From owner-freebsd-stable Thu Jan 17 17:42:52 2002 Delivered-To: freebsd-stable@freebsd.org Received: from vimfuego.saarinen.org (saarinen.org [203.79.82.14]) by hub.freebsd.org (Postfix) with ESMTP id 5D15A37B421 for ; Thu, 17 Jan 2002 17:42:17 -0800 (PST) Received: from [192.168.1.10] (helo=den2) by vimfuego.saarinen.org with esmtp (Exim 3.33 #1 (Red Hack)) id 16RO2p-0001P5-00 for ; Fri, 18 Jan 2002 14:42:15 +1300 Date: Fri, 18 Jan 2002 14:42:14 +1300 (New Zealand Daylight Time) From: Juha Saarinen To: freebsd-stable@freebsd.org Subject: Spontaneous reboot mystery Message-ID: X-X-Sender: juha@vimfuego.saarinen.org MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I have a remote server that has started rebooting itself for no apparent reason. It looks like a controlled shutdown: # last juha ttyp0 saarinen.org Thu Jan 17 15:15 still logged in reboot ~ Thu Jan 17 15:03 juha ttyp0 saarinen.org Thu Jan 17 13:14 - crash (01:48) reboot ~ Thu Jan 17 13:01 juha ttyp1 saarinen.org Wed Jan 16 15:12 - 15:12 (00:00) juha ttyp0 saarinen.org Wed Jan 16 08:05 - crash (1+04:56) reboot ~ Wed Jan 16 05:58 juha ttyp1 saarinen.org Mon Jan 14 14:36 - 15:09 (1+00:33) juha ttyp0 saarinen.org Mon Jan 14 10:40 - crash (1+19:17) reboot ~ Sun Jan 13 17:34 reboot ~ Sat Jan 12 02:58 reboot ~ Thu Jan 10 21:13 reboot ~ Wed Jan 9 17:42 reboot ~ Tue Jan 8 11:22 reboot ~ Tue Jan 8 10:59 reboot ~ Tue Jan 8 09:36 reboot ~ Mon Jan 7 21:00 reboot ~ Mon Jan 7 20:10 reboot ~ Mon Jan 7 16:23 juha ttyp0 saarinen.org Mon Jan 7 11:30 - 11:39 (00:08) reboot ~ Mon Jan 7 11:29 juha ttyp0 saarinen.org Mon Jan 7 07:57 - crash (03:32) reboot ~ Sun Jan 6 17:51 reboot ~ Sun Jan 6 16:19 reboot ~ Sun Jan 6 15:54 reboot ~ Sun Jan 6 15:23 reboot ~ Sun Jan 6 00:22 reboot ~ Sat Jan 5 14:39 reboot ~ Sat Jan 5 07:58 juha ttyp0 saarinen.org Fri Jan 4 17:25 - 17:28 (00:03) reboot ~ Fri Jan 4 05:18 reboot ~ Thu Jan 3 20:59 reboot ~ Thu Jan 3 18:37 juha ttyp0 saarinen.org Thu Jan 3 16:16 - crash (02:20) reboot ~ Thu Jan 3 16:16 reboot ~ Wed Jan 2 09:44 reboot ~ Wed Jan 2 03:58 ... but I can't find anything that could cause it to reboot at irregular intervals. # uname -a FreeBSD www.searchnow.co.nz 4.2-STABLE FreeBSD 4.2-STABLE #0: Mon Dec 4 15:18:45 NZDT 2000 root@www.searchnow.co.nz:/usr/obj/usr/src/sys/SEARCHNOW i386 Could it be some kind of remote 'sploit? -- Juha Take off every sig! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message