Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" __________________________________ Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online. http://taxes.yahoo.com/filing.html