<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>Re: [CentOS] System Rebooted by 2.6.18-8.1.8.el5</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<BR>
<P><FONT SIZE=2>Check if you allow write access to snmp and from whom. A reboot request could have been issued via snmp.<BR>
<BR>
-Ross<BR>
<BR>
<BR>
----- Original Message -----<BR>
From: centos-bounces@centos.org <centos-bounces@centos.org><BR>
To: CentOS mailing list <centos@centos.org><BR>
Sent: Wed Mar 26 07:09:06 2008<BR>
Subject: Re: [CentOS] System Rebooted by 2.6.18-8.1.8.el5<BR>
<BR>
<BR>
> This looks like a normal shutdown command was issued from somewhere,<BR>
> IMO. I would check the other log files under /var/log and its sub-<BR>
> directories for entries around this time. Especially secure.log*. Also,<BR>
> I don't know your configuration, but is there a cron or at entry that<BR>
> has a scheduled reboot?<BR>
><BR>
> <BR>
<BR>
also check last log to see who was logged in<BR>
<BR>
_______________________________________________<BR>
CentOS mailing list<BR>
CentOS@centos.org<BR>
<A HREF="http://lists.centos.org/mailman/listinfo/centos">http://lists.centos.org/mailman/listinfo/centos</A><BR>
</FONT>
</P>
<P></P>
<HR WIDTH="100%">
This e-mail, and any attachments thereto, is intended only for use by
the addressee(s) named herein and may contain legally privileged
and/or confidential information. If you are not the intended recipient
of this e-mail, you are hereby notified that any dissemination,
distribution or copying of this e-mail, and any attachments thereto,
is strictly prohibited. If you have received this e-mail in error,
please immediately notify the sender and permanently delete the
original and any copy or printout thereof.
</BODY>
</HTML>