how to find who used shutdown command?

[inventsekar_1]

we used to login to a SIP server thru a tunnel server(using putty and secure shell and tunnels). so when i use who -R its not telling the hostname, instead its telling the tunnel server host name only.
and more /var/adm/shutdownlog telling like this:
--------------------------------------------------------
12:24 Mon Aug 30, 2004. Reboot: (by unknown!USERabcd)
09:40 Wed Jun 14 2006. Reboot after panic: , isr.ior = 0'5834017d.0'1e319c00
--------------------------------------------------------

this is the last two lines in shutdownlog file. previous lines are all 2004 reboots. so no problem about that.

and now
09:40 Wed Jun 14 2006. Reboot after panic: , isr.ior = 0'5834017d.0'1e319c00

with this line, what msg u r getting?

thanks in advance

[DCE]

Reboot after panic means that the system rebooted itself after a fault was detected.

review your syslog and GSP/MP logs for error messages.

You can also use stm to further diagnose a potential problem once you have narrowed down the cause of the panic.

HTH
Dave

[Steven E. Protter]

Shalom,

Your system did it.

SEP

[f. halili]

Reboot after panic means it rebooted by itself.

f. halili

[Mridul Shrivastava]

Hi,

Reboot after panic means system caused panic.
isr.ior means it was caused by hardware and need to know the cause u have to analyse ts99 file. I would recommend you to log a call with HP.Since it is a HW issue and may be some hardware would be replaced after analysing the ts99 and MP/GSP logs etc.

[inventsekar_1]

ts99file, GSP/MP log files path please?

and one simple doubt: expand "HTH"

[Torsten.]

It may be not that easy to analyze the logs, if you see them the first time.
I would recommend to contact HP support.

Hope this helps!

[DCE]

HTH = Hope This Helps

[inventsekar_1]

thanks a lot admins,
HTH surely!

[inventsekar_1]

thanks again.

[Mridul Shrivastava]

I won't be easy to analyse them, anyway path for ts99 is /var/tombstones/ts99.
to collect MP/GSP logs you need to login to GSP/MP prompt and type sl then e then d for dumping all the logs, capture them and send it to HP for analysis.

[inventsekar_1]

to assign points reopened the thread.
assinged points.
thanks for ur valuable time.
keep forum'ing