How to know when was an ethernet wire fisically unplugged from a server?
 

Hello, I'm experienced in Linux for only 2 years, and I would like to know if it's possible to know the date and time when an ethernet wire was unplugged from a server. This server is running Apache2, Tomcat 4.1.31, MySQL 4 and ProFTPd. The kernel version is 2.6.12-10.

Somebody removed the ethernet connection from a server in my office and I would like to know at what date and time he did it.

Can somebody help me?

Thank you.

dmesg | grep 'down'
If you have timestamps in dmesg - you'll have time in seconds since system boot. Maybe logs of servers, who stopped getting connections at the same time will make something clear.

this typically gets logged to the /var/log/messages file...

for example, i just quickly unplugged a cable from one of my NICs and in /var/log/messages i can see this:as you can see, the time and date are clearly printed...

Thank you
 

Thank you very much for your help.

I found the logged record in the file /var/log/messages and in the file /var/log/kern.log as a "NIC link is Down" error message.

Thanks a lot.