From owner-freebsd-questions Sun Jan 17 22:34:08 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA26052 for freebsd-questions-outgoing; Sun, 17 Jan 1999 22:34:08 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from sparcy.delanet.com (sparcy.delanet.com [208.9.136.54]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id WAA26045 for ; Sun, 17 Jan 1999 22:34:07 -0800 (PST) (envelope-from stevec@delanet.com) Received: (qmail 314 invoked from network); 18 Jan 1999 06:29:22 -0000 Received: from unknown (HELO oemcomputer) (208.9.136.17) by sparcy.delanet.com with SMTP; 18 Jan 1999 06:29:22 -0000 Message-ID: <007a01be42ac$5a39d420$118809d0@oemcomputer> From: "Stephen Comoletti" To: Cc: "Donna Phillips" Subject: Need help determining cause of a crash Date: Mon, 18 Jan 1999 01:32:37 -0500 MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA-1; boundary="----=_NextPart_000_0075_01BE4282.6EEF22A0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. ------=_NextPart_000_0075_01BE4282.6EEF22A0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0072_01BE4282.6EDE59C0" ------=_NextPart_000_0072_01BE4282.6EDE59C0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit I had a web server crash tonight, and I'm not quite sure why. Output of the logs are as follows: Jan 17 15:02:50 <0.2> somnus /kernel: Jan 17 15:02:50 <0.2> somnus /kernel: Jan 17 15:02:50 <0.2> somnus /kernel: Fatal trap 12: page fault while in kernel mode Jan 17 15:02:50 <0.2> somnus /kernel: fault virtual address = 0xf698a000 Jan 17 15:02:50 <0.2> somnus /kernel: fault code = supervisor read, page not present Jan 17 15:02:50 <0.2> somnus /kernel: instruction pointer = 0x8:0xf01ffdd4 Jan 17 15:02:50 <0.2> somnus /kernel: stack pointer = 0x10:0xf65f4c7c Jan 17 15:02:50 <0.2> somnus /kernel: frame pointer = 0x10:0xf65f4c8c Jan 17 15:02:50 <0.2> somnus /kernel: code segment = base 0x0, limit 0xfffff, type 0x1b Jan 17 15:02:50 <0.2> somnus /kernel: = DPL 0, pres 1, def32 1, gran 1 Jan 17 15:02:50 <0.2> somnus /kernel: processor eflags = interrupt enabled, resume, IOPL = 0 Jan 17 15:02:50 <0.2> somnus /kernel: current process = 386 (syslogd) Jan 17 15:02:50 <0.2> somnus /kernel: interrupt mask = Jan 17 15:02:50 <0.2> somnus /kernel: trap number = 12 Jan 17 15:02:50 <0.2> somnus /kernel: panic: page fault Jan 17 15:02:50 <0.2> somnus /kernel: Jan 17 15:02:50 <0.2> somnus /kernel: syncing disks... 3 3 <6>Connection attempt to TCP 208.9.136.16 9:143 from 24.229.36.32:56346 flags=0x2 Jan 17 15:02:50 <0.2> somnus /kernel: done Jan 17 15:02:50 <0.6> somnus /kernel: Connection attempt to TCP 208.9.136.172:143 from 24.229.36.32: 56348 flags=0x2 Jan 17 15:02:50 <0.6> somnus /kernel: Connection attempt to TCP 208.9.136.172:37 from 24.229.36.32:5 6347 flags=0x2 Jan 17 15:02:50 <0.2> somnus /kernel: Automatic reboot in 15 seconds - press a key on the console to Jan 17 15:02:50 <0.2> somnus /kernel: abort Jan 17 15:02:50 <0.2> somnus /kernel: Rebooting... I had a similar crash to this once before, and it was suggested that the machine ahd a bad ram chip in it. This is the second time only in a 3 month period for this machine to crash for any reason. It is running 3.0 release, and is a HP Pavilion pentium II/333 with 168 megs ram, lynksys 10bt ether, and quantum bigfoot 8gig ide drive. All the directories for the web server are nfs mounted from a raid array on a sun netra. The one thing that made me ask again is that we had received approximately 4376 tcp packets to various ports from a single ip, before and up to the time of the crash, and again after reboot. All came from the same source, a cable modem with another isp. The ports they hit were various, 7, 21, 25, 37, 70, 80, 119, 143 and a few more. They came in at a rate of 25 to 30 a second. Not sure if this is coincidence or not. Figured I'd ask and see if anyone else has experienced this or can verify it from the log above. Thanks in advance for any assistance. Steve ------=_NextPart_000_0072_01BE4282.6EDE59C0 Content-Type: text/x-vcard; name="Stephen C. Comoletti.vcf" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="Stephen C. Comoletti.vcf" BEGIN:VCARD VERSION:2.1 N:Comoletti;Stephen;C. FN:Stephen C. Comoletti ORG:DelaNET, Inc. TITLE:Asst. Systems Administrator TEL;WORK;VOICE:(302) 326-5800 / (888) DELANET TEL;WORK;FAX:(302) 326-5802 ADR;WORK:;;262 Quigley Boulevard;New Castle;DE;19720;USA LABEL;WORK;ENCODING=3DQUOTED-PRINTABLE:262 Quigley = Boulevard=3D0D=3D0ANew Castle, DE 19720=3D0D=3D0AUSA URL: URL:http://www.delanet.com/ EMAIL;PREF;INTERNET:stevec@delanet.com REV:19990118T063237Z END:VCARD ------=_NextPart_000_0072_01BE4282.6EDE59C0-- ------=_NextPart_000_0075_01BE4282.6EEF22A0 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIII4zCCAnEw ggHaoAMCAQICAlPpMA0GCSqGSIb3DQEBBAUAMIG5MQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2Vz dGVybiBDYXBlMRQwEgYDVQQHEwtEdXJiYW52aWxsZTEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRp bmcxKTAnBgNVBAsTIFRoYXd0ZSBQRiBSU0EgSUsgMTk5OC45LjE2IDE3OjU1MTYwNAYDVQQDEy1U aGF3dGUgUGVyc29uYWwgRnJlZW1haWwgUlNBIElzc3VlciAxOTk4LjkuMTYwHhcNOTgxMjAyMDIw MDU4WhcNOTkxMjAyMDIwMDU4WjBEMR8wHQYDVQQDExZUaGF3dGUgRnJlZW1haWwgTWVtYmVyMSEw HwYJKoZIhvcNAQkBFhJzdGV2ZWNAZGVsYW5ldC5jb20wWzANBgkqhkiG9w0BAQEFAANKADBHAkBk /UlAYQKNhYoFXPpNLOWMdJ+pLVVikLNRqPtaCQS8cysMwf4GiBmpt0dXYMrfYRM1qM5efOC/L3O3 SGnu91qDAgMBAAGjQTA/MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaA FP4+YJxrjA+w2DPGysYeWLBxOLXgMA0GCSqGSIb3DQEBBAUAA4GBABzGPD3WuIVW3ymvwqpZ67GX fVEZkj9ZH2FdtgWFRtytJ/lIyxBM7//AD1xz9aK2S64UDZcXBhxvGlAIifnsBrvJLkNqarJAKlIz TQHm9h5FLM14MLzjLWX4HL0rmkythQtCndCexxfO+ujgPlvlPE3AETDHw3IJaIWQRj1bNNh2MIID LTCCApagAwIBAgIBADANBgkqhkiG9w0BAQQFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdl c3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGlu ZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhh d3RlIFBlcnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFp bEB0aGF3dGUuY29tMB4XDTk2MDEwMTAwMDAwMFoXDTIwMTIzMTIzNTk1OVowgdExCzAJBgNVBAYT AlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMR VGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNp b24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYc cGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA 1GnX1LCUZFtx6UfYDFG26nKRsIRefS0Nj3sS34UldSh0OkIsYyeflXtL734Zhx2G6qPduc6WZBrC FG5ErHzmj+hND3EfQDimAKOHePb5lIZererAXnbr2RSjXW56fAylS1V/Bhkpf56aJtVquzgkCGqY x7Hao5iR/Xnb5VrEHLkCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQQFAAOB gQDH7JJ+Tvj1lqVnYiqk8E0RYNBvjWBYYawmu1I1XAjPMPuoSpaKH2JCI4wXD/S6ZJwXrEcp352Y XtJsYHFcoqzceePnbgBHH7UNKOgCneSa/RP0ptl8sfjcXyMmCZGAc9AUG95DqYMl8uacLxXK/qar igd1iwzdUYRr5PjRzneigTCCAzkwggKioAMCAQICAQowDQYJKoZIhvcNAQEEBQAwgdExCzAJBgNV BAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UE ChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2 aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJ ARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw05ODA5MTYxNzU1MzRaFw0wMDA5MTUx NzU1MzRaMIG5MQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRQwEgYDVQQHEwtE dXJiYW52aWxsZTEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKTAnBgNVBAsTIFRoYXd0ZSBQ RiBSU0EgSUsgMTk5OC45LjE2IDE3OjU1MTYwNAYDVQQDEy1UaGF3dGUgUGVyc29uYWwgRnJlZW1h aWwgUlNBIElzc3VlciAxOTk4LjkuMTYwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMSl5dTU 0F8IAu4HIX0kv6trjh7rIAcCFYRrj9CTJB8bne5osrksT+mTZxcQFx6h+UNBI7kwqnaXu/Pn/YHA tTGL9qZQJlTylSjrGaQelx6w4ribwQSaMtA8CWxP5DVP8Ha/ABMDT0UIYPP8tNCQAYoSyZy6f1Lq KpM1Njw85DUvAgMBAAGjNzA1MBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0jBBgwFoAUcknCczTG VfQLdnKBfnf0h+fGsg4wDQYJKoZIhvcNAQEEBQADgYEALMeCHwFDPgeP7mlcqWSC+MCWrZMry5tQ 10CagcK6pnadPJVA3FXB4VWCeasKKabVDOFXKD6P+bvV3w2TWKpbLYuPM+TdWBU1dnIVKb1C9FqS C3dfnSfbmi1OG4IGjtKNVruV3tsMZQXelZ4C3VMXvr78a8MaInoUK2G9wp9eeloxggGvMIIBqwIB ATCBwDCBuTELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTEUMBIGA1UEBxMLRHVy YmFudmlsbGUxGjAYBgNVBAoTEVRoYXd0ZSBDb25zdWx0aW5nMSkwJwYDVQQLEyBUaGF3dGUgUEYg UlNBIElLIDE5OTguOS4xNiAxNzo1NTE2MDQGA1UEAxMtVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWls IFJTQSBJc3N1ZXIgMTk5OC45LjE2AgJT6TAJBgUrDgMCGgUAoIGGMBgGCSqGSIb3DQEJAzELBgkq hkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTk5MDExODAxMzIzN1owIwYJKoZIhvcNAQkEMRYEFCeg PgB1qrvEUb+GDUzRJ/L0caVYMCcGCSqGSIb3DQEJDzEaMBgwDQYIKoZIhvcNAwICASgwBwYFKw4D Ah0wDQYJKoZIhvcNAQEBBQAEQFTkdtaMK1c3kAXCEV4eGcrI6+N0H+D2M3WP846JUIO3TE4wZEnt yKPRi4LqYAprU5ooOQompwUmQMBFZGZNzfoAAAAAAAA= ------=_NextPart_000_0075_01BE4282.6EEF22A0-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message