[TriLUG] strange happenings - self booting server?

[Brian Bell]

Here's an interesting one...

Got home tonight from dinner and found that the PowerEdge1550 sitting in 
my office was running... and had been up for 2hr 43 min.    Its running 
Ubuntu 5.10 (breezy)

It was definitely OFF when I left.   I had shut it down late last night 
(midnight) as you can see in the log.  but for whatever reason - at 
8:03pm  it "restarted"

/var/log/messages says:

---- start log snippet ----
Apr 13 00:50:44 localhost shutdown[6398]: shutting down for system halt
Apr 13 00:50:49 localhost kernel: Kernel logging (proc) stopped.
Apr 13 00:50:49 localhost kernel: Kernel log daemon terminating.
Apr 13 00:50:49 localhost exiting on signal 15
Apr 13 20:03:17 localhost syslogd 1.4.1#17ubuntu3: restart.
Apr 13 20:03:17 localhost kernel: Inspecting /boot/System.map-2.6.12-10-386
Apr 13 20:03:17 localhost kernel: Loaded 29010 symbols from 
/boot/System.map-2.6.12-10-386.
Apr 13 20:03:17 localhost kernel: Symbols match kernel version 2.6.12.
Apr 13 20:03:17 localhost kernel: No module symbols loaded - kernel 
modules not enabled.
Apr 13 20:03:17 localhost kernel: it even in supervisor mode... Ok.
Apr 13 20:03:17 localhost kernel: [4294669.770000] Security Framework 
v1.0.0 initialized
Apr 13 20:03:17 localhost kernel: [4294669.770000] SELinux:  Disabled at 
boot.
Apr 13 20:03:17 localhost kernel: [4294669.770000] Mount-cache hash 
table entries: 512
Apr 13 20:03:17 localhost kernel: [4294669.770000] CPU: L1 I cache: 16K, 
L1 D cache: 16K
Apr 13 20:03:17 localhost kernel: [4294669.770000] CPU: L2 cache: 256K
Apr 13 20:03:17 localhost kernel: [4294669.770000] CPU: Intel Pentium 
III (Coppermine) stepping 06
Apr 13 20:03:17 localhost kernel: [4294669.770000] Enabling fast FPU 
save and restore... done.
Apr 13 20:03:17 localhost kernel: [4294669.770000] Enabling unmasked 
SIMD FPU exception support... done.
Apr 13 20:03:17 localhost kernel: [4294669.770000] Checking 'hlt' 
instruction... OK.
Apr 13 20:03:17 localhost kernel: [4294669.774000] Checking for popad 
bug... OK.
Apr 13 20:03:17 localhost kernel: [4294669.774000] checking if image is 
initramfs... it is
Apr 13 20:03:17 localhost kernel: [4294670.578000] Freeing initrd 
memory: 5136k freed
... and so on ... normal bootup proceeds from here .....
---- end log snippet ----

Any thoughts?  I thought about a magic packet, but I don't think the 
BIOS is set for Wake on LAN.   Plus, it's behind my Linksys - and 
everyone knows that a router is a firewall right?? :)   (so say the 
Cerient boys)  No seriously, it's behind a firewall and there are no 
ports forwarded to it, etc.

Thanks,
Brian

-- 
Brian Bell
Kneecap Interactive
919-321-1365
bbell at kneecap.net