Hello,
I have a machine that seemed to reboot by itself yesterday, in /var/log/messages I only see:
Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
When I type: last reboot
I see:
reboot system boot 2.6.18-8.1.8.el5 Tue Mar 25 14:28 (18:41)
So it seems like the kernel rebooted, but I'm not sure how I can track down why, any pointers?
Thanks!
Andrew
Andrew Hearn wrote:
Hello,
I have a machine that seemed to reboot by itself yesterday, in /var/log/messages I only see:
Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
What do you mean by "only see"?
Are there no lines before this in /var/log/messages?
Maybe in /var/log/messages.1 ?
Mogens
Mogens Kjaer wrote:
Andrew Hearn wrote:
Hello,
I have a machine that seemed to reboot by itself yesterday, in /var/log/messages I only see:
Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
What do you mean by "only see"?
Are there no lines before this in /var/log/messages?
Maybe in /var/log/messages.1 ?
Mogens
Sorry, more of the log around the time of the reboot
Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38190 Mar 25 14:26:12 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38196 Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38196 Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38205 Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38205 Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38211 Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38211 Mar 25 14:26:14 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38211 Mar 25 14:26:19 asterisk last message repeated 8 times Mar 25 14:26:19 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38174 Mar 25 14:26:20 asterisk last message repeated 13 times Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot Mar 25 14:26:47 asterisk smartd[3678]: smartd received signal 15: Terminated Mar 25 14:26:47 asterisk smartd[3678]: smartd is exiting (exit status 0) Mar 25 14:26:49 asterisk nmbd[27664]: [2008/03/25 14:26:49, 0] nmbd/nmbd.c:terminate(58) Mar 25 14:26:49 asterisk nmbd[27664]: Got SIGTERM: going down... Mar 25 14:26:53 asterisk snmpd[3189]: Received TERM or STOP signal... shutting down... Mar 25 14:26:54 asterisk xinetd[3228]: Exiting... Mar 25 14:26:59 asterisk ntpd[3247]: ntpd exiting on signal 15 Mar 25 14:26:59 asterisk kernel: Kernel logging (proc) stopped. Mar 25 14:26:59 asterisk kernel: Kernel log daemon terminating. Mar 25 14:27:00 asterisk exiting on signal 15 Mar 25 14:29:08 asterisk syslogd 1.4.1: restart.
On Wed, 2008-03-26 at 10:31 +0000, Andrew Hearn wrote:
Mogens Kjaer wrote:
Andrew Hearn wrote:
Hello,
I have a machine that seemed to reboot by itself yesterday, in /var/log/messages I only see:
Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
What do you mean by "only see"?
Are there no lines before this in /var/log/messages?
Maybe in /var/log/messages.1 ?
Mogens
Sorry, more of the log around the time of the reboot
Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38190 Mar 25 14:26:12 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38196 Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38196 Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38205 Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38205 Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38211 Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP: [81.187.81.187]:38211 Mar 25 14:26:14 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38211 Mar 25 14:26:19 asterisk last message repeated 8 times Mar 25 14:26:19 asterisk snmpd[3189]: Connection from UDP: [81.187.81.187]:38174 Mar 25 14:26:20 asterisk last message repeated 13 times Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
This looks like a normal shutdown command was issued from somewhere, IMO. I would check the other log files under /var/log and its sub- directories for entries around this time. Especially secure.log*. Also, I don't know your configuration, but is there a cron or at entry that has a scheduled reboot?
<snip more log stuff>
HTH
This looks like a normal shutdown command was issued from somewhere, IMO. I would check the other log files under /var/log and its sub- directories for entries around this time. Especially secure.log*. Also, I don't know your configuration, but is there a cron or at entry that has a scheduled reboot?
also check last log to see who was logged in
Andrew Hearn wrote:
Hello,
I have a machine that seemed to reboot by itself yesterday, in /var/log/messages I only see:
Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
When I type: last reboot
I see:
reboot system boot 2.6.18-8.1.8.el5 Tue Mar 25 14:28 (18:41)
So it seems like the kernel rebooted, but I'm not sure how I can track down why, any pointers?
Thanks!
Andrew
Is there any chance someone could have hit the ctrl-alt-delete key combination on the console to trigger the reboot? I've had people do that inadvertently thinking they were on a Windows machine...
-Greg