server suddenly reboot without problem signal

[Sam_88]

I got a problem on my server (HP A500) since it reboots suddenly and I am new for HP-UX. So, please help. I am attach the syslog.log for reference.

[Pete Randall]

Sam,

You need to look at the OLDsyslog.log, the /etc/shutdownlog, and crash dumps in /var/adm/crash, and any diagnostic logs (assuming you're running diagnostics).


Pete

[Jean-Luc Oudart]

Did you check the other logs to see if that's a "proper" reboot or unwanted one.

check this link :
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x335fcc0a76c1ae4da5364278123d54c8,00.html

Rgds,
Jean-Luc

[Steven E. Protter · Accepted solution]

Check the NIC card, cable and switch, it appears that your LAN connection was interupted. This could result in the issues you've noted in this thread.

From the outisde on a Unix/Linux box. ping hostname

If the ping times gradually climb, you need a NIC card replacement.

dmesg

Check for hardware faults.

ioscan, look for NW_HW or unclaimed devices.

Check /var/adm/crash for crash dumps.

If there is one, follow the attached guide to analyze the dump. You may need a patch.

SEP

[Helen French]

What version of MC/SG (MC ServiceGuard cluster software) are you using? Applying these patches might solve your issue:

For HP-UX 11.X, MC/SG version A.11.09 - PHSS_27158:

http://www2.itrc.hp.com/service/cki/patchDocDisplay.do?patchId=PHSS_27158

For HP-UX 11.X, MC/SG version A.11.14 - PHSS_29122:

http://www2.itrc.hp.com/service/cki/patchDocDisplay.do?patchId=PHSS_29122

[Pete Randall]

Sam,

Since the last entry I see in your syslog is someone su'ing to root, I have to wonder if this is somehow connected. Do you know who did the su? Do you know what they did after they su'd? What does /etc/shutdownlog say?


Pete

[E. Wong]

Please check for possibles cron jobs that may trigger a reboot.

run

# crontab -l

and check for each of the jobs scheduled.

[Sam_88]

Thnaks for you all info.

Here is the OLDsyslog.log file. Please help me to see whether the system crash is due to hardware problem or other.

[Pete Randall]

Sam,

I don't think we're seeing all of the OLDsyslog.

Could you just do a "tail -100 /var/adm/syslog/OLDsyslog.log" and attach that output?


Pete

[Sam_88]

Thanks for your reply


Here is the modified OLDsys.log

Thanks