server rebooted

[Alin-Adrian Anton]

nbari at unixmexico.com wrote:

>Hello.
>
>I have a dedicated server the one was up for more than 84 days but this
>Friday 19, suddenly the server was rebooted.
>
>this is the output of the "last" command
>
># last | grep reboot
>reboot           ~                         vie 19 sep 13:55
>
>
>I already have check the logs but i can't found any hint that could help
>me to know why the server as was rebooted.
>
>
>Any idea on what to check or how to know what makes the server to reboot?
>
>thanks.
>
>_______________________________________________
>freebsd-hackers at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
>To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
>
>
>  
>
Check all the logs, not only the lastlog. Start with /var/log/messages, 
and continue there. See behaviour of all the installed daemons and what 
did they log. If the kernel is not debug-enabled, there are chances you 
won't find out certain crashes. A power-off problem will be noticed 
because of disrupted timestamps in the logs, and no shutting down 
messages from the daemons and the kernel.

And if you don't CAREFULLY and PATIENTLY find anything in the logs, 
check them for intrusion, if you have  some other logging device in the 
network check that one too for weird traffic etc. But I think I'm 
paranoid :PpPp

Alin.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3194 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20030922/d7ab939f/smime.bin