Date: Wed, 29 Apr 1998 09:21:37 +1000 From: Andrew Heath <drew@bluetongue.com.au> To: questions@FreeBSD.ORG Subject: When is a crash not a crash? Message-ID: <35466481.58609866@bluetongue.com.au>
next in thread | raw e-mail | index | archive | help
I have just come up with some interesting log entries. It seems that my system believes that it has just crashed and rebooted, however, it does not appear that this happened, and the logs don't believe that it did either. Moreover, I am still logged onto the machine! #last -10 reboot ~ Wed Apr 29 08:50 drew ttyp0 jade Wed Apr 29 08:46 - crash (00:03) ... #uptime 9:17AM up 15 hrs, 2 users, load averages: 0.01, 0.06, 0.05 #cat /var/log/messages <snip> Apr 29 08:46:44 skink login: login from jade.bluetongue.com on ttyp0 as drew Apr 29 08:46:51 skink su: drew to root on /dev/ttyp0 Apr 29 08:50:17 skink popper[10099]: (v2.3) Unable to get canonical name of client, err = 0 Apr 29 08:51:05 skink popper[10115]: (v2.3) Unable to get canonical name of client, err = 0 </snip> As you can see, "last" believes there was a reboot, everything else says no. Could this be a hacker or some such activity? Comments please. Drew To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35466481.58609866>