Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
weird connection refused message from cron...
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo
View previous topic :: View next topic  
Author Message
Xenzeo
n00b
n00b


Joined: 27 Feb 2004
Posts: 49

PostPosted: Fri Aug 27, 2004 8:33 am    Post subject: weird connection refused message from cron... Reply with quote

Hey, I have an server runnning 24/7, hosted elsewhere, anyway tonight i'v got 2 mails from cron....

First at 00:00
Quote:

Return-Path: <root@blah>
X-Original-To: root
Delivered-To: blah@blah
Received: by mail.blah (Postfix, from userid 0)
id 63DD714743D; Fri, 27 Aug 2004 00:00:13 +0200 (CEST)
From: root@blah (Cron Daemon)
To: root@blah
Subject: Cron <root@echo> test -x /usr/sbin/run-crons && /usr/sbin/run-crons
X-Cron-Env: <SHELL=/bin/bash>
X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <MAILTO=root>
X-Cron-Env: <HOME=/>
X-Cron-Env: <LOGNAME=root>
Message-Id: <20040826220013.63DD714743D@mail.blah>
Date: Fri, 27 Aug 2004 00:00:13 +0200 (CEST)

connect: Connection refused


Secund at 01:03
Quote:

Return-Path: <root@blah>
X-Original-To: root
Delivered-To: blah@blah
Received: by mail.blah (Postfix, from userid 0)
id 8AE8414743D; Fri, 27 Aug 2004 01:03:22 +0200 (CEST)
From: root@blah (Cron Daemon)
To: root@blah
Subject: Cron <root@echo> test -x /usr/sbin/run-crons && /usr/sbin/run-crons
X-Cron-Env: <SHELL=/bin/bash>
X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <MAILTO=root>
X-Cron-Env: <HOME=/>
X-Cron-Env: <LOGNAME=root>
Message-Id: <20040826230322.8AE8414743D@mail.blah>
Date: Fri, 27 Aug 2004 01:03:22 +0200 (CEST)

connect: Connection timed out


Is there anyone that can give a pointer at how i could figure out what the server has been trying too do, cause i have no idea?

I have a number of cron scripts running at night, and the only ones that uses network is my webstats and iptables stats, and these only uses DNS...

Thats whats makes it really weird...

Any help would be appriciated
Back to top
View user's profile Send private message
hjnenc
Veteran
Veteran


Joined: 15 Aug 2004
Posts: 1599
Location: Vienna, Austria

PostPosted: Fri Aug 27, 2004 11:41 am    Post subject: Reply with quote

One of the scripts in /etc/cron.{hourly,daily,weekly,monthly} has generated this message. The fact that you got the two mails with roughly one hour time difference makes /etc/cron.hourly suspicious. I would start to inspect the scripts in this directory.

On the other hand, it seems that it was a temporary problem, otherwise you would still get mails. Probably not worth the trouble.
Back to top
View user's profile Send private message
Xenzeo
n00b
n00b


Joined: 27 Feb 2004
Posts: 49

PostPosted: Fri Aug 27, 2004 1:59 pm    Post subject: Reply with quote

I did inspect that directory and other crontab related files, but i can't find anything...

I would like too know how i can monitor thise events, i'm thinking of logging all outgoing connections at night and alnalyze them, but that will only give me a hint on what it's trying too do not whats trying to do it, any other way?
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum