From owner-freebsd-questions@FreeBSD.ORG Mon Aug 18 08:13:46 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D45E51065684 for ; Mon, 18 Aug 2008 08:13:46 +0000 (UTC) (envelope-from Johan@double-l.nl) Received: from smtp-vbr11.xs4all.nl (smtp-vbr11.xs4all.nl [194.109.24.31]) by mx1.freebsd.org (Postfix) with ESMTP id 7B5F98FC1F for ; Mon, 18 Aug 2008 08:13:46 +0000 (UTC) (envelope-from Johan@double-l.nl) Received: from w2003s01.double-l.local (dpm.xs4all.nl [80.126.205.144]) by smtp-vbr11.xs4all.nl (8.13.8/8.13.8) with ESMTP id m7I7xQ21092249; Mon, 18 Aug 2008 09:59:26 +0200 (CEST) (envelope-from Johan@double-l.nl) Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1250" Content-Transfer-Encoding: quoted-printable X-MimeOLE: Produced By Microsoft Exchange V6.5 Date: Mon, 18 Aug 2008 09:59:26 +0200 Message-ID: <57200BF94E69E54880C9BB1AF714BBCB5DE08C@w2003s01.double-l.local> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: FreeBSD-7 reboots hourly Thread-Index: AckBB/r1EI3O3rj7R9CLMm2TALK5cAAACWkg References: <48A9262E.4010900@startext.tomsk.ru> From: "Johan Hendriks" To: "Alexey A. Ukhov" X-Virus-Scanned: by XS4ALL Virus Scanner Cc: freebsd-questions@freebsd.org Subject: RE: FreeBSD-7 reboots hourly X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Aug 2008 08:13:46 -0000 >Hello dear colleagues. >2 days I have strange behaviour on my 7.0-RELEASE-p3 server. >It started to reboot once an hour. >No any suspicious task in crontab, nothing strange in /var/log. >Just silent reboot. >I have no physical access to server - only remote one. >Question is: what could it be? >How to find what send computer to reboot? >Just extra information: I had such stuff before - installworld helped = me=20 >for one week, >now it appears again :( >Opened services/sockets are: >nobody proftpd 647 1 tcp4 *:21 *:* >root sshd 845 4 tcp4 *:22 *:* >postfix smtpd 5115 6 tcp4 *:25 *:* >bind named 525 20 udp4 xxx.xxx.xxx.xxx:53 *:* >nobody nginx 643 4 tcp4 *:80 *:* >root couriertcp 769 3 tcp4 *:110 *:* >root couriertcp 789 3 tcp4 *:143 *:* >root rsync 659 5 tcp4 *:873 *:* >root couriertcp 779 3 tcp4 *:993 *:* >root couriertcp 760 3 tcp4 *:995 *:* >root syslogd 461 9 udp4 *:514 *:* >also on local interface (lo0) I have apache, postgrey, spamassasin. >I need some pieces of advice what to do with it and what could it be. >Thanks in advance, >Alexey A. Ukhov >P.S.: I mean hourly: I start top and just wait. last what I see is:=20 >0:59:59 uptime Try to disable some cronjobs that run hourly. I think it is something within a cronjob. Regards, Johan No virus found in this outgoing message. Checked by AVG - http://www.avg.com=20 Version: 8.0.138 / Virus Database: 270.6.4/1617 - Release Date: = 17-8-2008 12:58