[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] RaQ2 Server stops responding, any ideas?

We are getting the same things appearing in our server logs as well.
Cobalt quickly put a new kernel on the server, I was amazed at how fast
they offered help. I have since emailed them about the continuing problems
but I have not heard back yet. It cut down on the frequency of this, it
was every day two or three times a day.  But also we are seeing things
like this in /var/log/messages:

Feb 17 20:30:02 penguin kernel: Swansea University Computer Society IPX
0.34 for NET3.035
Feb 17 20:30:02 penguin kernel: IPX Portions Copyright (c) 1995 Caldera,
Inc.
Feb 17 20:30:02 penguin kernel: Appletalk 0.17 for Linux NET3.035
Feb 17 20:30:04 penguin proftpd[5381]: FTP session closed.
Feb 17 20:31:00 penguin proftpd[5464]: FTP session closed.
Feb 17 20:33:04 penguin modprobe: can't locate module block-major-110
Feb 17 20:33:36 penguin last message repeated 2 times

and also right before the whole box locks up we see:

Feb 21 12:53:31 penguin kernel: Unable to handle kernel paging request at
virtual address 6f727030, epc == 8003b3a4, ra == 8003b31c
Feb 21 12:53:31 penguin kernel: Unable to handle kernel paging request at
virtual address 6f727034, epc == 8003b384, ra == 8003b31c
Feb 21 12:54:03 penguin last message repeated 240 times
Feb 21 12:55:04 penguin last message repeated 458 times
Feb 21 12:56:11 penguin last message repeated 317 times
Feb 21 12:56:17 penguin kernel: Unable to handle kernel paging request at
virtual address 6f727034, epc == 8003b384, ra == 8003b31c
Feb 21 12:59:25 penguin kernel: Unable to handle kernel paging request at
virtual address 6f727034, epc == 8003b384, ra == 8003b31c
Feb 21 13:00:36 penguin last message repeated 11 times
Feb 21 13:00:48 penguin last message repeated 6 times
Feb 21 13:03:48 penguin kernel: Unable to handle kernel paging request at
virtual address 6f727034, epc == 8003b384, ra == 8003b31c
Feb 21 13:03:52 penguin last message repeated 6 times
Feb 21 13:05:50 penguin kernel: Warning: possible SYN flood from
167.21.10.1 on 204.253.97.30:80.  Sending cookies.
Feb 21 13:06:52 penguin kernel: Warning: possible SYN flood from
207.96.20.24 on 204.253.97.56:80.  Sending cookies.
Feb 21 13:07:59 penguin kernel: Warning: possible SYN flood from
204.253.96.23 on 204.253.96.5:80.  Sending cookies.
Feb 21 13:08:24 penguin kernel: Unable to handle kernel paging request at
virtual address 6f727034, epc == 8003b384, ra == 8003b31c
Feb 21 13:09:00 penguin last message repeated 7 times

On Tue, 22 Feb 2000, Ali & Charlie wrote:

> All we see in /var/log/messages is a whole bunch of these messages and
> pretty well nothing else. Not sure why we are seeing Appletalk ?
> 
> Feb 22 05:40:31 pootle kernel: Swansea University Computer Society IPX 0.34
> for NET3.035
> Feb 22 05:40:31 pootle kernel: IPX Portions Copyright (c) 1995 Caldera, Inc.
> Feb 22 05:40:31 pootle kernel: Appletalk 0.17 for Linux NET3.035
> 
> >
> >
> > That is very strange as they are totally seperate processes. Normally I
> > would say Inetd died, but not if you can still telnet in. Do your server
> > logs show anything strange? (/var/log/messages) It might also be
> > interesting
> > to see if you can just restart the processes. Next time this happens try
> > these in the order listed below and see if the server comes back without
> > rebooting it.
> >
> > /etc/rc.d/init.d/./inet restart
> >
> >
> >
> > -----Original Message-----
> 
> >
> > One of our RaQ2s keeps becoming inaccessable for ftp, email and
> > http access
> > for no apparent reason. This is happening on a daily basis, usually in the
> > morning and we cannot figure out why. The server is not under a heavy load
> > as can be seen below, and after awhile, it will begin responding again as
> > normal.
> >
> >   4:49am  up 22:32,  1 user,  load average: 0.05, 0.08, 0.06
> > 45 processes: 44 sleeping, 1 running, 0 zombie, 0 stopped
> > CPU states:  8.2% user,  2.2% system,  0.0% nice, 89.7% idle
> > Mem:   63400K av,  50436K used,  12964K free,  34188K shrd,   1472K buff
> > Swap: 130748K av,     76K used, 130672K free                 30004K cached
> >
> > We can login to the machine and then reboot it and it begins
> > responding fine
> > again. Where should we begin looking for the problem here?
> >
> > Thanks,
> > Ali & Charlie
> >
> >
> > _______________________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> > _______________________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 

Rik Thomas CTO rikt@xxxxxxxxxxxx
Delaware.Net, Inc. http://www.delaware.net
P:302.736.5515 F:302.736.5945 ICQ:879956

Check out our Tucows Linux Mirror
http://delaware.linux.tucows.com