From owner-freebsd-questions@FreeBSD.ORG Mon Aug 18 07:53:31 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 08D50106567E for ; Mon, 18 Aug 2008 07:53:31 +0000 (UTC) (envelope-from auk@startext.tomsk.ru) Received: from startext.tomsk.ru (commit-tomline.tomline.ru [213.183.96.188]) by mx1.freebsd.org (Postfix) with ESMTP id AF1DB8FC0A for ; Mon, 18 Aug 2008 07:53:30 +0000 (UTC) (envelope-from auk@startext.tomsk.ru) Received: by startext.tomsk.ru (Postfix, from userid 58) id 0FDC233C052; Mon, 18 Aug 2008 14:36:04 +0700 (NOVST) X-Spam-Checker-Version: 3.2.5 (2008-06-10) on startext.tomsk.ru X-Spam-Level: X-Spam-Status: No, score=-4.4 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.2.5 Received: from [10.10.1.9] (unknown [10.10.1.9]) by startext.tomsk.ru (Postfix) with ESMTPA id AE6E433C04B; Mon, 18 Aug 2008 14:36:00 +0700 (NOVST) Message-ID: <48A9262E.4010900@startext.tomsk.ru> Date: Mon, 18 Aug 2008 14:35:10 +0700 From: "Alexey A. Ukhov" User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: FreeBSD-7 reboots hourly X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Aug 2008 07:53:31 -0000 Hello dear colleagues. 2 days I have strange behaviour on my 7.0-RELEASE-p3 server. It started to reboot once an hour. No any suspicious task in crontab, nothing strange in /var/log. Just silent reboot. I have no physical access to server - only remote one. Question is: what could it be? How to find what send computer to reboot? Just extra information: I had such stuff before - installworld helped me for one week, now it appears again :( Opened services/sockets are: nobody proftpd 647 1 tcp4 *:21 *:* root sshd 845 4 tcp4 *:22 *:* postfix smtpd 5115 6 tcp4 *:25 *:* bind named 525 20 udp4 xxx.xxx.xxx.xxx:53 *:* nobody nginx 643 4 tcp4 *:80 *:* root couriertcp 769 3 tcp4 *:110 *:* root couriertcp 789 3 tcp4 *:143 *:* root rsync 659 5 tcp4 *:873 *:* root couriertcp 779 3 tcp4 *:993 *:* root couriertcp 760 3 tcp4 *:995 *:* root syslogd 461 9 udp4 *:514 *:* also on local interface (lo0) I have apache, postgrey, spamassasin. I need some pieces of advice what to do with it and what could it be. Thanks in advance, Alexey A. Ukhov P.S.: I mean hourly: I start top and just wait. last what I see is: 0:59:59 uptime