LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (http://www.linuxquestions.org/questions/linux-general-1/)
-   -   How can I find out the reason of unexpected reboot (redhat3+2.6.11)? (http://www.linuxquestions.org/questions/linux-general-1/how-can-i-find-out-the-reason-of-unexpected-reboot-redhat3-2-6-11-a-326578/)

yuzuohong 05-24-2005 09:31 AM

How can I find out the reason of unexpected reboot (redhat3+2.6.11)?
 
Hi all,

My system: P4-2.8, 1GB memory, 80GB HD, RedHat Enterprise Server 3, 2.6.11 Kernel.
Running Services: Apache 2.0.53, PHP 4.3.11, MySQL 4.1.11, ProFTPD 1.2.10, Qmail 1.3, SSH.
I've experienced such kind of strange system reboot for 3 times during 10 days. Since the box is a rented host outside of my country, I could only SSH to it and check the logs. This is what I found in /var/logs/message:

-------------------------------
May 24 08:05:10 hostname su(pam_unix)[28854]: session closed for user root
May 24 08:05:16 hostname sshd(pam_unix)[28825]: session closed for user temp
May 24 16:44:47 hostname syslogd 1.4.1: restart.
May 24 16:44:47 hostname syslog: syslogd startup succeeded
May 24 16:44:47 hostname syslog: klogd startup succeeded
May 24 16:44:47 hostname kernel: klogd 1.4.1, log source = /proc/kmsg started.
May 24 16:44:47 hostname kernel: Linux version 2.6.11.10 (root@go2france) (gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-49)) #2 Wed May 18 12:31:21 CDT 2005
-------------------------------

Based on this information, I still don't know what happened to my server before May 24 16:44. (The SSH record is me.)
Is there some setup or new feature to reboot automatically? How can I find out the reason? Or am I under attacks?

Any comments will be appreciated.

Zh.y

oneandoneis2 05-24-2005 10:04 AM

Have you asked the people you're renting it from? It could be something as simple as a power cut.

yuzuohong 05-24-2005 06:49 PM

Quote:

Originally posted by oneandoneis2
Have you asked the people you're renting it from? It could be something as simple as a power cut.
Hi,

No, they didn't do anything. That's a quite huge IDC. I believe them.


All times are GMT -5. The time now is 08:00 PM.