Re: [cobalt-security] Mysterious reboot..

[Michael Stauber <cobalt@xxxxxxxxxxxxxx>]

Hi Adam,

> May  9 12:51:57 ns named[378]: listening on [127.0.0.1].53 (lo)

Nameserver is listening on loopback device and port 53. It's normal.

> May  9 12:51:57 ns named[378]: listening on [213.239.56.135].53 (eth0)

Nameserver is listening on your primary IP and port 53. It's normal.

> May  9 12:51:57 ns named[378]: Forwarding source address is [0.0.0.0].1024

Normal - if your DNS is configured to forward records, which it most likely 
is.

> May  9 12:51:57 ns named[379]: Ready to answer queries.

Ok, named is finally up and running.

> May  9 12:51:57 ns modprobe: can't locate module net-pf-10

Don't know. 

> May  9 12:51:57 ns kernel: family 10 not registered

Don't know for the heck what this one means, but I've seen it on a couple of 
RaQs.

> May  9 12:51:57 ns sshd[384]: Server listening on 0.0.0.0 port 22.

Normal SSHD startup message.

> May  9 12:52:08 ns PAM_pwdb[428]: (su) session opened for user postgres by
> (uid=0) May  9 12:52:08 ns PAM_pwdb[428]: (su) session closed for user
> postgres

Normal. Upon startup Postgres needs to do a couple of jobs as super-user. 


I hope this helps to shed more light on your situation. It's always good to 
be wary.


Mit freundlichen Grüßen / Best regards

Michael Stauber

 Stauber Multimedia Design ____ Phone:  +49-6471-923812
 Hauptstrasse 31 ______  D-56244 Goddert ______ Germany
 SMD.NET ___ SOLARSPEED.NET ___ FORUMWORLD.COM