Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Feb 2004 10:20:46 -0800 (PST)
From:      John DeStefano <deesto@yahoo.com>
To:        Barbish3@adelphia.net, freebsd-questions@freebsd.org
Subject:   RE: reboot record information
Message-ID:  <20040213182046.29292.qmail@web40605.mail.yahoo.com>
In-Reply-To: <MIEPLLIBMLEEABPDBIEGEEPIFKAA.Barbish3@adelphia.net>

next in thread | previous in thread | raw e-mail | index | archive | help
--- JJB <Barbish3@adelphia.net> wrote:
> When an FBSD system crooks, and It reboots it's self, very seldom
> does any of issued problem messages have time to be posted
> completely before the rug is pulled out from under the log write
> process by the reboot occurring. All you can find out from the logs
> is yes indeed it did reboot. You are SOL, just like the rest of us
> when this happens to us.

That's unfortunate and hard to believe, but I have little choice but to
believe it.  I was hoping for a better mechanism of tracing what
happened.  But as you say, once a reboot is called for and the
processes are stopped, I suppose there's nothing left running to write
to a log.

Thanks,
~John
> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org
> [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of John
> DeStefano
> Sent: Friday, February 13, 2004 10:57 AM
> To: Barbish3@adelphia.net; freebsd-questions@freebsd.org
> Subject: RE: reboot record information
> 
> 
> JJB <Barbish3@adelphia.net> wrote:
> >All reboot messages go to /var/log/messages. The message file is
> >archived, so just go the /var/log directory and look at your
> message
> >files and look for msgs before the boot msgs of that date.
> 
> That's what I thought too.  However, according to my system status
> message this morning:
> "Local system status:
>  3:13AM  up 3 days, 11 mins, 0 users, load averages: 0.00, 0.00,
> 0.00"
> 
> My /var/log/messages still contains messages older than 3 days ago;
> it's from where I pulled the log lines from my original post.  As
> you
> can see, there's no sign of a cause for reboot there.
> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org
> [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of John
> DeStefano
> Sent: Friday, February 13, 2004 10:17 AM
> To: freebsd-questions@freebsd.org
> Subject: reboot record information
> 
> I was interested to find from a system mail this morning that my
> system had been rebooted three days ago. As far as I was aware, the
> last reboot was about two months ago.
> The following lines in /var/log/messages give me a clue that the
> reboot happened after "Feb 10 02:51:52":
> 
> Feb 10 02:51:52 zurg inetd[608]: netbios-ns/udp: bind: Address
> already
> in use
> [note: the "netbios-ns/udp" line is a system message that I get
> every 10 minutes... haven't been able to figure that one out either]
> Feb 10 03:02:37 zurg syslogd: kernel boot file is
> /boot/kernel/kernel
> Feb 10 03:02:37 zurg kernel: Copyright (c) 1992-2003 The FreeBSD
> Project....
> 
> But there's no sign of what happened to cause the reboot, or how it
> was done. Is there another log file that would store this
> information? I am mostly concerned because I'm fairly certain this
> reboot was not performed at the console: it was either a system
> reaction to a problem, or somebody poking around where they
> shouldn't be...
> Thanks,
> ~John


__________________________________
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040213182046.29292.qmail>