[CentOS] System Rebooted by 2.6.18-8.1.8.el5

[William L. Maltby]

On Wed, 2008-03-26 at 10:31 +0000, Andrew Hearn wrote:
> Mogens Kjaer wrote:
> > Andrew Hearn wrote:
> >> Hello,
> >>
> >> I have a machine that seemed to reboot by itself yesterday, in
> >> /var/log/messages I only see:
> >>
> >> Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot
> > 
> > What do you mean by "only see"?
> > 
> > Are there no lines before this in /var/log/messages?
> > 
> > Maybe in /var/log/messages.1 ?
> > 
> > Mogens
> > 
> 
> Sorry, more of the log around the time of the reboot
> 
> Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP:
> [81.187.81.187]:38190
> Mar 25 14:26:12 asterisk snmpd[3189]: Connection from UDP:
> [81.187.81.187]:38196
> Mar 25 14:26:12 asterisk snmpd[3189]: Received SNMP packet(s) from UDP:
> [81.187.81.187]:38196
> Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP:
> [81.187.81.187]:38205
> Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP:
> [81.187.81.187]:38205
> Mar 25 14:26:13 asterisk snmpd[3189]: Connection from UDP:
> [81.187.81.187]:38211
> Mar 25 14:26:13 asterisk snmpd[3189]: Received SNMP packet(s) from UDP:
> [81.187.81.187]:38211
> Mar 25 14:26:14 asterisk snmpd[3189]: Connection from UDP:
> [81.187.81.187]:38211
> Mar 25 14:26:19 asterisk last message repeated 8 times
> Mar 25 14:26:19 asterisk snmpd[3189]: Connection from UDP:
> [81.187.81.187]:38174
> Mar 25 14:26:20 asterisk last message repeated 13 times
> Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot

This looks like a normal shutdown command was issued from somewhere,
IMO. I would check the other log files under /var/log and its sub-
directories for entries around this time. Especially secure.log*. Also,
I don't know your configuration, but is there a cron or at entry that
has a scheduled reboot?

> <snip more log stuff>

HTH
-- 
Bill