Date: Tue, 20 Oct 1998 10:00:28 -0700 From: Jerry Preeper <preeper@cts.com> To: freebsd-questions@FreeBSD.ORG Subject: post crash help needed Message-ID: <3.0.5.32.19981020100028.008c08b0@crash.cts.com>
next in thread | raw e-mail | index | archive | help
Hello My colocated web server (running FreeBSD 2-2-6Release and Apache 1.30 (I believe) just crashed and I have not been able to get in touch with my system administrator. I have been able to get the server back up and running again by having my service provider log in at the console and issuing the shutdown command and rebooting. I have changed the root password almost immediately after I have seen the system come back up. Now my question is, since I can't find my sysadmin, where should I look for the cause of the crash and to see if it was just a hiccup or a security break or some sort of DoS attack? I have checked last -50 and don't see any logins for about 45 minutes before it crashed. I have a cron job that runs a system check and emails me the results hourly, it looks like I got one right before it crashed with the following message in it: ping: sendto: No buffer space available I found out it crashed when my colocate company called and said it dropped ping. I was on the machine less than 15 minutes before they called so it wasn't down for too long. I also checked /var/log/messages and all I see are some standard ftp messages (session closed, no transfer time out, etc..) right before the reboot message. The dmesg.today file is dated Oct 15 and doesn't have any helpful info. ipfw.today is also dated Oct 15 I checked maillog and don't see anything unusual there either. The xferlog file shows only normal ftp activity that I can see. Can anyone be of assistance in identifying what might have happened? Jerry Preeper preeper@cts.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.5.32.19981020100028.008c08b0>