On Wed, 2008-03-26 at 10:31 +0000, Andrew Hearn wrote:
Mogens Kjaer wrote:
Andrew Hearn wrote:
Hello,
I have a machine that seemed to reboot by itself yesterday, in /var/log/messages I only see:
Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
What do you mean by "only see"?
Are there no lines before this in /var/log/messages?
Maybe in /var/log/messages.1 ?
Mogens
Sorry, more of the log around the time of the reboot
Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38190 Mar 25 14:26:12 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38196 Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38196 Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38205 Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38205 Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38211 Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38211 Mar 25 14:26:14 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38211 Mar 25 14:26:19 asterisk last message repeated 8 times Mar 25 14:26:19 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38174 Mar 25 14:26:20 asterisk last message repeated 13 times Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
This looks like a normal shutdown command was issued from somewhere, IMO. I would check the other log files under /var/log and its sub- directories for entries around this time. Especially secure.log*. Also, I don't know your configuration, but is there a cron or at entry that has a scheduled reboot?
<snip more log stuff>
HTH