nraygun Posted May 22 Share Posted May 22 (edited) While I was out of town, I saw these entries in the syslog: May 7 22:37:30 server kernel: usb 5-2: USB disconnect, device number 2 May 7 22:37:30 server acpid: input device has been disconnected, fd 5 May 7 22:38:02 server kernel: usb 5-2: new full-speed USB device number 3 using uhci_hcd May 7 22:38:02 server kernel: input: Avocent USB Composite Device-0 as /devices/pci0000:00/0000:00:1d.0/usb5/5-2/5-2:1.0/0003:0624:0248.0004/input/input7 May 7 22:38:02 server kernel: hid-generic 0003:0624:0248.0004: input,hidraw0: USB HID v1.00 Keyboard [Avocent USB Composite Device-0] on usb-0000:00:1d.0-2/input0 May 7 22:38:02 server kernel: input: Avocent USB Composite Device-0 as /devices/pci0000:00/0000:00:1d.0/usb5/5-2/5-2:1.1/0003:0624:0248.0005/input/input8 May 7 22:38:02 server kernel: hid-generic 0003:0624:0248.0005: input,hidraw1: USB HID v1.00 Mouse [Avocent USB Composite Device-0] on usb-0000:00:1d.0-2/input1 I checked the iDRAC logs and don't see anything there. There was no VM running at the time. A handful of containers were running. Did someone access my server while I was away? flores-diagnostics-20240522-1125.zip Edited May 22 by nraygun added diags Quote Link to comment
JorgeB Posted May 22 Share Posted May 22 Could that be the iDRAC virtual keyboad/mouse? Quote Link to comment
nraygun Posted May 22 Author Share Posted May 22 57 minutes ago, JorgeB said: Could that be the iDRAC virtual keyboad/mouse? I'm not sure how to confirm this. I've never seen this type of message before. Quote Link to comment
Solution JorgeB Posted May 22 Solution Share Posted May 22 1 hour ago, nraygun said: Avocent Googling Avocent and iDRAC found this: https://gist.github.com/xbb/4fd651c2493ad9284dbcb827dc8886d6 Pretty sure that's it. 1 Quote Link to comment
nraygun Posted May 23 Author Share Posted May 23 20 hours ago, JorgeB said: Googling Avocent and iDRAC found this: https://gist.github.com/xbb/4fd651c2493ad9284dbcb827dc8886d6 Pretty sure that's it. Thanks @JorgeB. I wasn't running the iDRAC Java app at the time. And running it now doesn't cause the entries in the syslog. And I had checked the iDRAC logs and didn't see anything there. Maybe iDRAC on the server lost its mind for a minute? Quote Link to comment
JorgeB Posted May 23 Share Posted May 23 I don't know since I never used a Dell server, but pretty sure those entries were caused by that. Quote Link to comment
nraygun Posted May 23 Author Share Posted May 23 35 minutes ago, JorgeB said: I don't know since I never used a Dell server, but pretty sure those entries were caused by that. Okee Dokee! Thank you so much! Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.