history with ip address

send2rawat · 02-25-2007, 02:19 PM

HI
I am working on linux and My server is used by other users also with the help of putty. I just want to know the ip address from where it was rebooted
Hisotry with ip address

Thanks
Ashish

acid_kewpie · 02-25-2007, 02:27 PM

there is no such log. a server isn't rebooted from an ip address. a server is rebooted from a shell command, which in turn is (potentially) run via a connection from another host. there is no direct map between the two pieces of information. you could potentially correlate the vty numbers listed by the ssh logs and the kernel logs, all in /var/log/messages, and /var/log/security on most redhatesque systems.

nmh+linuxquestions.o · 02-26-2007, 06:25 AM

Quote:

Originally Posted by send2rawat

HI
I am working on linux and My server is used by other users also with the help of putty. I just want to know the ip address from where it was rebooted
Hisotry with ip address

Thanks
Ashish

If your goal is to audit/track reboots and the user starting them, I suggest looking into sudo. It is not perfect, but if you are trying to track lazy (and not malicious) people - it may be what you are looking for.