From mboxrd@z Thu Jan 1 00:00:00 1970 From: LC Bruzenak Subject: Re: need debug suggestions on system freeze Date: Fri, 09 May 2008 16:05:35 -0500 Message-ID: <1210367135.7060.95.camel@homeserver> References: <1210363125.7060.72.camel@homeserver> <1210364776.3228.1.camel@localhost.localdomain> <200805091645.16500.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <200805091645.16500.sgrubb@redhat.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Steve Grubb Cc: Linux Audit List-Id: linux-audit@redhat.com On Fri, 2008-05-09 at 16:45 -0400, Steve Grubb wrote: > On Friday 09 May 2008 16:26:16 Eric Paris wrote: > > > * Very soon after this the machine locks up. The above is the last entry > > > in the messages log. Only the "caps lock" and some other "lock" icon on > > > the keyboard (but not scroll lock) flash, and I have no inbound network > > > connection & the screen is blank. I cannot get to a terminal with > > > . The only option is power cycle. > > > > This is indicative of a kernel panic. Can you attach a serial console > > to the machine in question and boot such that kernel messages go to the > > serial console? (console=ttyS0,9600 console=tty0) And then recreate? > > /me wonders if this is due to fail mode being panic ? > > -Steve I changed "-f 2" to "-f 1." May 9 16:58:36 comms auditd[3552]: Audit daemon rotating log files with keep option May 9 16:58:45 comms auditd[3552]: Audit daemon rotating log files with keep option May 9 16:59:45 comms kernel: printk: 152 messages suppressed. May 9 16:59:45 comms kernel: audit: audit_backlog=8193 > audit_backlog_limit=8192 May 9 16:59:45 comms kernel: audit: audit_lost=175 audit_rate_limit=0 audit_backlog_limit=8192 May 9 16:59:45 comms kernel: audit: backlog limit exceeded May 9 16:59:45 comms kernel: audit: audit_backlog=8193 > audit_backlog_limit=8192 May 9 16:59:45 comms kernel: audit: audit_lost=176 audit_rate_limit=0 audit_backlog_limit=8192 May 9 16:59:45 comms kernel: audit: backlog limit exceeded No more kernel panic. OK - should I roll to the next version and assign different priorities? I'm so over version 1.7.2 already anyway... :) LCB. -- LC (Lenny) Bruzenak lenny@magitekltd.com