[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Raq4 rebooting itself
- Subject: Re: [cobalt-security] Raq4 rebooting itself
- From: Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 19 May 2003 23:53:31 -0400
- Organization: Front Street Networks LLC
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
On Monday 19 May 2003 23:53, Antonio wrote:
> Hi there,
>
> I have a Raq4 that since yesterday started to reboot itself for apparently
> no reason. There is no sign of instrusion, chkrootkit is not returning any
> suspicious output and I have all the security patchs installed. The CPU
> temp is always normal (30-33 celsius), the load is very light and I'm not
> running under low disk space.
>
> There is also no clues in my logs files, this is what reports my
> /var/messages near a reboot time:
>
> May 20 00:00:07 www proftpd[18243]: (localhost[127.0.0.1]) - FTP session
> closed.
> May 20 00:31:42 www syslogd 1.3-3: restart.
>
> The server restarted itself about 00:08 while I was monitoring it ...
> Apparently no suspicous process, neither a shutdown detected ...
>
> Any hints/thoughts/ideias ?!? Any help would be appreciate.
if you are talking about;
May 20 00:31:42 www syslogd 1.3-3: restart.
That is not a reboot, that is syslogd restarting.
IIRC it happens once a day.
Gerald
--
http://frontstreetnetworks.com | http://store.raqware.com
ICQ: 229276628 | AIM handle: raqware
Front Street Networks LLC | Phone: 203-785-0699
229 Front Street, Suite C, New Haven, CT 06513-3203