CentOS 5.3 Desligamento Aleatório?

Question

Nossa caixa CentOS 5.3 é desligada aleatoriamente como se o cabo de alimentação tivesse sido puxado. 5 de junho é quando aconteceu pela primeira vez, aqui está uma pasta de / var / log / messages

Jun  5 12:06:22 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'loverspillscalm.com/NS/IN': 208.67.222.222#53
Jun  5 12:06:24 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'loverspillscalm.com/NS/IN': 12.127.17.71#53
Jun  5 15:38:57 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'yagwozat.cn/NS/IN': 12.127.17.72#53
Jun  5 15:38:58 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'yagwozat.cn/NS/IN': 208.67.222.222#53
Jun  5 16:49:25 mail shutdown[354]: shutting down for system halt
Jun  5 16:49:46 mail shutdown[550]: shutting down for system halt
Jun  5 16:49:46 mail shutdown[557]: shutting down for system halt
Jun  5 16:49:47 mail shutdown[590]: shutting down for system halt
Jun  5 22:29:56 mail syslogd 1.4.1: restart.
Jun  5 22:29:56 mail kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jun  5 22:29:56 mail kernel: Linux version 2.6.18-128.1.10.el5PAE ([email protected]) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)) #1 SMP Thu$
Jun  5 22:29:56 mail kernel: BIOS-provided physical RAM map:

Então aconteceu novamente em 10 de junho. Aqui está uma pasta do / var / log / messages no dia 10 de junho:

Jun 10 19:23:21 mail smartd[2625]: Device /dev/sda: using '-d sat' for ATA disk behind SAT layer.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sda, opened
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sda, not found in smartd database.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sda, is SMART capable. Adding to "monitor" list.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sdb, opened
Jun 10 19:23:21 mail smartd[2625]: Device /dev/sdb: using '-d sat' for ATA disk behind SAT layer.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sdb, opened
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sdb, not found in smartd database.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdb, is SMART capable. Adding to "monitor" list.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, opened
Jun 10 19:23:22 mail smartd[2625]: Device /dev/sdc: using '-d sat' for ATA disk behind SAT layer.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, opened
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, not found in smartd database.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, is SMART capable. Adding to "monitor" list.
Jun 10 19:23:22 mail smartd[2625]: Monitoring 0 ATA and 3 SCSI devices
Jun 10 19:23:22 mail smartd[2627]: smartd has fork()ed into background mode. New PID=2627.
Jun 10 19:25:08 mail saslauthd: auth_zimbra_init: zimbra_cert_check is off!
Jun 10 19:25:08 mail saslauthd: auth_zimbra_init: 1 auth urls initialized for round-robin
Jun 10 19:27:39 mail shutdown[7064]: shutting down for system halt
Jun 10 19:27:39 mail init: Switching to runlevel: 0
Jun 10 19:27:40 mail shutdown[7100]: shutting down for system halt
Jun 10 19:27:41 mail smartd[2627]: smartd received signal 15: Terminated
Jun 10 19:27:41 mail smartd[2627]: smartd is exiting (exit status 0)
Jun 10 19:28:15 mail avahi-daemon[2564]: Got SIGTERM, quitting.
Jun 10 19:28:15 mail avahi-daemon[2564]: Leaving mDNS multicast group on interface eth0.IPv6 with address fe80::2e0:81ff:feb5:f036.
Jun 10 19:28:15 mail avahi-daemon[2564]: Leaving mDNS multicast group on interface eth0.IPv4 with address xxx.xxx.xxx.xxx.
Jun 10 19:28:16 mail xinetd[2478]: Exiting...
Jun 10 19:28:20 mail rpc.statd[2287]: Caught signal 15, un-registering and exiting.
Jun 10 19:28:21 mail named[2234]: shutting down: flushing changes
Jun 10 19:28:21 mail named[2234]: stopping command channel on 127.0.0.1#953
Jun 10 19:28:21 mail named[2234]: stopping command channel on ::1#953
Jun 10 19:28:21 mail named[2234]: no longer listening on 127.0.0.1#53
Jun 10 19:28:21 mail named[2234]: no longer listening on xxx.xxx.xxx.xxx#53
Jun 10 19:28:21 mail named[2234]: exiting
Jun 10 19:28:21 mail auditd[2165]: The audit daemon is exiting.
Jun 10 19:28:21 mail kernel: audit(1244687301.413:125): audit_pid=0 old=2165 by auid=4294967295
Jun 10 19:28:21 mail pcscd: pcscdaemon.c:572:signal_trap() Preparing for suicide
Jun 10 19:28:22 mail pcscd: hotplug_libusb.c:376:HPRescanUsbBus() Hotplug stopped
Jun 10 19:28:22 mail pcscd: readerfactory.c:1379:RFCleanupReaders() entering cleaning function
Jun 10 19:28:22 mail pcscd: pcscdaemon.c:532:at_exit() cleaning /var/run
Jun 10 19:28:22 mail kernel: Kernel logging (proc) stopped.
Jun 10 19:28:22 mail kernel: Kernel log daemon terminating.
Jun 10 19:28:23 mail exiting on signal 15
Jun 10 21:48:11 mail syslogd 1.4.1: restart.
Jun 10 21:48:11 mail kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jun 10 21:48:11 mail kernel: Linux version 2.6.18-128.1.10.el5PAE ([email protected]) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)) #1 SMP Thu May 7 11:14:31 EDT 2009
Jun 10 21:48:11 mail kernel: BIOS-provided physical RAM map:

Meus registros de / var / log / acpi:

[Mon May 11 15:06:26 2009] starting up
[Mon May 11 15:06:26 2009] 1 rule loaded
[Mon May 11 15:06:33 2009] client connected from 3076[68:68]
[Mon May 11 15:06:33 2009] 1 client rule loaded
[Mon May 11 15:29:34 2009] exiting
[Mon May 11 15:31:26 2009] starting up
[Mon May 11 15:31:26 2009] 1 rule loaded
[Mon May 11 15:31:29 2009] client connected from 3015[68:68]
[Mon May 11 15:31:29 2009] 1 client rule loaded
[Mon May 11 15:35:17 2009] exiting
[Mon May 11 15:37:02 2009] starting up
[Mon May 11 15:37:02 2009] 1 rule loaded
[Mon May 11 15:37:04 2009] client connected from 2705[68:68]
[Mon May 11 15:37:04 2009] 1 client rule loaded
[Mon May 11 15:43:36 2009] exiting
[Mon May 11 15:45:19 2009] starting up
[Mon May 11 15:45:19 2009] 1 rule loaded
[Mon May 11 15:45:21 2009] client connected from 2662[68:68]
[Mon May 11 15:45:21 2009] 1 client rule loaded
[Mon May 11 16:47:53 2009] exiting
[Mon May 11 16:49:42 2009] starting up
[Mon May 11 16:49:42 2009] 1 rule loaded
[Mon May 11 16:49:44 2009] client connected from 2668[68:68]
[Mon May 11 16:49:44 2009] 1 client rule loaded
[Mon May 11 17:02:52 2009] exiting
[Mon May 11 17:04:38 2009] starting up
[Mon May 11 17:04:38 2009] 1 rule loaded
[Mon May 11 17:04:40 2009] client connected from 2662[68:68]
[Mon May 11 17:04:40 2009] 1 client rule loaded
[Tue May 12 08:41:24 2009] exiting
[Tue May 12 08:43:10 2009] starting up
[Tue May 12 08:43:10 2009] 1 rule loaded
[Tue May 12 08:43:12 2009] client connected from 2664[68:68]
[Tue May 12 08:43:12 2009] 1 client rule loaded
[Tue May 12 09:54:10 2009] exiting
[Tue May 12 09:55:52 2009] starting up
[Tue May 12 09:55:52 2009] 1 rule loaded
[Tue May 12 09:55:54 2009] client connected from 2650[68:68]
[Tue May 12 09:55:54 2009] 1 client rule loaded
[Tue May 12 14:09:24 2009] exiting
[Tue May 12 14:11:10 2009] starting up
[Tue May 12 14:11:10 2009] 1 rule loaded
[Tue May 12 14:11:12 2009] client connected from 2564[68:68]
[Tue May 12 14:11:12 2009] 1 client rule loaded
[Tue May 12 14:50:57 2009] exiting
[Tue May 12 14:52:42 2009] starting up
[Tue May 12 14:52:42 2009] 1 rule loaded
[Tue May 12 14:52:43 2009] client connected from 2566[68:68]
[Tue May 12 14:52:43 2009] 1 client rule loaded
[Tue May 19 14:12:45 2009] starting up
[Tue May 19 14:12:45 2009] 1 rule loaded
[Tue May 19 14:12:47 2009] client connected from 2589[68:68]
[Tue May 19 14:12:47 2009] 1 client rule loaded
[Fri May 22 17:35:54 2009] starting up
[Fri May 22 17:35:54 2009] 1 rule loaded
[Fri May 22 17:35:56 2009] client connected from 2586[68:68]
[Fri May 22 17:35:56 2009] 1 client rule loaded
[Mon May 25 18:28:22 2009] received event "button/power PWRF 00000080 00000001"
[Mon May 25 18:28:22 2009] notifying client 2586[68:68]
[Mon May 25 18:28:22 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 18:28:22 2009] BEGIN HANDLER MESSAGES
[Mon May 25 18:28:22 2009] END HANDLER MESSAGES
[Mon May 25 18:28:22 2009] action exited with status 0
[Mon May 25 18:28:22 2009] completed event "button/power PWRF 00000080 00000001"
[Mon May 25 19:16:30 2009] received event "button/power PWRF 00000080 00000002"
[Mon May 25 19:16:30 2009] notifying client 2586[68:68]
[Mon May 25 19:16:30 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 19:16:30 2009] BEGIN HANDLER MESSAGES
[Mon May 25 19:16:30 2009] END HANDLER MESSAGES
[Mon May 25 19:16:30 2009] action exited with status 0
[Mon May 25 19:16:30 2009] completed event "button/power PWRF 00000080 00000002"
[Mon May 25 19:16:31 2009] received event "button/power PWRF 00000080 00000003"
[Mon May 25 19:16:31 2009] notifying client 2586[68:68]
[Mon May 25 19:16:31 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 19:16:31 2009] BEGIN HANDLER MESSAGES
[Mon May 25 19:16:31 2009] END HANDLER MESSAGES
[Mon May 25 19:16:31 2009] action exited with status 0
[Mon May 25 19:16:31 2009] completed event "button/power PWRF 00000080 00000003"
[Mon May 25 19:16:31 2009] received event "button/power PWRF 00000080 00000004"
[Mon May 25 19:16:31 2009] notifying client 2586[68:68]
[Mon May 25 19:16:31 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 19:16:31 2009] BEGIN HANDLER MESSAGES
[Mon May 25 19:16:31 2009] END HANDLER MESSAGES
[Mon May 25 19:16:31 2009] action exited with status 0
[Mon May 25 19:16:31 2009] completed event "button/power PWRF 00000080 00000004"
[Wed May 27 15:16:04 2009] received event "button/power PWRF 00000080 00000005"
[Wed May 27 15:16:04 2009] notifying client 2586[68:68]
[Wed May 27 15:16:04 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed May 27 15:16:04 2009] BEGIN HANDLER MESSAGES
[Wed May 27 15:16:04 2009] END HANDLER MESSAGES
[Wed May 27 15:16:04 2009] action exited with status 0
[Wed May 27 15:16:04 2009] completed event "button/power PWRF 00000080 00000005"
[Wed May 27 15:16:06 2009] received event "button/power PWRF 00000080 00000006"
[Wed May 27 15:16:06 2009] notifying client 2586[68:68]
[Wed May 27 15:16:06 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed May 27 15:16:06 2009] BEGIN HANDLER MESSAGES
[Wed May 27 15:16:06 2009] END HANDLER MESSAGES
[Wed May 27 15:16:06 2009] action exited with status 0
[Wed May 27 15:16:06 2009] completed event "button/power PWRF 00000080 00000006"
[Thu May 28 05:40:38 2009] received event "button/power PWRF 00000080 00000007"
[Thu May 28 05:40:38 2009] notifying client 2586[68:68]
[Thu May 28 05:40:38 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Thu May 28 05:40:38 2009] BEGIN HANDLER MESSAGES
[Thu May 28 05:40:38 2009] END HANDLER MESSAGES
[Thu May 28 05:40:38 2009] action exited with status 0
[Thu May 28 05:40:38 2009] completed event "button/power PWRF 00000080 00000007"
[Thu May 28 05:40:39 2009] received event "button/power PWRF 00000080 00000008"
[Thu May 28 05:40:39 2009] notifying client 2586[68:68]
[Thu May 28 05:40:39 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Thu May 28 05:40:39 2009] BEGIN HANDLER MESSAGES
[Thu May 28 05:40:39 2009] END HANDLER MESSAGES
[Thu May 28 05:40:39 2009] action exited with status 0
[Thu May 28 05:40:39 2009] completed event "button/power PWRF 00000080 00000008"
[Fri Jun  5 16:49:25 2009] received event "button/power PWRF 00000080 00000009"
[Fri Jun  5 16:49:25 2009] notifying client 2586[68:68]
[Fri Jun  5 16:49:25 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun  5 16:49:25 2009] BEGIN HANDLER MESSAGES
[Fri Jun  5 16:49:25 2009] END HANDLER MESSAGES
[Fri Jun  5 16:49:25 2009] action exited with status 0
[Fri Jun  5 16:49:25 2009] completed event "button/power PWRF 00000080 00000009"
[Fri Jun  5 16:49:45 2009] received event "button/power PWRF 00000080 0000000a"
[Fri Jun  5 16:49:45 2009] notifying client 2586[68:68]
[Fri Jun  5 16:49:45 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun  5 16:49:45 2009] BEGIN HANDLER MESSAGES
[Fri Jun  5 16:49:46 2009] END HANDLER MESSAGES
[Fri Jun  5 16:49:46 2009] action exited with status 0
[Fri Jun  5 16:49:46 2009] completed event "button/power PWRF 00000080 0000000a"
[Fri Jun  5 16:49:46 2009] received event "button/power PWRF 00000080 0000000b"
[Fri Jun  5 16:49:46 2009] notifying client 2586[68:68]
[Fri Jun  5 16:49:46 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun  5 16:49:46 2009] BEGIN HANDLER MESSAGES
[Fri Jun  5 16:49:46 2009] END HANDLER MESSAGES
[Fri Jun  5 16:49:46 2009] action exited with status 0
[Fri Jun  5 16:49:46 2009] completed event "button/power PWRF 00000080 0000000b"
[Fri Jun  5 16:49:47 2009] received event "button/power PWRF 00000080 0000000c"
[Fri Jun  5 16:49:47 2009] notifying client 2586[68:68]
[Fri Jun  5 16:49:47 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun  5 16:49:47 2009] BEGIN HANDLER MESSAGES
[Fri Jun  5 22:29:59 2009] starting up
[Fri Jun  5 22:29:59 2009] 1 rule loaded
[Fri Jun  5 22:30:00 2009] client connected from 2579[68:68]
[Fri Jun  5 22:30:00 2009] 1 client rule loaded
[Wed Jun 10 19:21:04 2009] received event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:21:04 2009] notifying client 2579[68:68]
[Wed Jun 10 19:21:04 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:21:04 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:21:04 2009] END HANDLER MESSAGES
[Wed Jun 10 19:21:04 2009] action exited with status 0
[Wed Jun 10 19:21:04 2009] completed event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:21:07 2009] received event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:21:07 2009] notifying client 2579[68:68]
[Wed Jun 10 19:21:07 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:21:07 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:21:08 2009] END HANDLER MESSAGES
[Wed Jun 10 19:21:08 2009] action exited with status 0
[Wed Jun 10 19:21:08 2009] completed event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:23:16 2009] starting up
[Wed Jun 10 19:23:16 2009] 1 rule loaded
[Wed Jun 10 19:23:18 2009] client connected from 2583[68:68]
[Wed Jun 10 19:23:18 2009] 1 client rule loaded
[Wed Jun 10 19:27:39 2009] received event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:27:39 2009] notifying client 2583[68:68]
[Wed Jun 10 19:27:39 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:27:39 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:27:39 2009] END HANDLER MESSAGES
[Wed Jun 10 19:27:39 2009] action exited with status 0
[Wed Jun 10 19:27:39 2009] completed event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:27:40 2009] received event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:27:40 2009] notifying client 2583[68:68]
[Wed Jun 10 19:27:40 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:27:40 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:27:40 2009] END HANDLER MESSAGES
[Wed Jun 10 19:27:40 2009] action exited with status 0
[Wed Jun 10 19:27:40 2009] completed event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:28:17 2009] exiting
[Wed Jun 10 21:48:13 2009] starting up
[Wed Jun 10 21:48:13 2009] 1 rule loaded
[Wed Jun 10 21:48:15 2009] client connected from 2559[68:68]
[Wed Jun 10 21:48:15 2009] 1 client rule loaded
[Thu Jun 11 08:35:04 2009] received event "button/power PWRF 00000080 00000001"
[Thu Jun 11 08:35:04 2009] notifying client 2559[68:68]
[Thu Jun 11 08:35:04 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Thu Jun 11 08:35:04 2009] BEGIN HANDLER MESSAGES
[Thu Jun 11 08:35:04 2009] END HANDLER MESSAGES
[Thu Jun 11 08:35:04 2009] action exited with status 0
[Thu Jun 11 08:35:04 2009] completed event "button/power PWRF 00000080 00000001"
[Thu Jun 11 08:35:39 2009] exiting
[Thu Jun 11 08:38:48 2009] starting up
[Thu Jun 11 08:38:48 2009] 1 rule loaded
[Thu Jun 11 08:38:50 2009] client connected from 2568[68:68]
[Thu Jun 11 08:38:50 2009] 1 client rule loaded
[Thu Jun 11 09:11:14 2009] exiting
[Thu Jun 11 09:11:14 2009] starting up
[Thu Jun 11 09:11:14 2009] 0 rules loaded
[Thu Jun 11 09:11:19 2009] client connected from 2568[68:68]
[Thu Jun 11 09:11:19 2009] 1 client rule loaded
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000001"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000001"
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000002"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000002"
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000003"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000003"
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000004"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000004"
[Wed Jun 17 07:41:06 2009] received event "button/power PWRF 00000080 00000005"
[Wed Jun 17 07:41:06 2009] notifying client 2568[68:68]
[Wed Jun 17 07:41:06 2009] completed event "button/power PWRF 00000080 00000005"
[Wed Jun 17 16:40:06 2009] received event "button/power PWRF 00000080 00000006"
[Wed Jun 17 16:40:06 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:06 2009] completed event "button/power PWRF 00000080 00000006"
[Wed Jun 17 16:40:12 2009] received event "button/power PWRF 00000080 00000007"
[Wed Jun 17 16:40:12 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:12 2009] completed event "button/power PWRF 00000080 00000007"
[Wed Jun 17 16:40:16 2009] received event "button/power PWRF 00000080 00000008"
[Wed Jun 17 16:40:16 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:16 2009] completed event "button/power PWRF 00000080 00000008"
[Wed Jun 17 16:40:16 2009] received event "button/power PWRF 00000080 00000009"
[Wed Jun 17 16:40:16 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:16 2009] completed event "button/power PWRF 00000080 00000009"
[Wed Jun 17 16:40:44 2009] received event "button/power PWRF 00000080 0000000a"
[Wed Jun 17 16:40:44 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:44 2009] completed event "button/power PWRF 00000080 0000000a"
[Wed Jun 17 17:20:03 2009] received event "button/power PWRF 00000080 0000000b"
[Wed Jun 17 17:20:03 2009] notifying client 2568[68:68]
[Wed Jun 17 17:20:03 2009] completed event "button/power PWRF 00000080 0000000b"
[Wed Jun 17 17:49:54 2009] received event "button/power PWRF 00000080 0000000c"
[Wed Jun 17 17:49:54 2009] notifying client 2568[68:68]
[Wed Jun 17 17:49:54 2009] completed event "button/power PWRF 00000080 0000000c"
[Wed Jun 17 17:49:54 2009] received event "button/power PWRF 00000080 0000000d"
[Wed Jun 17 17:49:54 2009] notifying client 2568[68:68]
[Wed Jun 17 17:49:54 2009] completed event "button/power PWRF 00000080 0000000d"
[Wed Jun 17 17:50:01 2009] received event "button/power PWRF 00000080 0000000e"
[Wed Jun 17 17:50:01 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:01 2009] completed event "button/power PWRF 00000080 0000000e"
[Wed Jun 17 17:50:01 2009] received event "button/power PWRF 00000080 0000000f"
[Wed Jun 17 17:50:01 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:01 2009] completed event "button/power PWRF 00000080 0000000f"
[Wed Jun 17 17:50:16 2009] received event "button/power PWRF 00000080 00000010"
[Wed Jun 17 17:50:16 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:16 2009] completed event "button/power PWRF 00000080 00000010"
[Wed Jun 17 17:50:24 2009] received event "button/power PWRF 00000080 00000011"
[Wed Jun 17 17:50:24 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:24 2009] completed event "button/power PWRF 00000080 00000011"
[Wed Jun 17 17:50:33 2009] received event "button/power PWRF 00000080 00000012"
[Wed Jun 17 17:50:33 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:33 2009] completed event "button/power PWRF 00000080 00000012"
[Wed Jun 17 17:50:33 2009] received event "button/power PWRF 00000080 00000013"
[Wed Jun 17 17:50:33 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:33 2009] completed event "button/power PWRF 00000080 00000013"
[Wed Jun 17 17:50:35 2009] received event "button/power PWRF 00000080 00000014"
[Wed Jun 17 17:50:35 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:35 2009] completed event "button/power PWRF 00000080 00000014"
[Wed Jun 17 17:50:35 2009] received event "button/power PWRF 00000080 00000015"
[Wed Jun 17 17:50:35 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:35 2009] completed event "button/power PWRF 00000080 00000015"
[Wed Jun 17 17:50:35 2009] received event "button/power PWRF 00000080 00000016"
[Wed Jun 17 17:50:35 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:35 2009] completed event "button/power PWRF 00000080 00000016"
[Wed Jun 17 17:50:47 2009] received event "button/power PWRF 00000080 00000017"
[Wed Jun 17 17:50:47 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:47 2009] completed event "button/power PWRF 00000080 00000017"
[Wed Jun 17 17:50:47 2009] received event "button/power PWRF 00000080 00000018"
[Wed Jun 17 17:50:47 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:47 2009] completed event "button/power PWRF 00000080 00000018"
[Wed Jun 17 17:50:51 2009] received event "button/power PWRF 00000080 00000019"
[Wed Jun 17 17:50:51 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:51 2009] completed event "button/power PWRF 00000080 00000019"
[Wed Jun 17 17:50:54 2009] received event "button/power PWRF 00000080 0000001a"
[Wed Jun 17 17:50:54 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:54 2009] completed event "button/power PWRF 00000080 0000001a"
[Wed Jun 17 18:37:48 2009] received event "button/power PWRF 00000080 0000001b"
[Wed Jun 17 18:37:48 2009] notifying client 2568[68:68]
[Wed Jun 17 18:37:48 2009] completed event "button/power PWRF 00000080 0000001b"
[Wed Jun 17 18:37:50 2009] received event "button/power PWRF 00000080 0000001c"
[Wed Jun 17 18:37:50 2009] notifying client 2568[68:68]
[Wed Jun 17 18:37:50 2009] completed event "button/power PWRF 00000080 0000001c"
[Wed Jun 17 18:55:13 2009] received event "button/power PWRF 00000080 0000001d"
[Wed Jun 17 18:55:13 2009] notifying client 2568[68:68]
[Wed Jun 17 18:55:13 2009] completed event "button/power PWRF 00000080 0000001d"
[Wed Jun 17 18:57:59 2009] received event "button/power PWRF 00000080 0000001e"
[Wed Jun 17 18:57:59 2009] notifying client 2568[68:68]
[Wed Jun 17 18:57:59 2009] completed event "button/power PWRF 00000080 0000001e"
[Thu Jun 18 00:20:47 2009] received event "button/power PWRF 00000080 0000001f"
[Thu Jun 18 00:20:47 2009] notifying client 2568[68:68]
[Thu Jun 18 00:20:47 2009] completed event "button/power PWRF 00000080 0000001f"
[Thu Jun 18 00:20:47 2009] received event "button/power PWRF 00000080 00000020"
[Thu Jun 18 00:20:47 2009] notifying client 2568[68:68]
[Thu Jun 18 00:20:47 2009] completed event "button/power PWRF 00000080 00000020"
[Thu Jun 18 13:43:16 2009] received event "button/power PWRF 00000080 00000021"
[Thu Jun 18 13:43:16 2009] notifying client 2568[68:68]
[Thu Jun 18 13:43:16 2009] completed event "button/power PWRF 00000080 00000021"
[Thu Jun 18 13:43:19 2009] received event "button/power PWRF 00000080 00000022"
[Thu Jun 18 13:43:19 2009] notifying client 2568[68:68]
[Thu Jun 18 13:43:19 2009] completed event "button/power PWRF 00000080 00000022"
[Fri Jun 19 14:04:15 2009] received event "button/power PWRF 00000080 00000023"
[Fri Jun 19 14:04:15 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:15 2009] completed event "button/power PWRF 00000080 00000023"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000024"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000024"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000025"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000025"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000026"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000026"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000027"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000027"
[Fri Jun 19 14:04:19 2009] received event "button/power PWRF 00000080 00000028"
[Fri Jun 19 14:04:19 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:19 2009] completed event "button/power PWRF 00000080 00000028"
[Fri Jun 19 14:04:52 2009] received event "button/power PWRF 00000080 00000029"
[Fri Jun 19 14:04:52 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:52 2009] completed event "button/power PWRF 00000080 00000029"
[Fri Jun 19 14:07:46 2009] received event "button/power PWRF 00000080 0000002a"
[Fri Jun 19 14:07:46 2009] notifying client 2568[68:68]
[Fri Jun 19 14:07:46 2009] completed event "button/power PWRF 00000080 0000002a"
[Fri Jun 19 14:07:49 2009] received event "button/power PWRF 00000080 0000002b"
[Fri Jun 19 14:07:49 2009] notifying client 2568[68:68]
[Fri Jun 19 14:07:49 2009] completed event "button/power PWRF 00000080 0000002b"
[Fri Jun 19 14:07:49 2009] received event "button/power PWRF 00000080 0000002c"
[Fri Jun 19 14:07:49 2009] notifying client 2568[68:68]
[Fri Jun 19 14:07:49 2009] completed event "button/power PWRF 00000080 0000002c"
[Fri Jun 19 14:15:56 2009] received event "button/power PWRF 00000080 0000002d"
[Fri Jun 19 14:15:56 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:56 2009] completed event "button/power PWRF 00000080 0000002d"
[Fri Jun 19 14:15:57 2009] received event "button/power PWRF 00000080 0000002e"
[Fri Jun 19 14:15:57 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:57 2009] completed event "button/power PWRF 00000080 0000002e"
[Fri Jun 19 14:15:57 2009] received event "button/power PWRF 00000080 0000002f"
[Fri Jun 19 14:15:57 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:57 2009] completed event "button/power PWRF 00000080 0000002f"
[Fri Jun 19 14:15:58 2009] received event "button/power PWRF 00000080 00000030"
[Fri Jun 19 14:15:58 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:58 2009] completed event "button/power PWRF 00000080 00000030"
[Fri Jun 19 14:15:59 2009] received event "button/power PWRF 00000080 00000031"
[Fri Jun 19 14:15:59 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:59 2009] completed event "button/power PWRF 00000080 00000031"
[Fri Jun 19 14:15:59 2009] received event "button/power PWRF 00000080 00000032"
[Fri Jun 19 14:15:59 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:59 2009] completed event "button/power PWRF 00000080 00000032"
[Fri Jun 19 14:1

    

Answer 1

Eu vi exatamente isso.

No nosso caso, foi o watchdog da placa-mãe que tinha um sensor de temperatura ruim. O sensor insistia que a placa-mãe estava superaquecendo, então desligou o sistema operacional e, portanto, o computador. Os registros de desligamento pareciam semelhantes aos seus, como se alguém tivesse aparecido e executado o comando 'shutdown' em algum lugar. Quando ligado pela primeira vez, o computador funcionava por cerca de 20 minutos antes de desligar, mas se você fosse persistente, ele iniciaria o processo de desligamento quase antes do término da inicialização do sistema operacional.

Entre no seu gerenciamento de placa-mãe (BMC, IPMI, iLO, o que for) e verifique se há algum "evento" nos registros.

    

Answer 2

Outra coisa que você pode considerar é se você tiver um cartão de acesso remoto que permita o desligamento. As chances são pequenas e você teria outro admin desligando seu servidor, mas nunca é demais checar.

    

Answer 3

Eu acho que o botão liga / desliga também, mas é possível que algo mais esteja causando isso. Esta máquina está conectada a um no-break? Existem outras pessoas que tenham acesso root na máquina? Você pode verificar o lastlog para ver se alguém estava conectado quando foi desligado? Quais serviços esta máquina está executando e há alguma vulnerabilidade publicada nesses serviços?

    

Answer 4

Se for o botão liga / desliga, você poderá desconectá-lo da placa-mãe para testá-lo.

Eu não vejo nada em seus registros antes de mudar para o nível de execução 0, então parece-me que o sistema operacional pensa que está sendo mandado desligar corretamente (por exemplo, pressionar o botão liga / desliga). )

    

Answer 5

Eu esperaria algum tipo de mensagem de erro para explicar por que foi o desligamento. Você pode ver quem estava conectado a ele no momento em que foi encerrado com "last". Pode ser que o servidor esteja superaquecendo e desligando para se proteger. Não sei qual processo faria isso no CentOS. No que diz respeito ao botão liga / desliga, deve haver um log sobre isso, mas você pode tentar parar o acpid e ver se ele ainda é desligado. Isso excluiria quaisquer eventos da ACPI.

    

Answer 6

Já verificou com algum usuário que tenha acesso a este host? Veja se algum deles está desligando o computador?

Verifique os arquivos /root/.bash_history, /home/*/.bash_history e outros arquivos semelhantes para ver se um deles mostra uma mensagem de desligamento.

Verifique também / var / log / secure para ver se alguém usou o sudo para desligá-lo.

    

Answer 7

Você precisa ir mais longe em seus registros, para onde você vê o processo de desligamento iniciar e olhar um pouco para trás a partir daí.

O último log também pode ajudar. Você pode ver quem está na caixa, se alguém estiver no momento da queda. Na verdade, todos os seus registros devem ser examinados.

É interessante que tudo esteja sendo registrado como mail .

É necessário mais exame de registro.

    

Answer 8

Com base nos registros acpi, parece que o sistema está recebendo entrada do botão de energia para desligar. Eu suspeito que ou o botão está sendo pressionado acidentalmente ou há um problema de hardware envolvido.

Além disso, você deve poder modificar o comportamento em resposta ao evento do botão liga / desliga editando /etc/acpi/events/power_button . Observe que o caminho pode ser um pouco diferente no CentOS 5, mas esse é o local comum.