Jumbling of entries in shutdownlog file

[SUDHAKARAN.]

Hello All,

I have a N400 server with HP-UX 11.00 loaded in it. I have strange problem. I find the entries in shutdownlog to be as shown below.
10:26 Tue Dec 25, 2001. Reboot:
04:25 Fri Jan 11, 2002. Halt: (by rdcsat6!shutdown)
19:07 Thu Jan 10, 2002. Reboot: (by unknown!orbit)
Can u please explain the following:

1. The shutdown entry that is of Jan 11, should be shown as the last entry,
that is at the bottom of the log.
2. The Jan 10 entry is showing as reboot has been done. But there is no log for
the same. The rc.log.old file is showing the reboot as of Dec 25, 2001 and
current rc.log is showing the reboot as of Jan 11, 2002

Thanks & regards,
S.S

[harry d brown jr]

Was the date changed on the server?

live free or die
harry

[SUDHAKARAN.]

No the date was not changed.

[harry d brown jr]

Who or what is rdcsat6 and do you have a "shutdown" account on the server in question?


live free or die
harry

[SUDHAKARAN.]

hi harry,
rdcsat6 is the system name and there are shutdown accounts in the system.

[Bill McNAMARA_1]

timezone changed?

[Darrell Allen]

What is the date / time stamp on /etc/shutdownlog? It should be the same as the last entry in the file (that's when the last shutdown should have occurred). If it's not the same then could someone have edited the file?

Darrell

[SUDHAKARAN.]

Hi,
Neither the time zone was changed nor the date&time.
The date&time stamp of the shutdownlog file was as that of the last shutdown time.

[Bill McNAMARA_1]

Mmmm.. I've got the same..

I wonder if it has to do with trimming log files from SAM..


12:47 Mon Oct 29, 2001. Reboot:
13:09 Mon Oct 29, 2001. Reboot:
14:52 Mon Oct 29, 2001. Reboot:
15:52 Mon Oct 29, 2001. Reboot: (by pereal!root)
09:57 Mon Oct 29, 2001. Reboot:
10:17 Tue Oct 30, 2001. Reboot: (by SAM)
10:18 Tue Oct 30, 2001. Reboot: (by pereal!root)

or a 24hour clock translation problem...

Later,
Bill