Hello, I have a SUSE LINUX 10.1 (X86-64), and since two days ago, this machine is doing unexpected shutdowns.
I checked cron users looking for a halt or reboot. Not there.
In /var/log/messages,
May 9 23:04:09 BSCCT07 syslog-ng[2476]: STATS: dropped 0
May 9 23:28:26 BSCCT07 dhclient: DHCPREQUEST on eth0 to ..52.162 port 67
May 9 23:28:27 BSCCT07 dhclient: DHCPACK from ..51.129
May 9 23:28:27 BSCCT07 dhclient: bound to ..51.131 – renewal in 3425 seconds.
May 10 00:04:10 BSCCT07 syslog-ng[2476]: STATS: dropped 0
May 10 00:04:54 BSCCT07 su: (to root) root on none
May 10 00:04:55 BSCCT07 su: (to root) root on none
May 10 00:04:55 BSCCT07 shutdown[9349]: shutting down for system halt
May 10 00:04:55 BSCCT07 init: Switching to runlevel: 0
May 10 00:04:57 BSCCT07 kernel: bootsplash: status on console 0 changed to on
May 10 00:04:57 BSCCT07 auditd[2715]: The audit daemon is exiting.
May 10 00:04:57 BSCCT07 kernel: audit(1241906697.558:6): audit_pid=0 old=2715 by auid=4294967295
May 10 00:04:58 BSCCT07 sshd[3082]: Received signal 15; terminating.
May 10 00:05:00 BSCCT07 hal-resmgr: resmgr: communication failure: Broken pipe
May 10 00:05:01 BSCCT07 kernel: Kernel logging (proc) stopped.
May 10 00:05:01 BSCCT07 kernel: Kernel log daemon terminating.
May 10 00:05:02 BSCCT07 syslog-ng[2476]: syslog-ng version 1.6.8 going down
I started and again:
May 11 10:22:25 BSCCT07 su: (to root) root on none
May 11 10:22:26 BSCCT07 su: (to root) root on none
May 11 10:22:26 BSCCT07 shutdown[4661]: shutting down for system halt
May 11 10:22:26 BSCCT07 init: Switching to runlevel: 0
May 11 10:22:27 BSCCT07 kernel: bootsplash: status on console 0 changed to on
May 11 10:22:27 BSCCT07 auditd[2732]: The audit daemon is exiting.
May 11 10:22:27 BSCCT07 kernel: audit(1242030147.249:6): audit_pid=0 old=2732 by auid=4294967295
May 11 10:22:27 BSCCT07 sshd[2931]: Received signal 15; terminating.
May 11 10:22:28 BSCCT07 kernel: Kernel logging (proc) stopped.
May 11 10:22:28 BSCCT07 kernel: Kernel log daemon terminating.
May 11 10:22:29 BSCCT07 syslog-ng[2465]: syslog-ng version 1.6.8 going down
Any ideas ???
Thank you !!!
Well, some session is becoming root, but not from a terminal, and then doing a shutdown.
May 11 10:22:25 BSCCT07 su: (to root) root on none
May 11 10:22:26 BSCCT07 su: (to root) root on none
May 11 10:22:26 BSCCT07 shutdown[4661]: shutting down for system halt
Maybe you have a ghost in the system. No idea really, sorry.
Thanks Ken.
In fact, I’m looking for a hardware problem but no success yet…
The ‘su (to root) root on none’ is normal. Can’t say what else is happening.
kserradell adjusted his/her AFDB on Monday 11 May 2009 11:26 to write:
>
> Thanks Ken.
>
> In fact, I’m looking for a hardware problem but no success yet…
>
>
first thing I thought of was rootkit have you scanned with rkhunter or
other?
Also is there any definite period/time this is happening or are they random
times when up?
HTH
Mark
Nullus in verba
Nil illigitimi carborundum
I changed the graphic card because it was doing a strange noise and cleaned the fans (were very dirty) and since, no shutdown…
But I’ll do the scan as you suggest…
Thanks guys !!!
kserradell adjusted his/her AFDB on Monday 11 May 2009 13:36 to write:
>
> I changed the graphic card because it was doing a strange noise and
> cleaned the fans (were very dirty) and since, no shutdown…
>
> But I’ll do the scan as you suggest…
>
> Thanks guys !!!
>
>
glad you found out what it was.
I was next going to relate a well posted fault that I had a long long time
ago but now it is not needed.
What?
Ah, OK then, but only under duress.
I used to have an old pc/server ( still have it here ) in my last but one
residence that all of a sudden started shutting down at approximately the
same time every day but about 2 mins earlier, i went through every thing,
took all hardware out cleaned all furballs out, checked system for errors
and nothing.
This did not occur everyday and then it stopped for approx 6 months and then
started again.
remedy:
close curtains.
Cause:
sunlight would hit box when summer came and sun was high enough, caused
overheating and a shutdown, did not happen on cloudy days 
Oh how we laughed…
No?
Oh please yourself… (F.H)
Now back in my box.
–
Mark
Nullus in verba
Nil illigitimi carborundum
JAJAJA !!!
Nice !!!
El sol puede ser peligroso…
Thanks for your time, Mark !
Sure it wasn’t because in spring and summer the cleaning lady that used to unplug the heart monitor, sorry I mean the computer, to use her vacuum cleaner, didn’t come? 