请求各位大大帮帮忙，分析下宕机日志

bobofan1995

这是/var/log下的所有日志

errorlog.zip (1.52 MB, 下载次数: 7)

2012-09-08 12:39 上传

点击文件名下载附件

希望各位朋友帮忙分析下，

系统是ubuntu 10.04 lts server版本的

跑了10天多久宕机了

以前也有过宕机，第一次是15天，第二次是6天，第三次是9天，这是第四次了

排除根目录满的情况，df上显示根只用了17%的空间

ulovko

@bobofan1995

跑了10天多久宕机了

建议修改为 ： 跑了10多天就宕机了 ^_^

ulovko

经历过断电？

1. Sep  8 11:06:08 loghen kernel: [   26.786270] EXT3-fs warning: maximal mount count reached, running e2fsck is recommended
   
2. Sep  8 11:06:08 loghen kernel: [   26.786497] EXT3 FS on sda6, internal journal
   
3. Sep  8 11:06:08 loghen kernel: [   26.786500] EXT3-fs: recovery complete.
   
4. Sep  8 11:06:08 loghen kernel: [   26.786620] EXT3-fs: mounted filesystem with ordered data mode.
   
5. Sep  8 11:06:08 loghen kernel: [   27.105561] kjournald starting.  Commit interval 5 seconds
   
6. Sep  8 11:06:08 loghen kernel: [   27.107353] EXT3 FS on sda1, internal journal
   
7. Sep  8 11:06:08 loghen kernel: [   27.107358] EXT3-fs: recovery complete.
   
8. Sep  8 11:06:08 loghen kernel: [   27.107511] EXT3-fs: mounted filesystem with ordered data mode.
   
9. Sep  8 11:06:08 loghen kernel: [   27.189487] type=1505 audit(1347073568.123:11):  operation="profile_load" pid=807 name="/usr/sbin/tcpdump"
   
10. Sep  8 11:06:08 loghen kernel: [   27.189676] type=1505 audit(1347073568.123:12):  operation="profile_replace" pid=806 name="/sbin/dhclient3"
    
11. Sep  8 11:06:08 loghen kernel: [   27.190463] type=1505 audit(1347073568.123:13):  operation="profile_replace" pid=806 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
    
12. Sep  8 11:06:08 loghen kernel: [   27.190971] type=1505 audit(1347073568.123:14):  operation="profile_replace" pid=806 name="/usr/lib/connman/scripts/dhclient-script"
    

复制代码

ulovko

1. > more dmesg
   
2. BOOT_IMAGE=/vmlinuz-2.6.32-42-server root=UUID=ea63d1ad-e938-4c56-9059-9b43df647f09 ro quiet
   
3. Memory: 8185152k/8912896k available (5537k kernel code, 524760k absent, 202984k reserved, 3121k data, 808k init)
   
4. 
   
5. CPU0: Intel(R) Xeon(R) CPU           L5320  @ 1.86GHz stepping 07
   
6. Linux version 2.6.32-42-server (buildd@batsu) (gcc version 4.4.3 (Ubuntu 4.4.3-4ubuntu5.1) ) #96-Ubuntu SMP Wed Aug 15 19:52:20 UTC 2012 (Ubuntu 2.6.32-42.96-server 2.6.32.59+drm33.24)

复制代码

1. 
   
2. > more daemon.log
   
3. Sep  8 11:17:02 loghen CRON[1319]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
   
4. Sep  8 11:18:56 loghen dhclient: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 3
   
5. Sep  8 11:18:59 loghen dhclient: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 7
   
6. Sep  8 11:19:06 loghen dhclient: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 11
   
7. Sep  8 11:19:17 loghen dhclient: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 12
   
8. Sep  8 11:19:29 loghen dhclient: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 7
   
9. Sep  8 11:19:36 loghen dhclient: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 12
   
10. Sep  8 11:19:48 loghen dhclient: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 9
    
11. Sep  8 11:19:57 loghen dhclient: No DHCPOFFERS received.
    
12. Sep  8 11:19:57 loghen dhclient: No working leases in persistent database - sleeping.
    

复制代码

1. 
   
2. > more kern.log
   
3. Sep  2 14:38:09 loghen kernel: [507913.569486] php-cgi[6194]: segfault at 7ffff74f8ef8 ip 00007f7f4d3c343a sp 00007ffff74f8f00 error 6 in libc-2.11.1.so[7f7f4d37e000+17a000]
   
4. Sep  3 16:12:23 loghen kernel: [599967.433845] php-cgi[5622]: segfault at 7ffff74f8800 ip 00000000006fe6b0 sp 00007ffff74f87e0 error 6 in php-cgi[400000+6b4000]
   
5. Sep  3 16:12:23 loghen kernel: [599967.975173] php-cgi[6241]: segfault at 7ffff74f8800 ip 00000000006fe6b0 sp 00007ffff74f87e0 error 6 in php-cgi[400000+6b4000]
   
6. Sep  3 19:46:12 loghen kernel: [612796.585492] php-cgi[3191]: segfault at 7ffff74f8800 ip 00000000006fe6b0 sp 00007ffff74f87e0 error 6 in php-cgi[400000+6b4000]
   
7. Sep  3 19:46:12 loghen kernel: [612796.980866] php-cgi[3038]: segfault at 7ffff74f8800 ip 00000000006fe6b0 sp 00007ffff74f87e0 error 6 in php-cgi[400000+6b4000]
   
8. Sep  5 16:08:56 loghen kernel: [772560.731934] php-cgi[7026]: segfault at 7ffff74f8800 ip 00000000006fe6b0 sp 00007ffff74f87e0 error 6 in php-cgi[400000+6b4000]
   
9. Sep  5 16:08:57 loghen kernel: [772561.242043] php-cgi[27411]: segfault at 7ffff74f8800 ip 00000000006fe6b0 sp 00007ffff74f87e0 error 6 in php-cgi[400000+6b4000]
   
10. Sep  6 06:32:36 loghen kernel: [824380.151793] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled
    
11. Sep  6 06:32:36 loghen kernel: [824380.153385] SGI XFS Quota Management subsystem
    
12. Sep  6 06:32:36 loghen kernel: [824380.294287] JFS: nTxBlock = 8192, nTxLock = 65536
    
13. Sep  6 06:32:36 loghen kernel: [824380.348303] NTFS driver 2.1.29 [Flags: R/O MO...skipping...
    
14. Sep  8 11:06:08 loghen kernel: [   26.786270] EXT3-fs warning: maximal mount count reached, running e2fsck is recommended
    
15. Sep  8 11:06:08 loghen kernel: [   26.786497] EXT3 FS on sda6, internal journal
    
16. Sep  8 11:06:08 loghen kernel: [   26.786500] EXT3-fs: recovery complete.
    
17. Sep  8 11:06:08 loghen kernel: [   26.786620] EXT3-fs: mounted filesystem with ordered data mode.
    
18. Sep  8 11:06:08 loghen kernel: [   27.105561] kjournald starting.  Commit interval 5 seconds
    
19. Sep  8 11:06:08 loghen kernel: [   27.107353] EXT3 FS on sda1, internal journal
    
20. Sep  8 11:06:08 loghen kernel: [   27.107358] EXT3-fs: recovery complete.
    
21. Sep  8 11:06:08 loghen kernel: [   27.107511] EXT3-fs: mounted filesystem with ordered data mode.
    
22. Sep  8 11:06:08 loghen kernel: [   27.189487] type=1505 audit(1347073568.123:11):  operation="profile_load" pid=807 name="/usr/sbin/tcpdump"
    
23. Sep  8 11:06:08 loghen kernel: [   27.189676] type=1505 audit(1347073568.123:12):  operation="profile_replace" pid=806 name="/sbin/dhclient3"
    
24. Sep  8 11:06:08 loghen kernel: [   27.190463] type=1505 audit(1347073568.123:13):  operation="profile_replace" pid=806 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
    
25. Sep  8 11:06:08 loghen kernel: [   27.190971] type=1505 audit(1347073568.123:14):  operation="profile_replace" pid=806 name="/usr/lib/connman/scripts/dhclient-script"
    
26. Sep  8 11:06:09 loghen kernel: [   28.723150] eth0: no IPv6 routers present

复制代码

1. > more boot.log
   
2. 
   
3. Starting memcached:
   
4. touch: cannot touch `/var/lock/subsys/memcached': No such file or directory

复制代码

1. 
   
2. > more auth.log
   
3. 
   
4. Sep  8 11:06:08 loghen sshd[780]: Server listening on 0.0.0.0 port 22.
   
5. Sep  8 11:06:08 loghen sshd[780]: Server listening on :: port 22.
   
6. Sep  8 11:07:00 loghen sshd[780]: Received signal 15; terminating.
   
7. Sep  8 11:07:00 loghen sshd[1153]: Server listening on 0.0.0.0 port 22.
   
8. Sep  8 11:07:00 loghen sshd[1153]: Server listening on :: port 22.
   
9. Sep  8 11:17:02 loghen CRON[1317]: pam_unix(cron:session): session opened for user root by (uid=0)
   
10. Sep  8 11:17:02 loghen CRON[1317]: pam_unix(cron:session): session closed for user root
    
11. Sep  8 11:19:47 loghen sshd[1345]: Accepted password for root from 117.136.15.58 port 20923 ssh2
    
12. Sep  8 11:19:47 loghen sshd[1345]: pam_unix(sshd:session): session opened for user root by (uid=0)
    
13. Sep  8 11:20:01 loghen CRON[1511]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
    
14. Sep  8 11:20:01 loghen CRON[1511]: pam_unix(cron:session): session closed for user smmsp
    

复制代码

bobofan1995

回复 3# ulovko


    机房的人说机房是没有停过电的

bobofan1995

回复 4# ulovko


    服务器看日志好像是8号凌晨3点多宕的，今天11点多机房帮忙开的机