Larry Brigman wrote: > On Tue, Aug 10, 2010 at 8:26 PM, frank hunt <[email protected]> wrote: >> Yesterday I started getting these strange messages on my web server on >> every open terminal window (Debian 4.0). Not sure what they mean but >> they are making me really nervous. Can anyone shed some light on this >> stuff? >> >> >> >> Message from sysl...@server2 at Tue Aug 10 15:41:33 2010 ... >> server2 kernel: Stack: dfb41f64 00000000 00000000 00000000 00000000 >> >> Message from sysl...@server2 at Tue Aug 10 15:41:33 2010 ... >> server2 kernel: Call Trace: >> >> Message from sysl...@server2 at Tue Aug 10 15:41:33 2010 ... >> server2 kernel: Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 >> 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 89 d0 52 >> ff d3 <00> 00 00 a0 ff 53 4d 42 32 00 00 00 8b 40 0c c3 ff 05 08 d0 34 >> >> Message from sysl...@server2 at Tue Aug 10 15:41:33 2010 ... >> server2 kernel: EIP: [<c0101005>] kernel_thread_helper+0x5/0xb SS:ESP >> 0068:dfa05fec > > Looks like your kernel is getting panics. Don't know from the info but > you could look at /var/log/messages and get a longer output or from dmesg. > > There is not enough information from what you are providing to help much more > than to look for more info. > > Is your web server attached to the Internet? > Has it been updated for security fixes? >
Server is and has been attached to internet for many years. It is current with all the latest Debian patches. I'm pretty sure (well, as sure as I can be, I guess) that the system has not been compromised by evil forces from outside. I'm wondering if this might be a precursor to hardware failure? Here is some interesting stuff from dmesg: BUG: unable to handle kernel NULL pointer dereference at virtual address 00000000 printing eip: c0101005 *pde = 00000000 Oops: 0002 [#1] SMP Modules linked in: nls_iso8859_1 cifs i915 drm nfs nfsd exportfs lockd nfs_acl sunrpc ppdev lp button ac battery ipv6 xt_tcpudp ipt_LOG iptable_filter ip_tables x_tables dm_snapshot dm_mirror dm_mod loop tsdev snd_intel8x0 snd_ac97_codec snd_ac97_bus snd_pcm_oss snd_mixer_oss parport_pc parport psmouse floppy rtc intel_agp agpgart snd_pcm snd_timer pcspkr serio_raw shpchp pci_hotplug snd soundcore snd_page_alloc i2c_i801 i2c_core evdev ext3 jbd mbcache ide_cd cdrom sd_mod ide_disk generic piix ide_core e1000 ata_piix libata scsi_mod ehci_hcd uhci_hcd usbcore thermal processor fan CPU: 0 EIP: 0060:[<c0101005>] Not tainted VLI EFLAGS: 00010246 (2.6.18-6-686 #1) EIP is at kernel_thread_helper+0x5/0xb eax: 00000000 ebx: c012d745 ecx: ffffffff edx: ffffffff esi: 00000000 edi: 00000000 ebp: 00000000 esp: d32b3fec ds: 007b es: 007b ss: 0068 Process pdflush (pid: 29951, ti=d32b2000 task=f7b34000 task.ti=d32b2000) Stack: dfa05f64 00000000 00000000 00000000 00000000 Call Trace: Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 89 d0 52 ff d3 <00> 00 00 a0 ff 53 4d 42 32 00 00 00 8b 40 0c c3 ff 05 08 d0 34 EIP: [<c0101005>] kernel_thread_helper+0x5/0xb SS:ESP 0068:d32b3fec I have no clue what all that means but the part about the kernel NULL pointer dereference sounds nasty. -- frank hunt (L0F) R0B-ZAR1 befuddled linux admin erstwhile photographer hillsboro oregon _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
