NetBSD 10.1 VPS became unresponsive

[Christof Meerwald <cmeerw%cmeerw.org@localhost>]

Noticed that a NetBSD 10.1 VPS became somewhat unresponsive for a few
days (it's not really doing much, so I didn't notice earlier). Anyway,
it was still responding to pings and did some part of an SSH
handshake, but actually logging in via SSH didn't work (SSH just
hang).

The interesting thing is that logging in on the console (via a VNC
console) did work, and that seemed to fully wake it up again. In
/var/log/cron I can see that no cron jobs ran for a few days (they
seem to have been queued up and finished running when I logged in on
the console):

Apr  3 19:40:00 linveo cron[6432]: (root) CMD START (/usr/libexec/atrun)
Apr  3 19:40:00 linveo cron[16461]: (root) CMD FINISH (/usr/libexec/atrun)
Apr  3 19:50:00 linveo cron[9932]: (root) CMD START (/usr/libexec/atrun)
Apr  3 19:50:00 linveo cron[8666]: (root) CMD FINISH (/usr/libexec/atrun)
Apr  3 20:00:00 linveo cron[8101]: (root) CMD START (/usr/bin/newsyslog)
Apr  3 20:00:00 linveo cron[16457]: (root) CMD START (/usr/libexec/atrun)
Apr  3 20:00:00 linveo cron[9291]: (root) CMD FINISH (/usr/libexec/atrun)
Apr  3 20:00:10 linveo cron[10183]: (root) CMD FINISH (/usr/bin/newsyslog)
Apr  7 16:17:20 linveo cron[19842]: (root) CMD FINISH (/usr/bin/newsyslog)
Apr  7 16:17:20 linveo syslogd[552]: last message repeated 8 times
Apr  7 16:17:20 linveo cron[12828]: (root) CMD FINISH (/usr/libexec/atrun)
Apr  7 16:17:20 linveo cron[12828]: (root) CMD FINISH (/usr/libexec/atrun)
Apr  7 16:17:20 linveo cron[76]: (root) CMD FINISH (/usr/bin/newsyslog)
Apr  7 16:17:20 linveo cron[3520]: (root) CMD FINISH (/usr/libexec/atrun)
Apr  7 16:17:20 linveo cron[5870]: (root) CMD FINISH (/usr/bin/newsyslog)
Apr  7 16:17:20 linveo cron[12469]: (root) CMD FINISH (/usr/libexec/atrun)
Apr  7 16:17:20 linveo syslogd[552]: last message repeated 7 times

(and quite a few more of these messages - note that there are only
"CMD FINISHED" entries, but no corresponding "CMD START" entries for
these)

I know there is not much information there, but does anyone have an
idea where I should start looking?

There is one log entry in /var/log/messages, but I am not sure it's
related:

Apr  7 16:17:20 linveo /netbsd: [ 836260.0098904] no key association found for SA ...

(I have truncated the IP address - I guess it's just a normal scan)

Maybe the log entry was delayed as well.


Christof

-- 
https://cmeerw.org                             sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org