LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 12-28-2002, 04:11 PM   #1
SlowLearner
Member
 
Registered: Dec 2002
Location: Florida
Distribution: Slackware 14.2
Posts: 57
Blog Entries: 1

Rep: Reputation: 20
Question Understanding System Logs


I’m not sure where to start since one problem seems to be bleeding to the next.
I recently installed a boxed copy of RH 8.0 on a pretty vanilla Wintel system that is less than year old. I’ve got zero experience with Linux and I seem to be spending every waking hour struggling learn how to configure the OS to perform the most basic of tasks.

The system actually boots now and only freezes up every hour or so. cat meminfo returns nothing out of the ordinary but being a newbie I suppose it’s possible I might be missing something there.

Since 95% of the time the lock-ups occur while I’m in mozilla I though maybe it was just that mozilla was a less-than-completely-stable application. I thought maybe I would try to download and install Netscape 6.1. However, when I click on the download button on Netscape’s site the dialog box comes up asking if I want to save it to disk or whatever and my system immediately locks up. I’ve yet to figure out how to unfreeze, halt, reset or get out of this state once I’m in it. Mouse and keyboard are completely unresponsive. System clock in the lower left doesn’t change.

I thought maybe what was causing this particular crash was that my firewall was set for HIGH security which doesn't allow active mode FTP ( but allowing passive FTP - whatever THAT means ) So I attempted to change the security level from high to medium or even custom to allow FTP. Whatever changes I made using redhat-config-securitylevel Configuration tool never seemed to take effect. Next time I’d open the tool it would show High security level again.

So rather than continue to chase-my-tail I’m hoping there is some way that I can troubleshoot my system using some sort of error log to determine exactly what type of error is causing this freeze–up problem. Is there some funky runtime-level I can test drive the system with or is there any useful info to be gleaned from the extensive system logs redhat provides?

Also – isn’t Cntrl-Alt-Del supposed to work the same in Redhat as in W2K ? You know where it gives you the option to end-task of the application that is not responding? I think this constant hard re-booting is causing the error to occur ever more frequently now.

Any advice would be MOST appreciated.

Thanks,
SlowLearner
 
Old 12-28-2002, 07:59 PM   #2
peter_robb
Senior Member
 
Registered: Feb 2002
Location: Szczecin, Poland
Distribution: Gentoo, Debian
Posts: 2,458

Rep: Reputation: 48
There can be many reasons for lockups, bad disk sectors, lack of ram, poor X-windows configuration...
Most log files are located in the /var/log/ directory.
If you open up a terminal window and get a command line, enter
tail -f /var/log/messages

This will allow you to view the log messages as they are printed.
Set the window full size and the Mozilla window half height so you can read the new lines as they appear in the bottom of the screen...
Another file to watch is
tail -f /var/log/XFree86.0.log
which lists information from the X-Windows server...
You can have many terminal windows open at a time...

Ctrl-Alt-Del is used to reboot the system...
Ctrl-Esc will give you the running software and info...

It appears the "security Setting" tool is broken. enter
netstat -anp
to get a list of servers listening for connections. Maybe for the moment "High" security is appropriate...
You can decide which servers you want running and which to turn off...
chkconfig --list
service ~~~ stop
chkconfig ~~~ off

RH8 has some good documentation online .. http://www.redhat.com/docs/manuals/l...HL-8.0-Manual/

Last edited by peter_robb; 12-28-2002 at 08:02 PM.
 
Old 12-29-2002, 12:00 AM   #3
SlowLearner
Member
 
Registered: Dec 2002
Location: Florida
Distribution: Slackware 14.2
Posts: 57

Original Poster
Blog Entries: 1

Rep: Reputation: 20
Thanks Peter- Linux Help Everyone, for getting back to me so fast..

RH8 does have some good documentation that I have been absolutely LIVING in for the last week and 6 re-installs.. But I still have a long way to go.

System quit booting so I did another fresh format/install again from CD's.. Amazingly even with the system up fresh and running fine Ctrl-Alt-Del does NOTHING as does Ctrl-Esc ( Strange - but I'm getting used to strange with Linux) I try this on the desktop.. Inside a terminal window.. inside monzilla and nothing.

Of course the system is still locking up fairly often although I was able to actually begin the FTP process for almost 10-20 sec. once before it locked up. I am getting several error messages from the log files.

kernel: ohci1394: pci_module_inti failed ( which I believe has something to do with firewire which I do not have - and therefore I don't think this is a factor )

modprobe: modprobe:Can't locate module sound-service-0-3 ( which is something to do with the fact that I don't have any sound which I never really noticed before and am not too concerned with just yet.. )

And more importantly-
eepro100: wait_for_cmd_done timeout!
last message repeated 25 times
NETDEV WATCHDOG eth0: transit timed out
xinetd[951] warning: can't get client address: Transport endpoint is not connected

Anyone have any ideas what would cause my eepro100b to intermittently reflect these types of error msgs and lockup the entire system?

Of course now that I write that out it would make much more sense that it is the OS that begins to slow and become unstable, causing the eth0 to start showing errors then finally the whole system freezes. Sometimes the crashing process takes a full 3-4 minutes. Other times, such as when I am attempting to FTP it takes only a fraction of a second.

I need to find some way to isolate the initial cause of the crash.

Thanks,
SlowLearner
 
Old 12-29-2002, 12:11 AM   #4
gokulagiridaran
Member
 
Registered: Dec 2002
Posts: 36

Rep: Reputation: 15
check out the log file tail -f /var/log/messages. And send the logs .. or change the firewall settings to custom and allow the connections u want.
 
Old 12-29-2002, 12:55 AM   #5
SlowLearner
Member
 
Registered: Dec 2002
Location: Florida
Distribution: Slackware 14.2
Posts: 57

Original Poster
Blog Entries: 1

Rep: Reputation: 20
Dec 29 01:14:18 localhost kernel: i810: Intel ICH2 found at IO 0xef00 and 0xe800
, IRQ 9
Dec 29 01:14:19 localhost kernel: i810_audio: Audio Controller supports 6 channe
ls.
Dec 29 01:14:19 localhost kernel: i810_audio: Defaulting to base 2 channel mode.
Dec 29 01:14:19 localhost kernel: ac97_codec: AC97 Audio codec, id: 0x4144:0x536
0 (Analog Devices AD1885)
Dec 29 01:14:19 localhost kernel: i810_audio: AC'97 codec 0 Unable to map surrou
nd DAC's (or DAC's not present), total channels = 2
Dec 29 01:14:19 localhost modprobe: modprobe: Can't locate module sound-service-
0-3
Dec 29 01:14:20 localhost kernel: Attached scsi CD-ROM sr0 at scsi0, channel 0,
id 0, lun 0
Dec 29 01:14:20 localhost kernel: sr0: scsi3-mmc drive: 32x/32x writer cd/rw xa/
form2 cdda tray
Dec 29 01:14:20 localhost kernel: Uniform CD-ROM driver Revision: 3.12
Dec 29 01:47:17 localhost su(pam_unix)[1082]: session opened for user root by (u
id=500)

I don't have a SCSI anything.. only IDE.
I don't think I understand firewall settings enough to custom allow connections just yet.. I'm kinda slow you know?

Thanks alot though,
SlowLearner
 
Old 02-28-2003, 09:33 AM   #6
jmckeand
LQ Newbie
 
Registered: Nov 2002
Location: Crofton, MD
Distribution: RedHat 9.0
Posts: 15

Rep: Reputation: 0
Do you have a IDE Burner?

If you do the SCSI thing is a IDE-SCSI emulation for the Burner to work. All Burning software I know about for Linux depends on a SCSI Burner. Thus, you have to trick the OS into thinking that the IDE Burner is a SCSI device. Red hat should do this for you on install. If you ever replace a regular drive with a burner you will pull your hair out. Until, you read the docs (RTFM).

Hope this helps...
 
Old 02-28-2003, 10:45 AM   #7
SlickWilly
Member
 
Registered: Dec 2002
Posts: 327

Rep: Reputation: 30
It sounds to me like you might have an IRQ or memory issue.

If you can, try the following :

Replace your SIMMS. Often the causes for random, but frequent lockups are bad Memory SIMMS. If you can pull something out of a known good machine and put them in your box for testing - that would help.

Remove any PCI devices you're not using. I see you have your sound stuff enabled on your motherboard - turn it off. If you have another network card, take out the one you're using now and test it with something else.

Ctrl-ALT-DEL does *not* work the same way as in Windows. To kill tasks in Linux you can use the command line and kill the process manually :

ps -ef | grep <program>
note PID (Process ID) number of program
kill <number>

If that fails to stop it - kill -9 <number>

is the 'nasty' way of killing a process dead in it's tracks. Think of the first as using 'File--> Exit' and the second as hitting the X on the window box to the right.

I'm not a GUI user on the whole, and I'm not entirely sure how Gnome/KDE handles the ctrl-alt-del thing.

Slick.
 
Old 05-26-2003, 09:11 PM   #8
batchild
LQ Newbie
 
Registered: May 2003
Location: Colorado Springs, CO
Distribution: Red Hat V7/V9/AS/Fedora
Posts: 22

Rep: Reputation: 15
Resolution looks to be to install the latest eepro100 driver (see url info. in post)

Hello,

I too am seeing similiar (if not exact) timeout errors on my
ethernet interface:

*************

eepro100: wait_for_cmd_done timeout!
last message repeated 25 times
NETDEV WATCHDOG eth0: transit timed out
xinetd[951] warning: can't get client address:
Transport endpoint is not connected

*************

..and what I also see as a result is:

>sporadic system hangs
>loss of network connectivity.

The resolution (as far as I can tell) is to install the latest driver for the Intel Pro100 ethernet adapter. I have found reference to it at the following locations (READMEs included):

1.
http://www.intel.com/support/network...linux/e100.htm

2.
http://www.scyld.com/pipermail/eepro...il/000006.html


Hope this helps.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
The system logs problem ust Linux - General 1 03-23-2005 02:24 AM
help me understanding iptables logs ddaas Linux - Security 1 02-23-2005 09:08 AM
Where are the system logs? cereal83 Slackware 3 07-17-2004 01:55 PM
where are the system logs? juanb Linux - General 2 10-18-2003 08:33 AM
System Logs NSKL Linux - General 1 06-07-2002 04:29 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:53 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration