Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
06-18-2004, 04:48 PM
|
#1
|
LQ Newbie
Registered: Jun 2004
Distribution: debian
Posts: 5
Rep:
|
Fedora C 2 shut down services
Greetings:
I have Fedora C 2 and it is running apache, ssh, vsftp, mailman, and other services. Yesterday I did the updates and one of the updates was the current kernel. I didn’t restart the computer though. The problem is: when I came today I saw the computer running, but all the servers were down. ftp, ssh, apache and x server. I could not connect or log in. So I had to restart it from the power.
I tried to see the log files in /var/log, but didn’t find any thing that explained why it was down. The only thing that I suspect is this in the logwatch email.
WARNING: Kernel Errors Present
eth0: Transmit error, Tx status regis...: 10561 Time(s)
but I was getting this everyday.
What do you think the problem would be?
Any idea or help is highly appreciated.
p.s I have firewall on.
thank you so much.
|
|
|
06-19-2004, 06:11 AM
|
#2
|
Moderator
Registered: May 2001
Posts: 29,415
|
Network device error, network device configuration error, network error, something like that (FWIW, this doesn't signal anything unfixable to me). BTW, upgrading the kernel and glibc are two situations that warrant rebooting the box.
|
|
|
06-19-2004, 10:02 PM
|
#3
|
LQ Newbie
Registered: Jun 2004
Distribution: debian
Posts: 5
Original Poster
Rep:
|
Thanks for the reply, if it is the rebooting, why I could not login locally at all. how come it stopped ever thing and there was no display. Thanks again
Last edited by alhaidry; 06-19-2004 at 10:04 PM.
|
|
|
06-20-2004, 06:33 AM
|
#4
|
Moderator
Registered: May 2001
Posts: 29,415
|
Don't know, and if your system (syslog, PAM) and services don't log verbose it may even be harder to find. What you could do is find out the time the system was updated, check exactly what was updated, then check (from a few moments before the update until reboot) your system and application logs and login records for anything you can't classify and post it here if it ain't much. If it is a lot of info or you can't work it out you could scrub your logs for IP addresses and auth info, make a tar+bzip2 tarball and then email/post the download URI.
Most probably it will not show any security issues, which means this thread will be moved to the Linux - General forum.
|
|
|
06-21-2004, 05:50 PM
|
#5
|
LQ Newbie
Registered: Jun 2004
Distribution: debian
Posts: 5
Original Poster
Rep:
|
Thanks again unSpawn.
It seems that there is no syslog in /var/log. there are other log files, but most of them did not show anything related. The updates was the kernel 2.6.6-1.435. the old one was 2.6.5 and that was an automatic updates.
I am thinking this is an Ethernet card problem or network problem because an hour ago I got slight different problem today, when I tried to connect to server there was no connection. I logged in locally and tried to connect to the internet from a browser it did not work. I activated the eth0, but didnot work till I reboot the machine. any idea of what would this be?
Thanks
|
|
|
06-22-2004, 01:41 PM
|
#6
|
Moderator
Registered: May 2001
Posts: 29,415
|
It seems that there is no syslog in /var/log.
That's BAD. Syslog should always be there. Touch the file, set appropriate permissions, restart syslogd and tail it to see if it gets filled. please investigate for how long you didn't have a syslog logfile.
For the next suggestions I have no lead, but I think it would be wise to verify your system. Please run the checks from a bootable CDR. Verify installed rpm's (preferably against a "known good" source like CDR or FTP mirror), and run Chkrootkit and Rootkit Hunter. After running the three checks you should diff the contents of the rpm database (files) against the system and so come up with a list of files not in the database. Then investigate those. If all of this doesn't turn up weirdness all the better, but it is a possibility to explore.
|
|
|
06-22-2004, 08:18 PM
|
#7
|
LQ Newbie
Registered: Jun 2004
Distribution: debian
Posts: 5
Original Poster
Rep:
|
thanks for your reply.
Fedora put syslog in /var/log/messages . and the problem was my eth0 card. there is a known bug with fedora for some eth cards.
here is the link: http://www.fedorafaq.org/#3c905
|
|
|
All times are GMT -5. The time now is 09:08 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|