Results 1 to 3 of 3
last -a shows server rebooted, how to identify the source or cause of reboot? thx
reboot system boot Wed Feb 16 08:52 (02:0 2.6.21.7-2.fc8xen...
- 02-16-2011 #1Just Joined!
- Join Date
- Feb 2011
- Posts
- 2
how to identify reboot source
last -a shows server rebooted, how to identify the source or cause of reboot? thx
reboot system boot Wed Feb 16 08:52 (02:0
2.6.21.7-2.fc8xen
- 02-16-2011 #2
Well, who was logged in before the reboot?
And from that group: Who can escalate to root?
But it can also be a script, executed via cron, application, even web application.
So check, what is running there.
Another possibilty is a hardware/software watchdog. You will probably know, if you installed such a thing.You must always face the curtain with a bow.
- 02-16-2011 #3Just Joined!
- Join Date
- Feb 2011
- Posts
- 2
last doesn't show any other login from unknown ip before reboot entry.
/var/log/messages shows 1 Fatal message, could this be cause?
kernel: PCI: Fatal: No config space access function found


Reply With Quote