• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

ESXi booted itself

R

rufik

Limp Gawd
Joined
Sep 16, 2013
Messages
151
Today about 8:47 AM by ESXi has been booted. Question is why ?
Why I can see so much strange firewalls changes... ?


Cannot login root@10.10.134.100
error
4/2/2014 7:07:52 PM
root

An account was updated
info
4/2/2014 7:07:22 PM
esxi.olivia.net
pwojtachnio

User pwojtachnio@ logged out (login time: ,
number of API invocations: , user agent: )
info
4/2/2014 6:56:00 PM
pwojtachnio

User pwojtachnio@10.10.134.100 logged in as
info
4/2/2014 6:50:20 PM
pwojtachnio

WXP-P2P (10.10.134.x) is powered on
info
4/2/2014 6:47:11 PM
WXP-P2P (10.10.134.x)
pwojtachnio

Message on WXP-P2P (10.10.134.x): There is at
least one virtual SCSI device installed on this
Windows XP virtual machine. Windows XP does
not include drivers for the BusLogic SCSI adapter
that VMware ESX uses for virtual SCSI devices.
To use these virtual SCSI devices, install the
VMware driver in the virtual machine. Download
the driver from "http://vmware.com/info?id=43".
info
4/2/2014 6:47:11 PM
WXP-P2P (10.10.134.x)
pwojtachnio

WXP-P2P (10.10.134.x) is starting
info
4/2/2014 6:47:10 PM
WXP-P2P (10.10.134.x)
pwojtachnio

User pwojtachnio@10.10.134.100 logged in as
info
4/2/2014 6:45:58 PM
pwojtachnio

Cannot login pwojtachnio@10.10.134.100
error
4/2/2014 6:45:40 PM
pwojtachnio

User dcui@127.0.0.1 logged in as
info
4/2/2014 8:50:01 AM
dcui

SSH access has been enabled.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

The DCUI has been enabled.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

The ESXi command line shell has been enabled.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

No scratch partition has been configured.
Recommended scratch partition size is {} MiB.
warning
4/2/2014 8:49:23 AM
esxi.olivia.net

At least one coredump target has been
configured. Host core dumps will be saved.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Port vmk0 is now protected by Firewall.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Physical NIC vmnic1 linkstate is up.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Physical NIC vmnic0 linkstate is up.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set ipfam succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set ipfam succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set rabbitmqproxy succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set rabbitmqproxy succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'setrequired' for rule set vsanvp succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set vsanvp succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set vsanvp succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set cmmds succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set cmmds succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set rdt succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set rdt succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set vprobeServer succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set remoteSerialPort succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set vSPC succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set WOL succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set WOL succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set IKED succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set syslog succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set DVSSync succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set DVSSync succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set DHCPv6 succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set DHCPv6 succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set DVFilter succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set gdbserver succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set httpClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set httpClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set ftpClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set HBR succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set HBR succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set NFC succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set NFC succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set activeDirectoryAll succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set activeDirectoryAll succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'setrequired' for rule set vSphereClient succeeded
.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set vSphereClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set vSphereClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set vMotion succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set vMotion succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set webAccess succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set webAccess succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set faultTolerance succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set faultTolerance succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set updateManager succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set vpxHeartbeats succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set iSCSI succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set CIMSLP succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set CIMSLP succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set CIMHttpsServer succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set CIMHttpServer succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set ntpClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set snmp succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set snmp succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set dns succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set dns succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set dhcp succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set dhcp succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set nfsClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set sshClient succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'setrequired' for rule set sshServer succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'enable' for rule set sshServer succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

Firewall configuration has changed. Operation
'add' for rule set sshServer succeeded.
info
4/2/2014 8:49:23 AM
esxi.olivia.net

User root@ logged out (login time: , number of
API invocations: , user agent: )
info
4/2/2014 8:47:47 AM
root

Lync Server (10.10.134.x) is powered on
info
4/2/2014 8:47:37 AM
Lync Server (10.10.134.x)
root

Lync Server (10.10.134.x) is starting
info
4/2/2014 8:47:37 AM
Lync Server (10.10.134.x)
root

W2k12r2-SRV (10.10.134.x) is powered on
info
4/2/2014 8:47:27 AM
W2k12r2-SRV (10.10.134.x)
root

W2k12r2-SRV (10.10.134.x) is starting
info
4/2/2014 8:47:27 AM
W2k12r2-SRV (10.10.134.x)
root

W2k3-Terminal-SRV (10.10.134.x) is powered on
info
4/2/2014 8:47:17 AM
W2k3-Terminal-SRV (10.10.134.x)
root

W2k3-Terminal-SRV (10.10.134.x) is starting
info
4/2/2014 8:47:17 AM
W2k3-Terminal-SRV (10.10.134.x)
root

User root@127.0.0.1 logged in as
info
4/2/2014 8:47:12 AM
root

vGW-Vyatta-01a (10.10.134.254) is powered on
info
4/2/2014 8:47:07 AM
vGW-Vyatta-01a (10.10.134.254)
root

vGW-Vyatta-01a (10.10.134.254) is starting
info
4/2/2014 8:47:07 AM
vGW-Vyatta-01a (10.10.134.254)
root

User root@127.0.0.1 logged in as
info
4/2/2014 8:47:07 AM
root

Host has booted.
info
4/2/2014 8:47:06 AM
esxi.olivia.net

User root@ logged out (login time: , number of
API invocations: , user agent: )
info
4/2/2014 8:47:04 AM
root

Firewall configuration has changed. Operation
'enable' for rule set CIMHttpsServer succeeded.
info
4/2/2014 8:47:04 AM
esxi.olivia.net

User root@127.0.0.1 logged in as
info
4/2/2014 8:47:04 AM
root

User root@ logged out (login time: , number of
API invocations: , user agent: )
info
4/2/2014 8:47:04 AM
root

Firewall configuration has changed. Operation
'enable' for rule set CIMHttpServer succeeded.
info
4/2/2014 8:47:04 AM
esxi.olivia.net

User root@127.0.0.1 logged in as
info
4/2/2014 8:47:04 AM
root

User root@ logged out (login time: , number of
API invocations: , user agent: )
info
4/2/2014 8:47:03 AM
root

Firewall configuration has changed. Operation
'enable' for rule set vpxHeartbeats succeeded.
info
4/2/2014 8:47:03 AM
esxi.olivia.net

User root@127.0.0.1 logged in as
info
4/2/2014 8:47:03 AM
root
Click to expand...
 
Pull your server offline. Do you monitor your network traffic? Any strange traffic lately? That is a lot of changes to firewall and system, how much did you actually do yourself?
 
Looks like a normal boot to me. All that is 100% normal - the firewall loads first with the default rules, then loads the actual runtime rules from a file and makes the changes as it boots, so that's all copacetic.
 
tankman1989 said:
Pull your server offline. Do you monitor your network traffic? Any strange traffic lately? That is a lot of changes to firewall and system, how much did you actually do yourself?
Click to expand...

Nah, those are all the built in rules that he's set - all look normal to me. Most people don't track all the actual events during a boot to see what it does. :)
 
You must log in or register to reply here.
Back
Top