From owner-freebsd-isp  Thu Jun 19 21:56:35 1997
Return-Path: <owner-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id VAA10935
          for isp-outgoing; Thu, 19 Jun 1997 21:56:35 -0700 (PDT)
Received: from panda.hilink.com.au (panda.hilink.com.au [203.8.15.25])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id VAA10929
          for <isp@FreeBSD.ORG>; Thu, 19 Jun 1997 21:56:28 -0700 (PDT)
Received: (from danny@localhost)
	by panda.hilink.com.au (8.8.5/8.8.5) id OAA11963;
	Fri, 20 Jun 1997 14:53:35 +1000 (EST)
Date: Fri, 20 Jun 1997 14:53:34 +1000 (EST)
From: "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To: xiyuan qian <xiyuan@npc.haplink.co.cn>
cc: isp@FreeBSD.ORG
Subject: Re: crash?
In-Reply-To: <199706200856.IAA09890@npc.haplink.co.cn>
Message-ID: <Pine.BSF.3.91.970620145155.869H-100000@panda.hilink.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk


On Fri, 20 Jun 1997, xiyuan qian wrote:

> Hi, what's mean of the "crash" word in wtmp file? Today, I enter the last
> command to check the login and suddenly find there is many crashes in
> the last record. What's wrong about my host? My host acts as a mail server
> and DNS server and tacacs server.

'crash' means that there was no 'shutdown' entry in wtmp before a 'reboot' 
entry.  It means that the system was rebooted without being shut down 
properly.  What does uptime tell you?

/*  Daniel O'Callaghan                                                     */
/*  HiLink Internet <http://www.hilink.com.au/>       danny@hilink.com.au  */
/*  FreeBSD - works hard, plays hard...                 danny@freebsd.org  */