[PLUG] Help diagnosing system restarts
Aaron Ten Clay
aaron at madebyai.com
Thu Oct 11 23:42:46 UTC 2007
Bill Barry wrote:
> On 10/11/07, Bill Barry <bill at billbarry.org> wrote:
>
>> On 10/11/07, Bill Barry <bill at billbarry.org> wrote:
>>
>>> 0:32:28
>>> 1:32:48 1:00:20
>>> 2:33:05 1:00:17
>>> 3:33:26 1:00:21
>>> 4:33:44 1:00:18
>>> 5:34:03 1:00:19
>>> 6:34:24 1:00:21
>>> 7:34:41 1:00:17
>>> 8:35:05 1:00:24
>>> 9:35:20 1:00:15
>>> 10:35:41 1:00:21
>>>
>>>
>> These times seem to eliminate cron. It is good at executing at a
>> certain time. These are all about 1:00:21 from the previous time.
>> Looks like "at" or some other scheduler. How are you getting the
>> email updates. Is this scheduled, or based on what happens in the
>> logs?
>>
>> Bill
>>
>>
>
> If we keep following this train of thought. You get emailed unusual
> log entries every hour. Let's say that whatever process you use to
> generate this warning email also triggers a reboot. Then you would
> get a reboot an hour after there was an unusual event like a reboot.
> Could this be what is happening? Can you stop the email warnings and
> see if the reboots stop.
>
> Bill
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>
The emails are sent by logsentry, which is started by cron.hourly. I
disabled cron, ntpd, even X ... nothing was running but sshd and a few
login processes. The system still rebooted dutifully 1:00:20 after the
previous time.
Wil suggested setting up network logging. I'll look into that. I have no
experience with it though.
Thanks for your input!
--
Aaron
More information about the PLUG
mailing list