From owner-freebsd-questions  Thu Nov 14 08:54:38 1996
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id IAA17395
          for questions-outgoing; Thu, 14 Nov 1996 08:54:38 -0800 (PST)
Received: from light.pomona.edu (light.pomona.edu [134.173.72.79])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id IAA17390
          for <questions@freebsd.org>; Thu, 14 Nov 1996 08:54:35 -0800 (PST)
Received: from localhost (jadeite@localhost) by light.pomona.edu (8.7.5/8.7.3) with SMTP id IAA01438; Thu, 14 Nov 1996 08:54:20 -0800 (PST)
Date: Thu, 14 Nov 1996 08:54:20 -0800 (PST)
From: jadeite <jadeite@light.pomona.edu>
To: Frode Nordahl <froden@bigblue.no>
cc: "questions@freebsd.org" <questions@freebsd.org>
Subject: Re: Hackers?
In-Reply-To: <199611141447.PAA02691@login.bigblue.no>
Message-ID: <Pine.BSF.3.95.961114085336.1251A-100000@light.pomona.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

there was one time when my machine rebooted becuz xinit was started
without the proper X configuration.  

On Thu, 14 Nov 1996, Frode Nordahl wrote:

> Last night, one of our FreeBSD 2.1.5 machines rebooted.  There is no entry of it in the messages file, but the lastlog says this
> 
> xxx       ttyp0    xxxx            Thu Nov 14 02:11 - 02:13  (00:01)
> reboot    ~                         Thu Nov 14 02:01
> xxxx     ttyp7    xxxxxxxxx Thu Nov 14 00:36 - 00:44  (00:07)
> 
> (Usernames and hostnames of the entry above/under are scratched out...)
> 
> As you can see, no one was logged on at the time.  The messages file has noe entries of the activity other than the kernel 
> startupmessages.
> 
> Can a FreeBSD box do this of itself if it gets into trouble?  Memory fault, disk fault or something like that?  Or do we have reason 
> to believe this is hacker activity?
> 
> In any case, what should we do??
> 
>