Random Reboot with Exiting on signal 15
-
I am running Pfsense on a physical server. Server had a reboot on Apr 25 07:18:01. I checked /var/log/system.log for a clue.
As seen below I see 'exiting on signal 15' which indicates a decent reboot. But no specific log before reboot. Moreover no one was connected to the server before reboot incident. I wonder what caused the reboot. What can I check?system.log below.
Apr 25 04:49:48 pfSense snort[64487]: [119:34:2] (http_inspect) TOO MANY PIPELINED REQUESTS [Classification: Unknown Traffic] [Priority: 3] {TCP}
Apr 25 04:59:46 pfSense snort[64487]: [1:2027766:2] ET POLICY Windows Update P2P Activity [Classification: Not Suspicious Traffic] [Priority: 3] {TCP}
Apr 25 07:18:01 pfSense syslogd: exiting on signal 15
Apr 25 07:24:16 pfSense syslogd: kernel boot file is /boot/kernel/kernel
Apr 25 07:24:16 pfSense kernel: ---<<BOOT>>---
Apr 25 07:24:16 pfSense kernel: Copyright (c) 1992-2020 The FreeBSD Project.
Apr 25 07:24:16 pfSense kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
Apr 25 07:24:16 pfSense kernel: The Regents of the University of California. All rights reserved.[2.5.0-release][admin@pfsense.localdomain]/var/log: uname -a
FreeBSD pfSense.localdomain 12.2-STABLE FreeBSD 12.2-STABLE d48fb226319(devel-12) pfSense amd64 -
@thetevfik said in Random Reboot with Exiting on signal 15:
What can I check?
Stop using snort (and any other 'big' packages) and recheck.
syslog received a sigterm 15, that's probably part of a process restart, which can happen and is not extraordinary.
The system goes down without any special log lines6 minutes later.
Check other log files for events during the couple of minutes before Apr 25 07:24:16.
