Date: Sun, 27 Apr 2008 09:15:44 -0400 From: Robert Huff <roberthuff@rcn.com> To: Robin Becker <robin@reportlab.com> Cc: freebsd-questions@freebsd.org Subject: shutdown forensics Message-ID: <18452.31872.825011.919326@jerusalem.litteratus.org> In-Reply-To: <481441DC.60103@jessikat.plus.net> References: <481441DC.60103@jessikat.plus.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Robin Becker writes: > I'm trying to figure out what caused an unplanned shutdown of a > freebsd 6.0 server; I see this in the last output > > reboot ~ Thu Apr 24 06:15 > shutdown ~ Thu Apr 24 06:10 > > but cannot see anybody having been logged in at the time. Is > there any way I can trace the origin of the shutdown command? I see a time like that, my gut suspicion for the shutdown is "something drive y a cro job". Robert Huff > > I looked in the root shell history various other logs, but couldn't see > anything obvious.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?18452.31872.825011.919326>