26

I have some dedicated server hosted by a OVH (French service provider). OS : Ubuntu 12.04 x64

A few months ago, one of my server crashed. The only weird thing was some "ASCII NUL" caracters in the syslog :

^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@ ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@

With the help of my service provider, we checked :

  • The RAM
  • The CPU
  • The DISKS

Everything was ok, so my service provider recommended to change the motherboard of the server and update the kernel (which we did). But since, this server crashed two more times, with the same caracters in the syslog.

Without any more explanation, we decided to change this server (this is planned in a few weeks).

BUT, problem is, this night, this happened to another server. Same crash, same caracters in the syslog, no explanation.

Does anybody have any clue of what we should check ? Is it a hardware or a software problem ?

masegaloeh
  • 17,978
  • 9
  • 56
  • 104
KilianD
  • 261
  • 3
  • 4
  • 3
    Did you find a solution for this problem? I currently suffer the same issue... – BurninLeo Aug 28 '15 at 09:54
  • 2
    @BurninLeo: same here – WoJ Jul 11 '16 at 08:08
  • Actually, I did not find a solution (on a virtual server). After a while and some (regular) updates from the stable-releases, the problem vanished... – BurninLeo Jul 11 '16 at 09:57
  • 8
    NUL bytes in the syslog are a common effect of a crash that prevented the system from cleanly syncing and unmounting the filesystem. They don't give an indication of what actually triggered the crash. – n.st Aug 04 '17 at 17:31

2 Answers2

10

I'll share more widely the great answer given by @n-st:

NUL bytes in the syslog are a common effect of a crash that prevented the system from cleanly syncing and unmounting the filesystem. They don't give an indication of what actually triggered the crash.

Indeed, I have often seen that behavior after a server crash: those characters are NULL (\0) characters that may represent a recovered block that was filled with zeros by some recover process.

As for the cause of the crash, that's a whole different question - you'd need to provide way more information for a diagnostic to even begin. I would recommend opening a different question about this if you still have the problem.

anarcat
  • 740
  • 1
  • 9
  • 18
-1

If you are using a text-editor to view the log files, that could be the cause;

  • the "^@" characters may indicate that a line is too long (eg: in vim, turn on wrapping)
  • The encoding is mismatched; either use a different text-editor to view the file, or change the encoding used by syslog.
Community
  • 1
Signal15
  • 943
  • 7
  • 27
  • 4
    I have a similar problem. Neither a long line nor the encoding explains the NUL characters at the end of the syslog (copied the file to an external disc and opened it with SciTE, UTF-8 encoding). – BurninLeo Aug 28 '15 at 09:53
  • It sounds like you may be opening the UTF-8 encoded file in an editor that does not understand UTF-8 very well. However it could be the CRLF problem (the dos2unix and unix2dos commands may be helpful) – Signal15 Jun 23 '17 at 18:44
  • 4
    NUL bytes in the syslog are a common effect of a crash that prevented the system from cleanly syncing and unmounting the filesystem. They don't give an indication of what actually triggered the crash. – n.st Aug 04 '17 at 17:32
  • 1
    @n.st What a great answer! :) You should put that one as a "answer" – Signal15 Aug 04 '17 at 20:43