Hejsa
Jeg har en ny server i test, der har spontan bootet 4 gange i dag. Hver gang
er syslogd genstartet, hvilket den ellers kun gør en gang om ugen.
Jeg kan ikke gennemskue, hvad problemet skulle være, har også diskuteret det
med en gl. kollega, uden at vi kom frem til, hvad problemer kunne være.
Måske er der en af Jer, der har set/oplevet noget lignende, som har nogle
hints?
Dette er fra /var/log/messages:
Jun 27 10:57:34 test010 proftpd[10542]: 81.7.149.xxx
(213.237.12.xxx[213.237.12.xxx]) - FTP session closed.
Jun 27 11:33:41 test010 syslogd 1.4.1: restart.
Jun 27 11:33:41 test010 syslog: syslogd startup succeeded
Jun 27 11:33:41 test010 kernel: klogd 1.4.1, log source = /proc/kmsg
started.
Jun 27 11:33:41 test010 kernel: Linux version 2.4.20-8
(bhcompile@porky.devel.redhat.com) (gcc version 3.2.2 20030222 (Red Hat
Linux 3.2.2-5)) #1 Thu Mar 13 17:54:28 EST 2003
Her er der ikke noget i loggen en ½ time før.
Jun 28 13:27:23 test010 proftpd[17518]: 81.7.149.xxx
(213.237.12.xxx[213.237.12.xxx]) - FTP session closed.
Jun 28 14:58:42 test010 syslogd 1.4.1: restart.
Jun 28 14:58:42 test010 syslog: syslogd startup succeeded
Her var der ikke sket noget over en time før genstart i flg. loggen
3. og 4. gang den booter har der ikke været FTP access udmiddelbart før, så
det ikke et mønster at følge ville jeg mene.. men har dog opgraderet FTPd,
da der kommer FTPaccess forsøg med underlige brugernavne....
System: RH9
OpenSSL 0.9.7d
Proftpd: 1.2.9 (nu opgraderet til 1.2.10rc1)
Hele loggen for bootsekvensen ser således ud:
Jun 28 16:16:13 test010 syslogd 1.4.1: restart.
Jun 28 16:16:13 test010 syslog: syslogd startup succeeded
Jun 28 16:16:13 test010 kernel: klogd 1.4.1, log source = /proc/kmsg
started.
Jun 28 16:16:13 test010 kernel: Linux version 2.4.20-8
(bhcompile@porky.devel.redhat.com) (gcc version 3.2.2 20030222 (Red Hat
Linux 3.2.2-5)) #1 Thu Mar 13 17:54:28 EST 2003
Jun 28 16:16:13 test010 kernel: BIOS-provided physical RAM map:
Jun 28 16:16:13 test010 kernel: BIOS-e820: 0000000000000000 -
000000000009bc00 (usable)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 000000000009bc00 -
000000000009c000 (reserved)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 00000000000e8000 -
0000000000100000 (reserved)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 0000000000100000 -
000000003ffc0000 (usable)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 000000003ffc0000 -
000000003fff8000 (ACPI data)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 000000003fff8000 -
0000000040000000 (ACPI NVS)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 00000000fec00000 -
00000000fec01000 (reserved)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 00000000fee00000 -
00000000fee01000 (reserved)
Jun 28 16:16:13 test010 kernel: BIOS-e820: 00000000ffb80000 -
00000000ffc00000 (reserved)
Jun 28 16:16:13 test010 syslog: klogd startup succeeded
Jun 28 16:16:13 test010 kernel: BIOS-e820: 00000000fff00000 -
0000000100000000 (reserved)
Jun 28 16:16:13 test010 kernel: 127MB HIGHMEM available.
Jun 28 16:16:13 test010 kernel: 896MB LOWMEM available.
Jun 28 16:16:13 test010 kernel: On node 0 totalpages: 262080
Jun 28 16:16:13 test010 portmap: portmap startup succeeded
Jun 28 16:16:13 test010 kernel: zone(0): 4096 pages.
Jun 28 16:16:13 test010 kernel: zone(1): 225280 pages.
Jun 28 16:16:13 test010 rpc.statd[2045]: Version 1.0.1 Starting
Jun 28 16:16:13 test010 nfslock: rpc.statd startup succeeded
Jun 28 16:16:13 test010 kernel: zone(2): 32704 pages.
Jun 28 16:16:13 test010 keytable:
Jun 28 16:16:13 test010 kernel: Kernel command line: ro root=LABEL=/
ide0=0x1f0,0x3f6,14 ide1=0x170,0x376,15 ide2=0 ide3=0 ide4=0 ide5=0 ide6=0
ide7=0 ide8=0 ide9=0
Jun 28 16:16:13 test010 keytable: Loading system font:
Jun 28 16:16:13 test010 kernel: ide_setup: ide0=0x1f0,0x3f6,14
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: ide_setup: ide1=0x170,0x376,15
Jun 28 16:16:13 test010 keytable:
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 rc: Starting keytable: succeeded
Jun 28 16:16:13 test010 kernel: ide_setup: ide2=0
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: ide_setup: ide3=0
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 random: Initializing random number generator:
succeeded
Jun 28 16:16:13 test010 kernel: ide_setup: ide4=0
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: ide_setup: ide5=0
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: ide_setup: ide6=0
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: ide_setup: ide7=0
Jun 28 16:16:13 test010 netfs: Mounting other filesystems: succeeded
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: ide_setup: ide8=0
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: ide_setup: ide9=0
Jun 28 16:16:13 test010 kernel:
Jun 28 16:16:13 test010 kernel: Initializing CPU#0
Jun 28 16:16:13 test010 autofs: automount startup succeeded
Jun 28 16:16:13 test010 kernel: Detected 2790.793 MHz processor.
Jun 28 16:16:13 test010 kernel: Console: colour VGA+ 80x25
Jun 28 16:16:13 test010 kernel: Calibrating delay loop... 5570.56 BogoMIPS
Jun 28 16:16:13 test010 kernel: Memory: 1027092k/1048320k available (1347k
kernel code, 17628k reserved, 999k data, 132k init, 130816k highmem)
Jun 28 16:16:13 test010 kernel: Dentry cache hash table entries: 131072
(order: 8, 1048576 bytes)
Jun 28 16:16:13 test010 kernel: Inode cache hash table entries: 65536
(order: 7, 524288 bytes)
Jun 28 16:16:13 test010 kernel: Mount cache hash table entries: 512 (order:
0, 4096 bytes)
Jun 28 16:16:14 test010 kernel: Buffer-cache hash table entries: 65536
(order: 6, 262144 bytes)
Jun 28 16:16:14 test010 kernel: Page-cache hash table entries: 262144
(order: 8, 1048576 bytes)
Jun 28 16:16:14 test010 kernel: CPU: Trace cache: 12K uops, L1 D cache: 8K
Jun 28 16:16:14 test010 kernel: CPU: L2 cache: 512K
Jun 28 16:16:14 test010 kernel: Intel machine check architecture supported.
Jun 28 16:16:14 test010 kernel: Intel machine check reporting enabled on
CPU#0.
Jun 28 16:16:14 test010 kernel: CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz
stepping 09
Jun 28 16:16:14 test010 kernel: Enabling fast FPU save and restore... done.
Jun 28 16:16:14 test010 kernel: Enabling unmasked SIMD FPU exception
support... done.
Jun 28 16:16:14 test010 kernel: Checking 'hlt' instruction... OK.
Jun 28 16:16:14 test010 kernel: POSIX conformance testing by UNIFIX
Jun 28 16:16:14 test010 kernel: mtrr: v1.40 (20010327) Richard Gooch
(rgooch@atnf.csiro.au)
Jun 28 16:16:14 test010 kernel: mtrr: detected mtrr type: Intel
Jun 28 16:16:14 test010 kernel: PCI: PCI BIOS revision 2.10 entry at
0xfda95, last bus=2
Jun 28 16:16:14 test010 kernel: PCI: Using configuration type 1
Jun 28 16:16:14 test010 kernel: PCI: Probing PCI hardware
Jun 28 16:16:14 test010 kernel: Transparent bridge - Intel Corp.
82801BA/CA/DB PCI Bridge
Jun 28 16:16:14 test010 kernel: PCI: Using IRQ router PIIX [8086/2440] at
00:1f.0
Jun 28 16:16:14 test010 kernel: isapnp: Scanning for PnP cards...
Jun 28 16:16:14 test010 sshd: succeeded
Jun 28 16:16:14 test010 kernel: isapnp: No Plug & Play device found
Jun 28 16:16:14 test010 kernel: Linux NET4.0 for Linux 2.4
Jun 28 16:16:14 test010 kernel: Based upon Swansea University Computer
Society NET3.039
Jun 28 16:16:14 test010 kernel: Initializing RT netlink socket
Jun 28 16:16:14 test010 kernel: apm: BIOS not found.
Jun 28 16:16:14 test010 kernel: Starting kswapd
Jun 28 16:16:14 test010 kernel: allocated 32 pages and 32 bhs reserved for
the highmem bounces
Jun 28 16:16:14 test010 kernel: VFS: Disk quotas vdquot_6.5.1
Jun 28 16:16:14 test010 kernel: pty: 2048 Unix98 ptys configured
Jun 28 16:16:14 test010 kernel: Serial driver version 5.05c (2001-07-08)
with MANY_PORTS MULTIPORT SHARE_IRQ SERIAL_PCI ISAPNP enabled
Jun 28 16:16:14 test010 kernel: ttyS0 at 0x03f8 (irq = 4) is a 16550A
Jun 28 16:16:14 test010 kernel: ttyS1 at 0x02f8 (irq = 3) is a 16550A
Jun 28 16:16:14 test010 kernel: Real Time Clock Driver v1.10e
Jun 28 16:16:14 test010 kernel: Floppy drive(s): fd0 is 1.44M
Jun 28 16:16:14 test010 kernel: FDC 0 is a post-1991 82077
Jun 28 16:16:14 test010 kernel: NET4: Frame Diverter 0.46
Jun 28 16:16:14 test010 kernel: RAMDISK driver initialized: 16 RAM disks of
4096K size 1024 blocksize
Jun 28 16:16:14 test010 kernel: Uniform Multi-Platform E-IDE driver
Revision: 7.00beta-2.4
Jun 28 16:16:14 test010 kernel: ide: Assuming 33MHz system bus speed for PIO
modes; override with idebus=xx
Jun 28 16:16:14 test010 kernel: ICH2: IDE controller at PCI slot 00:1f.1
Jun 28 16:16:14 test010 kernel: ICH2: chipset revision 5
Jun 28 16:16:14 test010 kernel: ICH2: not 100%% native mode: will probe irqs
later
Jun 28 16:16:14 test010 kernel: ide0: BM-DMA at 0xffa0-0xffa7, BIOS
settings: hda:DMA, hdb:pio
Jun 28 16:16:14 test010 kernel: PDC20267: IDE controller at PCI slot 02:0e.0
Jun 28 16:16:14 test010 kernel: PCI: Found IRQ 9 for device 02:0e.0
Jun 28 16:16:14 test010 kernel: PDC20267: chipset revision 2
Jun 28 16:16:14 test010 kernel: PDC20267: not 100%% native mode: will probe
irqs later
Jun 28 16:16:14 test010 kernel: PDC20267: too many IDE interfaces, no room
in table
Jun 28 16:16:14 test010 kernel: PDC20267: too many IDE interfaces, no room
in table
Jun 28 16:16:14 test010 kernel: PDC20267: neither IDE port enabled (BIOS)
Jun 28 16:16:14 test010 kernel: hda: QSI CD-ROM SCR-242, ATAPI CD/DVD-ROM
drive
Jun 28 16:16:14 test010 kernel: ide2: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide3: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide4: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide5: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide6: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide7: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide8: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide9: ports already in use, skipping probe
Jun 28 16:16:14 test010 kernel: ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
Jun 28 16:16:14 test010 kernel: ide-floppy driver 0.99.newide
Jun 28 16:16:14 test010 kernel: ide-floppy driver 0.99.newide
Jun 28 16:16:14 test010 kernel: md: md driver 0.90.0 MAX_MD_DEVS=256,
MD_SB_DISKS=27
Jun 28 16:16:14 test010 kernel: md: Autodetecting RAID arrays.
Jun 28 16:16:14 test010 kernel: md: autorun ...
Jun 28 16:16:14 test010 kernel: md: ... autorun DONE.
Jun 28 16:16:14 test010 kernel: NET4: Linux TCP/IP 1.0 for NET4.0
Jun 28 16:16:14 test010 kernel: IP Protocols: ICMP, UDP, TCP, IGMP
Jun 28 16:16:15 test010 kernel: IP: routing cache hash table of 8192
buckets, 64Kbytes
Jun 28 16:16:15 test010 kernel: TCP: Hash tables configured (established
262144 bind 65536)
Jun 28 16:16:15 test010 kernel: Linux IP multicast router 0.06 plus PIM-SM
Jun 28 16:16:15 test010 kernel: NET4: Unix domain sockets 1.0/SMP for Linux
NET4.0.
Jun 28 16:16:15 test010 kernel: RAMDISK: Compressed image found at block 0
Jun 28 16:16:15 test010 kernel: Freeing initrd memory: 260k freed
Jun 28 16:16:15 test010 kernel: VFS: Mounted root (ext2 filesystem).
Jun 28 16:16:15 test010 kernel: SCSI subsystem driver Revision: 1.00
Jun 28 16:16:07 test010 kudzu: succeeded
Jun 28 16:16:15 test010 kernel: PROMISE FastTrak Series Linux Driver Version
1.03.0.1
Jun 28 16:16:07 test010 kudzu: Updating /etc/fstab succeeded
Jun 28 16:16:15 test010 kernel: scsi0 : FastTrak
Jun 28 16:16:07 test010 iptables: succeeded
Jun 28 16:16:15 test010 kernel: Vendor: Promise Model: 1X2 Mirror/RAID1
Rev: 1.10
Jun 28 16:16:07 test010 iptables: succeeded
Jun 28 16:16:15 test010 kernel: Type: Direct-Access
ANSI SCSI revision: 02
Jun 28 16:16:15 test010 kernel: Attached scsi disk sda at scsi0, channel 0,
id 0, lun 0
Jun 28 16:16:07 test010 iptables: succeeded
Jun 28 16:16:15 test010 kernel: SCSI device sda: 156250000 512-byte hdwr
sectors (80000 MB)
Jun 28 16:16:15 test010 kernel: Partition check:
Jun 28 16:16:07 test010 sysctl: net.ipv4.ip_forward = 0
Jun 28 16:16:15 test010 kernel: sda: sda1 sda2 sda3
Jun 28 16:16:15 test010 kernel: Journalled Block Device driver loaded
Jun 28 16:16:07 test010 sysctl: net.ipv4.conf.default.rp_filter = 1
Jun 28 16:16:15 test010 kernel: EXT3-fs: INFO: recovery required on readonly
filesystem.
Jun 28 16:16:15 test010 kernel: EXT3-fs: write access will be enabled during
recovery.
Jun 28 16:16:07 test010 sysctl: kernel.sysrq = 0
Jun 28 16:16:15 test010 kernel: kjournald starting. Commit interval 5
seconds
Jun 28 16:16:07 test010 sysctl: kernel.core_uses_pid = 1
Jun 28 16:16:15 test010 kernel: EXT3-fs: recovery complete.
Jun 28 16:16:07 test010 network: Setting network parameters: succeeded
Jun 28 16:16:15 test010 kernel: EXT3-fs: mounted filesystem with ordered
data mode.
Jun 28 16:16:07 test010 logger: punching nameserver 212.54.64.170 through
the firewall
Jun 28 16:16:15 test010 kernel: Freeing unused kernel memory: 132k freed
Jun 28 16:16:07 test010 logger: punching nameserver 212.54.64.171 through
the firewall
Jun 28 16:16:15 test010 kernel: usb.c: registered new driver usbdevfs
Jun 28 16:16:15 test010 kernel: usb.c: registered new driver hub
Jun 28 16:16:07 test010 network: Bringing up loopback interface: succeeded
Jun 28 16:16:15 test010 kernel: usb-uhci.c: $Revision: 1.275 $ time 17:59:01
Mar 13 2003
Jun 28 16:16:15 test010 kernel: usb-uhci.c: High bandwidth mode enabled
Jun 28 16:16:15 test010 kernel: PCI: Found IRQ 11 for device 00:1f.2
Jun 28 16:16:15 test010 kernel: PCI: Sharing IRQ 11 with 02:0d.0
Jun 28 16:16:15 test010 kernel: usb-uhci.c: USB UHCI at I/O 0xef40, IRQ 11
Jun 28 16:16:15 test010 kernel: usb-uhci.c: Detected 2 ports
Jun 28 16:16:15 test010 kernel: usb.c: new USB bus registered, assigned bus
number 1
Jun 28 16:16:15 test010 kernel: hub.c: USB hub found
Jun 28 16:16:15 test010 kernel: hub.c: 2 ports detected
Jun 28 16:16:15 test010 kernel: PCI: Found IRQ 10 for device 00:1f.4
Jun 28 16:16:15 test010 kernel: usb-uhci.c: USB UHCI at I/O 0xef80, IRQ 10
Jun 28 16:16:15 test010 kernel: usb-uhci.c: Detected 2 ports
Jun 28 16:16:15 test010 kernel: usb.c: new USB bus registered, assigned bus
number 2
Jun 28 16:16:15 test010 kernel: hub.c: USB hub found
Jun 28 16:16:15 test010 kernel: hub.c: 2 ports detected
Jun 28 16:16:15 test010 kernel: usb-uhci.c: v1.275:USB Universal Host
Controller Interface driver
Jun 28 16:16:15 test010 kernel: usb.c: registered new driver hiddev
Jun 28 16:16:15 test010 kernel: usb.c: registered new driver hid
Jun 28 16:16:15 test010 kernel: hid-core.c: v1.8.1 Andreas Gal, Vojtech
Pavlik <vojtech@suse.cz>
Jun 28 16:16:15 test010 kernel: hid-core.c: USB HID support drivers
Jun 28 16:16:15 test010 kernel: mice: PS/2 mouse device common for all mice
Jun 28 16:16:15 test010 kernel: EXT3 FS 2.4-0.9.19, 19 August 2002 on
sd(8,2), internal journal
Jun 28 16:16:15 test010 kernel: kjournald starting. Commit interval 5
seconds
Jun 28 16:16:15 test010 kernel: EXT3 FS 2.4-0.9.19, 19 August 2002 on
sd(8,1), internal journal
Jun 28 16:16:15 test010 kernel: EXT3-fs: recovery complete.
Jun 28 16:16:15 test010 kernel: EXT3-fs: mounted filesystem with ordered
data mode.
Jun 28 16:16:15 test010 kernel: parport0: PC-style at 0x378
[PCSPP,TRISTATE,EPP]
Jun 28 16:16:15 test010 xinetd[2135]: xinetd Version 2.3.10 started with
libwrap options compiled in.
Jun 28 16:16:15 test010 kernel: ip_tables: (C) 2000-2002 Netfilter core team
Jun 28 16:16:15 test010 xinetd[2135]: Started working: 0 available services
Jun 28 16:16:15 test010 kernel: Intel(R) PRO/100 Network Driver - version
2.1.29-k2
Jun 28 16:16:15 test010 kernel: Copyright (c) 2002 Intel Corporation
Jun 28 16:16:15 test010 kernel:
Jun 28 16:16:15 test010 kernel: PCI: Found IRQ 11 for device 02:0c.0
Jun 28 16:16:15 test010 kernel: e100: eth0: Intel(R) 8255x-based Ethernet
Adapter
Jun 28 16:16:15 test010 kernel: Hardware receive checksums enabled
Jun 28 16:16:15 test010 kernel: cpu cycle saver enabled
Jun 28 16:16:15 test010 kernel:
Jun 28 16:16:15 test010 kernel: PCI: Found IRQ 11 for device 02:0d.0
Jun 28 16:16:15 test010 kernel: PCI: Sharing IRQ 11 with 00:1f.2
Jun 28 16:16:15 test010 kernel: e100: eth1: Intel(R) 8255x-based Ethernet
Adapter
Jun 28 16:16:15 test010 kernel: Hardware receive checksums enabled
Jun 28 16:16:15 test010 kernel: cpu cycle saver enabled
Jun 28 16:16:15 test010 kernel:
Jun 28 16:16:15 test010 kernel: e100: eth0 NIC Link is Up 100 Mbps Full
duplex
Jun 28 16:16:17 test010 xinetd: xinetd startup succeeded
Jun 28 16:16:19 test010 rc: Starting httpd: succeeded
Jun 28 16:16:20 test010 sendmail: sendmail startup succeeded
Jun 28 16:16:20 test010 sendmail: sm-client startup succeeded
Jun 28 16:16:21 test010 gpm: gpm startup succeeded
Jun 28 16:16:22 test010 sshd(pam_unix)[2224]: session opened for user XXX by
(uid=XXX) // rettet af mig...
Jun 28 16:16:22 test010 rc: Starting imapd: succeeded
Jun 28 16:16:22 test010 rc: Starting pop3d: succeeded
Jun 28 16:16:23 test010 proftpd[2292]: test010.masterminds.dk - ProFTPD
1.2.9 (stable) (built Fri Apr 16 10:38:43 CEST 2004) standalone mode STARTUP
Jun 28 16:16:23 test010 crond: crond startup succeeded
Jun 28 16:16:25 test010 kernel: parport0: PC-style at 0x378
[PCSPP,TRISTATE,EPP]
Jun 28 16:16:25 test010 kernel: lp0: using parport0 (polling).
Jun 28 16:16:25 test010 kernel: lp0: console ready
Jun 28 16:16:25 test010 modprobe: modprobe: Can't locate module
char-major-188
Jun 28 16:16:25 test010 last message repeated 15 times
Jun 28 16:16:26 test010 cups: cupsd startup succeeded
Jun 28 16:16:26 test010 anacron: anacron startup succeeded
Jun 28 16:16:26 test010 atd: atd startup succeeded
--
Take Care
Kim Emax - master|minds - Vi tænker IT for dig...
http://www.masterminds.dk -
http://www.emax.dk