Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!
Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.
Loguję się dzisiaj na serwer by przejrzeć logi i nie widzę folderu /var/log. Patrzę czy w kopiach zapasowych folderu var jest folder log i był jeszcze wczoraj. Po kilku minutach pojawił się folder /var/log i kilka plików logowania z mail w nazwie. Uruchomiłem ponownie serwer apache2 nie wstał bo brakuje mu folderu do logów podobnie dla innych usług, jednak mimo wszystko uruchomił się do końca.
dmesg z wczoraj
[ 3.777510] md: raid1 personality registered for level 1 [ 3.784860] mdadm: sending ioctl 1261 to a partition! [ 3.784867] mdadm: sending ioctl 1261 to a partition! [ 3.798326] mdadm: sending ioctl 1261 to a partition! [ 3.798331] mdadm: sending ioctl 1261 to a partition! [ 3.810370] mdadm: sending ioctl 1261 to a partition! [ 3.810375] mdadm: sending ioctl 1261 to a partition! [ 3.833883] mdadm: sending ioctl 1261 to a partition! [ 3.833888] mdadm: sending ioctl 1261 to a partition! [ 3.834184] mdadm: sending ioctl 1261 to a partition! [ 3.834189] mdadm: sending ioctl 1261 to a partition! [ 3.849472] md: md0 stopped. [ 3.857815] md: bind<sdb1> [ 3.858111] md: bind<sda1> [ 3.862690] raid1: raid set md0 active with 2 out of 2 mirrors [ 3.862738] md0: detected capacity change from 0 to 14997708800 [ 3.864777] md0: unknown partition table [ 4.202559] PM: Starting manual resume from disk [ 4.202567] PM: Resume from partition 8:2 [ 4.202570] PM: Checking hibernation image. [ 4.202872] PM: Error -22 checking image file [ 4.202877] PM: Resume from disk failed. [ 4.253823] EXT4-fs (md0): INFO: recovery required on readonly filesystem [ 4.253832] EXT4-fs (md0): write access will be enabled during recovery [ 10.446772] EXT4-fs (md0): orphan cleanup on readonly fs [ 10.446789] EXT4-fs (md0): ext4_orphan_cleanup: deleting unreferenced inode 525037 [ 10.460700] EXT4-fs (md0): 1 orphan inode deleted [ 10.460709] EXT4-fs (md0): recovery complete [ 10.597994] EXT4-fs (md0): mounted filesystem with ordered data mode [ 11.893480] udev[304]: starting version 164 [ 12.436552] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 [ 12.436571] ACPI: Sleep Button [SLPB] [ 12.436671] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 [ 12.436678] ACPI: Power Button [PWRF] [ 12.445842] processor LNXCPU:00: registered as cooling_device0 [ 12.485224] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 12.557999] input: PC Speaker as /devices/platform/pcspkr/input/input3 [ 12.625799] parport_pc 00:08: reported by Plug and Play ACPI [ 12.625859] parport0: PC-style at 0x378, irq 7 [PCSPP,TRISTATE] [ 12.639753] intel_rng: Firmware space is locked read-only. If you can't or [ 12.639758] intel_rng: don't want to disable this in firmware setup, and if [ 12.639760] intel_rng: you are certain that your system has a functional [ 12.639762] intel_rng: RNG, try using the 'no_fwh_detect' option. [ 12.654071] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4 [ 12.690690] i801_smbus 0000:00:1f.3: PCI INT B -> GSI 17 (level, low) -> IRQ 17 [ 12.737718] __ratelimit: 12 callbacks suppressed [ 12.737725] mdadm: sending ioctl 1261 to a partition! [ 12.737731] mdadm: sending ioctl 1261 to a partition! [ 12.969954] udev[315]: renamed network interface eth0 to eth2 [ 13.090525] [drm] Initialized drm 1.1.0 20060810 [ 13.167868] Error: Driver 'pcspkr' is already registered, aborting... [ 13.227350] pci 0000:00:02.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16 [ 13.227361] pci 0000:00:02.0: setting latency timer to 64 [ 13.233140] [drm] Initialized i915 1.6.0 20080730 for 0000:00:02.0 on minor 0 [ 13.258068] Intel ICH 0000:00:1f.5: PCI INT B -> GSI 17 (level, low) -> IRQ 17 [ 13.258134] Intel ICH 0000:00:1f.5: setting latency timer to 64 [ 13.684023] intel8x0_measure_ac97_clock: measured 55972 usecs (2696 samples) [ 13.684029] intel8x0: clocking to 48000 [ 14.141848] Adding 499704k swap on /dev/sda2. Priority:-1 extents:1 across:499704k [ 14.227866] Adding 499704k swap on /dev/sdb2. Priority:-2 extents:1 across:499704k [ 14.891466] mdadm: sending ioctl 1261 to a partition! [ 14.891473] mdadm: sending ioctl 1261 to a partition! [ 14.902625] mdadm: sending ioctl 1261 to a partition! [ 14.902633] mdadm: sending ioctl 1261 to a partition! [ 14.930286] mdadm: sending ioctl 1261 to a partition! [ 14.930293] mdadm: sending ioctl 1261 to a partition! [ 14.985938] loop: module loaded [ 14.990811] mdadm: sending ioctl 1261 to a partition! [ 14.990820] mdadm: sending ioctl 1261 to a partition! [ 19.885290] EXT4-fs (sda3): mounted filesystem with ordered data mode [ 20.006826] EXT4-fs (sda5): mounted filesystem with ordered data mode [ 20.172524] EXT4-fs (sdb5): mounted filesystem with ordered data mode [ 20.608527] r8169 0000:01:00.0: eth2: link down [ 20.608628] ADDRCONF(NETDEV_UP): eth2: link is not ready [ 22.146721] r8169 0000:01:00.0: eth2: link up [ 22.146767] ADDRCONF(NETDEV_CHANGE): eth2: link becomes ready
zawartość /var/log wczoraj:
cd ./var/log/;ls alternatives.log aptitude.5.gz debug.4.gz exim4 messages.4.gz alternatives.log.1 aptitude.6.gz dmesg faillog news alternatives.log.10.gz arpalert.log dmesg.0 fontconfig.log samba alternatives.log.11.gz auth.log dmesg.1.gz fsck syslog alternatives.log.12.gz auth.log.1 dmesg.2.gz installer syslog.1 alternatives.log.2.gz auth.log.2.gz dmesg.3.gz kern.log syslog.2.gz alternatives.log.3.gz auth.log.3.gz dmesg.4.gz kern.log.1 syslog.3.gz alternatives.log.4.gz auth.log.4.gz dpkg.log kern.log.2.gz syslog.4.gz alternatives.log.5.gz boot dpkg.log.1 kern.log.3.gz syslog.5.gz alternatives.log.6.gz btmp dpkg.log.10.gz kern.log.4.gz syslog.6.gz alternatives.log.7.gz btmp.1 dpkg.log.11.gz lastlog syslog.7.gz alternatives.log.8.gz daemon.log dpkg.log.12.gz lpr.log user.log alternatives.log.9.gz daemon.log.1 dpkg.log.2.gz mail.err user.log.1 apache2 daemon.log.2.gz dpkg.log.3.gz mail.info user.log.2.gz apt daemon.log.3.gz dpkg.log.4.gz mail.log user.log.3.gz aptitude daemon.log.4.gz dpkg.log.5.gz mail.warn user.log.4.gz aptitude.1.gz debug dpkg.log.6.gz messages wtmp aptitude.2.gz debug.1 dpkg.log.7.gz messages.1 wtmp.1 aptitude.3.gz debug.2.gz dpkg.log.8.gz messages.2.gz aptitude.4.gz debug.3.gz dpkg.log.9.gz messages.3.gz
zawartość bieżąca /var/log
ls -la razem 1620 drwxr-xr-x 3 root root 4096 09-05 14:36 . drwxr-xr-x 14 root root 4096 09-05 14:26 .. -rw-r--r-- 1 root root 53 09-05 14:36 arpalert.log -rw-r----- 1 root adm 1065 09-05 15:05 auth.log -rw-r----- 1 root adm 655 09-05 14:36 daemon.log -rw-r----- 1 root adm 8812 09-05 14:36 debug -rw-r--r-- 1 root adm 32141 09-05 14:36 dmesg -rw-r----- 1 root adm 755614 09-05 15:10 kern.log -rw-r--r-- 1 root root 292 09-05 14:41 lastlog -rw-r----- 1 root adm 0 09-05 14:36 lpr.log -rw-r----- 1 root adm 1116 09-05 15:00 mail.err -rw-r----- 1 root adm 1116 09-05 15:00 mail.info -rw-r----- 1 root adm 1116 09-05 15:00 mail.log -rw-r----- 1 root adm 1116 09-05 15:00 mail.warn -rw-r----- 1 root adm 42273 09-05 14:36 messages drwxr-xr-x 2 root root 4096 09-05 14:36 news -rw-r----- 1 root adm 759451 09-05 15:10 syslog -rw-r----- 1 root adm 74 09-05 14:35 user.log
cat /proc/mdstat Personalities : [raid1] md0 : active raid1 sda1[0] sdb1[1] 14646200 blocks super 1.2 [2/2] [UU] unused devices: <none>
/dev/md0: Version : 1.2 Creation Time : Wed Oct 5 23:42:28 2011 Raid Level : raid1 Array Size : 14646200 (13.97 GiB 15.00 GB) Used Dev Size : 14646200 (13.97 GiB 15.00 GB) Raid Devices : 2 Total Devices : 2 Persistence : Superblock is persistent Update Time : Fri Sep 5 15:15:05 2014 State : clean Active Devices : 2 Working Devices : 2 Failed Devices : 0 Spare Devices : 0 Name : storage1:0 UUID : 98e574ac:65d8c97e:a36d6450:b1651de8 Events : 1328 Number Major Minor RaidDevice State 0 8 1 0 active sync /dev/sda1 1 8 17 1 active sync /dev/sdb1
co do rsyslog.conf i błędą konfigurację wg. powyższych logów proszę o informację co jest nie tak (dodałem sobie moduł logowania UTP wg. przykładów na stronie www.rsyslog.com):
# /etc/rsyslog.conf Configuration file for rsyslog. # # For more information see # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html ################# #### MODULES #### ################# $ModLoad imuxsock # provides support for local system logging $ModLoad imklog # provides kernel logging support (previously done by rklogd) #$ModLoad immark # provides --MARK-- message capability # provides UDP syslog reception $ModLoad imudp $UDPServerRun 514 # provides TCP syslog reception #$ModLoad imtcp #$InputTCPServerRun 514 If $fromhost-ip == "192.168.1.14" then [ Action (type="omfile" File="/var/log/syslog_router.log") ] ########################### #### GLOBAL DIRECTIVES #### ########################### # # Use traditional timestamp format. # To enable high precision timestamps, comment out the following line. # $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # # Set the default permissions for all log files. # $FileOwner root $FileGroup adm $FileCreateMode 0640 $DirCreateMode 0755 $Umask 0022 # # Include all config files in /etc/rsyslog.d/ # $IncludeConfig /etc/rsyslog.d/*.conf ############### #### RULES #### ############### # # First some standard log files. Log by facility. # auth,authpriv.* /var/log/auth.log *.*;auth,authpriv.none -/var/log/syslog #cron.* /var/log/cron.log daemon.* -/var/log/daemon.log kern.* -/var/log/kern.log lpr.* -/var/log/lpr.log mail.* -/var/log/mail.log user.* -/var/log/user.log # # Logging for the mail system. Split it up so that # it is easy to write scripts to parse these files. # mail.info -/var/log/mail.info mail.warn -/var/log/mail.warn mail.err /var/log/mail.err # # Logging for INN news system. # news.crit /var/log/news/news.crit news.err /var/log/news/news.err news.notice -/var/log/news/news.notice # # Some "catch-all" log files. # *.=debug;\ auth,authpriv.none;\ news.none;mail.none -/var/log/debug *.=info;*.=notice;*.=warn;\ auth,authpriv.none;\ cron,daemon.none;\ mail,news.none -/var/log/messages # # Emergencies are sent to everybody logged in. # *.emerg * # # I like to have messages displayed on the console, but only on a virtual # console I usually leave idle. # #daemon,mail.*;\ # news.=crit;news.=err;news.=notice;\ # *.=debug;*.=info;\ # *.=notice;*.=warn /dev/tty8 # The named pipe /dev/xconsole is for the `xconsole' utility. To use it, # you must invoke `xconsole' with the `-file' option: # # $ xconsole -file /dev/xconsole [...] # # NOTE: adjust the list below, or you'll go crazy if you have a reasonably # busy site.. # daemon.*;mail.*;\ news.err;\ *.=debug;*.=info;\ *.=notice;*.=warn |/dev/xconsole
Offline
softraid jak mniemam?
sprawdź czy oba dyski są sprawne.
Ostatnio edytowany przez ethanak (2014-09-05 16:11:27)
Offline
Przywróciłem folder /var/log apache wstał, poza błędną konfiguracją rsyslog nic więcej w logach nie dostrzegam. Sprawdzę te "stare" już dyski i przekaże wyniki do analizy ;).
Offline
smartctl -H /dev/sda smartctl 5.40 2010-07-12 r3124 [i686-pc-linux-gnu] (local build) Copyright (C) 2002-10 by Bruce Allen, http://smartmontools.sourceforge.net === START OF READ SMART DATA SECTION === SMART overall-health self-assessment test result: PASSED
smartctl -H /dev/sdb smartctl 5.40 2010-07-12 r3124 [i686-pc-linux-gnu] (local build) Copyright (C) 2002-10 by Bruce Allen, http://smartmontools.sourceforge.net === START OF READ SMART DATA SECTION === SMART overall-health self-assessment test result: PASSED
smartctl --attributes --log=selftest /dev/sda smartctl 5.40 2010-07-12 r3124 [i686-pc-linux-gnu] (local build) Copyright (C) 2002-10 by Bruce Allen, http://smartmontools.sourceforge.net === START OF READ SMART DATA SECTION === SMART Attributes Data Structure revision number: 16 Vendor Specific SMART Attributes with Thresholds: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x002f 200 200 051 Pre-fail Always - 0 3 Spin_Up_Time 0x0027 140 137 021 Pre-fail Always - 3966 4 Start_Stop_Count 0x0032 100 100 000 Old_age Always - 87 5 Reallocated_Sector_Ct 0x0033 200 200 140 Pre-fail Always - 0 7 Seek_Error_Rate 0x002e 200 200 000 Old_age Always - 0 9 Power_On_Hours 0x0032 068 068 000 Old_age Always - 23437 10 Spin_Retry_Count 0x0032 100 253 000 Old_age Always - 0 11 Calibration_Retry_Count 0x0032 100 253 000 Old_age Always - 0 12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 85 192 Power-Off_Retract_Count 0x0032 200 200 000 Old_age Always - 52 193 Load_Cycle_Count 0x0032 200 200 000 Old_age Always - 87 194 Temperature_Celsius 0x0022 100 096 000 Old_age Always - 43 196 Reallocated_Event_Count 0x0032 200 200 000 Old_age Always - 0 197 Current_Pending_Sector 0x0032 200 200 000 Old_age Always - 0 198 Offline_Uncorrectable 0x0030 200 200 000 Old_age Offline - 0 199 UDMA_CRC_Error_Count 0x0032 200 200 000 Old_age Always - 0 200 Multi_Zone_Error_Rate 0x0008 200 200 000 Old_age Offline - 0 SMART Self-test log structure revision number 1 No self-tests have been logged. [To run self-tests, use: smartctl -t]
smartctl --attributes --log=selftest /dev/sdb smartctl 5.40 2010-07-12 r3124 [i686-pc-linux-gnu] (local build) Copyright (C) 2002-10 by Bruce Allen, http://smartmontools.sourceforge.net === START OF READ SMART DATA SECTION === SMART Attributes Data Structure revision number: 16 Vendor Specific SMART Attributes with Thresholds: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x000f 100 100 051 Pre-fail Always - 0 3 Spin_Up_Time 0x0007 100 100 025 Pre-fail Always - 3776 4 Start_Stop_Count 0x0032 097 097 000 Old_age Always - 3559 5 Reallocated_Sector_Ct 0x0033 100 100 011 Pre-fail Always - 0 7 Seek_Error_Rate 0x000f 100 100 051 Pre-fail Always - 0 8 Seek_Time_Performance 0x0025 100 100 015 Pre-fail Offline - 0 9 Power_On_Hours 0x0032 094 094 000 Old_age Always - 3899314 10 Spin_Retry_Count 0x0033 100 100 051 Pre-fail Always - 0 11 Calibration_Retry_Count 0x0012 100 100 000 Old_age Always - 0 12 Power_Cycle_Count 0x0032 099 099 000 Old_age Always - 1894 194 Temperature_Celsius 0x0022 121 082 000 Old_age Always - 39 195 Hardware_ECC_Recovered 0x001a 100 100 000 Old_age Always - 11469413 196 Reallocated_Event_Count 0x0032 100 100 000 Old_age Always - 0 197 Current_Pending_Sector 0x0012 100 100 000 Old_age Always - 0 198 Offline_Uncorrectable 0x0030 100 100 000 Old_age Offline - 0 199 UDMA_CRC_Error_Count 0x003e 200 200 000 Old_age Always - 0 200 Multi_Zone_Error_Rate 0x000a 100 100 051 Old_age Always - 0 201 Soft_Read_Error_Rate 0x000a 100 100 051 Old_age Always - 0 SMART Self-test log structure revision number 1 No self-tests have been logged. [To run self-tests, use: smartctl -t]
Offline
jak na moje kaprawe oko - dyski do wymiany i to dość szybko.
Offline
Wrzuć skriny z gnome-disk-utility (ze SMART)
Fervi
Offline
Jak już to przeskanować im powierzchnie. Poza tym, to ja tam nie widzę nic podejrzanego w tym smartach, czemu niby te dyski miałyby być do wymiany? No może temu drugiemu dyskowi trochę mechanika siada ale może to przez to, że dysk chodzi już 450 lat ale jak to mówią, im starsze tym lepsze. xD
Offline
[quote=morfik]Jak już to przeskanować im powierzchnie. Poza tym, to ja tam nie widzę nic podejrzanego w tym smartach, czemu niby te dyski miałyby być do wymiany? No może temu drugiemu dyskowi trochę mechanika siada ale może to przez to, że dysk chodzi już 450 lat ale jak to mówią, im starsze tym lepsze. xD[/quote]
Producenci dysków do wartości SMART podchodzą bardzo dowolnie i wyniki czasem nic nie znaczą. Czasem zamiast godzin są inne jednostki i stąd kosmiczne wyniki.
U mnie jest to tylko 100 lat :)
9 Power_On_Hours_and_Msec 0x0032 000 000 000 Old_age Always - 904101h+54m+33.290s
Wiarygodne dane mam tutaj:
smartctl -l devstat /dev/sda |grep 'Power-on Hours' 1 0x010 4 9308 Power-on Hours
Offline
To co dyski do wymiany czy nie? Póki co wszystko normalnie w logach nie wiedzę błędów dotyczących dysków.
Offline
Przeskanować dyski oprogramowanie producenta czy chodzi o sprawdzenie systemu plików, na którym znajduje się /var/log (bo system plików skanowałem i brak błędów)?
Offline
Przeskanuj powierzchnię dysku w poszukiwaniu ewentualnych błędów (bad blocków) -- masz tam w gsmartcontrol odpowiednie testy, potem rzuć okiem na tabelkę z parametrami i zobacz cy coś się zmieniło.
Offline
Time (s) | Query |
---|---|
0.00013 | SET CHARSET latin2 |
0.00004 | SET NAMES latin2 |
0.00131 | SELECT u.*, g.*, o.logged FROM punbb_users AS u INNER JOIN punbb_groups AS g ON u.group_id=g.g_id LEFT JOIN punbb_online AS o ON o.ident='3.143.23.38' WHERE u.id=1 |
0.00075 | REPLACE INTO punbb_online (user_id, ident, logged) VALUES(1, '3.143.23.38', 1732818591) |
0.00053 | SELECT * FROM punbb_online WHERE logged<1732818291 |
0.00051 | SELECT topic_id FROM punbb_posts WHERE id=274835 |
0.00005 | SELECT id FROM punbb_posts WHERE topic_id=26365 ORDER BY posted |
0.00063 | SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, 0 FROM punbb_topics AS t INNER JOIN punbb_forums AS f ON f.id=t.forum_id LEFT JOIN punbb_forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id=3) WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id=26365 AND t.moved_to IS NULL |
0.00006 | SELECT search_for, replace_with FROM punbb_censoring |
0.00215 | SELECT u.email, u.title, u.url, u.location, u.use_avatar, u.signature, u.email_setting, u.num_posts, u.registered, u.admin_note, p.id, p.poster AS username, p.poster_id, p.poster_ip, p.poster_email, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by, g.g_id, g.g_user_title, o.user_id AS is_online FROM punbb_posts AS p INNER JOIN punbb_users AS u ON u.id=p.poster_id INNER JOIN punbb_groups AS g ON g.g_id=u.group_id LEFT JOIN punbb_online AS o ON (o.user_id=u.id AND o.user_id!=1 AND o.idle=0) WHERE p.topic_id=26365 ORDER BY p.id LIMIT 0,25 |
0.00096 | UPDATE punbb_topics SET num_views=num_views+1 WHERE id=26365 |
Total query time: 0.00712 s |