On Wed, 2010-08-18 at 15:51 -0400, Preston Connors wrote: > Mark, > > You can look through the output of the 'last' command. last may tell you > what the state of the system was before it rebooted/crashed and also the > time it happened. 'last -x' will tell you more detailed information > regarding system shutdowns and run level changes. > > Example of a crash: > > runlevel (to lvl 2) 2.6.32-24-server Wed Aug 18 10:10 - 15:44 > (05:34) > reboot system boot 2.6.32-24-server Wed Aug 18 10:10 - 15:44 > (05:34) > user1 pts/6 10.10.10.10 Wed Aug 18 09:37 - crash (00:33) --- who :0 Tue Jun 1 09:48 - 09:48 (00:00) who pts/3 foo Tue Jun 1 09:46 - crash (5+00:06) who pts/2 foo Tue Jun 1 09:46 - crash (5+00:06) who :0 Tue Jun 1 09:22 - 09:45 (00:22) Hmm looks like mine keep on getting it... I wonder why? ""reboot system boot 2.6.24.7-148.JonE2 Sun Jun 6 09:52 (00:20) "" Only the names have been scrubbed. Point being crash does not mean the machine died, rebooted or shutdown. Load Avg was 13.0 - 53.0. John