我们的 CentOS 5.3 机器随机关闭，就好像电源线被拉了一样。6 月 5 日是它第一次发生的时间，这里是来自 /var/log/messages 的粘贴
Jun 5 12:06:22 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'loverspillscalm.com/NS/IN': 208.67.222.222#53
Jun 5 12:06:24 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'loverspillscalm.com/NS/IN': 12.127.17.71#53
Jun 5 15:38:57 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'yagwozat.cn/NS/IN': 12.127.17.72#53
Jun 5 15:38:58 mail named[23248]: unexpected RCODE (SERVFAIL) resolving 'yagwozat.cn/NS/IN': 208.67.222.222#53
Jun 5 16:49:25 mail shutdown[354]: shutting down for system halt
Jun 5 16:49:46 mail shutdown[550]: shutting down for system halt
Jun 5 16:49:46 mail shutdown[557]: shutting down for system halt
Jun 5 16:49:47 mail shutdown[590]: shutting down for system halt
Jun 5 22:29:56 mail syslogd 1.4.1: restart.
Jun 5 22:29:56 mail kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jun 5 22:29:56 mail kernel: Linux version 2.6.18-128.1.10.el5PAE ([email protected]) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)) #1 SMP Thu$
Jun 5 22:29:56 mail kernel: BIOS-provided physical RAM map:
然后它在 6 月 10 日再次发生，这是 /var/log/messages 6 月 10 日关闭的粘贴：
Jun 10 19:23:21 mail smartd[2625]: Device /dev/sda: using '-d sat' for ATA disk behind SAT layer.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sda, opened
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sda, not found in smartd database.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sda, is SMART capable. Adding to "monitor" list.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sdb, opened
Jun 10 19:23:21 mail smartd[2625]: Device /dev/sdb: using '-d sat' for ATA disk behind SAT layer.
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sdb, opened
Jun 10 19:23:21 mail smartd[2625]: Device: /dev/sdb, not found in smartd database.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdb, is SMART capable. Adding to "monitor" list.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, opened
Jun 10 19:23:22 mail smartd[2625]: Device /dev/sdc: using '-d sat' for ATA disk behind SAT layer.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, opened
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, not found in smartd database.
Jun 10 19:23:22 mail smartd[2625]: Device: /dev/sdc, is SMART capable. Adding to "monitor" list.
Jun 10 19:23:22 mail smartd[2625]: Monitoring 0 ATA and 3 SCSI devices
Jun 10 19:23:22 mail smartd[2627]: smartd has fork()ed into background mode. New PID=2627.
Jun 10 19:25:08 mail saslauthd: auth_zimbra_init: zimbra_cert_check is off!
Jun 10 19:25:08 mail saslauthd: auth_zimbra_init: 1 auth urls initialized for round-robin
Jun 10 19:27:39 mail shutdown[7064]: shutting down for system halt
Jun 10 19:27:39 mail init: Switching to runlevel: 0
Jun 10 19:27:40 mail shutdown[7100]: shutting down for system halt
Jun 10 19:27:41 mail smartd[2627]: smartd received signal 15: Terminated
Jun 10 19:27:41 mail smartd[2627]: smartd is exiting (exit status 0)
Jun 10 19:28:15 mail avahi-daemon[2564]: Got SIGTERM, quitting.
Jun 10 19:28:15 mail avahi-daemon[2564]: Leaving mDNS multicast group on interface eth0.IPv6 with address fe80::2e0:81ff:feb5:f036.
Jun 10 19:28:15 mail avahi-daemon[2564]: Leaving mDNS multicast group on interface eth0.IPv4 with address xxx.xxx.xxx.xxx.
Jun 10 19:28:16 mail xinetd[2478]: Exiting...
Jun 10 19:28:20 mail rpc.statd[2287]: Caught signal 15, un-registering and exiting.
Jun 10 19:28:21 mail named[2234]: shutting down: flushing changes
Jun 10 19:28:21 mail named[2234]: stopping command channel on 127.0.0.1#953
Jun 10 19:28:21 mail named[2234]: stopping command channel on ::1#953
Jun 10 19:28:21 mail named[2234]: no longer listening on 127.0.0.1#53
Jun 10 19:28:21 mail named[2234]: no longer listening on xxx.xxx.xxx.xxx#53
Jun 10 19:28:21 mail named[2234]: exiting
Jun 10 19:28:21 mail auditd[2165]: The audit daemon is exiting.
Jun 10 19:28:21 mail kernel: audit(1244687301.413:125): audit_pid=0 old=2165 by auid=4294967295
Jun 10 19:28:21 mail pcscd: pcscdaemon.c:572:signal_trap() Preparing for suicide
Jun 10 19:28:22 mail pcscd: hotplug_libusb.c:376:HPRescanUsbBus() Hotplug stopped
Jun 10 19:28:22 mail pcscd: readerfactory.c:1379:RFCleanupReaders() entering cleaning function
Jun 10 19:28:22 mail pcscd: pcscdaemon.c:532:at_exit() cleaning /var/run
Jun 10 19:28:22 mail kernel: Kernel logging (proc) stopped.
Jun 10 19:28:22 mail kernel: Kernel log daemon terminating.
Jun 10 19:28:23 mail exiting on signal 15
Jun 10 21:48:11 mail syslogd 1.4.1: restart.
Jun 10 21:48:11 mail kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jun 10 21:48:11 mail kernel: Linux version 2.6.18-128.1.10.el5PAE ([email protected]) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)) #1 SMP Thu May 7 11:14:31 EDT 2009
Jun 10 21:48:11 mail kernel: BIOS-provided physical RAM map:
我来自 /var/log/acpi 的日志：
[Mon May 11 15:06:26 2009] starting up
[Mon May 11 15:06:26 2009] 1 rule loaded
[Mon May 11 15:06:33 2009] client connected from 3076[68:68]
[Mon May 11 15:06:33 2009] 1 client rule loaded
[Mon May 11 15:29:34 2009] exiting
[Mon May 11 15:31:26 2009] starting up
[Mon May 11 15:31:26 2009] 1 rule loaded
[Mon May 11 15:31:29 2009] client connected from 3015[68:68]
[Mon May 11 15:31:29 2009] 1 client rule loaded
[Mon May 11 15:35:17 2009] exiting
[Mon May 11 15:37:02 2009] starting up
[Mon May 11 15:37:02 2009] 1 rule loaded
[Mon May 11 15:37:04 2009] client connected from 2705[68:68]
[Mon May 11 15:37:04 2009] 1 client rule loaded
[Mon May 11 15:43:36 2009] exiting
[Mon May 11 15:45:19 2009] starting up
[Mon May 11 15:45:19 2009] 1 rule loaded
[Mon May 11 15:45:21 2009] client connected from 2662[68:68]
[Mon May 11 15:45:21 2009] 1 client rule loaded
[Mon May 11 16:47:53 2009] exiting
[Mon May 11 16:49:42 2009] starting up
[Mon May 11 16:49:42 2009] 1 rule loaded
[Mon May 11 16:49:44 2009] client connected from 2668[68:68]
[Mon May 11 16:49:44 2009] 1 client rule loaded
[Mon May 11 17:02:52 2009] exiting
[Mon May 11 17:04:38 2009] starting up
[Mon May 11 17:04:38 2009] 1 rule loaded
[Mon May 11 17:04:40 2009] client connected from 2662[68:68]
[Mon May 11 17:04:40 2009] 1 client rule loaded
[Tue May 12 08:41:24 2009] exiting
[Tue May 12 08:43:10 2009] starting up
[Tue May 12 08:43:10 2009] 1 rule loaded
[Tue May 12 08:43:12 2009] client connected from 2664[68:68]
[Tue May 12 08:43:12 2009] 1 client rule loaded
[Tue May 12 09:54:10 2009] exiting
[Tue May 12 09:55:52 2009] starting up
[Tue May 12 09:55:52 2009] 1 rule loaded
[Tue May 12 09:55:54 2009] client connected from 2650[68:68]
[Tue May 12 09:55:54 2009] 1 client rule loaded
[Tue May 12 14:09:24 2009] exiting
[Tue May 12 14:11:10 2009] starting up
[Tue May 12 14:11:10 2009] 1 rule loaded
[Tue May 12 14:11:12 2009] client connected from 2564[68:68]
[Tue May 12 14:11:12 2009] 1 client rule loaded
[Tue May 12 14:50:57 2009] exiting
[Tue May 12 14:52:42 2009] starting up
[Tue May 12 14:52:42 2009] 1 rule loaded
[Tue May 12 14:52:43 2009] client connected from 2566[68:68]
[Tue May 12 14:52:43 2009] 1 client rule loaded
[Tue May 19 14:12:45 2009] starting up
[Tue May 19 14:12:45 2009] 1 rule loaded
[Tue May 19 14:12:47 2009] client connected from 2589[68:68]
[Tue May 19 14:12:47 2009] 1 client rule loaded
[Fri May 22 17:35:54 2009] starting up
[Fri May 22 17:35:54 2009] 1 rule loaded
[Fri May 22 17:35:56 2009] client connected from 2586[68:68]
[Fri May 22 17:35:56 2009] 1 client rule loaded
[Mon May 25 18:28:22 2009] received event "button/power PWRF 00000080 00000001"
[Mon May 25 18:28:22 2009] notifying client 2586[68:68]
[Mon May 25 18:28:22 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 18:28:22 2009] BEGIN HANDLER MESSAGES
[Mon May 25 18:28:22 2009] END HANDLER MESSAGES
[Mon May 25 18:28:22 2009] action exited with status 0
[Mon May 25 18:28:22 2009] completed event "button/power PWRF 00000080 00000001"
[Mon May 25 19:16:30 2009] received event "button/power PWRF 00000080 00000002"
[Mon May 25 19:16:30 2009] notifying client 2586[68:68]
[Mon May 25 19:16:30 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 19:16:30 2009] BEGIN HANDLER MESSAGES
[Mon May 25 19:16:30 2009] END HANDLER MESSAGES
[Mon May 25 19:16:30 2009] action exited with status 0
[Mon May 25 19:16:30 2009] completed event "button/power PWRF 00000080 00000002"
[Mon May 25 19:16:31 2009] received event "button/power PWRF 00000080 00000003"
[Mon May 25 19:16:31 2009] notifying client 2586[68:68]
[Mon May 25 19:16:31 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 19:16:31 2009] BEGIN HANDLER MESSAGES
[Mon May 25 19:16:31 2009] END HANDLER MESSAGES
[Mon May 25 19:16:31 2009] action exited with status 0
[Mon May 25 19:16:31 2009] completed event "button/power PWRF 00000080 00000003"
[Mon May 25 19:16:31 2009] received event "button/power PWRF 00000080 00000004"
[Mon May 25 19:16:31 2009] notifying client 2586[68:68]
[Mon May 25 19:16:31 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Mon May 25 19:16:31 2009] BEGIN HANDLER MESSAGES
[Mon May 25 19:16:31 2009] END HANDLER MESSAGES
[Mon May 25 19:16:31 2009] action exited with status 0
[Mon May 25 19:16:31 2009] completed event "button/power PWRF 00000080 00000004"
[Wed May 27 15:16:04 2009] received event "button/power PWRF 00000080 00000005"
[Wed May 27 15:16:04 2009] notifying client 2586[68:68]
[Wed May 27 15:16:04 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed May 27 15:16:04 2009] BEGIN HANDLER MESSAGES
[Wed May 27 15:16:04 2009] END HANDLER MESSAGES
[Wed May 27 15:16:04 2009] action exited with status 0
[Wed May 27 15:16:04 2009] completed event "button/power PWRF 00000080 00000005"
[Wed May 27 15:16:06 2009] received event "button/power PWRF 00000080 00000006"
[Wed May 27 15:16:06 2009] notifying client 2586[68:68]
[Wed May 27 15:16:06 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed May 27 15:16:06 2009] BEGIN HANDLER MESSAGES
[Wed May 27 15:16:06 2009] END HANDLER MESSAGES
[Wed May 27 15:16:06 2009] action exited with status 0
[Wed May 27 15:16:06 2009] completed event "button/power PWRF 00000080 00000006"
[Thu May 28 05:40:38 2009] received event "button/power PWRF 00000080 00000007"
[Thu May 28 05:40:38 2009] notifying client 2586[68:68]
[Thu May 28 05:40:38 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Thu May 28 05:40:38 2009] BEGIN HANDLER MESSAGES
[Thu May 28 05:40:38 2009] END HANDLER MESSAGES
[Thu May 28 05:40:38 2009] action exited with status 0
[Thu May 28 05:40:38 2009] completed event "button/power PWRF 00000080 00000007"
[Thu May 28 05:40:39 2009] received event "button/power PWRF 00000080 00000008"
[Thu May 28 05:40:39 2009] notifying client 2586[68:68]
[Thu May 28 05:40:39 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Thu May 28 05:40:39 2009] BEGIN HANDLER MESSAGES
[Thu May 28 05:40:39 2009] END HANDLER MESSAGES
[Thu May 28 05:40:39 2009] action exited with status 0
[Thu May 28 05:40:39 2009] completed event "button/power PWRF 00000080 00000008"
[Fri Jun 5 16:49:25 2009] received event "button/power PWRF 00000080 00000009"
[Fri Jun 5 16:49:25 2009] notifying client 2586[68:68]
[Fri Jun 5 16:49:25 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun 5 16:49:25 2009] BEGIN HANDLER MESSAGES
[Fri Jun 5 16:49:25 2009] END HANDLER MESSAGES
[Fri Jun 5 16:49:25 2009] action exited with status 0
[Fri Jun 5 16:49:25 2009] completed event "button/power PWRF 00000080 00000009"
[Fri Jun 5 16:49:45 2009] received event "button/power PWRF 00000080 0000000a"
[Fri Jun 5 16:49:45 2009] notifying client 2586[68:68]
[Fri Jun 5 16:49:45 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun 5 16:49:45 2009] BEGIN HANDLER MESSAGES
[Fri Jun 5 16:49:46 2009] END HANDLER MESSAGES
[Fri Jun 5 16:49:46 2009] action exited with status 0
[Fri Jun 5 16:49:46 2009] completed event "button/power PWRF 00000080 0000000a"
[Fri Jun 5 16:49:46 2009] received event "button/power PWRF 00000080 0000000b"
[Fri Jun 5 16:49:46 2009] notifying client 2586[68:68]
[Fri Jun 5 16:49:46 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun 5 16:49:46 2009] BEGIN HANDLER MESSAGES
[Fri Jun 5 16:49:46 2009] END HANDLER MESSAGES
[Fri Jun 5 16:49:46 2009] action exited with status 0
[Fri Jun 5 16:49:46 2009] completed event "button/power PWRF 00000080 0000000b"
[Fri Jun 5 16:49:47 2009] received event "button/power PWRF 00000080 0000000c"
[Fri Jun 5 16:49:47 2009] notifying client 2586[68:68]
[Fri Jun 5 16:49:47 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Fri Jun 5 16:49:47 2009] BEGIN HANDLER MESSAGES
[Fri Jun 5 22:29:59 2009] starting up
[Fri Jun 5 22:29:59 2009] 1 rule loaded
[Fri Jun 5 22:30:00 2009] client connected from 2579[68:68]
[Fri Jun 5 22:30:00 2009] 1 client rule loaded
[Wed Jun 10 19:21:04 2009] received event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:21:04 2009] notifying client 2579[68:68]
[Wed Jun 10 19:21:04 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:21:04 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:21:04 2009] END HANDLER MESSAGES
[Wed Jun 10 19:21:04 2009] action exited with status 0
[Wed Jun 10 19:21:04 2009] completed event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:21:07 2009] received event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:21:07 2009] notifying client 2579[68:68]
[Wed Jun 10 19:21:07 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:21:07 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:21:08 2009] END HANDLER MESSAGES
[Wed Jun 10 19:21:08 2009] action exited with status 0
[Wed Jun 10 19:21:08 2009] completed event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:23:16 2009] starting up
[Wed Jun 10 19:23:16 2009] 1 rule loaded
[Wed Jun 10 19:23:18 2009] client connected from 2583[68:68]
[Wed Jun 10 19:23:18 2009] 1 client rule loaded
[Wed Jun 10 19:27:39 2009] received event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:27:39 2009] notifying client 2583[68:68]
[Wed Jun 10 19:27:39 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:27:39 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:27:39 2009] END HANDLER MESSAGES
[Wed Jun 10 19:27:39 2009] action exited with status 0
[Wed Jun 10 19:27:39 2009] completed event "button/power PWRF 00000080 00000001"
[Wed Jun 10 19:27:40 2009] received event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:27:40 2009] notifying client 2583[68:68]
[Wed Jun 10 19:27:40 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Wed Jun 10 19:27:40 2009] BEGIN HANDLER MESSAGES
[Wed Jun 10 19:27:40 2009] END HANDLER MESSAGES
[Wed Jun 10 19:27:40 2009] action exited with status 0
[Wed Jun 10 19:27:40 2009] completed event "button/power PWRF 00000080 00000002"
[Wed Jun 10 19:28:17 2009] exiting
[Wed Jun 10 21:48:13 2009] starting up
[Wed Jun 10 21:48:13 2009] 1 rule loaded
[Wed Jun 10 21:48:15 2009] client connected from 2559[68:68]
[Wed Jun 10 21:48:15 2009] 1 client rule loaded
[Thu Jun 11 08:35:04 2009] received event "button/power PWRF 00000080 00000001"
[Thu Jun 11 08:35:04 2009] notifying client 2559[68:68]
[Thu Jun 11 08:35:04 2009] executing action "/bin/ps awwux | /bin/grep gnome-power-manager | /bin/grep -qv grep || /sbin/shutdown -h now"
[Thu Jun 11 08:35:04 2009] BEGIN HANDLER MESSAGES
[Thu Jun 11 08:35:04 2009] END HANDLER MESSAGES
[Thu Jun 11 08:35:04 2009] action exited with status 0
[Thu Jun 11 08:35:04 2009] completed event "button/power PWRF 00000080 00000001"
[Thu Jun 11 08:35:39 2009] exiting
[Thu Jun 11 08:38:48 2009] starting up
[Thu Jun 11 08:38:48 2009] 1 rule loaded
[Thu Jun 11 08:38:50 2009] client connected from 2568[68:68]
[Thu Jun 11 08:38:50 2009] 1 client rule loaded
[Thu Jun 11 09:11:14 2009] exiting
[Thu Jun 11 09:11:14 2009] starting up
[Thu Jun 11 09:11:14 2009] 0 rules loaded
[Thu Jun 11 09:11:19 2009] client connected from 2568[68:68]
[Thu Jun 11 09:11:19 2009] 1 client rule loaded
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000001"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000001"
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000002"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000002"
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000003"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000003"
[Thu Jun 11 17:53:57 2009] received event "button/power PWRF 00000080 00000004"
[Thu Jun 11 17:53:57 2009] notifying client 2568[68:68]
[Thu Jun 11 17:53:57 2009] completed event "button/power PWRF 00000080 00000004"
[Wed Jun 17 07:41:06 2009] received event "button/power PWRF 00000080 00000005"
[Wed Jun 17 07:41:06 2009] notifying client 2568[68:68]
[Wed Jun 17 07:41:06 2009] completed event "button/power PWRF 00000080 00000005"
[Wed Jun 17 16:40:06 2009] received event "button/power PWRF 00000080 00000006"
[Wed Jun 17 16:40:06 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:06 2009] completed event "button/power PWRF 00000080 00000006"
[Wed Jun 17 16:40:12 2009] received event "button/power PWRF 00000080 00000007"
[Wed Jun 17 16:40:12 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:12 2009] completed event "button/power PWRF 00000080 00000007"
[Wed Jun 17 16:40:16 2009] received event "button/power PWRF 00000080 00000008"
[Wed Jun 17 16:40:16 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:16 2009] completed event "button/power PWRF 00000080 00000008"
[Wed Jun 17 16:40:16 2009] received event "button/power PWRF 00000080 00000009"
[Wed Jun 17 16:40:16 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:16 2009] completed event "button/power PWRF 00000080 00000009"
[Wed Jun 17 16:40:44 2009] received event "button/power PWRF 00000080 0000000a"
[Wed Jun 17 16:40:44 2009] notifying client 2568[68:68]
[Wed Jun 17 16:40:44 2009] completed event "button/power PWRF 00000080 0000000a"
[Wed Jun 17 17:20:03 2009] received event "button/power PWRF 00000080 0000000b"
[Wed Jun 17 17:20:03 2009] notifying client 2568[68:68]
[Wed Jun 17 17:20:03 2009] completed event "button/power PWRF 00000080 0000000b"
[Wed Jun 17 17:49:54 2009] received event "button/power PWRF 00000080 0000000c"
[Wed Jun 17 17:49:54 2009] notifying client 2568[68:68]
[Wed Jun 17 17:49:54 2009] completed event "button/power PWRF 00000080 0000000c"
[Wed Jun 17 17:49:54 2009] received event "button/power PWRF 00000080 0000000d"
[Wed Jun 17 17:49:54 2009] notifying client 2568[68:68]
[Wed Jun 17 17:49:54 2009] completed event "button/power PWRF 00000080 0000000d"
[Wed Jun 17 17:50:01 2009] received event "button/power PWRF 00000080 0000000e"
[Wed Jun 17 17:50:01 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:01 2009] completed event "button/power PWRF 00000080 0000000e"
[Wed Jun 17 17:50:01 2009] received event "button/power PWRF 00000080 0000000f"
[Wed Jun 17 17:50:01 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:01 2009] completed event "button/power PWRF 00000080 0000000f"
[Wed Jun 17 17:50:16 2009] received event "button/power PWRF 00000080 00000010"
[Wed Jun 17 17:50:16 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:16 2009] completed event "button/power PWRF 00000080 00000010"
[Wed Jun 17 17:50:24 2009] received event "button/power PWRF 00000080 00000011"
[Wed Jun 17 17:50:24 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:24 2009] completed event "button/power PWRF 00000080 00000011"
[Wed Jun 17 17:50:33 2009] received event "button/power PWRF 00000080 00000012"
[Wed Jun 17 17:50:33 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:33 2009] completed event "button/power PWRF 00000080 00000012"
[Wed Jun 17 17:50:33 2009] received event "button/power PWRF 00000080 00000013"
[Wed Jun 17 17:50:33 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:33 2009] completed event "button/power PWRF 00000080 00000013"
[Wed Jun 17 17:50:35 2009] received event "button/power PWRF 00000080 00000014"
[Wed Jun 17 17:50:35 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:35 2009] completed event "button/power PWRF 00000080 00000014"
[Wed Jun 17 17:50:35 2009] received event "button/power PWRF 00000080 00000015"
[Wed Jun 17 17:50:35 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:35 2009] completed event "button/power PWRF 00000080 00000015"
[Wed Jun 17 17:50:35 2009] received event "button/power PWRF 00000080 00000016"
[Wed Jun 17 17:50:35 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:35 2009] completed event "button/power PWRF 00000080 00000016"
[Wed Jun 17 17:50:47 2009] received event "button/power PWRF 00000080 00000017"
[Wed Jun 17 17:50:47 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:47 2009] completed event "button/power PWRF 00000080 00000017"
[Wed Jun 17 17:50:47 2009] received event "button/power PWRF 00000080 00000018"
[Wed Jun 17 17:50:47 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:47 2009] completed event "button/power PWRF 00000080 00000018"
[Wed Jun 17 17:50:51 2009] received event "button/power PWRF 00000080 00000019"
[Wed Jun 17 17:50:51 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:51 2009] completed event "button/power PWRF 00000080 00000019"
[Wed Jun 17 17:50:54 2009] received event "button/power PWRF 00000080 0000001a"
[Wed Jun 17 17:50:54 2009] notifying client 2568[68:68]
[Wed Jun 17 17:50:54 2009] completed event "button/power PWRF 00000080 0000001a"
[Wed Jun 17 18:37:48 2009] received event "button/power PWRF 00000080 0000001b"
[Wed Jun 17 18:37:48 2009] notifying client 2568[68:68]
[Wed Jun 17 18:37:48 2009] completed event "button/power PWRF 00000080 0000001b"
[Wed Jun 17 18:37:50 2009] received event "button/power PWRF 00000080 0000001c"
[Wed Jun 17 18:37:50 2009] notifying client 2568[68:68]
[Wed Jun 17 18:37:50 2009] completed event "button/power PWRF 00000080 0000001c"
[Wed Jun 17 18:55:13 2009] received event "button/power PWRF 00000080 0000001d"
[Wed Jun 17 18:55:13 2009] notifying client 2568[68:68]
[Wed Jun 17 18:55:13 2009] completed event "button/power PWRF 00000080 0000001d"
[Wed Jun 17 18:57:59 2009] received event "button/power PWRF 00000080 0000001e"
[Wed Jun 17 18:57:59 2009] notifying client 2568[68:68]
[Wed Jun 17 18:57:59 2009] completed event "button/power PWRF 00000080 0000001e"
[Thu Jun 18 00:20:47 2009] received event "button/power PWRF 00000080 0000001f"
[Thu Jun 18 00:20:47 2009] notifying client 2568[68:68]
[Thu Jun 18 00:20:47 2009] completed event "button/power PWRF 00000080 0000001f"
[Thu Jun 18 00:20:47 2009] received event "button/power PWRF 00000080 00000020"
[Thu Jun 18 00:20:47 2009] notifying client 2568[68:68]
[Thu Jun 18 00:20:47 2009] completed event "button/power PWRF 00000080 00000020"
[Thu Jun 18 13:43:16 2009] received event "button/power PWRF 00000080 00000021"
[Thu Jun 18 13:43:16 2009] notifying client 2568[68:68]
[Thu Jun 18 13:43:16 2009] completed event "button/power PWRF 00000080 00000021"
[Thu Jun 18 13:43:19 2009] received event "button/power PWRF 00000080 00000022"
[Thu Jun 18 13:43:19 2009] notifying client 2568[68:68]
[Thu Jun 18 13:43:19 2009] completed event "button/power PWRF 00000080 00000022"
[Fri Jun 19 14:04:15 2009] received event "button/power PWRF 00000080 00000023"
[Fri Jun 19 14:04:15 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:15 2009] completed event "button/power PWRF 00000080 00000023"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000024"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000024"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000025"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000025"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000026"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000026"
[Fri Jun 19 14:04:18 2009] received event "button/power PWRF 00000080 00000027"
[Fri Jun 19 14:04:18 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:18 2009] completed event "button/power PWRF 00000080 00000027"
[Fri Jun 19 14:04:19 2009] received event "button/power PWRF 00000080 00000028"
[Fri Jun 19 14:04:19 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:19 2009] completed event "button/power PWRF 00000080 00000028"
[Fri Jun 19 14:04:52 2009] received event "button/power PWRF 00000080 00000029"
[Fri Jun 19 14:04:52 2009] notifying client 2568[68:68]
[Fri Jun 19 14:04:52 2009] completed event "button/power PWRF 00000080 00000029"
[Fri Jun 19 14:07:46 2009] received event "button/power PWRF 00000080 0000002a"
[Fri Jun 19 14:07:46 2009] notifying client 2568[68:68]
[Fri Jun 19 14:07:46 2009] completed event "button/power PWRF 00000080 0000002a"
[Fri Jun 19 14:07:49 2009] received event "button/power PWRF 00000080 0000002b"
[Fri Jun 19 14:07:49 2009] notifying client 2568[68:68]
[Fri Jun 19 14:07:49 2009] completed event "button/power PWRF 00000080 0000002b"
[Fri Jun 19 14:07:49 2009] received event "button/power PWRF 00000080 0000002c"
[Fri Jun 19 14:07:49 2009] notifying client 2568[68:68]
[Fri Jun 19 14:07:49 2009] completed event "button/power PWRF 00000080 0000002c"
[Fri Jun 19 14:15:56 2009] received event "button/power PWRF 00000080 0000002d"
[Fri Jun 19 14:15:56 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:56 2009] completed event "button/power PWRF 00000080 0000002d"
[Fri Jun 19 14:15:57 2009] received event "button/power PWRF 00000080 0000002e"
[Fri Jun 19 14:15:57 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:57 2009] completed event "button/power PWRF 00000080 0000002e"
[Fri Jun 19 14:15:57 2009] received event "button/power PWRF 00000080 0000002f"
[Fri Jun 19 14:15:57 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:57 2009] completed event "button/power PWRF 00000080 0000002f"
[Fri Jun 19 14:15:58 2009] received event "button/power PWRF 00000080 00000030"
[Fri Jun 19 14:15:58 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:58 2009] completed event "button/power PWRF 00000080 00000030"
[Fri Jun 19 14:15:59 2009] received event "button/power PWRF 00000080 00000031"
[Fri Jun 19 14:15:59 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:59 2009] completed event "button/power PWRF 00000080 00000031"
[Fri Jun 19 14:15:59 2009] received event "button/power PWRF 00000080 00000032"
[Fri Jun 19 14:15:59 2009] notifying client 2568[68:68]
[Fri Jun 19 14:15:59 2009] completed event "button/power PWRF 00000080 00000032"
[Fri Jun 19 14:1
我已经看到了这一点。
在我们的例子中，是主板看门狗的温度传感器坏了。传感器一直坚持认为主板过热，因此它关闭了操作系统，从而关闭了计算机。关机日志看起来与您的相似，就像有人出现并在某处运行了“关机”命令。首次开机时，计算机会在关机前运行 20 分钟左右，但如果您坚持使用它，它将几乎在操作系统启动完成之前开始关机过程。
进入您的主板管理（BMC、IPMI、iLO 等）并检查日志中是否有任何“事件”。
您可能会考虑的另一件事是，您是否拥有允许关机的远程访问卡。您让另一个管理员关闭您的服务器的可能性很小，但检查起来永远不会有坏处。
我也猜想电源按钮，但可能是其他原因造成的。这台机器是否连接到 UPS？是否有其他人在机器上具有 root 访问权限？您可以检查 lastlog 以查看关闭时是否有其他人连接？这台机器正在运行什么服务，这些服务是否有任何已发布的漏洞？
如果是电源按钮，您可能可以将其从主板上拔下进行测试。
在切换到运行级别 0 之前，我在您的日志中看不到任何内容，因此在我看来，操作系统认为它被告知正确关闭（即通过按下电源按钮）
我期望某种错误消息来解释它为什么被关闭。您可以使用“last”查看在它关闭时谁登录了它。可能是服务器过热并关闭以保护自己。我不确定在 CentOS 上哪个进程会这样做。就电源按钮而言，应该有一个关于此的日志，但您可以尝试停止 acpid 并查看它是否仍然关闭。这将排除任何 ACPI 事件。
您是否与任何有权访问该主机的用户核实过？看看其中一个是否正在关闭计算机？
检查 /root/.bash_history、/home/*/.bash_history 和其他类似文件，看看其中一个是否显示关闭消息。
还要检查 /var/log/secure 以查看是否有人使用 sudo 将其关闭。
您需要在日志中进一步回溯，到您看到关闭过程开始的位置并从那里往回看。
最后的日志也可能有帮助。如果有人在盒子上，你可能会看到盒子上的人，当时它正在下降。事实上，你所有的日志都应该被检查。
有趣的是，它都被记录为
mail.需要更多的日志检查。
根据 acpi 日志，系统似乎正在接收来自电源按钮的输入以关闭。我怀疑按钮被意外按下或涉及硬件问题。
另外：您应该能够通过编辑来修改响应电源按钮事件的行为
/etc/acpi/events/power_button。请注意，路径在 CentOS 5 上可能略有不同，但这是常见的位置。