<html><body><div style="color:#000; background-color:#fff; font-family:verdana, helvetica, sans-serif;font-size:10pt"><div>I am providing here my investigation (i tried) after the latest crash. the server is running in VM on windows xp host.</div><div> </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;">I am suspecting rsyslog and NTP, but not sure how to fix...</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"> </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;">pl advice.</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"> </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"> </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"> </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;">it is 10.10 desktop edition. </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"> </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"> </div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;">reboot system boot 2.6.35-32-generi Sat Sep 22 04:30 - 04:33 (00:03) root@mypc:/var/log# uname -a Linux mypc 2.6.35-32-generic #67-Ubuntu SMP Mon Mar 5 19:35:26 UTC 2012 i686 GNU/Linux root@mypc:/var/log# -rw-r--r-- 1 root root 30245 2012-09-21 23:24 Xorg.0.log.old -rw-r--r-- 1 root root 228862 2012-09-22 04:30 udev -rw-r----- 1 root adm 81021 2012-09-22 04:30 dmesg -rw-r--r-- 1 root root 486 2012-09-22 04:30 boot.log drwxrwx--T 2 root gdm 4096 2012-09-22 04:30 gdm -rw-r--r-- 1 root root 9846 2012-09-22 04:30 pm-powersave.log -rw-rw-r-- 1 root utmp 292876 2012-09-22 04:31 lastlog -rw-r----- 1 syslog adm 145961 2012-09-22 04:49 messages -rw-r----- 1 syslog adm 250708 2012-09-22 04:49 kern.log -rw-r----- 1 syslog adm 108750 2012-09-22 04:49 debug -rw-r--r-- 1 root root 27938 2012-09-22 04:49 Xorg.0.log -rw-rw-r-- 1 root utmp 244992 2012-09-22 04:49 wtmp -rw-r----- 1 syslog adm 88257 2012-09-22 04:52 auth.log -rw-r----- 1 syslog adm 13585 2012-09-22 04:52 user.log -rw-r----- 1 syslog adm 309706 2012-09-22 04:52 syslog -rw-r----- 1 syslog adm 82197 2012-09-22 04:53 daemon.log messages: Sep 21 21:07:48 mypc kernel: [ 30.378950] acpiphp_glue: Slot 261 already registered by another hotplug driver Sep 21 21:07:48 mypc kernel: [ 30.378999] acpiphp_glue: Slot 262 already registered by another hotplug driver Sep 21 21:07:48 mypc kernel: [ 30.379049] acpiphp_glue: Slot 263 already registered by another hotplug driver Sep 21 21:08:24 mypc kernel: [ 38.802739] audit_printk_skb: 27 callbacks suppressed Sep 21 21:08:24 mypc kernel: [ 38.803087] type=1400 audit(1348261704.289:21): apparmor="DENIED" operation="capable" parent=1755 profile="/usr/sbin/cupsd" pid=1763 comm="serial" capability=21 capname="sys_admin" Sep 21 21:08:30 mypc kernel: [ 44.583496] EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro,commit=0 Sep 21 23:24:56 mypc kernel: Kernel logging (proc) stopped. Sep 21 23:24:56 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="734" x-info="http://www.rsyslog.com"] exiting on signal 15. Sep 22 04:30:20 mypc kernel: imklog 4.2.0, log source = /proc/kmsg started. Sep 22 04:30:20 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="698" x-info="http://www.rsyslog.com"] (re)start Sep 22 04:30:20 mypc rsyslogd: rsyslogd's groupid changed to 103 Sep 22 04:30:20 mypc rsyslogd: rsyslogd's userid changed to 101 Sep 22 04:30:20 mypc kernel: [ 0.000000] Initializing cgroup subsys cpuset Sep 22 04:30:20 mypc kernel: [ 0.000000] Initializing cgroup subsys cpu Sep 22 04:30:20 mypc kernel: [ 0.000000] Linux version 2.6.35-32-generic (buildd@vernadsky) (gcc version 4.4.5 (Ubuntu/Linaro 4.4.4-14ubuntu5) ) #67-Ubuntu SMP Mon Mar 5 19:35:26 UTC 2012 (Ubuntu 2.6.35-32.67-generic 2.6.35.14) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-provided physical RAM map: Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 0000000000000000 - 000000000009f800 (usable) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 000000000009f800 - 00000000000a0000 (reserved) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 00000000000ca000 - 00000000000cc000 (reserved) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 00000000000dc000 - 0000000000100000 (reserved) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 0000000000100000 - 000000003fef0000 (usable) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 000000003fef0000 - 000000003feff000 (ACPI data) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 000000003feff000 - 000000003ff00000 (ACPI NVS) Sep 22 04:30:20 mypc kernel: [ 0.000000] BIOS-e820: 000000003ff00000 - 0000000040000000 (usable) ... ... Sep 22 04:30:20 mypc kernel: [ 0.000000] Notice: NX (Execute Disable) protection missing in CPU or disabled in BIOS! Sep 22 04:30:20 mypc kernel: [ 0.000000] NX (Execute Disable) protection: approximated by x86 segment limits Sep 22 04:30:20 mypc kernel: [ 0.000000] DMI present. Sep 22 04:30:20 mypc kernel: [ 0.000000] Phoenix BIOS detected: BIOS may corrupt low RAM, working around it. Sep 22 04:30:20 mypc kernel: [ 0.000000] Hypervisor detected: VMware Sep 22 04:30:20 mypc kernel: [ 0.000000] last_pfn = 0x40000 max_arch_pfn = 0x100000 Sep 22 04:30:20 mypc kernel: [ 0.000000] x86 PAT enabled: cpu 0, old 0x0, new 0x7010600070106 Sep 22 04:30:20 mypc kernel: [ 0.000000] Scanning 0 areas for low memory corruption Sep 22 04:30:20 mypc kernel: [ 0.000000] modified physical RAM map: ... ... Sep 22 04:30:20 mypc kernel: [ 0.000000] found SMP MP-table at [c00f6bc0] f6bc0 Sep 22 04:30:20 mypc kernel: [ 0.000000] init_memory_mapping: 0000000000000000-00000000377fe000 Sep 22 04:30:20 mypc kernel: [ 0.000000] RAMDISK: 2f524000 - 2ff74000 Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: RSDP 000f6b50 00024 (v02 PTLTD ) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: XSDT 3fef03cc 00054 (v01 INTEL 440BX 06040000 VMW 01324272) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: FACP 3fefee98 000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: DSDT 3fef05c8 0E8D0 (v01 PTLTD Custom 06040000 MSFT 03000001) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: FACS 3fefffc0 00040 Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: BOOT 3fef05a0 00028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: APIC 3fef0550 00050 (v01 PTLTD ? APIC 06040000 LTP 00000000) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: MCFG 3fef0514 0003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: SRAT 3fef0484 00090 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: WAET 3fef045c 00028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Sep 22 04:30:20 mypc kernel: [ 0.000000] 136MB HIGHMEM available. Sep 22 04:30:20 mypc kernel: [ 0.000000] 887MB LOWMEM available. Sep 22 04:30:20 mypc kernel: [ 0.000000] mapped low ram: 0 - 377fe000 Sep 22 04:30:20 mypc kernel: [ 0.000000] low ram: 0 - 377fe000 Sep 22 04:30:20 mypc kernel: [ 0.000000] Zone PFN ranges: Sep 22 04:30:20 mypc kernel: [ 0.000000] DMA 0x00000010 -> 0x00001000 Sep 22 04:30:20 mypc kernel: [ 0.000000] Normal 0x00001000 -> 0x000377fe Sep 22 04:30:20 mypc kernel: [ 0.000000] HighMem 0x000377fe -> 0x00040000 Sep 22 04:30:20 mypc kernel: [ 0.000000] Movable zone start PFN for each node Sep 22 04:30:20 mypc kernel: [ 0.000000] early_node_map[3] active PFN ranges Sep 22 04:30:20 mypc kernel: [ 0.000000] 0: 0x00000010 -> 0x0000009f Sep 22 04:30:20 mypc kernel: [ 0.000000] 0: 0x00000100 -> 0x0003fef0 Sep 22 04:30:20 mypc kernel: [ 0.000000] 0: 0x0003ff00 -> 0x00040000 Sep 22 04:30:20 mypc kernel: [ 0.000000] Using APIC driver default Sep 22 04:30:20 mypc kernel: [ 0.000000] ACPI: PM-Timer IO Port: 0x1008 ... ... syslog: Sep 21 22:39:01 mypc CRON[3346]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -depth -mindepth 1 -maxdepth 1 -type f -cmin +$(/usr/lib/php5/maxlifetime) -delete) Sep 21 22:43:47 mypc ntpd_initres[1709]: host name not found: wuarchive.wustl.edu Sep 21 22:59:50 mypc ntpd_initres[1709]: host name not found: wuarchive.wustl.edu Sep 21 23:09:01 mypc CRON[3593]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -depth -mindepth 1 -maxdepth 1 -type f -cmin +$(/usr/lib/php5/maxlifetime) -delete) Sep 21 23:15:52 mypc ntpd_initres[1709]: host name not found: wuarchive.wustl.edu Sep 21 23:17:01 mypc CRON[3647]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Sep 21 23:24:56 mypc kernel: Kernel logging (proc) stopped. Sep 21 23:24:56 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="734" x-info="http://www.rsyslog.com"] exiting on signal 15. Sep 22 04:30:20 mypc kernel: imklog 4.2.0, log source = /proc/kmsg started. Sep 22 04:30:20 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="698" x-info="http://www.rsyslog.com"] (re)start Sep 22 04:30:20 mypc rsyslogd: rsyslogd's groupid changed to 103 Sep 22 04:30:20 mypc rsyslogd: rsyslogd's userid changed to 101 Sep 22 04:30:20 mypc rsyslogd-2039: Could no open output file '/dev/xconsole' [try http://www.rsyslog.com/e/2039 ] Sep 22 04:30:20 mypc kernel: [ 0.000000] Initializing cgroup subsys cpuset Sep 22 04:30:20 mypc kernel: [ 0.000000] Initializing cgroup subsys cpu Sep 22 04:30:20 mypc kernel: [ 0.000000] Linux version 2.6.35-32-generic (buildd@vernadsky) (gcc version 4.4.5 (Ubuntu/Linaro 4.4.4-14ubuntu5) ) #67-Ubuntu SMP Mon Mar 5 19:35:26 UTC 2012 (Ubuntu 2.6.35-32.67-generic 2.6.35.14) # tail -30 pm-powersave.log /usr/lib/pm-utils/power.d/intel-audio-powersave false: success. Running hook /usr/lib/pm-utils/power.d/journal-commit false: Setting journal commit time for / to 0...Done. /usr/lib/pm-utils/power.d/journal-commit false: success. Running hook /usr/lib/pm-utils/power.d/laptop-mode false: Laptop mode disabled. /usr/lib/pm-utils/power.d/laptop-mode false: success. Running hook /usr/lib/pm-utils/power.d/pcie_aspm false: /usr/lib/pm-utils/power.d/pcie_aspm false: success. Running hook /usr/lib/pm-utils/power.d/readahead false: Setting readahead for /dev/sda1 to 256...Done. /usr/lib/pm-utils/power.d/readahead false: success. Running hook /usr/lib/pm-utils/power.d/sata_alpm false: /usr/lib/pm-utils/power.d/sata_alpm false: success. Running hook /usr/lib/pm-utils/power.d/sched-powersave false: **sched policy powersave OFF /usr/lib/pm-utils/power.d/sched-powersave false: success. Running hook /usr/lib/pm-utils/power.d/wireless false: /usr/lib/pm-utils/power.d/wireless false: success. Running hook /usr/lib/pm-utils/power.d/xfs_buffer false: /usr/lib/pm-utils/power.d/xfs_buffer false: success. root@mypc:/var/log# tail dmesg.0 [ 27.453584] input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input2 [ 27.871867] ENS1371 0000:02:02.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16 [ 28.308390] ADDRCONF(NETDEV_UP): eth0: link is not ready [ 28.328124] type=1400 audit(1348261666.724:6): apparmor="STATUS" operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" pid=779 comm="apparmor_parser" [ 28.335947] type=1400 audit(1348261666.732:7): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient3" pid=781 comm="apparmor_parser" [ 28.336757] type=1400 audit(1348261666.732:8): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=781 comm="apparmor_parser" [ 28.337042] type=1400 audit(1348261666.732:9): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=781 comm="apparmor_parser" [ 28.369429] type=1400 audit(1348261666.764:10): apparmor="STATUS" operation="profile_load" name="/usr/bin/evince" pid=782 comm="apparmor_parser" [ 28.375834] type=1400 audit(1348261666.772:11): apparmor="STATUS" operation="profile_load" name="/usr/bin/evince-previewer" pid=782 comm="apparmor_parser" [ 29.659154] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready root@mypc:/var/log# root@mypc:/var/log# root@mypc:/var/log# root@mypc:/var/log# root@mypc:/var/log# tail -30 Xorg.0.log.old [ 8231.710] 4: /usr/lib/xorg/modules/drivers/vmwlegacy_drv.so (0xca5000+0x6b57) [0xcabb57] [ 8231.710] 5: /usr/lib/xorg/modules/drivers/vmwlegacy_drv.so (0xca5000+0x50da) [0xcaa0da] [ 8231.710] 6: /usr/lib/xorg/modules/libshadowfb.so (0x2d9000+0x5a6e) [0x2dea6e] [ 8231.710] 7: /usr/bin/X (0x8048000+0x1580a4) [0x81a00a4] [ 8231.710] 8: /usr/bin/X (0x8048000+0xdc2bf) [0x81242bf] [ 8231.711] 9: /usr/bin/X (0x8048000+0x55f1e) [0x809df1e] [ 8231.711] 10: /usr/bin/X (0x8048000+0x165cd0) [0x81adcd0] [ 8231.711] 11: /usr/bin/X (0x8048000+0x1486a0) [0x81906a0] [ 8231.711] 12: /usr/bin/X (0x8048000+0x732ae) [0x80bb2ae] [ 8231.711] 13: /usr/lib/xorg/modules/extensions/libextmod.so (0x1b2000+0xae4a) [0x1bce4a] [ 8231.720] 14: /usr/bin/X (0x8048000+0xbf895) [0x8107895] [ 8231.720] 15: /usr/bin/X (0x8048000+0x80f87) [0x80c8f87] [ 8231.720] 16: /usr/bin/X (0x8048000+0x133e11) [0x817be11] [ 8231.721] 17: /usr/bin/X (0x8048000+0xa7498) [0x80ef498] [ 8231.721] 18: /usr/bin/X (0x8048000+0x17578d) [0x81bd78d] [ 8231.721] 19: /usr/bin/X (0x8048000+0xa31c6) [0x80eb1c6] [ 8231.721] 20: /usr/lib/xorg/modules/extensions/libglx.so (0xbeb000+0x38eaa) [0xc23eaa] [ 8231.721] 21: /usr/bin/X (0x8048000+0x1a67c) [0x806267c] [ 8231.722] 22: /lib/libc.so.6 (__libc_start_main+0xe7) [0x8bfce7] [ 8231.722] 23: /usr/bin/X (0x8048000+0x1a1b1) [0x80621b1] [ 8231.728] Segmentation fault at address 0x11 [ 8231.740] Caught signal 11 (Segmentation fault). Server aborting [ 8231.740] Please consult the The X.Org Foundation support at http://wiki.x.org for help. [ 8231.740] Please also check the log file at "/var/log/Xorg.0.log" for additional information. [ 8231.740] [ 8231.954] ddxSigGiveUp: Closing log root@mypc:/var/log# /var/log/gdm -rw-r--r-- 1 root root 20857 2012-09-21 21:05 :0.log.2 -rw-r--r-- 1 root root 624 2012-09-21 21:08 :0-slave.log.1 -rw-r--r-- 1 gdm gdm 2323 2012-09-21 21:08 :0-greeter.log.1 -rw-r--r-- 1 root root 20788 2012-09-21 23:24 :0.log.1 -rw-r--r-- 1 root root 625 2012-09-22 04:49 :0-slave.log -rw-r--r-- 1 gdm gdm 2157 2012-09-22 04:49 :0-greeter.log -rw-r--r-- 1 root root 19085 2012-09-22 05:04 :0.log root@mypc:/var/log/gdm# tail :0-greeter.log Window manager warning: meta_window_activate called by a pager with a 0 timestamp; the pager needs to be fixed. (gnome-power-manager:1859): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed (gnome-power-manager:1859): Gtk-WARNING **: A floating object was finalized. This means that someone called g_object_unref() on an object that had only a floating reference; the initial floating reference is not owned by anyone and must be removed with g_object_ref_sink(). Window manager warning: CurrentTime used to choose focus window; focus window may not be correct. Window manager warning: Got a request to focus the no_focus_window with a timestamp of 0. This shouldn't happen! root@mypc:/var/log/gdm# I am also suspecting NTP. rp1396@mypc:/var/log$ ntpq -p remote refid st t when poll reach delay offset jitter ============================================================================== europium.canoni .INIT. 16 u - 64 0 0.000 0.000 0.000 rp1396@mypc:/var/log$ rp1396@mypc:/var/log$ nslookup ntp.ubuntu.com Server: _personal_ip.9 Address: _personal_ip.9#53 Non-authoritative answer: Name: ntp.ubuntu.com Address: 91.189.94.4 rp1396@mypc:/var/log$ grep -v "^#" /etc/ntp.conf | grep -v ^$ driftfile /var/lib/ntp/ntp.drift statistics loopstats peerstats clockstats filegen loopstats file loopstats type day enable filegen peerstats file peerstats type day enable filegen clockstats file clockstats type day enable restrict -4 default kod notrap nomodify nopeer noquery restrict -6 default kod notrap nomodify nopeer noquery restrict 127.0.0.1 restrict ::1 server ntp.ubuntu.com rp1396@mypc:/var/log$ I also get: policykit authntication agent not responding. </div></div></body></html>