LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-15-2009, 03:10 AM   #1
homyangcha
Member
 
Registered: Jun 2008
Posts: 31

Rep: Reputation: 15
automatic system


Hi friends
My server system running on CentOS 5.3 box automatically shutdown without me executing any command or cronjob. I asked my night assistant if someone accidentally power off the system, but the answer was negative. I tried to find out the reasons for the same but all in vain.

So do anyone have an idea why does the system behave that way. Here are the log files for your reference:

acpid(log):
[Wed Oct 14 00:57:54 2009] received event "button/power PWRF 00000080 00000001"

messages(log):
Oct 14 00:57:54 ns1 shutdown[13838]: shutting down for system halt
Oct 14 00:57:55 ns1 smartd[3004]: smartd received signal 15: Terminated

secure(log):
Oct 14 00:57:56 ns1 sshd[2689]: Received signal 15; terminating.

Thanks in advance
 
Old 10-15-2009, 05:13 AM   #2
homyangcha
Member
 
Registered: Jun 2008
Posts: 31

Original Poster
Rep: Reputation: 15
Sorry the above heading should be "Automatic System Shutdown".
 
Old 10-15-2009, 05:16 AM   #3
lutusp
Member
 
Registered: Sep 2009
Distribution: Fedora
Posts: 835

Rep: Reputation: 102Reputation: 102
Quote:
Originally Posted by homyangcha View Post
Hi friends
My server system running on CentOS 5.3 box automatically shutdown without me executing any command or cronjob. I asked my night assistant if someone accidentally power off the system, but the answer was negative. I tried to find out the reasons for the same but all in vain.

So do anyone have an idea why does the system behave that way. Here are the log files for your reference:

acpid(log):
[Wed Oct 14 00:57:54 2009] received event "button/power PWRF 00000080 00000001"

messages(log):
Oct 14 00:57:54 ns1 shutdown[13838]: shutting down for system halt
Oct 14 00:57:55 ns1 smartd[3004]: smartd received signal 15: Terminated

secure(log):
Oct 14 00:57:56 ns1 sshd[2689]: Received signal 15; terminating.

Thanks in advance
This message --

Code:
[Wed Oct 14 00:57:54 2009] received event "button/power PWRF 00000080 00000001"
-- has exactly one meaning. Someone had to press the power button to create this message. If someone was at the computer and claims no one turned off the machine, they are lying.
 
Old 10-15-2009, 10:51 AM   #4
sploot
Member
 
Registered: Sep 2009
Location: Phoenix, AZ
Distribution: Gentoo, Debian, Ubuntu
Posts: 121

Rep: Reputation: 27
Quote:
Originally Posted by homyangcha View Post
acpid(log):
[Wed Oct 14 00:57:54 2009] received event "button/power PWRF 00000080 00000001"
This should be enough to prove to them that someone on their end did it. Don't pay for the additional service, if they try to charge for it.
 
Old 10-16-2009, 02:59 AM   #5
homyangcha
Member
 
Registered: Jun 2008
Posts: 31

Original Poster
Rep: Reputation: 15
Thanks for the info... but are you guys absolutely sure (i.e 100%) that only pressing the power button off will generate such log message. I m sorry i have to be little skeptical but i have my reasons to be so. Can't there be any other reasons for the same? Thanks again.
 
Old 10-16-2009, 03:38 AM   #6
lutusp
Member
 
Registered: Sep 2009
Distribution: Fedora
Posts: 835

Rep: Reputation: 102Reputation: 102
Quote:
Originally Posted by homyangcha View Post
Thanks for the info... but are you guys absolutely sure (i.e 100%) that only pressing the power button off will generate such log message. I m sorry i have to be little skeptical but i have my reasons to be so. Can't there be any other reasons for the same? Thanks again.
It is very improbable for this message to be generated in any way apart from someone physically pressing the power button.

Obviously someone could hack the log file and deliberately make a bogus entry. What's the probability of that?
 
Old 10-16-2009, 07:38 AM   #7
homyangcha
Member
 
Registered: Jun 2008
Posts: 31

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by lutusp View Post
It is very improbable for this message to be generated in any way apart from someone physically pressing the power button.

Obviously someone could hack the log file and deliberately make a bogus entry. What's the probability of that?
The probability of someone hacking the system is very less. I mean the system is quite secure. Besides, I can make out through the logs who logged in and who logged out. I am quite positive the system shutdown by itself but not sure what caused it because it happened once last time also. But that time i didn't bother much and didn't look at the logs also and just power on the system. This is the second time i must say, though i was not physically present there like last time. Could it be hardware failure or some fan problem?
 
Old 10-16-2009, 09:26 AM   #8
adm1329
Member
 
Registered: Mar 2004
Distribution: CentOS 5
Posts: 128

Rep: Reputation: 17
The only other thing I can think of would be a weird hardware failure, possibly a short in the wires from the power button to the motherboard. Something shorted the power jumper on the motherboard, most likely by pressing the power switch, but I guess it's possible it could be bare spots on the wire and someone could have bumped the box and it just happened to short momentarily.... but then that's a long shot....
 
Old 12-14-2009, 01:07 AM   #9
homyangcha
Member
 
Registered: Jun 2008
Posts: 31

Original Poster
Rep: Reputation: 15
Automatic System Shutdown Again

Hi Friends,
Sorry, i m back again with the same problem and the same logs messages, except that it happened on the same day of the month but a couple of hours later. Here are the logs:

messages(log):
Dec 14 03:17:26 ns1 shutdown[22178]: shutting down for system halt
Dec 14 03:17:27 ns1 smartd[2946]: smartd received signal 15: Terminated

acpid(log):
[Mon Dec 14 03:17:26 2009] received event "button/power PWRF 00000080 00000001"

secure(log):
Dec 14 03:17:28 ns1 sshd[2638]: Received signal 15; terminating.

I tried to find out the problem last time but to no avail and carried on thinking it will not happen again. But i was wrong. It happened again and still m trying to find out the problem or the cause of the problem. At least i m sure nobody switch off the power button. Do you have any ideas friends.

Thanks and Regards
 
Old 12-14-2009, 11:33 AM   #10
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,945

Rep: Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693
Quote:
Originally Posted by homyangcha View Post
Hi Friends,
Sorry, i m back again with the same problem and the same logs messages, except that it happened on the same day of the month but a couple of hours later. Here are the logs:

messages(log):
Dec 14 03:17:26 ns1 shutdown[22178]: shutting down for system halt
Dec 14 03:17:27 ns1 smartd[2946]: smartd received signal 15: Terminated

acpid(log):
[Mon Dec 14 03:17:26 2009] received event "button/power PWRF 00000080 00000001"

secure(log):
Dec 14 03:17:28 ns1 sshd[2638]: Received signal 15; terminating.

I tried to find out the problem last time but to no avail and carried on thinking it will not happen again. But i was wrong. It happened again and still m trying to find out the problem or the cause of the problem. At least i m sure nobody switch off the power button. Do you have any ideas friends.

Thanks and Regards
You were told the cause of the problem before. The log is VERY clear. Someone is pushing the power button. That's the ONLY meaning that message has, period. Unless, as adm1329 pointed out, you're having a VERY strange hardware failure, SOMEONE IS POWERING THE SYSTEM OFF.

Not sure how much more clear the log message has to be...
 
Old 12-14-2009, 01:13 PM   #11
jf.argentino
Member
 
Registered: Apr 2008
Location: Toulon (France)
Distribution: FEDORA CORE
Posts: 493

Rep: Reputation: 50
Is there any possibility for a watchdog reset to be seen by the kernel as a power off action? I know that some hardware have BIOS implemented watchdog, especially for server MOBO, or embedded plateform...
 
Old 12-14-2009, 06:00 PM   #12
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,241

Rep: Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325
I'd go with someone hitting the power button.
Another possibility might(!) be someone disconnected it/switched off at the wall.
Cleaning staff have been know to do that to plug in vacuum cleaners in an office env ie not in a dedicated data centre room.
It's happened to me....
 
Old 12-14-2009, 06:08 PM   #13
paulsm4
LQ Guru
 
Registered: Mar 2004
Distribution: SusE 8.2
Posts: 5,863
Blog Entries: 1

Rep: Reputation: Disabled
homyangcha-

To the extent you might want/need to investigate further .. and you're willing to do a bit of homework and/or write a few scripts - this link might help:

http://linuxgazette.net/106/pramode.html
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Automatic System Shutdown (On Idle) Megatog615 Linux - Laptop and Netbook 3 08-15-2013 05:31 PM
Automatic system shutdown chobin SUSE / openSUSE 2 06-05-2006 09:51 AM
automatic encrypted swap system 90-60-90 Linux - Security 2 02-09-2005 05:56 PM
Automatic system rebbot stops installation linmix Yoper 0 11-15-2004 04:59 AM
how to stop automatic system dialing shams Mandriva 0 06-03-2004 11:25 AM


All times are GMT -5. The time now is 04:17 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration