From owner-freebsd-questions@FreeBSD.ORG Fri Apr 9 15:58:35 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 13D7B16A4CE for ; Fri, 9 Apr 2004 15:58:35 -0700 (PDT) Received: from smtp.rdsnet.ro (smtp.rdsnet.ro [62.231.74.130]) by mx1.FreeBSD.org (Postfix) with ESMTP id A92F243D1D for ; Fri, 9 Apr 2004 15:58:33 -0700 (PDT) (envelope-from itetcu@apropo.ro) Received: (qmail 10229 invoked by uid 89); 9 Apr 2004 22:56:08 -0000 Received: from unknown (HELO rdsnet.ro) (62.231.74.131) by 0 with SMTP; 9 Apr 2004 22:56:08 -0000 Received: (qmail 27279 invoked from network); 9 Apr 2004 22:58:32 -0000 Received: from unknown (HELO buh.cameradicommercio.ro) (81.196.25.19) by mail.rdsnet.ro with SMTP; 9 Apr 2004 22:58:32 -0000 Received: from it.buh.cameradicommercio.ro (it.buh.cameradicommercio.ro [192.168.0.10]) by buh.cameradicommercio.ro (Postfix) with ESMTP id 3B3F76369; Sat, 10 Apr 2004 01:58:27 +0300 (EEST) Received: from localhost (localhost.buh.cameradicommercio.ro [127.0.0.1]) by it.buh.cameradicommercio.ro (Postfix) with ESMTP id 4EBE220C; Sat, 10 Apr 2004 02:01:33 +0300 (EEST) Received: from it.buh.cameradicommercio.ro ([127.0.0.1])port 10024) with ESMTP id 29367-02; Sat, 10 Apr 2004 02:01:33 +0300 (EEST) Received: from it.buh.cameradicommercio.ro (localhost.buh.cameradicommercio.ro [127.0.0.1]) by it.buh.cameradicommercio.ro (Postfix) with SMTP id DD21D190; Sat, 10 Apr 2004 02:01:32 +0300 (EEST) Date: Sat, 10 Apr 2004 02:01:32 +0300 From: Ion-Mihai Tetcu To: Hari Bhaskaran Message-Id: <20040410020132.16401dd2@it.buh.cameradicommercio.ro> In-Reply-To: <20040409221539.GA6954@spider.netmails.net> References: <20040409221539.GA6954@spider.netmails.net> X-Mailer: Sylpheed version 0.9.10claws (GTK+ 1.2.10; i386-portbld-freebsd5.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at it.buh.cameradicommercio.ro cc: questions@freebsd.org Subject: Re: Finding how the machine was rebooted X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Apr 2004 22:58:35 -0000 On Fri, 9 Apr 2004 17:15:39 -0500 Hari Bhaskaran wrote: > Hi, > > I am trying to trouble shoot a problem where one of the machines > got rebooted. I can see "last" shows a shutdown was done. How > do I know if it was a Cntrl-Alt-Del done from the console or > if it was a shutdown command executed via a ssh/remote login? ssh (third column is the remote host): itetcu ttyp0 it.buh Tue Apr 6 09:06 - 18:23 (3+09:17) reboot ~ Tue Apr 6 08:56 shutdown ~ Tue Apr 6 08:54 itetcu ttyp2 it.buh Tue Apr 6 08:51 - shutdown (00:02) console: root ttyv1 Fri Apr 9 18:44 - 18:48 (00:04) reboot ~ Fri Apr 9 18:44 shutdown ~ Fri Apr 9 18:43 root ttyv1 Fri Apr 9 18:41 - shutdown (00:01) > I would also like to know if it was some panic/bug etc also. You wouldn't get the last -shutdown line. You probably would have something in the logs. > Also I have a dmesg.today that is couple of days older than > /var/run/dmesg.boot. How is that possible? Doesn't dmesg.today > mean the the dmesg of the last (current) boot? itetcu@it> /usr/local/etc/postfix [1:58:33] 0 # ll /var/log/dmesg.* /var/run/dmesg.boot -rw------- 1 root wheel 13784 Apr 9 03:08 /var/log/dmesg.today -rw------- 1 root wheel 13600 Apr 8 03:06 /var/log/dmesg.yesterday -rw-r--r-- 1 root wheel 21713 Apr 9 18:43 /var/run/dmesg.boot itetcu@it> /usr/local/etc/postfix [1:58:34] 0 # uptime 1:58AM up 7:15, 2 users, load averages: 0.02, 0.18, 0.25 > BTW, /var/ is running on a vinum-ed partition (if that would > help) Shouldn't mater. -- IOnut Unregistered ;) FreeBSD "user"