Announcement

Collapse
No announcement yet.

Redhat logs?

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
  • #1

    Redhat logs?

    Ok, so a 2-year old Linux Redhat server here at work has been completely locked up the past 2 mornings we came in.

    Where can I look for logs to see what happened? I need to try to figure out why it's locking up.
    Tags: None
  • #2
    /var/logs
    Juu nin to iro


    English doesn't borrow from other languages. It follows them down dark alleys, knocks them over, and goes through their pockets for loose grammar.

    Comment

    • #3
      Which?

      [root@winchester log]# pwd
      /var/log
      [root@winchester log]# ls -l
      total 1036
      -rw------- 1 root root 3629 Apr 26 08:34 boot.log
      -rw------- 1 root root 115 Apr 23 04:03 boot.log.1
      -rw------- 1 root root 115 Apr 16 04:03 boot.log.2
      -rw------- 1 root root 115 Apr 9 04:03 boot.log.3
      -rw------- 1 root root 115 Apr 2 04:03 boot.log.4
      drwxr-xr-x 2 bin bin 4096 Feb 4 2003 canna
      -rw------- 1 root root 7087 Apr 26 13:01 cron
      -rw------- 1 root root 15192 Apr 23 04:03 cron.1
      -rw------- 1 root root 15119 Apr 16 04:03 cron.2
      -rw------- 1 root root 15192 Apr 9 04:03 cron.3
      -rw------- 1 root root 15110 Apr 2 04:03 cron.4
      drwxr-xr-x 2 lp sys 4096 Apr 23 04:03 cups
      -rw-r--r-- 1 root root 6516 Apr 26 08:33 dmesg
      drwxr-xr-x 2 root root 4096 Apr 26 08:34 gdm
      drwx------ 2 root root 4096 Feb 25 2003 httpd
      -rw-r--r-- 1 root root 63182 Apr 26 08:33 ksyms.0
      -rw-r--r-- 1 root root 63182 Apr 25 08:11 ksyms.1
      -rw-r--r-- 1 root root 63182 Oct 11 2005 ksyms.2
      -rw-r--r-- 1 root root 63182 May 13 2005 ksyms.3
      -rw-r--r-- 1 root root 63182 Apr 18 2005 ksyms.4
      -rw-r--r-- 1 root root 63182 Apr 18 2005 ksyms.5
      -rw-r--r-- 1 root root 63182 Apr 18 2005 ksyms.6
      -r-------- 1 root root 19136220 Apr 26 13:01 lastlog
      -rw------- 1 root root 1260 Apr 26 04:03 maillog
      -rw------- 1 root root 4422 Apr 23 04:03 maillog.1
      -rw------- 1 root root 3779 Apr 16 04:03 maillog.2
      -rw------- 1 root root 3791 Apr 9 04:03 maillog.3
      -rw------- 1 root root 3767 Apr 2 04:03 maillog.4
      -rw------- 1 root root 35163 Apr 26 13:08 messages
      -rw------- 1 root root 9002 Apr 23 04:03 messages.1
      -rw------- 1 root root 7396 Apr 16 04:03 messages.2
      -rw------- 1 root root 10606 Apr 9 04:03 messages.3
      -rw------- 1 root root 6349 Apr 2 04:03 messages.4
      -rw-r--r-- 1 root root 0 Apr 26 04:03 rpmpkgs
      -rw-r--r-- 1 root root 18587 Apr 22 04:03 rpmpkgs.1
      -rw-r--r-- 1 root root 18587 Apr 15 04:03 rpmpkgs.2
      -rw-r--r-- 1 root root 18587 Apr 8 04:03 rpmpkgs.3
      -rw-r--r-- 1 root root 18587 Apr 1 04:03 rpmpkgs.4
      drwx------ 2 root root 8192 Apr 26 10:32 samba
      -rw-r--r-- 1 root root 11103 Jul 29 2003 scrollkeeper.log
      -rw------- 1 root root 332 Apr 26 13:01 secure
      -rw------- 1 root root 83 Apr 18 11:10 secure.1
      -rw------- 1 root root 0 Apr 9 04:03 secure.2
      -rw------- 1 root root 0 Apr 2 04:03 secure.3
      -rw------- 1 root root 97 Mar 27 14:30 secure.4
      -rw------- 1 root root 0 Apr 23 04:03 spooler
      -rw------- 1 root root 0 Apr 16 04:03 spooler.1
      -rw------- 1 root root 0 Apr 9 04:03 spooler.2
      -rw------- 1 root root 0 Apr 2 04:03 spooler.3
      -rw------- 1 root root 0 Mar 26 04:03 spooler.4
      -rw-rw-r-- 1 root root 0 Apr 23 04:03 up2date
      -rw-rw-r-- 1 root root 0 Apr 16 04:03 up2date.1
      -rw-rw-r-- 1 root root 0 Apr 9 04:03 up2date.2
      -rw-rw-r-- 1 root root 0 Apr 2 04:03 up2date.3
      -rw-rw-r-- 1 root root 0 Mar 26 04:03 up2date.4
      drwxr-xr-x 2 root root 4096 Feb 3 2003 vbox
      -rw------- 1 root root 0 Apr 23 04:03 vsftpd.log
      -rw------- 1 root root 0 Apr 16 04:03 vsftpd.log.1
      -rw------- 1 root root 0 Apr 9 04:03 vsftpd.log.2
      -rw------- 1 root root 0 Apr 2 04:03 vsftpd.log.3
      -rw------- 1 root root 0 Mar 26 04:03 vsftpd.log.4
      -rw-rw-r-- 1 root utmp 16128 Apr 26 13:01 wtmp
      -rw-rw-r-- 1 root utmp 384 Mar 27 14:30 wtmp.1
      -rw-r--r-- 1 root root 34422 Apr 26 10:58 XFree86.0.log
      -rw-r--r-- 1 root root 34347 Apr 25 08:11 XFree86.0.log.old
      -rw-r--r-- 1 root root 29548 Jul 28 2003 XFree86.1.log
      -rw-r--r-- 1 root root 29673 Jul 28 2003 XFree86.1.log.old
      drwxr-x--- 2 root root 4096 Feb 22 2003 zebra
      [root@winchester log]#


      EDIT: And why does vbb mess up the spacing and such when I paste it?

      Comment

      • #4
        messages is a good place to start
        then check secure

        edit: thats because its not html formated
        Juu nin to iro


        English doesn't borrow from other languages. It follows them down dark alleys, knocks them over, and goes through their pockets for loose grammar.

        Comment

        • #5
          messages:
          (stuff)
          Apr 25 18:06:40 winchester samba(pam_unix)[3000]: session closed for user joeblow
          Apr 26 08:33:59 winchester syslogd 1.4.1: restart.
          (stuff)

          at 6:06 yesterday, joeblow signed off of SAMBA without a hitch.

          The next thing in the log was this morning, when the server was restarted.

          It appears as if nothing happened in between.

          Secure:
          Apr 25 08:11:45 winchester sshd[2747]: Server listening on 0.0.0.0 port 22.
          Apr 26 08:34:01 winchester sshd[2747]: Server listening on 0.0.0.0 port 22.
          Apr 26 10:58:17 winchester xinetd[2762]: START: sgi_fam pid=3109 from=<no address>
          Apr 26 13:01:22 winchester sshd[3282]: Accepted password for me from 172.26.75.57 port 4618

          Nothing stands out at me there, except for the fact that it appears to start listening as soon as it's turned on.

          Any more ideas?

          Comment

          • #6
            Well, one thing I have seen locking up in redhat is running out of disk space when you logs and caches /maiboxs grow to large...usualy on slighlty older installs that have run happily for years

            eg check available space on you partitions, /var is always a likley candidate

            Comment

            Previous template Next
            Working...
            X