Apagago inesperado de servidor

[jjacquesf]

Hola a todos, buen dia.


Tengo un servidor con elastix que se esta apagando inesperadamente, he revisado logs del servidor, pero no encuentro la razón, adjunto algunos.

last

shutdown system down  2.6.18-348.1.1.e Thu Dec 31 03:18 - 09:31  (06:12)
runlevel (to lvl 0)   2.6.18-348.1.1.e Thu Dec 31 03:18 - 03:18  (00:00)

/var/log/messages

Dec 31 03:18:17 localhost shutdown[4447]: shutting down for system halt
Dec 31 03:18:17 localhost init: Switching to runlevel: 0
Dec 31 03:18:18 localhost FaxQueuer[3275]: QUIT
Dec 31 03:18:18 localhost saslauthd[3307]: server_exit     : master exited: 3307
Dec 31 03:18:22 localhost xinetd[2781]: Exiting...
Dec 31 03:18:23 localhost ntpd[2797]: ntpd exiting on signal 15
Dec 31 03:18:24 localhost auditd[2146]: The audit daemon is exiting.
Dec 31 03:18:24 localhost kernel: audit(1451553504.301:791): audit_pid=0 old=2146 by auid=4294967295
Dec 31 03:18:24 localhost kernel: Kernel logging (proc) stopped.
Dec 31 03:18:24 localhost kernel: Kernel log daemon terminating.
Dec 31 03:18:25 localhost exiting on signal 15

utmpdump /var/log/wtmp | cat

[6] [03364] [5   ] [LOGIN   ] [tty5        ] [                    ] [0.0.0.0        ] [Wed Dec 30 18:23:04 2015 CST]
[6] [03365] [6   ] [LOGIN   ] [tty6        ] [                    ] [0.0.0.0        ] [Wed Dec 30 18:23:04 2015 CST]
[6] [03362] [3   ] [LOGIN   ] [tty3        ] [                    ] [0.0.0.0        ] [Wed Dec 30 18:23:04 2015 CST]
[6] [03363] [4   ] [LOGIN   ] [tty4        ] [                    ] [0.0.0.0        ] [Wed Dec 30 18:23:04 2015 CST]
[7] [03672] [ts/0] [root    ] [pts/0       ] [172.168.2.66        ] [172.168.2.66   ] [Wed Dec 30 18:55:20 2015 CST]
[8] [03660] [    ] [        ] [pts/0       ] [                    ] [0.0.0.0        ] [Wed Dec 30 19:45:19 2015 CST]
[1] [13104] [~~  ] [runlevel] [~           ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:17 2015 CST]
[8] [03360] [1   ] [        ] [tty1        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [03361] [2   ] [        ] [tty2        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [03362] [3   ] [        ] [tty3        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [03363] [4   ] [        ] [tty4        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [03364] [5   ] [        ] [tty5        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [03365] [6   ] [        ] [tty6        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [00000] [1   ] [        ] [tty1        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [00000] [2   ] [        ] [tty2        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [00000] [3   ] [        ] [tty3        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [00000] [4   ] [        ] [tty4        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [00000] [5   ] [        ] [tty5        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[8] [00000] [6   ] [        ] [tty6        ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[5] [04449] [l0  ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:18 2015 CST]
[1] [00000] [~~  ] [shutdown] [~~          ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 03:18:31 2015 CST]
[8] [00530] [si  ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:51:47 2015 CST]
[2] [00000] [~~  ] [reboot  ] [~           ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:51:47 2015 CST]
[1] [20019] [~~  ] [runlevel] [~           ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:51:47 2015 CST]
[5] [01632] [l3  ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:51:47 2015 CST]
[8] [01632] [l3  ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:52:36 2015 CST]
[5] [03345] [1   ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:52:36 2015 CST]
[5] [03346] [2   ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:52:36 2015 CST]
[5] [03347] [3   ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:52:36 2015 CST]
[5] [03348] [4   ] [        ] [            ] [2.6.18-348.1.1.el5  ] [0.0.0.0        ] [Thu Dec 31 08:52:36 2015 CST]

Gracias de ante mano.

Saludos!

[navaismo]

Antes de las 3:18:17 no hay nada más? El Halt pareciera que es programado. ¿Algún admin recién despedido?:P

[Christian Cabrera]

Elastix tiene la particularidad de que puedes enviar apagar el equipo desde la web. Recomendaría: revisa los logs de Apache de la fecha y hora del incidente, a ver si alguien lo envió apagar por allí.