imac restarts - what log entry should i see ?

[danyg]

Hi,

My iMac is randomly restarting.
To find the cause, I'm trying to investigate through Console Log.

BUT, what text entry in this log shows a restart so I can find the last entries BEFORE the restart ?

Thanks/Dany.

 

[Sun Baked]

look at the messages (all/console messages) to see if there is anything.

System.Log and the crash/hang-reports

As far as finding boot times...

in the system log you should see a lot of the kernal[0] messages with the copyright and Darwin Kernel Version 9.2.x, ect. about boot time.

Bunch of the stuff you'd see if you booted into single user mode.

 

[danyg]

here's the log... where/when my mac actually restarted ?

Hi, below is the copy/paste of the log...
After, exactly, what entry, did my imac restarted ?
By what's seen, can we conclude what happened ?

Apr 30 00:56:26 dany-gellers-imac MozyBackup[54]: (send) Finished backing up 1 files
Apr 30 00:56:26 dany-gellers-imac MozyBackup[54]: (send) Getting files from queue
Apr 30 00:56:26 dany-gellers-imac MozyBackup[54]: (send) Offering 2 files (0 are removes)
Apr 30 00:56:32 dany-gellers-imac MozyBackup[54]: (send) Finished backing up 2 files
Apr 30 00:56:32 dany-gellers-imac MozyBackup[54]: (send) Getting files from queue
Apr 30 00:56:32 dany-gellers-imac MozyBackup[54]: (send) Offering 1 files (0 are removes)
Apr 30 00:56:38 dany-gellers-imac MozyBackup[54]: (send) Finished backing up 1 files
Apr 30 00:56:38 dany-gellers-imac MozyBackup[54]: (send) Getting files from queue
Apr 30 00:56:38 dany-gellers-imac MozyBackup[54]: (send) Offering 2 files (0 are removes)
Apr 30 00:56:41 dany-gellers-imac MozyBackup[54]: (send) Finished backing up 2 files
Apr 30 00:56:41 dany-gellers-imac MozyBackup[54]: (send) Getting files from queue
Apr 30 00:56:57 dany-gellers-imac MozyBackup[54]: (send) Offering 1 files (0 are removes)
Apr 30 00:57:04 dany-gellers-imac MozyBackup[54]: (send) Finished backing up 1 files
Apr 30 00:57:04 dany-gellers-imac MozyBackup[54]: (send) Getting files from queue
Apr 30 00:57:05 dany-gellers-imac MozyBackup[54]: (send) Offering 2 files (0 are removes)
Apr 30 00:57:59 localhost kernel[0]: npvhash=4095
Apr 30 00:57:58 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Apr 30 00:57:58 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Apr 30 00:57:58 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Apr 30 00:57:59 localhost DirectoryService[11]: Launched version 5.2 (v514.4)
Apr 30 00:57:59 localhost kernel[0]: hi mem tramps at 0xffe00000
Apr 30 00:57:59 localhost DirectoryService[11]: WARNING - dsTouch: file was asked to be opened </Library/Preferences/DirectoryService/.DSIsRunning>: (File exists)
Apr 30 00:57:59 localhost kernel[0]: PAE enabled
Apr 30 00:57:59 localhost kernel[0]: 64 bit mode enabled
Apr 30 00:57:59 localhost kernel[0]: Darwin Kernel Version 9.2.2: Tue Mar 4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386
Apr 30 00:57:59 localhost kernel[0]: standard timeslicing quantum is 10000 us
Apr 30 00:57:59 localhost kernel[0]: vm_page_bootstrap: 972891 free pages and 75685 wired pages
Apr 30 00:58:00 localhost kernel[0]: mig_table_max_displ = 79
Apr 30 00:58:00 localhost kernel[0]: 105 prelinked modules
Apr 30 00:58:00 localhost kernel[0]: AppleACPICPU: ProcessorApicId=0 LocalApicId=0 Enabled
Apr 30 00:58:00 localhost kernel[0]: AppleACPICPU: ProcessorApicId=1 LocalApicId=1 Enabled
Apr 30 00:58:00 localhost kernel[0]: Loading security extension com.apple.security.TMSafetyNet

 

[Sun Baked]

This is the restart...

Apr 30 00:57:59 localhost kernel[0]: PAE enabled
Apr 30 00:57:59 localhost kernel[0]: 64 bit mode enabled
Apr 30 00:57:59 localhost kernel[0]: Darwin Kernel Version 9.2.2: Tue Mar 4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386

You will see the same thing if you boot into single user mode.

So likely it crashed prior to Apr 30 00:57:59 -- it'll give you a time to look at your crash logs, system logs, etc.

---

As for the specific restart command, don't know. Might be located somewhere else.

This is just an easy thing to look for.

Also looking in the archived logs may also help.

 

[danyg]

another crash - any clue ?

Hi
Thanks for your time...
Below anoooother crash :

Any hint ? I'm kind of lost... What should I be looking for, before the crash?
Are the errors shown important ? They are the cause of the restart ?

......
30/04/08 22:32:21 Microsoft Excel[789] CGBitmapContextGetData: invalid context
30/04/08 22:32:21 Microsoft Excel[789] CGBitmapContextGetData: invalid context
30/04/08 22:32:21 Microsoft Excel[789] CGBitmapContextGetData: invalid context
30/04/08 22:32:21 Microsoft Excel[789] CGBitmapContextGetData: invalid context
30/04/08 22:32:22 Microsoft Excel[789] CGBitmapContextGetData: invalid context
30/04/08 22:32:22 Microsoft Excel[789] CGBitmapContextGetData: invalid context
30/04/08 22:32:37 KernelEventAgent[38] tid 00000000 received unknown event (48)
30/04/08 23:23:22 com.apple.launchctl.System[2] fsck_hfs: Volume is journaled. No checking performed.
30/04/08 23:23:22 com.apple.launchctl.System[2] fsck_hfs: Use the -f option to force checking.
30/04/08 23:23:25 com.apple.launchctl.System[2] launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
30/04/08 23:23:25 com.apple.launchd[1] (org.cups.cups-lpd) Unknown key: SHAuthorizationRight
30/04/08 23:23:25 com.apple.launchd[1] (org.cups.cupsd) Unknown key: SHAuthorizationRight
30/04/08 23:23:25 com.apple.launchd[1] (org.ntp.ntpd) Unknown key: SHAuthorizationRight
30/04/08 23:23:26 kernel npvhash=4095
30/04/08 23:23:26 DirectoryService[11] Launched version 5.2 (v514.4)
30/04/08 23:23:26 kernel hi mem tramps at 0xffe00000
30/04/08 23:23:26 DirectoryService[11] WARNING - dsTouch: file was asked to be opened </Library/Preferences/DirectoryService/.DSIsRunning>: (File exists)

30/04/08 23:23:26 kernel PAE enabled
30/04/08 23:23:26 kernel 64 bit mode enabled
30/04/08 23:23:26 kernel Darwin Kernel Version 9.2.2: Tue Mar 4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386
30/04/08 23:23:26 kernel standard timeslicing quantum is 10000 us
30/04/08 23:23:26 kernel vm_page_bootstrap: 972891 free pages and 75685 wired pages
30/04/08 23:23:26 kernel mig_table_max_displ = 79
30/04/08 23:23:26 kernel 105 prelinked modules
......