On Wed, 2002-07-17 at 21:52, Matthew Sackman wrote:
> Hay all.
>
> This is a weird one and I'd love to know the answer...
>
> Server is on 24/7. Server is set to connect to the internet (dialup to
> Demon) every 2 hours. When it connects it sends me email with IP
> address. Yes I do know Demon SDU has fixed IP...
>
>
YUK!
Anyway, I never get the email after 6pm and before 8am. I think nothing
> of it.
>
?
Perhaps you just not popular at this time....try a constant
echo@pipex.com to find out..
> Yesterday I installed (as you know) cacti and mrtg. So I look at the
> graphs this morning and from 17:50 to 08:24 they all flat line. Zilch,
> nothing.
>
?
> I check syslog and there isn't a single entry between these two times.
> So after general paranoia sets in, tightening of firewall etc etc I have
> another think and still can't come up with anything. The other
> interesting thing (and why I don't think it's been hacked) is that the
> uptime is wrong, but the date is right.
>
? so the machine is rebooting it self..sound like a hardware problem. Is
the thing on a UPS (it should be), does the power go off at night in the
building, has somebody been doing work at night, around the place, does
something happen at night, that does'nt happen in the day time...
obviously it's ghosts...but who can say.
> I rebooted the machine yesterday morning, yet this morning it was
> showing an uptime of 9 hours. I know for a fact it hasn't been turned
> off.
>
if you a 'last' do you see any reboots or crashes in da logs.?
> My hunch is that the network card (3Com 905) is somehow putting it to
> sleep. This is based on the idea that the one remaining other machine on
> the network would have been turned off at about 17:50 last night and
> would have been turned on at about 08:24 this morning. Between these
> times, other machines would have had power and other machines all have
> 3Com Cards which are still 'on' even though the machine is off
> (soft-off) - the switch shows the nics are actually still on.
>
hmm, maybe a power management thing..all power management must be off.
if you nic is going to sleep, use something else.
also if it's a company make sure thier not shutting down external calls
at night from thier telephone switch. ;-)
> Is this possible? Is this at all likely? Is there anyway of stopping
> this? I've not set anything up specifically to do this and I'd love to
> stop it!
>
With Linux anything is logicaly possible, with windows every thing is
illogically probabable.
> Suggestions from other quarters are to check APM in BIOS. Does anyone
> have any other suggestions just in case that's not the solution?
>
> Answers on a postcard
yeah, get a another machine on the network to ping redriect output to a
file, come in the morning......and check
on the server run a script that does date and time > to a file every
second.
perhaps turning on process accounting may be a cool thing to do/learn.
maybe heat too, getting to hot and power cycling...it's beeen hot
recently..my brain has melted.
or perhaps ghosts, or even the cleaner doing a bit of late night unix
system administration....it's amazing how many skilled unix people are
now janitors....although I can only speak for myself.
please! (and email if possible...)
>
yar....
> Matthew
--------------------------------------------------------------------
http://www.lug.org.uk http://www.linuxportal.co.uk
http://www.linuxjob.co.uk http://www.linuxshop.co.uk
--------------------------------------------------------------------
This archive was generated by hypermail 2.1.3 : Thu 18 Jul 2002 - 16:18:39 BST