LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 03-29-2012, 07:01 PM   #1
shorto
Member
 
Registered: Jul 2006
Distribution: Debian 6.0.2.1 i386
Posts: 111

Rep: Reputation: 15
Server rebooting for no reason, logs?


Hello all!

Well I found today that my server had rebooted and I got get the logs...

Quote:
Mar 29 12:26:59 kakashi-sensei shutdown[8205]: shutting down for system reboot
Mar 29 12:27:00 kakashi-sensei init: Switching to runlevel: 6
Is there a way to see why the system rebootet or how it came to this? I mean was it via ssh or something other?

Cheers,
shorto

Last edited by shorto; 03-29-2012 at 07:06 PM.
 
Old 03-29-2012, 09:02 PM   #2
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Debian, Mint, OpenBSD
Posts: 11,340
Blog Entries: 12

Rep: Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730Reputation: 2730
This might tell you something. I just tested it.

Code:
# cat /var/log/messages | grep shutdown
Mar 29 21:01:17 tuna shutdown[14571]: shutting down for system halt
Edit: If you find a shutdown command, you can then search backwards for an ssh connection.

Last edited by frankbell; 03-29-2012 at 09:03 PM.
 
Old 03-30-2012, 04:29 AM   #3
singhjc
Member
 
Registered: Nov 2010
Location: Moradabad
Distribution: Redhat,Centos
Posts: 31

Rep: Reputation: 1
hello if you suspect like somebody reboot your system through ssh then you can just check through

#utmpdump /var/log/wtmp | cat

it will tell you which ip had accessed your system and what was the time.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
CentOS 5.5 is rebooting frequently without any logs on the server cvhbsk Linux - General 2 02-05-2011 01:20 AM
Finding LDAP Server Logs / Application Logs in Linux arbignay Linux - Newbie 2 03-24-2008 10:54 AM
Mashine crashes daily at about 19.00 how to find the logs and reason on Sun turalo Solaris / OpenSolaris 4 01-21-2007 09:20 PM
reason for separating web server and database server hardigunawan Linux - Security 5 01-25-2003 01:45 PM


All times are GMT -5. The time now is 02:33 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration