Pages : 1
#1 Le 10/01/2015, à 11:19
- Noar51
alerte ping et analyse de log
Bonjour,
Environ tous les 2 ou 3 jours j'ai des alerte ping et mon seveur du coup se retrouve indisponible il faut que je fasse un redémarrage électrique (mardi il ne redémarrais pas du tout j'ai du tout reinstaller) j'ai demandé a online si ca venait pas de chez eux et regarder mes log .... mais le problème c'est que je ne sais pas lesquels et quoi chercher.
Lorsque j'ai fait la1ere instale week end dernier j'avais peaufiné les réglages apaches proftpd...., mais mardi quand j'ai tout reinstaller formatage, ubuntu, le lamp, changement de port, interdiction du root,fail 2 ban webmin et les composant qui lui permette de marcher avec une install de base je vois pas pourquoi mon serveur se coupe j'ai laissé les réglages de bases rien touché cette fois.
Est-ce que quelqu'n pour m'aider et me dire quels log regarder et quoi chercher ?
merci
Hors ligne
#2 Le 10/01/2015, à 11:28
- sinbad83
Re : alerte ping et analyse de log
Salut,
tu peux toujours
- lancer les commandes last, dmesg,
- regarder dans /var/log/, les fichiers auth.log, fail2ban.log, sys.log.
La connaissance n'est pas une denrée rare, il faut la partager avec les autres.
Linux registered #484707
Site: www.coursinforev.org/doku.php
Desktop AMD Ryzen 5-3600, RAM 16GB, Ubuntu 20.10, HP Pavillon G6 Ubuntu 20.10 et Ten, Serveur Ubuntu 18.04
Hors ligne
#3 Le 10/01/2015, à 12:23
- Noar51
Re : alerte ping et analyse de log
avec la commande last la seul chose de suspect
ftp ftpd3883 census9.shodan.i Wed Jan 7 14:55 - 14:55 (00:00)et pour dmesg
last
[ 0.000000] Initializing cgroup subsys cpuset
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 3.13.0-43-generic (buildd@tipua) (gcc version 4.8.2 (Ubuntu 4.8.2-19ubuntu1) ) #72-Ubuntu SMP Mon Dec 8 19:35:06 UTC 2014 (Ubuntu 3 .13.0-43.72-generic 3.13.11.11)
[ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-3.13.0-43-generic root=UUID=9fb 528b7-3727-4434-acd0-68f575af968c ro quiet splash vt.handoff=7
[ 0.000000] KERNEL supported cpus:
[ 0.000000] Intel GenuineIntel
[ 0.000000] AMD AuthenticAMD
[ 0.000000] Centaur CentaurHauls
[ 0.000000] e820: BIOS-provided physical RAM map:
[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x0000000000099fff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000009a000-0x000000000009ffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000007df4ffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000007df50000-0x000000007df5dfff] ACPI data
[ 0.000000] BIOS-e820: [mem 0x000000007df5e000-0x000000007df8ffff] ACPI NVS
[ 0.000000] BIOS-e820: [mem 0x000000007df90000-0x000000007dffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000fecc0000-0x00000000fecc0fff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000ff700000-0x00000000ffffffff] reserved
[ 0.000000] NX (Execute Disable) protection: active
[ 0.000000] SMBIOS 2.5 present.
[ 0.000000] DMI: Dell XS11-VX8/S2F , BIOS S2F_3A08 12/28/20 09
[ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
[ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable
[ 0.000000] No AGP bridge found
[ 0.000000] e820: last_pfn = 0x7df50 max_arch_pfn = 0x400000000
[ 0.000000] MTRR default type: uncachable
[ 0.000000] MTRR fixed ranges enabled:
[ 0.000000] 00000-9FFFF write-back
[ 0.000000] A0000-DFFFF uncachable
[ 0.000000] E0000-EFFFF write-through
[ 0.000000] F0000-FFFFF write-protect
[ 0.000000] MTRR variable ranges enabled:
[ 0.000000] 0 base 000000000 mask F80000000 write-back
[ 0.000000] 1 base 07E000000 mask FFE000000 uncachable
[ 0.000000] 2 disabled
[ 0.000000] 3 disabled
[ 0.000000] 4 disabled
[ 0.000000] 5 disabled
[ 0.000000] 6 disabled
[ 0.000000] 7 disabled
[ 0.000000] x86 PAT enabled: cpu 0, old 0x7040600070406, new 0x7010600070106
[ 0.000000] original variable MTRRs
[ 0.000000] reg 0, base: 0GB, range: 2GB, type WB
[ 0.000000] reg 1, base: 2016MB, range: 32MB, type UC
[ 0.000000] total RAM covered: 2016M
[ 0.000000] Found optimal setting for mtrr clean up
[ 0.000000] gran_size: 64K chunk_size: 64M num_reg: 2 lose cov er RAM: 0G
[ 0.000000] New variable MTRRs
[ 0.000000] reg 0, base: 0GB, range: 2GB, type WB
[ 0.000000] reg 1, base: 2016MB, range: 32MB, type UC
[ 0.000000] found SMP MP-table at [mem 0x000ff780-0x000ff78f] mapped at [ffff 8800000ff780]
[ 0.000000] Scanning 1 areas for low memory corruption
[ 0.000000] Base memory trampoline at [ffff880000094000] 94000 size 24576
[ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff]
[ 0.000000] [mem 0x00000000-0x000fffff] page 4k
[ 0.000000] BRK [0x01fe1000, 0x01fe1fff] PGTABLE
[ 0.000000] BRK [0x01fe2000, 0x01fe2fff] PGTABLE
[ 0.000000] BRK [0x01fe3000, 0x01fe3fff] PGTABLE
[ 0.000000] init_memory_mapping: [mem 0x7dc00000-0x7ddfffff]
[ 0.000000] [mem 0x7dc00000-0x7ddfffff] page 2M
[ 0.000000] BRK [0x01fe4000, 0x01fe4fff] PGTABLE
[ 0.000000] init_memory_mapping: [mem 0x7c000000-0x7dbfffff]
[ 0.000000] [mem 0x7c000000-0x7dbfffff] page 2M
[ 0.000000] init_memory_mapping: [mem 0x00100000-0x7bffffff]
[ 0.000000] [mem 0x00100000-0x001fffff] page 4k
[ 0.000000] [mem 0x00200000-0x7bffffff] page 2M
[ 0.000000] init_memory_mapping: [mem 0x7de00000-0x7df4ffff]
[ 0.000000] [mem 0x7de00000-0x7df4ffff] page 4k
[ 0.000000] BRK [0x01fe5000, 0x01fe5fff] PGTABLE
[ 0.000000] RAMDISK: [mem 0x35b08000-0x36d7bfff]
[ 0.000000] ACPI: RSDP 00000000000f9080 000014 (v00 ACPIAM)
[ 0.000000] ACPI: RSDT 000000007df50000 00003C (v01 122809 RSDT1052 20091228 MSFT 00000097)
[ 0.000000] ACPI: FACP 000000007df50200 000084 (v02 122809 FACP1052 20091228 MSFT 00000097)
[ 0.000000] ACPI: DSDT 000000007df50430 00327A (v01 S2F_3 S2F_3A08 00000A08 INTL 20051117)
[ 0.000000] ACPI: FACS 000000007df5e000 000040
[ 0.000000] ACPI: APIC 000000007df50390 000060 (v01 122809 APIC1052 20091228 MSFT 00000097)
[ 0.000000] ACPI: MCFG 000000007df503f0 00003C (v01 122809 OEMMCFG 20091228 MSFT 00000097)
[ 0.000000] ACPI: OEMB 000000007df5e040 000071 (v01 122809 OEMB1052 20091228 MSFT 00000097)
[ 0.000000] ACPI: HPET 000000007df536b0 000038 (v01 122809 VIA HPET 20091228 MSFT 00000097)
[ 0.000000] ACPI: SSDT 000000007df5e0c0 000589 (v01 AMI P001PM 00000001 INTL 20051117)
[ 0.000000] ACPI: Local APIC address 0xfee00000
[ 0.000000] No NUMA configuration found
[ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000007df4ffff]
[ 0.000000] Initmem setup node 0 [mem 0x00000000-0x7df4ffff]
[ 0.000000] NODE_DATA [mem 0x7df4b000-0x7df4ffff]
[ 0.000000] [ffffea0000000000-ffffea0001ffffff] PMD -> [ffff88007b600000-fff f88007d5fffff] on node 0
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x00001000-0x00ffffff]
[ 0.000000] DMA32 [mem 0x01000000-0xffffffff]
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00001000-0x00099fff]
[ 0.000000] node 0: [mem 0x00100000-0x7df4ffff]
[ 0.000000] On node 0 totalpages: 515817
[ 0.000000] DMA zone: 64 pages used for memmap
[ 0.000000] DMA zone: 21 pages reserved
[ 0.000000] DMA zone: 3993 pages, LIFO batch:0
[ 0.000000] DMA32 zone: 7998 pages used for memmap
[ 0.000000] DMA32 zone: 511824 pages, LIFO batch:31
[ 0.000000] ACPI: PM-Timer IO Port: 0x808
[ 0.000000] ACPI: Local APIC address 0xfee00000
[ 0.000000] ACPI: LAPIC (acpi_id[0x01] lapic_id[0x00] enabled)
[ 0.000000] ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0])
[ 0.000000] IOAPIC[0]: apic_id 1, version 3, address 0xfec00000, GSI 0-23
[ 0.000000] ACPI: IOAPIC (id[0x02] address[0xfecc0000] gsi_base[24])
[ 0.000000] IOAPIC[1]: apic_id 2, version 3, address 0xfecc0000, GSI 24-47
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 low level)
[ 0.000000] ACPI: IRQ0 used by override.
[ 0.000000] ACPI: IRQ2 used by override.
[ 0.000000] ACPI: IRQ9 used by override.
[ 0.000000] Using ACPI (MADT) for SMP configuration information
[ 0.000000] ACPI: HPET id: 0x11068201 base: 0xfed00000
[ 0.000000] smpboot: Allowing 1 CPUs, 0 hotplug CPUs
[ 0.000000] nr_irqs_gsi: 64
[ 0.000000] PM: Registered nosave memory: [mem 0x0009a000-0x0009ffff]
[ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000dffff]
[ 0.000000] PM: Registered nosave memory: [mem 0x000e0000-0x000fffff]
[ 0.000000] e820: [mem 0x7e000000-0xdfffffff] available for PCI devices
[ 0.000000] Booting paravirtualized kernel on bare hardware
[ 0.000000] setup_percpu: NR_CPUS:256 nr_cpumask_bits:256 nr_cpu_ids:1 nr_nod e_ids:1
[ 0.000000] PERCPU: Embedded 28 pages/cpu @ffff88007dc00000 s82304 r8192 d241 92 u2097152
[ 0.000000] pcpu-alloc: s82304 r8192 d24192 u2097152 alloc=1*2097152
[ 0.000000] pcpu-alloc: [0] 0
[ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pag es: 507734
[ 0.000000] Policy zone: DMA32
[ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-3.13.0-43-generic root=U UID=9fb528b7-3727-4434-acd0-68f575af968c ro quiet splash vt.handoff=7
[ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.000000] Checking aperture...
[ 0.000000] No AGP bridge found
[ 0.000000] Calgary: detecting Calgary via BIOS EBDA area
[ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing!
[ 0.000000] Memory: 1994852K/2063268K available (7383K kernel code, 1144K rwd ata, 3408K rodata, 1336K init, 1444K bss, 68416K reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU dyntick-idle grace-period acceleration is enabled.
[ 0.000000] RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=1.
[ 0.000000] Offload RCU callbacks from all CPUs
[ 0.000000] Offload RCU callbacks from CPUs: 0.
[ 0.000000] NR_IRQS:16640 nr_irqs:256 16
[ 0.000000] Console: colour dummy device 80x25
[ 0.000000] console [tty0] enabled
[ 0.000000] allocated 8388608 bytes of page_cgroup
[ 0.000000] please try 'cgroup_disable=memory' option if you don't want memor y cgroups
[ 0.000000] hpet clockevent registered
[ 0.000000] tsc: Fast TSC calibration using PIT
[ 0.000000] tsc: Detected 1595.962 MHz processor
[ 0.004005] Calibrating delay loop (skipped), value calculated using timer fr equency.. 3191.92 BogoMIPS (lpj=6383848)
[ 0.004015] pid_max: default: 32768 minimum: 301
[ 0.004120] Security Framework initialized
[ 0.004160] AppArmor: AppArmor initialized
[ 0.004165] Yama: becoming mindful.
[ 0.004893] Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes)
[ 0.010090] Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes)
[ 0.011108] Mount-cache hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.011125] Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.011666] Initializing cgroup subsys memory
[ 0.011684] Initializing cgroup subsys devices
[ 0.011691] Initializing cgroup subsys freezer
[ 0.011697] Initializing cgroup subsys blkio
[ 0.011702] Initializing cgroup subsys perf_event
[ 0.011710] Initializing cgroup subsys hugetlb
[ 0.011754] mce: CPU supports 0 MCE banks
[ 0.011769] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0
[ 0.011769] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0
[ 0.011769] tlb_flushall_shift: -1
[ 0.051569] Freeing SMP alternatives memory: 32K (ffffffff81e6e000 - ffffffff 81e76000)
[ 0.054368] ACPI: Core revision 20131115
[ 0.061589] ACPI: All ACPI Tables successfully acquired
[ 0.064013] ftrace: allocating 28552 entries in 112 pages
[ 0.108841] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[ 0.151531] smpboot: CPU0: Centaur VIA Nano processor U2250 (1.6GHz Capable) (fam: 06, model: 0f, stepping: 03)
[ 0.152000] Performance Events: no PMU driver, software events only.
[ 0.152835] x86: Booted up 1 node, 1 CPUs
[ 0.152842] smpboot: Total of 1 processors activated (3191.92 BogoMIPS)
[ 0.153715] NMI watchdog: disabled (cpu0): hardware events not enabled
[ 0.154115] devtmpfs: initialized
[ 0.161932] EVM: security.selinux
[ 0.161937] EVM: security.SMACK64
[ 0.161940] EVM: security.ima
[ 0.161944] EVM: security.capability
[ 0.162100] PM: Registering ACPI NVS region [mem 0x7df5e000-0x7df8ffff] (2048 00 bytes)
[ 0.165359] pinctrl core: initialized pinctrl subsystem
[ 0.165508] regulator-dummy: no parameters
[ 0.165575] RTC time: 8:31:39, date: 01/10/15
[ 0.165663] NET: Registered protocol family 16
[ 0.166022] cpuidle: using governor ladder
[ 0.166027] cpuidle: using governor menu
[ 0.166158] ACPI: bus type PCI registered
[ 0.166164] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
[ 0.166323] PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xe0000000-0xef ffffff] (base 0xe0000000)
[ 0.166330] PCI: MMCONFIG at [mem 0xe0000000-0xefffffff] reserved in E820
[ 0.185845] PCI: Using configuration type 1 for base access
[ 0.188585] bio: create slab <bio-0> at 0
[ 0.188948] ACPI: Added _OSI(Module Device)
[ 0.188954] ACPI: Added _OSI(Processor Device)
[ 0.188959] ACPI: Added _OSI(3.0 _SCP Extensions)
[ 0.188963] ACPI: Added _OSI(Processor Aggregator Device)
[ 0.192716] ACPI: Executed 1 blocks of module-level executable AML code
[ 0.198146] ACPI: Interpreter enabled
[ 0.198172] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_ ] (20131115/hwxface-580)
[ 0.198183] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S3_ ] (20131115/hwxface-580)
[ 0.198214] ACPI: (supports S0 S1 S4 S5)
[ 0.198219] ACPI: Using IOAPIC for interrupt routing
[ 0.198294] PCI: Using host bridge windows from ACPI; if necessary, use "pci= nocrs" and report a bug
[ 0.198583] ACPI: No dock devices found.
[ 0.211087] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.211103] acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM S egments MSI]
[ 0.211767] acpi PNP0A03:00: _OSC: platform does not support [PCIeHotplug AER ]
[ 0.212412] acpi PNP0A03:00: _OSC: OS now controls [PME PCIeCapability]
[ 0.213247] PCI host bridge to bus 0000:00
[ 0.213256] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.213263] pci_bus 0000:00: root bus resource [io 0x0000-0x0ca1]
[ 0.213269] pci_bus 0000:00: root bus resource [io 0x0ca4-0x0cf7]
[ 0.213275] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff]
[ 0.213281] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff]
[ 0.213288] pci_bus 0000:00: root bus resource [mem 0x000d0000-0x000dffff]
[ 0.213294] pci_bus 0000:00: root bus resource [mem 0x7e000000-0xdfffffff]
[ 0.213300] pci_bus 0000:00: root bus resource [mem 0xf0000000-0xfebfffff]
[ 0.213317] pci 0000:00:00.0: [1106:0353] type 00 class 0x060000
[ 0.213523] pci 0000:00:00.1: [1106:1353] type 00 class 0x060000
[ 0.213717] pci 0000:00:00.2: [1106:2353] type 00 class 0x060000
[ 0.213912] pci 0000:00:00.3: [1106:3353] type 00 class 0x060000
[ 0.214104] pci 0000:00:00.4: [1106:4353] type 00 class 0x060000
[ 0.214297] pci 0000:00:00.5: [1106:5353] type 00 class 0x080020
[ 0.214515] pci 0000:00:00.6: [1106:6353] type 00 class 0x060000
[ 0.214708] pci 0000:00:00.7: [1106:7353] type 00 class 0x060000
[ 0.214904] pci 0000:00:01.0: [1106:1122] type 00 class 0x030000
[ 0.214924] pci 0000:00:01.0: reg 0x10: [mem 0xf6000000-0xf7ffffff pref]
[ 0.214936] pci 0000:00:01.0: reg 0x14: [mem 0xfd000000-0xfdffffff]
[ 0.214948] pci 0000:00:01.0: reg 0x18: [mem 0xf8000000-0xfbffffff]
[ 0.214976] pci 0000:00:01.0: reg 0x30: [mem 0xfe9f0000-0xfe9fffff pref]
[ 0.215007] pci 0000:00:01.0: supports D1 D2
[ 0.215162] pci 0000:00:02.0: [1106:c353] type 01 class 0x060400
[ 0.215243] pci 0000:00:02.0: PME# supported from D0 D3hot D3cold
[ 0.215427] pci 0000:00:03.0: [1106:e353] type 01 class 0x060400
[ 0.215514] pci 0000:00:03.0: PME# supported from D0 D3hot D3cold
[ 0.215696] pci 0000:00:03.1: [1106:f353] type 01 class 0x060400
[ 0.215783] pci 0000:00:03.1: PME# supported from D0 D3hot D3cold
[ 0.215982] pci 0000:00:0f.0: [1106:5324] type 00 class 0x01018a
[ 0.216040] pci 0000:00:0f.0: reg 0x20: [io 0xfc00-0xfc0f]
[ 0.216244] pci 0000:00:10.0: [1106:3038] type 00 class 0x0c0300
[ 0.216292] pci 0000:00:10.0: reg 0x20: [io 0xcc00-0xcc1f]
[ 0.216336] pci 0000:00:10.0: supports D1 D2
[ 0.216342] pci 0000:00:10.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.216450] pci 0000:00:10.0: System wakeup disabled by ACPI
[ 0.216535] pci 0000:00:10.1: [1106:3038] type 00 class 0x0c0300
[ 0.216583] pci 0000:00:10.1: reg 0x20: [io 0xc880-0xc89f]
[ 0.216626] pci 0000:00:10.1: supports D1 D2
[ 0.216632] pci 0000:00:10.1: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.216739] pci 0000:00:10.1: System wakeup disabled by ACPI
[ 0.216821] pci 0000:00:10.4: [1106:3104] type 00 class 0x0c0320
[ 0.216843] pci 0000:00:10.4: reg 0x10: [mem 0xfe9efc00-0xfe9efcff]
[ 0.216922] pci 0000:00:10.4: supports D1 D2
[ 0.216928] pci 0000:00:10.4: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.217045] pci 0000:00:10.4: System wakeup disabled by ACPI
[ 0.217129] pci 0000:00:11.0: [1106:8353] type 00 class 0x060100
[ 0.217373] pci 0000:00:11.7: [1106:a353] type 00 class 0x060000
[ 0.217564] pci 0000:00:13.0: [1106:b353] type 01 class 0x060400
[ 0.217887] pci 0000:00:02.0: PCI bridge to [bus 01]
[ 0.218032] pci 0000:02:00.0: [8086:10d3] type 00 class 0x020000
[ 0.218062] pci 0000:02:00.0: reg 0x10: [mem 0xfeae0000-0xfeafffff]
[ 0.218098] pci 0000:02:00.0: reg 0x18: [io 0xdc00-0xdc1f]
[ 0.218119] pci 0000:02:00.0: reg 0x1c: [mem 0xfeadc000-0xfeadffff]
[ 0.218259] pci 0000:02:00.0: PME# supported from D0 D3hot D3cold
[ 0.218321] pci 0000:02:00.0: System wakeup disabled by ACPI
[ 0.224030] pci 0000:00:03.0: PCI bridge to [bus 02]
[ 0.224040] pci 0000:00:03.0: bridge window [io 0xd000-0xdfff]
[ 0.224048] pci 0000:00:03.0: bridge window [mem 0xfea00000-0xfeafffff]
[ 0.224206] pci 0000:03:00.0: [8086:10d3] type 00 class 0x020000
[ 0.224236] pci 0000:03:00.0: reg 0x10: [mem 0xfebe0000-0xfebfffff]
[ 0.224272] pci 0000:03:00.0: reg 0x18: [io 0xec00-0xec1f]
[ 0.224293] pci 0000:03:00.0: reg 0x1c: [mem 0xfebdc000-0xfebdffff]
[ 0.224434] pci 0000:03:00.0: PME# supported from D0 D3hot D3cold
[ 0.224493] pci 0000:03:00.0: System wakeup disabled by ACPI
[ 0.232025] pci 0000:00:03.1: PCI bridge to [bus 03]
[ 0.232035] pci 0000:00:03.1: bridge window [io 0xe000-0xefff]
[ 0.232043] pci 0000:00:03.1: bridge window [mem 0xfeb00000-0xfebfffff]
[ 0.232265] pci 0000:00:13.0: PCI bridge to [bus 04]
[ 0.233100] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 6 *7 10 11 12 14 15)
[ 0.233256] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 *6 7 10 11 12 14 15)
[ 0.233409] ACPI: PCI Interrupt Link [LNKC] (IRQs 3 4 5 6 7 10 11 12 14 15) * 0, disabled.
[ 0.233562] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 5 6 7 10 *11 12 14 15)
[ 0.233713] ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 5 6 7 10 11 12 14 15) * 0, disabled.
[ 0.233866] ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 5 6 7 10 11 12 14 15) * 0, disabled.
[ 0.234019] ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 5 6 7 10 11 12 14 15) * 0, disabled.
[ 0.234169] ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 5 6 7 10 *11 12 14 15)
[ 0.234430] ACPI: Enabled 1 GPEs in block 10 to 1F
[ 0.234445] ACPI: \_SB_.PCI0: notify handler is installed
[ 0.234530] Found 1 acpi root devices
[ 0.234778] vgaarb: setting as boot device: PCI:0000:00:01.0
[ 0.234785] vgaarb: device added: PCI:0000:00:01.0,decodes=io+mem,owns=io+mem ,locks=none
[ 0.234794] vgaarb: loaded
[ 0.234798] vgaarb: bridge control possible 0000:00:01.0
[ 0.235301] SCSI subsystem initialized
[ 0.235416] libata version 3.00 loaded.
[ 0.235473] ACPI: bus type USB registered
[ 0.235525] usbcore: registered new interface driver usbfs
[ 0.235551] usbcore: registered new interface driver hub
[ 0.235612] usbcore: registered new device driver usb
[ 0.235865] PCI: Using ACPI for IRQ routing
[ 0.243242] PCI: pci_cache_line_size set to 64 bytes
[ 0.243320] e820: reserve RAM buffer [mem 0x0009a000-0x0009ffff]
[ 0.243326] e820: reserve RAM buffer [mem 0x7df50000-0x7fffffff]
[ 0.243540] NetLabel: Initializing
[ 0.243546] NetLabel: domain hash size = 128
[ 0.243549] NetLabel: protocols = UNLABELED CIPSOv4
[ 0.243590] NetLabel: unlabeled traffic allowed by default
[ 0.243771] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
[ 0.243780] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 0.243790] hpet0: 3 comparators, 32-bit 14.318180 MHz counter
[ 0.245141] Switched to clocksource hpet
[ 0.261782] AppArmor: AppArmor Filesystem Enabled
[ 0.261853] pnp: PnP ACPI init
[ 0.261888] ACPI: bus type PNP registered
[ 0.262055] pnp 00:00: [dma 4]
[ 0.262118] pnp 00:00: Plug and Play ACPI device, IDs PNP0200 (active)
[ 0.262213] pnp 00:01: Plug and Play ACPI device, IDs PNP0b00 (active)
[ 0.262400] pnp 00:02: Plug and Play ACPI device, IDs PNP0800 (active)
[ 0.262479] pnp 00:03: Plug and Play ACPI device, IDs PNP0c04 (active)
[ 0.262833] system 00:04: [io 0x03e0-0x03e7] has been reserved
[ 0.262842] system 00:04: [io 0x04d0-0x04d1] has been reserved
[ 0.262850] system 00:04: [io 0x0800-0x087f] could not be reserved
[ 0.262857] system 00:04: [io 0x0400-0x041f] has been reserved
[ 0.262866] system 00:04: [mem 0xfed02000-0xfed02fff] has been reserved
[ 0.262875] system 00:04: Plug and Play ACPI device, IDs PNP0c02 (active)
[ 0.263234] pnp 00:05: Plug and Play ACPI device, IDs PNP0501 (active)
[ 0.263560] pnp 00:06: Plug and Play ACPI device, IDs PNP0501 (active)
[ 0.263661] pnp 00:07: Plug and Play ACPI device, IDs PNP0103 (active)
[ 0.263865] system 00:08: [mem 0xfec00000-0xfec00fff] could not be reserved
[ 0.263873] system 00:08: [mem 0xfee00000-0xfee00fff] has been reserved
[ 0.263881] system 00:08: Plug and Play ACPI device, IDs PNP0c02 (active)
[ 0.264059] system 00:09: [mem 0xe0000000-0xefffffff] has been reserved
[ 0.264069] system 00:09: Plug and Play ACPI device, IDs PNP0c02 (active)
[ 0.264602] system 00:0a: [mem 0x00000000-0x0009ffff] could not be reserved
[ 0.264611] system 00:0a: [mem 0x000c0000-0x000cffff] could not be reserved
[ 0.264619] system 00:0a: [mem 0x000e0000-0x000fffff] could not be reserved
[ 0.264626] system 00:0a: [mem 0x00100000-0x7dffffff] could not be reserved
[ 0.264634] system 00:0a: [mem 0xfec00000-0xffffffff] could not be reserved
[ 0.264642] system 00:0a: Plug and Play ACPI device, IDs PNP0c01 (active)
[ 0.265094] pnp 00:0b: Plug and Play ACPI device, IDs IPI0001 (active)
[ 0.265109] pnp: PnP ACPI: found 12 devices
[ 0.265112] ACPI: bus type PNP unregistered
[ 0.273173] pci 0000:00:02.0: bridge window [io 0x1000-0x0fff] to [bus 01] a dd_size 1000
[ 0.273184] pci 0000:00:02.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000
[ 0.273192] pci 0000:00:02.0: bridge window [mem 0x00100000-0x000fffff] to [b us 01] add_size 200000
[ 0.273207] pci 0000:00:03.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 02] add_size 200000
[ 0.273222] pci 0000:00:03.1: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000
[ 0.273249] pci 0000:00:02.0: res[14]=[mem 0x00100000-0x000fffff] get_res_add _size add_size 200000
[ 0.273256] pci 0000:00:02.0: res[15]=[mem 0x00100000-0x000fffff 64bit pref] get_res_add_size add_size 200000
[ 0.273263] pci 0000:00:03.0: res[15]=[mem 0x00100000-0x000fffff 64bit pref] get_res_add_size add_size 200000
[ 0.273270] pci 0000:00:03.1: res[15]=[mem 0x00100000-0x000fffff 64bit pref] get_res_add_size add_size 200000
[ 0.273277] pci 0000:00:02.0: res[13]=[io 0x1000-0x0fff] get_res_add_size ad d_size 1000
[ 0.273287] pci 0000:00:02.0: BAR 14: assigned [mem 0x7e000000-0x7e1fffff]
[ 0.273296] pci 0000:00:02.0: BAR 15: assigned [mem 0x7e200000-0x7e3fffff 64b it pref]
[ 0.273304] pci 0000:00:03.0: BAR 15: assigned [mem 0x7e400000-0x7e5fffff 64b it pref]
[ 0.273311] pci 0000:00:03.1: BAR 15: assigned [mem 0x7e600000-0x7e7fffff 64b it pref]
[ 0.273320] pci 0000:00:02.0: BAR 13: assigned [io 0x1000-0x1fff]
[ 0.273329] pci 0000:00:02.0: PCI bridge to [bus 01]
[ 0.273337] pci 0000:00:02.0: bridge window [io 0x1000-0x1fff]
[ 0.273346] pci 0000:00:02.0: bridge window [mem 0x7e000000-0x7e1fffff]
[ 0.273355] pci 0000:00:02.0: bridge window [mem 0x7e200000-0x7e3fffff 64bi t pref]
[ 0.273365] pci 0000:00:03.0: PCI bridge to [bus 02]
[ 0.273372] pci 0000:00:03.0: bridge window [io 0xd000-0xdfff]
[ 0.273381] pci 0000:00:03.0: bridge window [mem 0xfea00000-0xfeafffff]
[ 0.273389] pci 0000:00:03.0: bridge window [mem 0x7e400000-0x7e5fffff 64bi t pref]
[ 0.273399] pci 0000:00:03.1: PCI bridge to [bus 03]
[ 0.273406] pci 0000:00:03.1: bridge window [io 0xe000-0xefff]
[ 0.273415] pci 0000:00:03.1: bridge window [mem 0xfeb00000-0xfebfffff]
[ 0.273423] pci 0000:00:03.1: bridge window [mem 0x7e600000-0x7e7fffff 64bi t pref]
[ 0.273434] pci 0000:00:13.0: PCI bridge to [bus 04]
[ 0.273449] pci_bus 0000:00: resource 4 [io 0x0000-0x0ca1]
[ 0.273455] pci_bus 0000:00: resource 5 [io 0x0ca4-0x0cf7]
[ 0.273461] pci_bus 0000:00: resource 6 [io 0x0d00-0xffff]
[ 0.273467] pci_bus 0000:00: resource 7 [mem 0x000a0000-0x000bffff]
[ 0.273473] pci_bus 0000:00: resource 8 [mem 0x000d0000-0x000dffff]
[ 0.273479] pci_bus 0000:00: resource 9 [mem 0x7e000000-0xdfffffff]
[ 0.273485] pci_bus 0000:00: resource 10 [mem 0xf0000000-0xfebfffff]
[ 0.273492] pci_bus 0000:01: resource 0 [io 0x1000-0x1fff]
[ 0.273498] pci_bus 0000:01: resource 1 [mem 0x7e000000-0x7e1fffff]
[ 0.273504] pci_bus 0000:01: resource 2 [mem 0x7e200000-0x7e3fffff 64bit pref ]
[ 0.273510] pci_bus 0000:02: resource 0 [io 0xd000-0xdfff]
[ 0.273516] pci_bus 0000:02: resource 1 [mem 0xfea00000-0xfeafffff]
[ 0.273522] pci_bus 0000:02: resource 2 [mem 0x7e400000-0x7e5fffff 64bit pref ]
[ 0.273529] pci_bus 0000:03: resource 0 [io 0xe000-0xefff]
[ 0.273535] pci_bus 0000:03: resource 1 [mem 0xfeb00000-0xfebfffff]
[ 0.273541] pci_bus 0000:03: resource 2 [mem 0x7e600000-0x7e7fffff 64bit pref ]
[ 0.273611] NET: Registered protocol family 2
[ 0.274156] TCP established hash table entries: 16384 (order: 5, 131072 bytes )
[ 0.274299] TCP bind hash table entries: 16384 (order: 6, 262144 bytes)
[ 0.274517] TCP: Hash tables configured (established 16384 bind 16384)
[ 0.274612] TCP: reno registered
[ 0.274624] UDP hash table entries: 1024 (order: 3, 32768 bytes)
[ 0.274654] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes)
[ 0.274786] NET: Registered protocol family 1
[ 0.274840] pci 0000:00:01.0: Video device with shadowed ROM
[ 0.274847] pci 0000:00:02.0: disabling DAC on VIA PCI bridge
[ 0.275664] PCI: CLS mismatch (32 != 64), using 64 bytes
[ 0.275817] Trying to unpack rootfs image as initramfs...
[ 0.974617] Freeing initrd memory: 18896K (ffff880035b08000 - ffff880036d7c00 0)
[ 0.974931] microcode: no support for this CPU vendor
[ 0.974937] Scanning for low memory corruption every 60 seconds
[ 0.975472] Initialise system trusted keyring
[ 0.975597] audit: initializing netlink socket (disabled)
[ 0.975622] type=2000 audit(1420878698.972:1): initialized
[ 1.036147] HugeTLB registered 2 MB page size, pre-allocated 0 pages
[ 1.039312] zbud: loaded
[ 1.039863] VFS: Disk quotas dquot_6.5.2
[ 1.039974] Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[ 1.041117] fuse init (API version 7.22)
[ 1.041311] msgmni has been set to 3933
[ 1.041450] Key type big_key registered
[ 1.042061] Key type asymmetric registered
[ 1.042067] Asymmetric key parser 'x509' registered
[ 1.042157] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 2 52)
[ 1.042224] io scheduler noop registered
[ 1.042230] io scheduler deadline registered (default)
[ 1.042303] io scheduler cfq registered
[ 1.042516] pcieport 0000:00:02.0: enabling device (0104 -> 0107)
[ 1.042738] pcieport 0000:00:02.0: irq 64 for MSI/MSI-X
[ 1.043025] pcieport 0000:00:03.0: irq 65 for MSI/MSI-X
[ 1.043305] pcieport 0000:00:03.1: irq 66 for MSI/MSI-X
[ 1.043502] pcieport 0000:00:02.0: Signaling PME through PCIe PME interrupt
[ 1.043511] pcie_pme 0000:00:02.0:pcie01: service driver pcie_pme loaded
[ 1.043549] pcieport 0000:00:03.0: Signaling PME through PCIe PME interrupt
[ 1.043555] pci 0000:02:00.0: Signaling PME through PCIe PME interrupt
[ 1.043563] pcie_pme 0000:00:03.0:pcie01: service driver pcie_pme loaded
[ 1.043600] pcieport 0000:00:03.1: Signaling PME through PCIe PME interrupt
[ 1.043605] pci 0000:03:00.0: Signaling PME through PCIe PME interrupt
[ 1.043614] pcie_pme 0000:00:03.1:pcie01: service driver pcie_pme loaded
[ 1.043645] ioapic: probe of 0000:00:00.5 failed with error -22
[ 1.043666] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
[ 1.043708] pciehp: PCI Express Hot Plug Controller Driver version: 0.4
[ 1.043810] vesafb: mode is 640x480x32, linelength=2560, pages=0
[ 1.043814] vesafb: scrolling: redraw
[ 1.043820] vesafb: Truecolor: size=0:8:8:8, shift=0:16:8:0
[ 1.043942] vesafb: framebuffer at 0xf6000000, mapped to 0xffffc90010400000, using 1216k, total 1216k
[ 1.056658] Console: switching to colour frame buffer device 80x30
[ 1.069157] fb0: VESA VGA frame buffer device
[ 1.069258] ipmi message handler version 39.2
[ 1.069428] input: Sleep Button as /devices/LNXSYSTM:00/device:00/PNP0C0E:00/ input/input0
[ 1.069441] ACPI: Sleep Button [SLPB]
[ 1.069535] input: Power Button as /devices/LNXSYSTM:00/device:00/PNP0C0C:00/ input/input1
[ 1.069542] ACPI: Power Button [PWRB]
[ 1.069649] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/inp ut2
[ 1.069655] ACPI: Power Button [PWRF]
[ 1.069727] tsc: Marking TSC unstable due to TSC halts in idle
[ 1.069741] ACPI: acpi_idle registered with cpuidle
[ 1.069964] GHES: HEST is not enabled!
[ 1.070145] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
[ 1.090830] 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 1655 0A
[ 1.111559] 00:06: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 1655 0A
[ 1.114416] Linux agpgart interface v0.103
[ 1.117470] brd: module loaded
[ 1.119128] loop: module loaded
[ 1.120170] libphy: Fixed MDIO Bus: probed
[ 1.120422] tun: Universal TUN/TAP device driver, 1.6
[ 1.120426] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[ 1.120535] PPP generic driver version 2.4.2
[ 1.120628] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 1.120637] ehci-pci: EHCI PCI platform driver
[ 1.120873] ehci-pci 0000:00:10.4: EHCI Host Controller
[ 1.120890] ehci-pci 0000:00:10.4: new USB bus registered, assigned bus numbe r 1
[ 1.120909] ehci-pci 0000:00:10.4: debug port 1
[ 1.120982] ehci-pci 0000:00:10.4: irq 23, io mem 0xfe9efc00
[ 1.132025] ehci-pci 0000:00:10.4: USB 2.0 started, EHCI 1.00
[ 1.132127] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[ 1.132134] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber= 1
[ 1.132140] usb usb1: Product: EHCI Host Controller
[ 1.132146] usb usb1: Manufacturer: Linux 3.13.0-43-generic ehci_hcd
[ 1.132151] usb usb1: SerialNumber: 0000:00:10.4
[ 1.132401] hub 1-0:1.0: USB hub found
[ 1.132420] hub 1-0:1.0: 4 ports detected
[ 1.132700] ehci-platform: EHCI generic platform driver
[ 1.132725] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 1.132729] ohci-pci: OHCI PCI platform driver
[ 1.132756] ohci-platform: OHCI generic platform driver
[ 1.132773] uhci_hcd: USB Universal Host Controller Interface driver
[ 1.132940] uhci_hcd 0000:00:10.0: UHCI Host Controller
[ 1.132956] uhci_hcd 0000:00:10.0: new USB bus registered, assigned bus numbe r 2
[ 1.133003] uhci_hcd 0000:00:10.0: irq 20, io base 0x0000cc00
[ 1.133102] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001
[ 1.133109] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber= 1
[ 1.133115] usb usb2: Product: UHCI Host Controller
[ 1.133120] usb usb2: Manufacturer: Linux 3.13.0-43-generic uhci_hcd
[ 1.133126] usb usb2: SerialNumber: 0000:00:10.0
[ 1.133335] hub 2-0:1.0: USB hub found
[ 1.133359] hub 2-0:1.0: 2 ports detected
[ 1.133670] uhci_hcd 0000:00:10.1: UHCI Host Controller
[ 1.133685] uhci_hcd 0000:00:10.1: new USB bus registered, assigned bus numbe r 3
[ 1.133736] uhci_hcd 0000:00:10.1: irq 22, io base 0x0000c880
[ 1.133826] usb usb3: New USB device found, idVendor=1d6b, idProduct=0001
[ 1.133833] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber= 1
[ 1.133839] usb usb3: Product: UHCI Host Controller
[ 1.133845] usb usb3: Manufacturer: Linux 3.13.0-43-generic uhci_hcd
[ 1.133850] usb usb3: SerialNumber: 0000:00:10.1
[ 1.134069] hub 3-0:1.0: USB hub found
[ 1.134087] hub 3-0:1.0: 2 ports detected
[ 1.134417] i8042: PNP: No PS/2 controller found. Probing ports directly.
[ 1.134883] serio: i8042 KBD port at 0x60,0x64 irq 1
[ 1.134896] serio: i8042 AUX port at 0x60,0x64 irq 12
[ 1.135135] mousedev: PS/2 mouse device common for all mice
[ 1.135446] rtc_cmos 00:01: RTC can wake from S4
[ 1.135677] rtc_cmos 00:01: rtc core: registered rtc_cmos as rtc0
[ 1.135723] rtc_cmos 00:01: alarms up to one year, y3k, 114 bytes nvram, hpet irqs
[ 1.135901] device-mapper: uevent: version 1.0.3
[ 1.136106] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) initialised: dm-d evel@redhat.com
[ 1.136120] ledtrig-cpu: registered to indicate activity on CPUs
[ 1.136378] TCP: cubic registered
[ 1.136613] NET: Registered protocol family 10
[ 1.137025] NET: Registered protocol family 17
[ 1.137051] Key type dns_resolver registered
[ 1.137505] Loading compiled-in X.509 certificates
[ 1.139849] Loaded X.509 cert 'Magrathea: Glacier signing key: 55ab2fe28ed5c6 0df9587150d1734c920ea7b818'
[ 1.139878] registered taskstats version 1
[ 1.144183] Key type trusted registered
[ 1.147766] Key type encrypted registered
[ 1.151492] AppArmor: AppArmor sha1 policy hashing enabled
[ 1.151500] IMA: No TPM chip found, activating TPM-bypass!
[ 1.151974] regulator-dummy: disabling
[ 1.152174] Magic number: 15:44:523
[ 1.152339] rtc_cmos 00:01: setting system clock to 2015-01-10 08:31:40 UTC ( 1420878700)
[ 1.152738] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found
[ 1.152743] EDD information not available.
[ 1.152837] PM: Hibernation image not present or could not be loaded.
[ 1.156384] Freeing unused kernel memory: 1336K (ffffffff81d20000 - ffffffff8 1e6e000)
[ 1.156390] Write protecting the kernel read-only data: 12288k
[ 1.164986] Freeing unused kernel memory: 796K (ffff880001739000 - ffff880001 800000)
[ 1.172329] Freeing unused kernel memory: 688K (ffff880001b54000 - ffff880001 c00000)
[ 1.204373] systemd-udevd[90]: starting version 204
[ 1.295835] pps_core: LinuxPPS API ver. 1 registered
[ 1.295842] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giome tti <giometti@linux.it>
[ 1.301352] PTP clock support registered
[ 1.322006] pata_via 0000:00:0f.0: version 0.3.4
[ 1.326377] scsi0 : pata_via
[ 1.332211] scsi1 : pata_via
[ 1.332346] ata1: PATA max UDMA/133 cmd 0x1f0 ctl 0x3f6 bmdma 0xfc00 irq 14
[ 1.332353] ata2: PATA max UDMA/133 cmd 0x170 ctl 0x376 bmdma 0xfc08 irq 15
[ 1.350182] e1000e: Intel(R) PRO/1000 Network Driver - 2.3.2-k
[ 1.350189] e1000e: Copyright(c) 1999 - 2013 Intel Corporation.
[ 1.350390] e1000e 0000:02:00.0: PCI: Disallowing DAC for device
[ 1.350520] e1000e 0000:02:00.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode
[ 1.350556] e1000e 0000:02:00.0: irq 67 for MSI/MSI-X
[ 1.350571] e1000e 0000:02:00.0: irq 68 for MSI/MSI-X
[ 1.350587] e1000e 0000:02:00.0: irq 69 for MSI/MSI-X
[ 1.466181] e1000e 0000:02:00.0 eth0: registered PHC clock
[ 1.466192] e1000e 0000:02:00.0 eth0: (PCI Express:2.5GT/s:Width x1) e8:9a:8f :50:91:97
[ 1.466198] e1000e 0000:02:00.0 eth0: Intel(R) PRO/1000 Network Connection
[ 1.466284] e1000e 0000:02:00.0 eth0: MAC: 3, PHY: 8, PBA No: FFFFFF-0FF
[ 1.466467] e1000e 0000:03:00.0: PCI: Disallowing DAC for device
[ 1.466598] e1000e 0000:03:00.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode
[ 1.466639] e1000e 0000:03:00.0: irq 70 for MSI/MSI-X
[ 1.466654] e1000e 0000:03:00.0: irq 71 for MSI/MSI-X
[ 1.466669] e1000e 0000:03:00.0: irq 72 for MSI/MSI-X
[ 1.507583] ata1.00: ATA-9: ST500LM000-1EJ162, SM15, max UDMA/133
[ 1.507591] ata1.00: 976773168 sectors, multi 16: LBA48 NCQ (depth 0/32)
[ 1.523550] ata1.00: configured for UDMA/133
[ 1.523762] scsi 0:0:0:0: Direct-Access ATA ST500LM000-1EJ16 SM15 PQ : 0 ANSI: 5
[ 1.524345] sd 0:0:0:0: [sda] 976773168 512-byte logical blocks: (500 GB/465 GiB)
[ 1.524353] sd 0:0:0:0: [sda] 4096-byte physical blocks
[ 1.524464] sd 0:0:0:0: [sda] Write Protect is off
[ 1.524473] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
[ 1.524524] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, does n't support DPO or FUA
[ 1.525308] sd 0:0:0:0: Attached scsi generic sg0 type 0
[ 1.530250] sda: sda1 sda2 sda3
[ 1.531016] sd 0:0:0:0: [sda] Attached SCSI disk
[ 1.596982] e1000e 0000:03:00.0 eth1: registered PHC clock
[ 1.596991] e1000e 0000:03:00.0 eth1: (PCI Express:2.5GT/s:Width x1) e8:9a:8f :50:91:98
[ 1.596997] e1000e 0000:03:00.0 eth1: Intel(R) PRO/1000 Network Connection
[ 1.597082] e1000e 0000:03:00.0 eth1: MAC: 3, PHY: 8, PBA No: FFFFFF-0FF
[ 2.926840] EXT4-fs (sda2): INFO: recovery required on readonly filesystem
[ 2.926847] EXT4-fs (sda2): write access will be enabled during recovery
[ 4.480471] EXT4-fs (sda2): orphan cleanup on readonly fs
[ 4.531027] EXT4-fs (sda2): 7 orphan inodes deleted
[ 4.531033] EXT4-fs (sda2): recovery complete
[ 4.545461] EXT4-fs (sda2): mounted filesystem with ordered data mode. Opts: (null)
[ 4.856462] random: init urandom read with 93 bits of entropy available
[ 4.982423] init: plymouth-upstart-bridge main process (147) terminated with status 1
[ 4.982456] init: plymouth-upstart-bridge main process ended, respawning
[ 5.017714] init: plymouth-upstart-bridge main process (157) terminated with status 1
[ 5.017745] init: plymouth-upstart-bridge main process ended, respawning
[ 5.033239] init: plymouth-upstart-bridge main process (161) terminated with status 1
[ 5.033271] init: plymouth-upstart-bridge main process ended, respawning
[ 5.048093] init: plymouth-upstart-bridge main process (163) terminated with status 1
[ 5.048126] init: plymouth-upstart-bridge main process ended, respawning
[ 5.060531] init: plymouth-upstart-bridge main process (165) terminated with status 1
[ 5.060561] init: plymouth-upstart-bridge main process ended, respawning
[ 5.070360] init: plymouth-upstart-bridge main process (167) terminated with status 1
[ 5.070392] init: plymouth-upstart-bridge main process ended, respawning
[ 5.079519] init: plymouth-upstart-bridge main process (169) terminated with status 1
[ 5.079550] init: plymouth-upstart-bridge main process ended, respawning
[ 5.088719] init: plymouth-upstart-bridge main process (171) terminated with status 1
[ 5.088749] init: plymouth-upstart-bridge main process ended, respawning
[ 5.097714] init: plymouth-upstart-bridge main process (173) terminated with status 1
[ 5.097744] init: plymouth-upstart-bridge main process ended, respawning
[ 5.109249] init: plymouth-upstart-bridge main process (175) terminated with status 1
[ 5.109279] init: plymouth-upstart-bridge main process ended, respawning
[ 5.952119] random: nonblocking pool is initialized
[ 7.799510] Adding 999420k swap on /dev/sda3. Priority:-1 extents:1 across:9 99420k FS
[ 7.872300] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 7.872317] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[ 8.132471] systemd-udevd[283]: starting version 204
[ 8.164212] EXT4-fs (sda2): re-mounted. Opts: errors=remount-ro
[ 8.381439] lp: driver loaded but no devices found
[ 8.516482] evbug: Connected device: input0 (Sleep Button at PNP0C0E/button/i nput0)
[ 8.516492] evbug: Connected device: input1 (Power Button at PNP0C0C/button/i nput0)
[ 8.516498] evbug: Connected device: input2 (Power Button at LNXPWRBN/button/ input0)
[ 8.546752] IPMI System Interface driver.
[ 8.551260] ipmi_si: probing via ACPI
[ 8.551321] ipmi_si 00:0b: [io 0x0ca2-0x0ca3] regsize 1 spacing 1 irq 0
[ 8.551326] ipmi_si: Adding ACPI-specified kcs state machine
[ 8.559142] ipmi_si: probing via SMBIOS
[ 8.559153] ipmi_si: SMBIOS: io 0xca2 regsize 1 spacing 1 irq 0
[ 8.559158] ipmi_si: Adding SMBIOS-specified kcs state machine duplicate inte rface
[ 8.559167] ipmi_si: Trying ACPI-specified kcs state machine at i/o address 0 xca2, slave address 0x0, irq 0
[ 8.798616] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null)
[ 9.116313] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4
[ 9.120565] input: PC Speaker as /devices/platform/pcspkr/input/input6
[ 9.133744] evbug: Connected device: input6 (PC Speaker at isa0061/input0)
[ 9.164338] ipmi_si 00:0b: Found new BMC (man_id: 0x001c4c, prod_id: 0x532f, dev_id: 0x20)
[ 9.164362] ipmi_si 00:0b: IPMI kcs interface initialized
[ 9.260761] type=1400 audit(1420878708.605:2): apparmor="STATUS" operation="p rofile_load" profile="unconfined" name="/sbin/dhclient" pid=378 comm="apparmor_p arser"
[ 9.260778] type=1400 audit(1420878708.605:3): apparmor="STATUS" operation="p rofile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.a ction" pid=378 comm="apparmor_parser"
[ 9.260791] type=1400 audit(1420878708.605:4): apparmor="STATUS" operation="p rofile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script " pid=378 comm="apparmor_parser"
[ 9.261592] type=1400 audit(1420878708.605:5): apparmor="STATUS" operation="p rofile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-clien t.action" pid=378 comm="apparmor_parser"
[ 9.261614] type=1400 audit(1420878708.605:6): apparmor="STATUS" operation="p rofile_replace" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-scr ipt" pid=378 comm="apparmor_parser"
[ 9.267084] type=1400 audit(1420878708.609:7): apparmor="STATUS" operation="p rofile_replace" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-scr ipt" pid=378 comm="apparmor_parser"
[ 9.804818] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 9.969995] Error: Driver 'pcspkr' is already registered, aborting...
[ 10.010582] dcdbas dcdbas: Dell Systems Management Base Driver (version 5.6.0 -3.2)
[ 10.129678] VIA RNG detected
[ 10.584117] padlock_aes: Using VIA PadLock ACE for AES algorithm.
[ 10.663870] padlock_sha: Using VIA PadLock ACE for SHA1/SHA256 algorithms.
[ 12.917013] e1000e: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 12.917318] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 13.622633] init: failsafe main process (449) killed by TERM signal
[ 13.832434] type=1400 audit(1420878713.177:8): apparmor="STATUS" operation="p rofile_replace" profile="unconfined" name="/sbin/dhclient" pid=791 comm="apparmo r_parser"
[ 13.832454] type=1400 audit(1420878713.177:9): apparmor="STATUS" operation="p rofile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-clien t.action" pid=791 comm="apparmor_parser"
[ 13.832468] type=1400 audit(1420878713.177:10): apparmor="STATUS" operation=" profile_replace" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-sc ript" pid=791 comm="apparmor_parser"
[ 13.833242] type=1400 audit(1420878713.177:11): apparmor="STATUS" operation=" profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-clie nt.action" pid=791 comm="apparmor_parser"
[ 14.483548] audit_printk_skb: 15 callbacks suppressed
[ 14.483557] type=1400 audit(1420878713.825:17): apparmor="STATUS" operation=" profile_replace" profile="unconfined" name="/usr/sbin/mysqld" pid=887 comm="appa rmor_parser"
[ 18.362857] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 21.221504] init: plymouth-upstart-bridge main process ended, respawningpour les logs je vais que m'indique auth.log la seule chose que je pense de bizarre c'est cette tache qui se répète de très nombreuse fois par jour mais j'avais lu sur le forum que c etait une tache systeme:
Jan 10 01:39:01 CRON[26861]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 10 01:39:01 CRON[26861]: pam_unix(cron:session): session closed for user rootle log de fail2ban depuis que j'ai changé de port mardi il n'y plus de bannissement donc pas de problème de ce coté la.
le sys.log les dernières inscription avant l'alerte ping
Jan 10 01:09:01 CRON[26683]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -x /usr/lib/php5/sessionclean ] && [ -d /var/lib/php5 ] && /usr/lib/php5/sessionclean /var/lib/php5 $(/usr/lib/php5/maxlifetime))
Jan 10 01:17:01 CRON[26722]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly)
Jan 10 01:39:01 CRON[26862]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -x /usr/lib/php5/sessionclean ] && [ -d /var/lib/php5 ] && /usr/lib/php5/sessionclean /var/lib/php5 $(/usr/lib/php5/maxlifetime))Hors ligne
#4 Le 10/01/2015, à 12:36
- sinbad83
Re : alerte ping et analyse de log
Pour ftpd3883, je ne sais rien dire.
J'ai aussi plein de CRON[26861]: pam_unix, c'est normal.
Par contre, regarde dans tes tâches cron ou crontab, s'ils correspondent aux CRON 26683, 26722 et 26862.
Dernière modification par sinbad83 (Le 10/01/2015, à 12:37)
La connaissance n'est pas une denrée rare, il faut la partager avec les autres.
Linux registered #484707
Site: www.coursinforev.org/doku.php
Desktop AMD Ryzen 5-3600, RAM 16GB, Ubuntu 20.10, HP Pavillon G6 Ubuntu 20.10 et Ten, Serveur Ubuntu 18.04
Hors ligne
#5 Le 10/01/2015, à 13:01
- Noar51
Re : alerte ping et analyse de log
oui ça m'a l air de correspondre 3 fois par heures et les connexions correspondent dans chaque fichier
pour ca
ftp ftpd3883 census9.shodan.i Wed Jan 7 14:55 - 14:55 (00:00)je suis déjà quasi sur que ce n'est pas normal le serveur n'est pas "publique" il me sert a faire une sauvegarde d'un site on est 2 seulement a se connecter dessus, je connais nos ip et "census9.shodan.i" ce n'est pas une de nos ip 
mais ca date du 7 janvier et la dernière alerte est de cette nuit a 2h00 du mat .
Hors ligne
#6 Le 10/01/2015, à 19:42
- sinbad83
Re : alerte ping et analyse de log
Tu n'as pas dit si tu accédais aux partage sans passer par l'identification.
La connaissance n'est pas une denrée rare, il faut la partager avec les autres.
Linux registered #484707
Site: www.coursinforev.org/doku.php
Desktop AMD Ryzen 5-3600, RAM 16GB, Ubuntu 20.10, HP Pavillon G6 Ubuntu 20.10 et Ten, Serveur Ubuntu 18.04
Hors ligne
#7 Le 11/01/2015, à 21:10
- Noar51
Re : alerte ping et analyse de log
excuse j'etait pas la ce week end ...
tu veux dire si on peu se connecter en anonyme par ftp ?
La j'ai de nouveau truc bizarre deja j'arrive plus a me connecter par ftp par filezilla pour y mettre des fichier j'ai ce message :
statut : Échec de la tentative de connexion avec "ECONNREFUSED - Connexion refusée par le serveur".
Erreur : Impossible d'établir une connexion au serveuret aussi les fichier log en 2 ou 3 exemplaire je ne comprends pas trop pourquoi:
Hors ligne
#8 Le 13/01/2015, à 20:08
- sinbad83
Re : alerte ping et analyse de log
As-tu essayé en FTP et en SFTP ?
Qu'est-ce-que tu veux dire par logs en 2 ou 3 exemplaires ? Certains logs remplacent les précédents, d'où une numérotation et des heures distinctes. D'autres accumulent les informations dans un même fichier/répertoire.
La connaissance n'est pas une denrée rare, il faut la partager avec les autres.
Linux registered #484707
Site: www.coursinforev.org/doku.php
Desktop AMD Ryzen 5-3600, RAM 16GB, Ubuntu 20.10, HP Pavillon G6 Ubuntu 20.10 et Ten, Serveur Ubuntu 18.04
Hors ligne
#9 Le 13/01/2015, à 20:13
- sinbad83
Re : alerte ping et analyse de log
A propos des motifs d'inquiétude que tu avais signalés au début, j'avais vu autrefois dans le forum Ubuntu, que certains se plaignaient d'être sniffés par un adresse installée en Chine. Pour bloquer ce gêneur, la consigne donnée avait été d'ajouter une ligne dans les IP Tables:
sudo iptables -I INPUT -s 61.139.105.163 -j DROP Dernière modification par sinbad83 (Le 13/01/2015, à 20:14)
La connaissance n'est pas une denrée rare, il faut la partager avec les autres.
Linux registered #484707
Site: www.coursinforev.org/doku.php
Desktop AMD Ryzen 5-3600, RAM 16GB, Ubuntu 20.10, HP Pavillon G6 Ubuntu 20.10 et Ten, Serveur Ubuntu 18.04
Hors ligne
Pages : 1