这是/var/log/secure 的一段
Jan 30 14:57:45 localhost sshd[15822]: Accepted password for root from ::ffff:218.108.34.114 port 32034 ssh2
Jan 30 14:57:46 localhost sshd[15822]: subsystem request for sftp
Jan 30 06:58:53 localhost sshd[15843]: Accepted password for root from ::ffff:218.108.34.114 port 32182 ssh2
Jan 30 14:58:53 localhost sshd[15842]: Accepted password for root from ::ffff:218.108.34.114 port 32182 ssh2
Jan 30 15:03:43 localhost sshd[15822]: Received disconnect from ::ffff:218.108.34.114: 11: Disconnect requested by Windows SSH Client.
Jan 30 21:30:50 localhost sshd[4659]: Received signal 15; terminating.
Jan 30 22:24:48 localhost sshd[3239]: Server listening on :: port 9998.
Jan 30 22:24:48 localhost sshd[3239]: error: Bind to port 9998 on 0.0.0.0 failed: Address already in use.
Jan 31 00:40:52 localhost sshd[5168]: Accepted password for root from ::ffff:218.108.34.114 port 17023 ssh2
Jan 31 08:40:52 localhost sshd[5167]: Accepted password for root from ::ffff:218.108.34.114 port 17023 ssh2
Jan 31 01:03:08 localhost sshd[5205]: Accepted password for in-net from ::ffff:218.108.34.114 port 23239 ssh2
这是/var/log/secure的一段
Jan 30 14:57:46 localhost sshd(pam_unix)[15825]: session opened for user root by (uid=0)
Jan 30 14:58:27 localhost sshd(pam_unix)[15844]: session opened for user root by root(uid=0)
Jan 30 14:58:54 localhost sshd(pam_unix)[15877]: session opened for user root by root(uid=0)
Jan 30 21:30:46 localhost shutdown: shutting down for system halt
Jan 30 21:30:46 localhost init: Switching to runlevel: 0
Jan 30 21:30:48 localhost gpm[3297]: *** info [mice.c(1766)]:
Jan 30 21:30:48 localhost gpm[3297]: imps2: Auto-detected intellimouse PS/2
Jan 30 21:30:48 localhost cups-config-daemon: cups-config-daemon -TERM succeeded
Jan 30 21:30:48 localhost haldaemon: haldaemon -TERM succeeded
Jan 30 21:30:49 localhost messagebus: messagebus -TERM succeeded
Jan 30 21:30:49 localhost dbus: Can't send to audit system: USER_AVC pid=3402 uid=81 loginuid=-1 message=avc: 3 AV entries and 3/512 buckets used, longest chain length 1
Jan 30 21:30:49 localhost atd: atd shutdown succeeded
Jan 30 21:30:49 localhost cups: cupsd shutdown succeeded
Jan 30 21:30:49 localhost xfs[3364]: terminating
Jan 30 21:30:49 localhost xfs: xfs shutdown succeeded
Jan 30 21:30:49 localhost gpm: gpm shutdown succeeded
Jan 30 21:30:50 localhost sshd: sshd -TERM succeeded
Jan 30 21:30:50 localhost sendmail: sendmail shutdown succeeded
Jan 30 21:30:50 localhost sendmail: sm-client shutdown succeeded
Jan 30 21:30:50 localhost smartd: smartd shutdown failed
Jan 30 21:30:50 localhost vsftpd: vsftpd shutdown succeeded
Jan 30 21:30:50 localhost xinetd[3248]: Exiting...
Jan 30 21:30:50 localhost xinetd: xinetd shutdown succeeded
Jan 30 21:30:50 localhost acpid: acpid shutdown succeeded
Jan 30 21:30:51 localhost crond: crond shutdown succeeded
Jan 30 21:30:51 localhost rpc.statd[3069]: Caught signal 15, un-registering and exiting.
Jan 30 21:30:51 localhost nfslock: rpc.statd shutdown succeeded
Jan 30 21:30:51 localhost irqbalance: irqbalance shutdown succeeded
Jan 30 21:30:51 localhost portmap: portmap shutdown succeeded
Jan 30 21:30:51 localhost kernel: Kernel logging (proc) stopped.
Jan 30 21:30:51 localhost kernel: Kernel log daemon terminating.
Jan 30 21:30:52 localhost syslog: klogd shutdown succeeded
Jan 30 21:30:52 localhost exiting on signal 15
Jan 30 22:24:46 localhost syslogd 1.4.1: restart.
Jan 30 22:24:46 localhost syslog: syslogd 启动 succeeded
Jan 30 22:24:46 localhost kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jan 30 22:24:46 localhost kernel: Linux version 2.6.9-42.ELsmp (bhcompile@hs20-bc1-1.build.redhat.com) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-2)) #1 SMP Wed Jul 12 23:27:17 EDT 2006
Jan 30 22:24:46 localhost kernel: BIOS-provided physical RAM map:
是服务器自动重启了吗??
如果是自动重启,去哪里看原因呢??
谢谢了