discuss: Cause of Crash
Subject:
Cause of Crash
From:
Davy Durham ####@####.####
Date:
14 Mar 2005 17:33:57 -0000
Message-Id: <4235CB02.2010801@davyandbeth.com>
Hi..
I was wondering if there was any good tutorial already written about
how to determine what crashed a linux server after the fact. Like for
instance, today I discovered that my linux server powered itself off a
couple of nights ago. When I finally was able to be physically present
to turn it back on, I looked at 'last' and see:
...
reboot system boot 2.6.8.1-12mdksmp Mon Mar 14 10:43 (00:22)
root pts/1 192.168.16.223 Sat Mar 12 02:13 - crash (2+08:30)
root pts/1 192.168.16.223 Sat Mar 12 01:20 - 01:51 (00:31)
...
Now from the bottom up, that's me logging in, then I guess my shell
crashed .. and then there's my reboot..
I looked around in the syslog.. don't see anything for 2:13
dmesg doesn't help me much because it doesn't have dates/times.. I don't
even know if it would contain anything useful or what exactly I should
be looking for.. or if it started over when the system booted.
Basically, I'm asking if there's a good tutorial for doing post-mortems
on system crashes...
Maybe the topic is too broad because of the wide range of possible
causes, but I thought I'd ask.
Thanks,
Davy