trouble shooting tomact server
 

Friends i m a newbie to linux i m maintaning a Tomcat apache running on Red hat linux server.
From last few days it is showing very odd behaviour it almost daily restarts automaticaly. during night time. when i check its sercure log i found
----------------
Apr 17 17:01:02 ITCELL xinetd[834]: START: telnet pid=2013 from=111.67.203.41
Apr 17 17:01:02 ITCELL xinetd[834]: START: telnet pid=2014 from=111.67.203.41
Apr 17 17:01:02 ITCELL xinetd[834]: START: telnet pid=2015 from=111.67.203.41
Apr 17 17:08:13 ITCELL xinetd[834]: START: telnet pid=2016 from=111.67.203.41
Apr 17 17:08:13 ITCELL xinetd[834]: START: telnet pid=2017 from=111.67.203.41
Apr 17 17:09:47 ITCELL xinetd[834]: START: telnet pid=2018 from=111.67.203.41
Apr 17 17:09:47 ITCELL xinetd[834]: START: telnet pid=2019 from=111.67.203.41
Apr 17 17:09:47 ITCELL xinetd[834]: START: telnet pid=2020 from=111.67.203.41
Apr 17 19:33:58 ITCELL xinetd[834]: START: telnet pid=2143 from=111.67.203.41
Apr 17 19:33:58 ITCELL xinetd[834]: START: telnet pid=2144 from=111.67.203.41
Apr 17 19:33:59 ITCELL xinetd[834]: START: telnet pid=2145 from=111.67.203.41
Apr 17 19:35:38 ITCELL xinetd[834]: START: telnet pid=2146 from=111.67.203.41
Apr 17 19:35:38 ITCELL xinetd[834]: START: telnet pid=2147 from=111.67.203.41
Apr 17 19:35:41 ITCELL xinetd[834]: START: telnet pid=2148 from=111.67.203.41
Apr 18 11:38:22 ITCELL xinetd[833]: START: ftp pid=1949 from=41.67.16.85
Apr 18 11:39:24 ITCELL xinetd[833]: EXIT: ftp pid=1949 duration=62(sec)
Apr 18 12:40:03 ITCELL xinetd[833]: START: ftp pid=1997 from=203.189.68.61
Apr 18 12:41:08 ITCELL xinetd[833]: EXIT: ftp pid=1997 duration=65(sec)
Apr 18 13:15:51 ITCELL xinetd[833]: START: telnet pid=2020 from=111.67.203.41
Apr 18 13:15:51 ITCELL xinetd[833]: START: telnet pid=2021 from=111.67.203.41
Apr 18 13:15:51 ITCELL xinetd[833]: START: telnet pid=2022 from=111.67.203.41
Apr 18 13:17:40 ITCELL xinetd[833]: START: telnet pid=2024 from=111.67.203.41
Apr 18 13:17:40 ITCELL xinetd[833]: START: telnet pid=2025 from=111.67.203.41
Apr 18 16:18:14 ITCELL xinetd[833]: START: ftp pid=2151 from=117.239.29.114
Apr 18 16:34:14 ITCELL xinetd[833]: EXIT: ftp pid=2151 duration=960(sec)
Apr 18 16:35:40 ITCELL xinetd[833]: START: telnet pid=2164 from=111.67.203.41
Apr 18 16:35:43 ITCELL xinetd[833]: START: telnet pid=2165 from=111.67.203.41
Apr 18 16:35:43 ITCELL xinetd[833]: START: telnet pid=2166 from=111.67.203.41
Apr 18 16:43:43 ITCELL xinetd[833]: START: ftp pid=2173 from=117.239.29.114
Apr 18 16:45:31 ITCELL xinetd[833]: EXIT: ftp pid=2173 duration=108(sec)
Apr 18 16:45:34 ITCELL xinetd[833]: START: ftp pid=2174 from=117.239.29.114
Apr 18 16:47:43 ITCELL xinetd[833]: START: ftp pid=2175 from=117.239.29.114
Apr 18 16:48:46 ITCELL xinetd[833]: START: ftp pid=2176 from=117.239.29.114
Apr 18 16:48:56 ITCELL xinetd[833]: EXIT: ftp pid=2175 duration=73(sec)
Apr 18 16:49:31 ITCELL xinetd[833]: START: ftp pid=2177 from=117.239.29.114
Apr 18 16:49:47 ITCELL xinetd[833]: EXIT: ftp pid=2176 duration=61(sec)
Apr 18 16:50:32 ITCELL xinetd[833]: EXIT: ftp pid=2177 duration=61(sec)
Apr 18 17:23:48 ITCELL xinetd[833]: EXIT: ftp pid=2174 duration=2294(sec)
Apr 18 19:19:28 ITCELL xinetd[833]: START: telnet pid=2283 from=111.67.203.41
Apr 18 19:19:28 ITCELL xinetd[833]: START: telnet pid=2284 from=111.67.203.41
Apr 18 19:19:31 ITCELL xinetd[833]: START: telnet pid=2285******************************************
when i disable the telnet it starts restrating frequently i.e. with in very one or two hours.while before disbling the telnet it was restaring only in night i.e only once in 24 hours. please help me out.
thanks in advance.
i even stop all the xientd service by command
#/etc/init.d/xinetd stop
but the problem stil remain the same.thanks in advnce its urgent please help me out.........

what has telnet got to do with Tomcat?? Very confusing.

Telnet isn't "restarting" It's starting on demand, something is hitting port 23, and xinetd fires up telnet for you as per its configuraiotn.

if you don't need telnet, which you shouldn't, just install the rpm for it.

thnaks dear for your suggestion- 1.do we have any way to find out the reson of frequent server restart.
actally i m unable to figure out the reason of freqant restart of server. so please tell me where can i found the reason of its frequnt restart...whether it is because of its hardware or software....i have serach a lot in /var/log/message nad /var/log/boot but i couldnt figure out the reason
2.and if stop all the xinetd services does it will imapct the services of tomacat server or not.?and if i disble only telnet than what will be the result.


thanks in advnnce ......waitng for your prompt reply

ok I already said that it is NOT a restart. please read the advice you are given.

and xinetd services have nothing to do with tomcat at all.

thanks again cris but can u tell me exactly how shoud i rectify this proble.firstly what u mena by -"insatll a rpm for telnet" while it is alredy there in xinetd services.and secondly how can i confirm that this server resart problem is exactly due to port 23 hitting.i mean does there is any log in red hat linux by which i can confirm the reson of restarting.as u told.
and what should i do to stop this frequent resart probelm. as i m not a expert so i expect a little more from you please give me step by step solution if u can. i will be very thank ful to you.



regards..

heh, OK, good typo.. I meant *UNINSTALL* it. Sorry about that.

But still, i've told you twice now it is NOT a "restart problem" yet you continue to say it is...

troble shooting tomcat
 

Dear in var/log/message i found
"syslogd 1.3 restart " at the time of system shut down and at the time of system restart the follwoing message is displayed "Award plug and Play extensions V 1.0A intialize plug and play cards PNP init Completed ."

now please help me what todo

Ugh, ok... so ... your server is physically rebooting? And this is nothing to do with telnet at all is it... you appear to not understand what you even want to ask...

if there's nothing useful in the log files (and so far there's nothing of any use at all in what you've posted) it's very hard to track down. You could try changing memory etc, but if nothing is clearly doing anything you can see in your logs, it's very hard to track down. shut down as much as possible, e..g tomcat, and see if anything you do prevents it.

If the OP doesn't know where to look for the proper logs then you are expected to tell them the location instead of pointing.

If you can check and conclude by yourself that there is nothing wrong in the logs then we can't guess about the problem as with the amount of info you have provided the only thing I can guess is the problem can be anything...might be hardware issue as well ... no ideas.

If the system is restarting frequently then secure.log won't be the first place to look at.

check or I would say post your

Thanks Dear.yaa i think it is somewhre hardwae related issue.