From owner-freebsd-questions@FreeBSD.ORG Sat Mar 4 15:24:19 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 73C2816A420 for ; Sat, 4 Mar 2006 15:24:19 +0000 (GMT) (envelope-from polandj@monkey.org) Received: from naughty.monkey.org (naughty.monkey.org [65.23.81.140]) by mx1.FreeBSD.org (Postfix) with ESMTP id D6C9043D46 for ; Sat, 4 Mar 2006 15:24:18 +0000 (GMT) (envelope-from polandj@monkey.org) Received: by naughty.monkey.org (Postfix, from userid 6) id 6C1D4536E89; Sat, 4 Mar 2006 10:24:17 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by naughty.monkey.org (Postfix) with ESMTP id 65274536E78 for ; Sat, 4 Mar 2006 10:24:17 -0500 (EST) Date: Sat, 4 Mar 2006 10:24:17 -0500 (EST) From: Jon Poland To: freebsd-questions@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: How to figure out who shutdown box X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Mar 2006 15:24:19 -0000 Hi, I operate a colo box running FreeBSD 6.0-SECURITY. Yesterday the box shutdown and powered off. I didn't execute shutdown or halt, and I'm the only user who can. Here's what the logs tell me: /var/log/console.log: Mar 3 11:24:29 kmart kernel: Shutting down daemon processes: /var/log/messages: Mar 3 11:24:38 kmart syslogd: exiting on signal 15 last: (the important lines) reboot ~ Fri Mar 3 13:10 shutdown ~ Fri Mar 3 11:24 I don't see anything in any of the logs like "rebooted by X", etc. I'm not exactly sure how this can happen and looking for ideas. Thanks - JP dmesg output: ------------- Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-SECURITY #0: Wed Jan 25 07:00:52 UTC 2006 root@builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC ACPI APIC Table: Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz (2994.90-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf41 Stepping = 1 Features=0xbfebfbff Features2=0x441d> real memory = 1072562176 (1022 MB) avail memory = 1040687104 (992 MB) ioapic0 irqs 0-23 on motherboard ioapic1 irqs 24-47 on motherboard npx0: [FAST] npx0: on motherboard npx0: INT 16 interface acpi0: on motherboard acpi0: Power Button (fixed) pci_link0: irq 11 on acpi0 pci_link1: irq 5 on acpi0 pci_link2: irq 10 on acpi0 pci_link3: irq 12 on acpi0 pci_link4: irq 0 on acpi0 pci_link5: irq 0 on acpi0 pci_link6: irq 0 on acpi0 pci_link7: irq 7 on acpi0 Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0 cpu0: on acpi0 acpi_button0: on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 pcib1: at device 3.0 on pci0 pci1: on pcib1 em0: port 0xb000-0xb01f mem 0xfb000000-0xfb01ffff irq 18 at device 1.0 on pci1 em0: Ethernet address: 00:30:48:84:19:a8 em0: Speed:N/A Duplex:N/A pcib2: at device 28.0 on pci0 pci2: on pcib2 twe0: <3ware Storage Controller. Driver version 1.50.01.002> port 0xc000-0xc00f mem 0xfa000000-0xfa7fffff irq 24 at device 1.0 on pci2 twe0: [GIANT-LOCKED] twe0: 4 ports, Firmware FE8S 1.05.00.068, BIOS BE7X 1.08.00.048 pcib3: at device 30.0 on pci0 pci3: on pcib3 pci3: at device 9.0 (no driver attached) em1: port 0xd100-0xd13f mem 0xf9000000-0xf901ffff irq 19 at device 10.0 on pci3 em1: Ethernet address: 00:30:48:84:19:a9 em1: Speed:N/A Duplex:N/A isab0: at device 31.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 31.1 on pci0 ata0: on atapci0 ata1: on atapci0 pci0: at device 31.3 (no driver attached) acpi_tz0: on acpi0 fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FAST] sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0 sio1: type 16550A atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] pmtimer0 on isa0 orm0: at iomem 0xc0000-0xc7fff,0xc8000-0xc8fff on isa0 ppc0: parallel port not found. sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounter "TSC" frequency 2994899910 Hz quality 800 Timecounters tick every 1.000 msec acd0: CDROM at ata1-master UDMA33 twed0: on twe0 twed0: 238474MB (488395120 sectors) Trying to mount root from ufs:/dev/twed0s1a em0: link state changed to UP