Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 22 Sep 2003 02:01:33 +0300
From:      Alin-Adrian Anton <aanton@reversedhell.net>
To:        nbari@unixmexico.com, freebsd-hackers@freebsd.org
Subject:   Re: server rebooted
Message-ID:  <3F6E2DCD.9080704@reversedhell.net>
In-Reply-To: <45984.148.243.211.1.1064121651.squirrel@mail.unixmexico.com>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
nbari@unixmexico.com wrote:

>Hello.
>
>I have a dedicated server the one was up for more than 84 days but this
>Friday 19, suddenly the server was rebooted.
>
>this is the output of the "last" command
>
># last | grep reboot
>reboot           ~                         vie 19 sep 13:55
>
>
>I already have check the logs but i can't found any hint that could help
>me to know why the server as was rebooted.
>
>
>Any idea on what to check or how to know what makes the server to reboot?
>
>thanks.
>
>_______________________________________________
>freebsd-hackers@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
>To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
>
>
>  
>
Check all the logs, not only the lastlog. Start with /var/log/messages, 
and continue there. See behaviour of all the installed daemons and what 
did they log. If the kernel is not debug-enabled, there are chances you 
won't find out certain crashes. A power-off problem will be noticed 
because of disrupted timestamps in the logs, and no shutting down 
messages from the daemons and the kernel.

And if you don't CAREFULLY and PATIENTLY find anything in the logs, 
check them for intrusion, if you have  some other logging device in the 
network check that one too for weird traffic etc. But I think I'm 
paranoid :PpPp

Alin.



[-- Attachment #2 --]
0	*H
010	+0	*H
	00D
r0
	*H
0b10	UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
030901225717Z
040831225717Z0I10UThawte Freemail Member1&0$	*H
	aanton@reversedhell.net0"0
	*H
0
P 3k[76i*TUIӝWY᛻5EѳmVlCHH>=؏wrO/Qh!ev'kkZRtڌL!Ys,4;m3}@P0#c/B1
PL	O“2Agih\<?/63l4r87ۻ0ZcWeTObbǺ*>tED?`+u4020"U0aanton@reversedhell.net0U00
	*H
,Al5`	tq@!{mnS%
?!D<TċJ2fڛۿ.u؝C	N QVT/I7'?0w\)(RrN00D
r0
	*H
0b10	UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
030901225717Z
040831225717Z0I10UThawte Freemail Member1&0$	*H
	aanton@reversedhell.net0"0
	*H
0
P 3k[76i*TUIӝWY᛻5EѳmVlCHH>=؏wrO/Qh!ev'kkZRtڌL!Ys,4;m3}@P0#c/B1
PL	O“2Agih\<?/63l4r87ۻ0ZcWeTObbǺ*>tED?`+u4020"U0aanton@reversedhell.net0U00
	*H
,Al5`	tq@!{mnS%
?!D<TċJ2fڛۿ.u؝C	N QVT/I7'?0w\)(RrN0?0
0
	*H
010	UZA10UWestern Cape10U	Cape Town10U
Thawte Consulting1(0&UCertification Services Division1$0"UThawte Personal Freemail CA1+0)	*H
	personal-freemail@thawte.com0
030717000000Z
130716235959Z0b10	UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA00
	*H
0Ħ<UsUNʙZhup[v:aQP
0cZ,p+Z?qV˯<6$*+w=+>@dקe*TH<a@dr`00U00CU<0:08642http://crl.thawte.com/ThawtePersonalFreemailCA.crl0U0)U"0 010UPrivateLabel2-1380
	*H
HP.
fgCL!6-6/P p<ab:~t%Pb'qW%ݩ9 Oe_N4[5MwV!x!5$F]_eO1;070i0b10	UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA
r0	+0	*H
	1	*H
0	*H
	1
030921230133Z0#	*H
	1q7R{šW'0R	*H
	1E0C0
*H
0*H
0
*H
@0+0
*H
(0x	+71k0i0b10	UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA
r0z*H
	1ki0b10	UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA
r0
	*H
_mӦ:SV#}!tFA5f&\	P_a}[Sea}\R;3ҵ/	Szpu'܅=4(,ZKRi<19=ǟ])O7d:EМ>5DVL5
l,pD"]2I˻mۆj8KPB◣%.t1+Esx$%4#Zw2xc]P^[q#R.+
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3F6E2DCD.9080704>