From owner-freebsd-questions@FreeBSD.ORG Fri Feb 13 10:20:46 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7E7EE16A4CE for ; Fri, 13 Feb 2004 10:20:46 -0800 (PST) Received: from web40605.mail.yahoo.com (web40605.mail.yahoo.com [66.218.78.142]) by mx1.FreeBSD.org (Postfix) with SMTP id 7617A43D1D for ; Fri, 13 Feb 2004 10:20:46 -0800 (PST) (envelope-from deesto@yahoo.com) Message-ID: <20040213182046.29292.qmail@web40605.mail.yahoo.com> Received: from [66.133.138.130] by web40605.mail.yahoo.com via HTTP; Fri, 13 Feb 2004 10:20:46 PST Date: Fri, 13 Feb 2004 10:20:46 -0800 (PST) From: John DeStefano To: Barbish3@adelphia.net, freebsd-questions@freebsd.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: RE: reboot record information X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2004 18:20:46 -0000 --- JJB wrote: > When an FBSD system crooks, and It reboots it's self, very seldom > does any of issued problem messages have time to be posted > completely before the rug is pulled out from under the log write > process by the reboot occurring. All you can find out from the logs > is yes indeed it did reboot. You are SOL, just like the rest of us > when this happens to us. That's unfortunate and hard to believe, but I have little choice but to believe it. I was hoping for a better mechanism of tracing what happened. But as you say, once a reboot is called for and the processes are stopped, I suppose there's nothing left running to write to a log. Thanks, ~John > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of John > DeStefano > Sent: Friday, February 13, 2004 10:57 AM > To: Barbish3@adelphia.net; freebsd-questions@freebsd.org > Subject: RE: reboot record information > > > JJB wrote: > >All reboot messages go to /var/log/messages. The message file is > >archived, so just go the /var/log directory and look at your > message > >files and look for msgs before the boot msgs of that date. > > That's what I thought too. However, according to my system status > message this morning: > "Local system status: > 3:13AM up 3 days, 11 mins, 0 users, load averages: 0.00, 0.00, > 0.00" > > My /var/log/messages still contains messages older than 3 days ago; > it's from where I pulled the log lines from my original post. As > you > can see, there's no sign of a cause for reboot there. > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of John > DeStefano > Sent: Friday, February 13, 2004 10:17 AM > To: freebsd-questions@freebsd.org > Subject: reboot record information > > I was interested to find from a system mail this morning that my > system had been rebooted three days ago. As far as I was aware, the > last reboot was about two months ago. > The following lines in /var/log/messages give me a clue that the > reboot happened after "Feb 10 02:51:52": > > Feb 10 02:51:52 zurg inetd[608]: netbios-ns/udp: bind: Address > already > in use > [note: the "netbios-ns/udp" line is a system message that I get > every 10 minutes... haven't been able to figure that one out either] > Feb 10 03:02:37 zurg syslogd: kernel boot file is > /boot/kernel/kernel > Feb 10 03:02:37 zurg kernel: Copyright (c) 1992-2003 The FreeBSD > Project.... > > But there's no sign of what happened to cause the reboot, or how it > was done. Is there another log file that would store this > information? I am mostly concerned because I'm fairly certain this > reboot was not performed at the console: it was either a system > reaction to a problem, or somebody poking around where they > shouldn't be... > Thanks, > ~John __________________________________ Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online. http://taxes.yahoo.com/filing.html