LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-18-2004, 04:48 PM   #1
alhaidry
LQ Newbie
 
Registered: Jun 2004
Distribution: debian
Posts: 5

Rep: Reputation: 0
Unhappy Fedora C 2 shut down services


Greetings:
I have Fedora C 2 and it is running apache, ssh, vsftp, mailman, and other services. Yesterday I did the updates and one of the updates was the current kernel. I didn’t restart the computer though. The problem is: when I came today I saw the computer running, but all the servers were down. ftp, ssh, apache and x server. I could not connect or log in. So I had to restart it from the power.
I tried to see the log files in /var/log, but didn’t find any thing that explained why it was down. The only thing that I suspect is this in the logwatch email.

WARNING: Kernel Errors Present
eth0: Transmit error, Tx status regis...: 10561 Time(s)
but I was getting this everyday.
What do you think the problem would be?

Any idea or help is highly appreciated.

p.s I have firewall on.

thank you so much.
 
Old 06-19-2004, 06:11 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Network device error, network device configuration error, network error, something like that (FWIW, this doesn't signal anything unfixable to me). BTW, upgrading the kernel and glibc are two situations that warrant rebooting the box.
 
Old 06-19-2004, 10:02 PM   #3
alhaidry
LQ Newbie
 
Registered: Jun 2004
Distribution: debian
Posts: 5

Original Poster
Rep: Reputation: 0
Thanks for the reply, if it is the rebooting, why I could not login locally at all. how come it stopped ever thing and there was no display. Thanks again

Last edited by alhaidry; 06-19-2004 at 10:04 PM.
 
Old 06-20-2004, 06:33 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Don't know, and if your system (syslog, PAM) and services don't log verbose it may even be harder to find. What you could do is find out the time the system was updated, check exactly what was updated, then check (from a few moments before the update until reboot) your system and application logs and login records for anything you can't classify and post it here if it ain't much. If it is a lot of info or you can't work it out you could scrub your logs for IP addresses and auth info, make a tar+bzip2 tarball and then email/post the download URI.

Most probably it will not show any security issues, which means this thread will be moved to the Linux - General forum.
 
Old 06-21-2004, 05:50 PM   #5
alhaidry
LQ Newbie
 
Registered: Jun 2004
Distribution: debian
Posts: 5

Original Poster
Rep: Reputation: 0
Thanks again unSpawn.
It seems that there is no syslog in /var/log. there are other log files, but most of them did not show anything related. The updates was the kernel 2.6.6-1.435. the old one was 2.6.5 and that was an automatic updates.

I am thinking this is an Ethernet card problem or network problem because an hour ago I got slight different problem today, when I tried to connect to server there was no connection. I logged in locally and tried to connect to the internet from a browser it did not work. I activated the eth0, but didnot work till I reboot the machine. any idea of what would this be?
Thanks
 
Old 06-22-2004, 01:41 PM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
It seems that there is no syslog in /var/log.
That's BAD. Syslog should always be there. Touch the file, set appropriate permissions, restart syslogd and tail it to see if it gets filled. please investigate for how long you didn't have a syslog logfile.

For the next suggestions I have no lead, but I think it would be wise to verify your system. Please run the checks from a bootable CDR. Verify installed rpm's (preferably against a "known good" source like CDR or FTP mirror), and run Chkrootkit and Rootkit Hunter. After running the three checks you should diff the contents of the rpm database (files) against the system and so come up with a list of files not in the database. Then investigate those. If all of this doesn't turn up weirdness all the better, but it is a possibility to explore.
 
Old 06-22-2004, 08:18 PM   #7
alhaidry
LQ Newbie
 
Registered: Jun 2004
Distribution: debian
Posts: 5

Original Poster
Rep: Reputation: 0
thanks for your reply.
Fedora put syslog in /var/log/messages . and the problem was my eth0 card. there is a known bug with fedora for some eth cards.
here is the link: http://www.fedorafaq.org/#3c905
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Fedora Core2 boot problem due to unclean shut down shashikanth Fedora 6 04-25-2005 08:09 PM
how do you shut down services speel Linux - Newbie 5 01-24-2005 08:24 AM
Fail shut down console mouse services? SuperCoolAl Fedora 3 03-14-2004 09:26 PM
cpu fan won't shut off on Fedora kernel-2.4.22 linuxted Linux - Hardware 3 02-24-2004 03:37 PM
Fedora Telnet Services fhiggins Linux - Networking 4 02-10-2004 05:07 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:08 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration