From owner-freebsd-questions@FreeBSD.ORG Tue Dec 30 18:37:36 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 19CC1AFD for ; Tue, 30 Dec 2014 18:37:36 +0000 (UTC) Received: from mail5.networktest.com (mail5.networktest.com [204.109.60.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E879E2CDD for ; Tue, 30 Dec 2014 18:37:35 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail5.networktest.com (Postfix) with ESMTP id 436EC2FCCC1 for ; Tue, 30 Dec 2014 10:37:29 -0800 (PST) Received: from mail5.networktest.com ([127.0.0.1]) by localhost (mail5.networktest.com [127.0.0.1]) (maiad, port 10024) with ESMTP id 82468-01 for ; Tue, 30 Dec 2014 10:37:29 -0800 (PST) Received: from dhcp130.eng.networktest.com (ns.networktest.com [12.20.174.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: dnewman@networktest.com) by mail5.networktest.com (Postfix) with ESMTPSA id 0B6B72FCCB9 for ; Tue, 30 Dec 2014 10:37:29 -0800 (PST) Message-ID: <54A2F0E8.80401@networktest.com> Date: Tue, 30 Dec 2014 10:37:28 -0800 From: David Newman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: SCSI errors from two hosts Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Dec 2014 18:37:36 -0000 Reviewing FreeBSD 10.1 server security logs this morning, I found two hosts with SCSI errors. Host1 runs ZFS on root. Host2 is a VMware virtual machine using iSCSI shared storage. Both errors are timestamped 3:01 am. Are the timestamps similar because that's when the reporting process collected logs, or did something happen to both hosts within the same minute? Pretty sure it is the former, but just checking. Thanks! dn host1.example.com kernel log messages: +++ /tmp/security.GpROogrm 2014-12-30 03:01:35.728214150 -0800 +(ada2:ata3:0:0:0): WRITE_DMA48. ACB: 35 00 95 5d c9 40 48 00 00 00 ab 00 +(ada2:ata3:0:0:0): CAM status: ATA Status Error +(ada2:ata3:0:0:0): ATA status: 51 (DRDY SERV ERR), error: 10 (IDNF ) +(ada2:ata3:0:0:0): RES: 51 10 95 5d c9 48 48 00 00 7b 00 +(ada2:ata3:0:0:0): Retrying command host2.example.com kernel log messages: +++ /tmp/security.6FMBBSOx 2014-12-30 03:01:07.000000000 -0800 +(da0:mpt0:0:0:0): WRITE(10). CDB: 2a 00 00 8f 8f a2 00 00 20 00 +(da0:mpt0:0:0:0): CAM status: SCSI Status Error +(da0:mpt0:0:0:0): SCSI status: Busy +(da0:mpt0:0:0:0): Retrying command