need debug suggestions on system freeze

LC Bruzenak lenny at magitekltd.com
Fri May 9 21:05:35 UTC 2008


On Fri, 2008-05-09 at 16:45 -0400, Steve Grubb wrote:
> On Friday 09 May 2008 16:26:16 Eric Paris wrote:
> > > * Very soon after this the machine locks up. The above is the last entry
> > > in the messages log. Only the "caps lock" and some other "lock" icon on
> > > the keyboard (but not scroll lock) flash, and I have no inbound network
> > > connection & the screen is blank. I cannot get to a terminal with
> > > <ALT><F4> . The only option is power cycle.
> >
> > This is indicative of a kernel panic.  Can you attach a serial console
> > to the machine in question and boot such that kernel messages go to the
> > serial console?  (console=ttyS0,9600 console=tty0)  And then recreate?
> 
> /me wonders if this is due to fail mode being panic ?
> 
> -Steve

I changed "-f 2" to "-f 1."

May  9 16:58:36 comms auditd[3552]: Audit daemon rotating log files with
keep option
May  9 16:58:45 comms auditd[3552]: Audit daemon rotating log files with
keep option
May  9 16:59:45 comms kernel: printk: 152 messages suppressed.
May  9 16:59:45 comms kernel: audit: audit_backlog=8193 >
audit_backlog_limit=8192
May  9 16:59:45 comms kernel: audit: audit_lost=175 audit_rate_limit=0
audit_backlog_limit=8192
May  9 16:59:45 comms kernel: audit: backlog limit exceeded
May  9 16:59:45 comms kernel: audit: audit_backlog=8193 >
audit_backlog_limit=8192
May  9 16:59:45 comms kernel: audit: audit_lost=176 audit_rate_limit=0
audit_backlog_limit=8192
May  9 16:59:45 comms kernel: audit: backlog limit exceeded


No more kernel panic. 
OK - should I roll to the next version and assign different priorities?
I'm so over version 1.7.2 already anyway...
:)

LCB.

-- 
LC (Lenny) Bruzenak
lenny at magitekltd.com




More information about the Linux-audit mailing list