View previous topic :: View next topic |
Author |
Message |
Xenzeo n00b
Joined: 27 Feb 2004 Posts: 49
|
Posted: Fri Aug 27, 2004 8:33 am Post subject: weird connection refused message from cron... |
|
|
Hey, I have an server runnning 24/7, hosted elsewhere, anyway tonight i'v got 2 mails from cron....
First at 00:00
Quote: |
Return-Path: <root@blah>
X-Original-To: root
Delivered-To: blah@blah
Received: by mail.blah (Postfix, from userid 0)
id 63DD714743D; Fri, 27 Aug 2004 00:00:13 +0200 (CEST)
From: root@blah (Cron Daemon)
To: root@blah
Subject: Cron <root@echo> test -x /usr/sbin/run-crons && /usr/sbin/run-crons
X-Cron-Env: <SHELL=/bin/bash>
X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <MAILTO=root>
X-Cron-Env: <HOME=/>
X-Cron-Env: <LOGNAME=root>
Message-Id: <20040826220013.63DD714743D@mail.blah>
Date: Fri, 27 Aug 2004 00:00:13 +0200 (CEST)
connect: Connection refused
|
Secund at 01:03
Quote: |
Return-Path: <root@blah>
X-Original-To: root
Delivered-To: blah@blah
Received: by mail.blah (Postfix, from userid 0)
id 8AE8414743D; Fri, 27 Aug 2004 01:03:22 +0200 (CEST)
From: root@blah (Cron Daemon)
To: root@blah
Subject: Cron <root@echo> test -x /usr/sbin/run-crons && /usr/sbin/run-crons
X-Cron-Env: <SHELL=/bin/bash>
X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <MAILTO=root>
X-Cron-Env: <HOME=/>
X-Cron-Env: <LOGNAME=root>
Message-Id: <20040826230322.8AE8414743D@mail.blah>
Date: Fri, 27 Aug 2004 01:03:22 +0200 (CEST)
connect: Connection timed out
|
Is there anyone that can give a pointer at how i could figure out what the server has been trying too do, cause i have no idea?
I have a number of cron scripts running at night, and the only ones that uses network is my webstats and iptables stats, and these only uses DNS...
Thats whats makes it really weird...
Any help would be appriciated |
|
Back to top |
|
|
hjnenc Veteran
Joined: 15 Aug 2004 Posts: 1599 Location: Vienna, Austria
|
Posted: Fri Aug 27, 2004 11:41 am Post subject: |
|
|
One of the scripts in /etc/cron.{hourly,daily,weekly,monthly} has generated this message. The fact that you got the two mails with roughly one hour time difference makes /etc/cron.hourly suspicious. I would start to inspect the scripts in this directory.
On the other hand, it seems that it was a temporary problem, otherwise you would still get mails. Probably not worth the trouble. |
|
Back to top |
|
|
Xenzeo n00b
Joined: 27 Feb 2004 Posts: 49
|
Posted: Fri Aug 27, 2004 1:59 pm Post subject: |
|
|
I did inspect that directory and other crontab related files, but i can't find anything...
I would like too know how i can monitor thise events, i'm thinking of logging all outgoing connections at night and alnalyze them, but that will only give me a hint on what it's trying too do not whats trying to do it, any other way? |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|