안녕하세요.
 제 생각입니다.
 socks5는 rfc1928에 정의되어 있는 proxy 프로토콜의 구현이구요. (일종의 프록시서버)
xfs는 x font server 같은데요.
 일단 로그를 보면 Mar 29 17:37:34 에 시스템이 리부팅 된 것 같습니다.
syslog에 뿌려진 내용은 시스템이 리부팅 될 때 나오는 메세지와 같군요. (dmesg)
그리고
Security Violations 에 기록된 것은 시스템이 리부팅 되고 각종 데몬이 뜨면서
뿌리는 메세지 같습니다.
sendmail 이 시작 할 때 각종 설정 파일들을 로딩하는데요. 그 때 alias 가 3월 16일
에 바뀐 내용이 (root에 의해)적용 된다는 뜻이겠죠.
어떤 이유에선지 socks5 프록시가 제대로 설정이 안되있던지 혹은 시스템의 다른 이상
때문에 적절한 file descriptor를 못받아 온 것 같습니다.
 다만 참고를...
 : syslog를 메일로 받아보고 있는 오늘 새벽에 아래와 같은 메일이 왔다는데..
: 처음보는 것이라..걱정이 앞서서요..
: 내용을 보니 시스템을 체크한 것 같은데.. 맞나요??
:
: 그리고 Security Violations을 보면 socks5의 conf 파일을 열수 없다고 하는데..
: socks5를 무엇인지요???
: 그리고 xfs 는????
: 마지막의 sendmail[479]: alias database /etc/aliases rebuilt by root
: 는 root에 의해 aliases파일을 수정했다는 말이지요??
: 전 수정한 적이 없는데.. 수정 날짜를 보면 3월 16일로 되어 잇는데.. 이것을 어떻
: 게 해석을 해야 하나요???
: 그리고 데몬이 왜 sendmail로 되어 있는지..
:
: 그리고 Unusual System Events의 내용을 무엇인지..kernel에 관한 것 같은데..
: 자동으로 kernel에 관한것을 실행하게 되어 있나요??(시간이 되신다면 간단히
: 내용도 살펴주시면 좋은데..)
:
: 보시고 알고 있는 것만 가르쳐 주시면 정말 감사하겠습니다..
: 그럼 수고하세요..
: -------------------------------------------------------------------------------------------------
: Security Violations
: =-=-=-=-=-=-=-=-=-=
: Mar 29 17:37:45 kert Socks5[614]: Config: Error opening config file (/etc/socks5.conf): Bad file descriptor
: Mar 29 17:37:45 kert xfs: xfs shutdown failed
: Mar 29 17:37:42 kert sendmail[479]: alias database /etc/aliases rebuilt by root
:
: Unusual System Events
: =-=-=-=-=-=-=-=-=-=-=
: Mar 29 17:37:34 kert syslogd 1.3-4: restart.
: Mar 29 17:37:34 kert S30syslog: syslogd startup succeeded
: Mar 29 17:37:34 kert kernel: klogd 1.3-4, log source = /proc/kmsg started.
: Mar 29 17:37:34 kert S30syslog: klogd startup succeeded
: Mar 29 17:37:34 kert kernel: Inspecting /boot/System.map-2.2.14-5krsmp
: Mar 29 17:37:34 kert kernel: Loaded 7013 symbols from /boot/System.map-2.2.14-5krsmp.
: Mar 29 17:37:34 kert kernel: Symbols match kernel version 2.2.14.
: Mar 29 17:37:34 kert kernel: Loaded 72 symbols from 5 modules.
: Mar 29 17:37:34 kert kernel: Linux version 2.2.14-5krsmp (root at linux.accellinux.com) (gcc version gcc-2.95.1 199901030
: /Linux (gcc-2.95.1 release)) #1 SMP Wed Jan 12 16:25:07 KST 2000 Mar 29 17:37:34 kert kernel: Intel MultiProcessor Spe
: cification v1.4 Mar 29 17:37:34 kert kernel:     Virtual Wire compatibility mode.
: Mar 29 17:37:34 kert kernel: OEM ID: INTEL    Product ID: Lancewood    APIC at: 0xFEE00000
: Mar 29 17:37:34 kert kernel: Processor #1 Pentium(tm) Pro APIC version 17
: Mar 29 17:37:34 kert kernel: I/O APIC #0 Version 17 at 0xFEC00000.
: Mar 29 17:37:34 kert kernel: Processors:1
: Mar 29 17:37:34 kert kernel: mapped APIC to ffffe000 (fee00000)
: Mar 29 17:37:34 kert kernel: mapped IOAPIC to ffffd000 (fec00000)
: Mar 29 17:37:34 kert kernel: Detected 497440944 Hz processor.
: Mar 29 17:37:34 kert kernel: Console: colour VGA+ 80x25
: Mar 29 17:37:34 kert kernel: Calibrating delay loop... 496.44 BogoMIPS
: Mar 29 17:37:34 kert kernel: e820 region 0: (0, 653312) @ 0x0000000000000000 (usable) [available]
: Mar 29 17:37:34 kert kernel: e820 region 1: (0, 2048) @ 0x000000000009f800 (reserved) [available]
: Mar 29 17:37:34 kert kernel: e820 region 2: (0, 98304) @ 0x00000000000e8000 (reserved) [available]
: Mar 29 17:37:34 kert kernel: e820 region 3: (0, 133103616) @ 0x0000000000100000 (usable) [available]
: Mar 29 17:37:34 kert kernel: e820 region 4: (0, 61440) @ 0x0000000007ff0000 (ACPI data) [unavailable]
: Mar 29 17:37:34 kert kernel: e820 region 5: (0, 4096) @ 0x0000000007fff000 (NVS data) [unavailable]
: Mar 29 17:37:34 kert kernel: e820 region 6: (0, 65536) @ 0x00000000fec00000 (reserved) [unavailable]
: Mar 29 17:37:34 kert kernel: e820 region 7: (0, 4096) @ 0x00000000fee00000 (reserved) [unavailable]
: Mar 29 17:37:34 kert kernel: e820 region 8: (0, 524288) @ 0x00000000fff80000 (reserved) [unavailable]
: Mar 29 17:37:34 kert kernel: Memory:127332k/131008k available (1176k kernel code, 424k reserved, 1652k data, 96k init
: , 0k bigmem) Mar 29 17:37:34 kert kernel: Dentry hash table entries: 262144 (order 9, 2048k)
: Mar 29 17:37:35 kert kernel: Buffer cache hash table entries: 131072 (order 7, 512k)
: Mar 29 17:37:35 kert kernel: Page cache hash table entries: 32768 (order 5, 128k)
: Mar 29 17:37:35 kert kernel: VFS: Diskquotas version dquot_6.4.0 initialized
: Mar 29 17:37:35 kert kernel: Checking 386/387 coupling... OK, FPU using exception 16 error reporting.
: Mar 29 17:37:35 kert kernel: Checking 'hlt' instruction... OK.
: Mar 29 17:37:35 kert kernel: POSIX conformance testing by UNIFIX
: Mar 29 17:37:35 kert kernel: mtrr: v1.35a (19990819) Richard Gooch (rgooch at atnf.csiro.au)
: Mar 29 17:37:35 kert kernel: per-CPU timeslice cutoff: 100.08 usecs.
: Mar 29 17:37:35 kert kernel: CPU1: Intel Pentium III (Katmai) stepping 03
: Mar 29 17:37:35 kert kernel: calibrating APIC timer ...
: Mar 29 17:37:35 kert kernel: ..... CPU clock speed is 497.4433 MHz.
: Mar 29 17:37:35 kert kernel: ..... system bus clock speed is 99.4884 MHz.
: Mar 29 17:37:35 kert kernel: Error: only one processor found.
: Mar 29 17:37:35 kert kernel: enabling symmetric IO mode... ...done.
: Mar 29 17:37:35 kert kernel: ENABLING IO-APIC IRQs
: Mar 29 17:37:35 kert kernel: init IO_APIC IRQs
: Mar 29 17:37:35 kert kernel:  IO-APIC (apicid-pin) 0-0, 0-9, 0-10, 0-11, 0-16, 0-17, 0-18, 0-20, 0-22, 0-23 not conne
: cted. Mar 29 17:37:35 kert kernel: number of MP IRQ sources: 17.
: Mar 29 17:37:35 kert kernel: number of IO-APIC #0 registers: 24.
: Mar 29 17:37:35 kert kernel: testing the IO APIC.......................
: Mar 29 17:37:35 kert kernel:
: Mar 29 17:37:35 kert kernel: IO APIC #0......
: Mar 29 17:37:35 kert kernel: .... register #00: 00000000
: Mar 29 17:37:35 kert kernel: .......    : physical APIC id: 00
: Mar 29 17:37:35 kert kernel: .... register #01: 00170011
: Mar 29 17:37:35 kert kernel: .......     : max redirection entries: 0017
: Mar 29 17:37:35 kert kernel: .......     : IO APIC version: 0011
: Mar 29 17:37:35 kert kernel: .... register #02: 00000000
: Mar 29 17:37:35 kert kernel: .......     : arbitration: 00
: Mar 29 17:37:35 kert kernel: .... IRQ redirection table:
: Mar 29 17:37:35 kert kernel:  NR Log Phy Mask Trig IRR Pol Stat Dest Deli Vect: 
: Mar 29 17:37:35 kert kernel:  00 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  01 000 00  0    0    0   0   0    1    1    59
: Mar 29 17:37:35 kert kernel:  02 0FF 0F  0    0    0   0   0    1    1    51
: Mar 29 17:37:35 kert kernel:  03 000 00  0    0    0   0   0    1    1    61
: Mar 29 17:37:35 kert kernel:  04 000 00  0    0    0   0   0    1    1    69
: Mar 29 17:37:35 kert kernel:  05 000 00  0    0    0   0   0    1    1    71
: Mar 29 17:37:35 kert kernel:  06 000 00  0    0    0   0   0    1    1    79
: Mar 29 17:37:35 kert kernel:  07 000 00  0    0    0   0   0    1    1    81
: Mar 29 17:37:35 kert kernel:  08 000 00  0    0    0   0   0    1    1    89
: Mar 29 17:37:35 kert kernel:  09 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  0a 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  0b 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  0c 000 00  0    0    0   0   0    1    1    91
: Mar 29 17:37:35 kert kernel:  0d 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  0e 000 00  0    0    0   0   0    1    1    99
: Mar 29 17:37:35 kert kernel:  0f 000 00  0    0    0   0   0    1    1    A1
: Mar 29 17:37:35 kert kernel:  10 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  11 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  12 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  13 0FF 0F  1    1    0   1   0    1    1    A9
: Mar 29 17:37:35 kert kernel:  14 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  15 0FF 0F  1    1    0   1   0    1    1    B1
: Mar 29 17:37:35 kert kernel:  16 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:35 kert kernel:  17 000 00  1    0    0   0   0    0    0    00
: Mar 29 17:37:36 kert kernel: .................................... done.
: Mar 29 17:37:36 kert kernel: PCI: PCI BIOS revision 2.10 entry at 0xfdab0
: Mar 29 17:37:36 kert kernel: PCI: Using configuration type 1
: Mar 29 17:37:36 kert kernel: PCI: Probing PCI hardware
: Mar 29 17:37:36 kert kernel: PCI->APIC IRQ transform: (B0,I12,P0) -> 19
: Mar 29 17:37:36 kert kernel: PCI->APIC IRQ transform: (B0,I12,P0) -> 19
: Mar 29 17:37:36 kert kernel: PCI->APIC IRQ transform: (B0,I14,P0) -> 21
: Mar 29 17:37:36 kert kernel: PCI->APIC IRQ transform: (B0,I18,P3) -> 21
: Mar 29 17:37:36 kert kernel: Linux NET4.0 for Linux 2.2
: Mar 29 17:37:36 kert kernel: Based upon Swansea University Computer Society NET3.039
: Mar 29 17:37:36 kert kernel: NET4: Unix domain sockets 1.0 for Linux NET4.0.
: Mar 29 17:37:36 kert kernel: NET4: Linux TCP/IP 1.0 for NET4.0
: Mar 29 17:37:36 kert kernel: IP Protocols: ICMP, UDP, TCP, IGMP
: Mar 29 17:37:36 kert kernel: TCP: Hash tables configured (ehash 131072 bhash 65536)
: Mar 29 17:37:36 kert kernel: Initializing RT netlink socket
: Mar 29 17:37:36 kert kernel: Starting kswapd v 1.5
: Mar 29 17:37:36 kert kernel: Detected PS/2 Mouse Port.
: Mar 29 17:37:36 kert kernel: Serial driver version 4.27 with MANY_PORTS MULTIPORT SHARE_IRQ enabled
: Mar 29 17:37:36 kert kernel: ttyS00 at 0x03f8 (irq = 4) is a 16550A
: Mar 29 17:37:36 kert kernel: ttyS01 at 0x02f8 (irq = 3) is a 16550A
: Mar 29 17:37:36 kert kernel: pty: 256 Unix98 ptys configured
: Mar 29 17:37:36 kert kernel: Real Time Clock Driver v1.09
: Mar 29 17:37:36 kert kernel: RAM disk driver initialized:  16 RAM disks of 64000K size
: Mar 29 17:37:36 kert kernel: PIIX4: IDE controller on PCI bus 00 dev 91
: Mar 29 17:37:36 kert kernel: PIIX4: not 100% native mode: will probe irqs later
: Mar 29 17:37:36 kert kernel:     ide0: BM-DMA at 0x1050-0x1057, BIOS settings: hda:DMA, hdb:pio
: Mar 29 17:37:36 kert kernel:     ide1: BM-DMA at 0x1058-0x105f, BIOS settings: hdc:pio, hdd:pio
: Mar 29 17:37:36 kert kernel: hda: CRD-8402B, ATAPI CDROM drive
: Mar 29 17:37:36 kert kernel: ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
: Mar 29 17:37:36 kert kernel: hda: ATAPI 48X CD-ROM drive, 128kB Cache
: Mar 29 17:37:36 kert kernel: Uniform CDROM driver Revision:2.56
: Mar 29 17:37:36 kert kernel: Floppy drive(s): fd0 is 1.44M
: Mar 29 17:37:36 kert kernel: FDC 0 is a National Semiconductor PC87306
: Mar 29 17:37:36 kert kernel: md driver 0.90.0 MAX_MD_DEVS=256, MAX_REAL=12
: Mar 29 17:37:36 kert kernel: raid5: measuring checksumming speed
: Mar 29 17:37:36 kert kernel: raid5: MMX detected, trying high-speed MMX checksum routines
: Mar 29 17:37:36 kert kernel:    pII_mmx   :  1108.710 MB/sec
: Mar 29 17:37:36 kert kernel:    p5_mmx    :  1170.432 MB/sec
: Mar 29 17:37:36 kert kernel:    8regs     :   865.251 MB/sec
: Mar 29 17:37:36 kert kernel:    32regs    :   444.246 MB/sec
: Mar 29 17:37:36 kert kernel: using fastest function: p5_mmx (1170.432 MB/sec)
: Mar 29 17:37:36 kert kernel: scsi : 0 hosts.
: Mar 29 17:37:36 kert kernel: scsi : detected total.
: Mar 29 17:37:36 kert kernel: md.c: sizeof(mdp_super_t) = 4096
: Mar 29 17:37:36 kert kernel: Partition check:
: Mar 29 17:37:36 kert kernel: RAMDISK: Compressed image found at block 0
: Mar 29 17:37:36 kert kernel: Uncompressing........................done.
: Mar 29 17:37:36 kert kernel: autodetecting RAID arrays
: Mar 29 17:37:36 kert kernel: autorun ...
: Mar 29 17:37:36 kert kernel: ... autorun DONE.
: Mar 29 17:37:36 kert kernel: VFS: Mounted root (ext2 filesystem).
: Mar 29 17:37:36 kert kernel: (scsi0) <Adaptec AIC-7896/7 Ultra2 SCSI host adapter> found at PCI 12/0
: Mar 29 17:37:36 kert kernel: (scsi0) Wide Channel A, SCSI ID=7, 32/255 SCBs
: Mar 29 17:37:36 kert kernel: (scsi0) Downloading sequencer code... 385 instructions downloaded
: Mar 29 17:37:36 kert kernel: (scsi1) <Adaptec AIC-7896/7 Ultra2 SCSI host adapter> found at PCI 12/1
: Mar 29 17:37:36 kert kernel: (scsi1) Wide Channel B, SCSI ID=7, 32/255 SCBs
: Mar 29 17:37:36 kert kernel: (scsi1) Downloading sequencer code... 385 instructions downloaded
: Mar 29 17:37:36 kert kernel: scsi0 : Adaptec AHA274x/284x/294x (EISA/VLB/PCI-Fast SCSI) 5.1.22/3.2.4
: Mar 29 17:37:36 kert kernel:        <Adaptec AIC-7896/7 Ultra2 SCSI host adapter>
: Mar 29 17:37:36 kert kernel: scsi1 : Adaptec AHA274x/284x/294x (EISA/VLB/PCI-Fast SCSI) 5.1.22/3.2.4
: Mar 29 17:37:36 kert kernel:        <Adaptec AIC-7896/7 Ultra2 SCSI host adapter>
: Mar 29 17:37:36 kert kernel: scsi : 2 hosts.
: Mar 29 17:37:36 kert kernel: (scsi0:0:6:0) Synchronous at 80.0 Mbyte/sec, offset 30.
: Mar 29 17:37:36 kert kernel:   Vendor: IBM       Model: DNES-309170W      Rev: SAH0
: Mar 29 17:37:37 kert kernel:   Type:  Direct-Access                      ANSI SCSI revision: 03
: Mar 29 17:37:37 kert kernel: Detected scsi disk sda at scsi0, channel 0, id 6, lun 0
: Mar 29 17:37:37 kert kernel: SCSI device sda: hdwr sector= 512 bytes. Sectors= 17916240 [8748 MB] [8.7 GB]
: Mar 29 17:37:37 kert kernel:  sda: sda1 sda2 < sda5 sda6 sda7 sda8 sda9 >
: Mar 29 17:37:37 kert kernel: autodetecting RAID arrays
: Mar 29 17:37:37 kert kernel: autorun ...
: Mar 29 17:37:37 kert kernel: ... autorun DONE.
: Mar 29 17:37:37 kert kernel: VFS: Mounted root (ext2 filesystem) readonly.
: Mar 29 17:37:37 kert kernel: change_root: old root has d_count=1
: Mar 29 17:37:37 kert kernel: Trying to unmount old root ... okay
: Mar 29 17:37:37 kert kernel: Freeing unused kernel memory: 96k freed
: Mar 29 17:37:37 kert kernel: Adding Swap: 554200k swap-space (priority -1)
: Mar 29 17:37:37 kert kernel: EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended
: Mar 29 17:37:37 kert kernel: Registering PPPoE driver
: Mar 29 17:37:37 kert kernel: eepro100.c:v1.09r2 10/15/99 Donald Becker http://cesdis.gsfc.nasa.gov/linux/drivers/eepro
: 100.html : Mar 29 17:37:37 kert kernel: eth0: Intel PCI EtherExpress Pro100 at 0xe81424000, 00:A2:C7:FC:1F:CB, IRQ 21.
:  Mar 29 17:37:37 kert kernel:   Board assembly 000000-000, Physical connectors present: RJ45 Mar 29 17:37:37 kert ker
: nel:   Primary interface chip i82555 PHY #1. Mar 29 17:37:37 kert kernel:   General self-test: passed.
: Mar 29 17:37:37 kert kernel:   Serial sub-system self-test: passed.
: Mar 29 17:37:37 kert kernel:   Internal registers self-test: passed.
: Mar 29 17:37:37 kert kernel:   ROM checksum self-test: passed (0x04f4518b).
: Mar 29 17:37:37 kert kernel:   Receiver lock-up workaround activated.--return true