Date: Sat, 4 Mar 2006 10:24:17 -0500 (EST) From: Jon Poland <polandj@monkey.org> To: freebsd-questions@freebsd.org Subject: How to figure out who shutdown box Message-ID: <Pine.BSO.4.58.0603041011130.14807@naughty.monkey.org>
next in thread | raw e-mail | index | archive | help
Hi,
I operate a colo box running FreeBSD 6.0-SECURITY. Yesterday the box
shutdown and powered off. I didn't execute shutdown or halt, and I'm the
only user who can. Here's what the logs tell me:
/var/log/console.log:
Mar 3 11:24:29 kmart kernel: Shutting down daemon processes:
/var/log/messages:
Mar 3 11:24:38 kmart syslogd: exiting on signal 15
last: (the important lines)
reboot ~ Fri Mar 3 13:10
shutdown ~ Fri Mar 3 11:24
I don't see anything in any of the logs like "rebooted by X", etc.
I'm not exactly sure how this can happen and looking for ideas.
Thanks
- JP
dmesg output:
-------------
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.0-SECURITY #0: Wed Jan 25 07:00:52 UTC 2006
root@builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC
ACPI APIC Table: <IntelR AWRDACPI>
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz (2994.90-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf41 Stepping = 1
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x441d<SSE3,RSVD2,MON,DS_CPL,CNTX-ID,<b14>>
real memory = 1072562176 (1022 MB)
avail memory = 1040687104 (992 MB)
ioapic0 <Version 2.0> irqs 0-23 on motherboard
ioapic1 <Version 2.0> irqs 24-47 on motherboard
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <IntelR AWRDACPI> on motherboard
acpi0: Power Button (fixed)
pci_link0: <ACPI PCI Link LNKA> irq 11 on acpi0
pci_link1: <ACPI PCI Link LNKB> irq 5 on acpi0
pci_link2: <ACPI PCI Link LNKC> irq 10 on acpi0
pci_link3: <ACPI PCI Link LNKD> irq 12 on acpi0
pci_link4: <ACPI PCI Link LNKE> irq 0 on acpi0
pci_link5: <ACPI PCI Link LNKF> irq 0 on acpi0
pci_link6: <ACPI PCI Link LNK0> irq 0 on acpi0
pci_link7: <ACPI PCI Link LNK1> irq 7 on acpi0
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> at device 3.0 on pci0
pci1: <ACPI PCI bus> on pcib1
em0: <Intel(R) PRO/1000 Network Connection, Version - 2.1.7> port
0xb000-0xb01f mem 0xfb000000-0xfb01ffff irq 18 at device 1.0 on pci1
em0: Ethernet address: 00:30:48:84:19:a8
em0: Speed:N/A Duplex:N/A
pcib2: <ACPI PCI-PCI bridge> at device 28.0 on pci0
pci2: <ACPI PCI bus> on pcib2
twe0: <3ware Storage Controller. Driver version 1.50.01.002> port
0xc000-0xc00f mem 0xfa000000-0xfa7fffff irq 24 at device 1.0 on pci2
twe0: [GIANT-LOCKED]
twe0: 4 ports, Firmware FE8S 1.05.00.068, BIOS BE7X 1.08.00.048
pcib3: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci3: <ACPI PCI bus> on pcib3
pci3: <display, VGA> at device 9.0 (no driver attached)
em1: <Intel(R) PRO/1000 Network Connection, Version - 2.1.7> port
0xd100-0xd13f mem 0xf9000000-0xf901ffff irq 19 at device 10.0 on pci3
em1: Ethernet address: 00:30:48:84:19:a9
em1: Speed:N/A Duplex:N/A
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel 6300ESB UDMA100 controller> port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 31.1 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
acpi_tz0: <Thermal Zone> on acpi0
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on
acpi0
fdc0: [FAST]
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on
acpi0
sio0: type 16550A
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
pmtimer0 on isa0
orm0: <ISA Option ROMs> at iomem 0xc0000-0xc7fff,0xc8000-0xc8fff on isa0
ppc0: parallel port not found.
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 2994899910 Hz quality 800
Timecounters tick every 1.000 msec
acd0: CDROM <CD-224E/1.9A> at ata1-master UDMA33
twed0: <Unit 1, TwinStor, Normal> on twe0
twed0: 238474MB (488395120 sectors)
Trying to mount root from ufs:/dev/twed0s1a
em0: link state changed to UP
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSO.4.58.0603041011130.14807>