From owner-freebsd-questions@FreeBSD.ORG Fri Apr 9 15:15:41 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5B8FE16A4CE for ; Fri, 9 Apr 2004 15:15:41 -0700 (PDT) Received: from spider.netmails.net (mx2.netmails.net [69.93.35.4]) by mx1.FreeBSD.org (Postfix) with SMTP id D76D443D48 for ; Fri, 9 Apr 2004 15:15:40 -0700 (PDT) (envelope-from subscr@spider.netmails.net) Received: (qmail 7072 invoked by uid 1011); 9 Apr 2004 22:15:39 -0000 Date: Fri, 9 Apr 2004 17:15:39 -0500 From: Hari Bhaskaran To: questions@freebsd.org Message-ID: <20040409221539.GA6954@spider.netmails.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.1i Subject: Finding how the machine was rebooted X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Apr 2004 22:15:41 -0000 Hi, I am trying to trouble shoot a problem where one of the machines got rebooted. I can see "last" shows a shutdown was done. How do I know if it was a Cntrl-Alt-Del done from the console or if it was a shutdown command executed via a ssh/remote login? I would also like to know if it was some panic/bug etc also. Also I have a dmesg.today that is couple of days older than /var/run/dmesg.boot. How is that possible? Doesn't dmesg.today mean the the dmesg of the last (current) boot? BTW, /var/ is running on a vinum-ed partition (if that would help) Any help is appreciated. Thanks for your time. -- Hari Bhaskaran