Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #234771
| From | Stefan Monnier <monnier@iro.umontreal.ca> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Ghost cronjob |
| Date | 2021-05-03 20:40 +0200 |
| Message-ID | <CaLE5-Db-3@gated-at.bofh.it> (permalink) |
| References | <CaASm-2Q4-5@gated-at.bofh.it> <CaJVD-80Z-3@gated-at.bofh.it> <CaLkK-x5-9@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Mart van de Wege [2021-05-03 20:11:25] wrote:
> Stefan Monnier <monnier@iro.umontreal.ca> writes:
>>> root@galahad:~# grep btrbk /etc/ -rl
>>
>> Have you `grep`d in `/var/` as well?
>> [ E.g. `/var/spool/crontabs` ]
>>
> Yep, nothing there, aside from the usual suspects (apt & dpkg files).
>
>>> And yet I find this in /var/log/btrbk.log:
>>>
>>> 2017-03-12T20:16:28+0100 startup v0.24.0 - - - - # btrbk command line client, version 0.24.0
>>
>> Any other mention of activity around that time in some other log file?
>>
>>
> Not that I can see. I am going to see what patching btrbk to log PPID
> shows up tonight.
My usual "trick" is to log a full `ps --forest -ef`.
[ Instead of patching, you can rename it and replace it with a script
that runs the "real" btrbk. ]
Stefan
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 09:10 +0200
Re: Ghost cronjob <tomas@tuxteam.de> - 2021-05-03 09:20 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 10:00 +0200
Re: Ghost cronjob <tomas@tuxteam.de> - 2021-05-03 11:30 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 12:10 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 09:20 +0200
Re: Ghost cronjob David Wright <deblis@lionunicorn.co.uk> - 2021-05-03 16:50 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 18:40 +0200
Re: Ghost cronjob Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-03 18:50 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 20:20 +0200
Re: Ghost cronjob Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-03 20:40 +0200
Re: Ghost cronjob <tomas@tuxteam.de> - 2021-05-03 21:40 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 22:00 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-04 08:50 +0200
Re: Ghost cronjob Sven Hartge <sven@svenhartge.de> - 2021-05-04 15:50 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-04 17:10 +0200
Re: Ghost cronjob David Wright <deblis@lionunicorn.co.uk> - 2021-05-04 18:10 +0200
Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-04 20:00 +0200
Re: Ghost cronjob Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-04 21:30 +0200
Re: Ghost cronjob David Wright <deblis@lionunicorn.co.uk> - 2021-05-05 04:50 +0200
Re: Ghost cronjob l0f4r0@tuta.io - 2021-05-08 10:20 +0200
Re: Ghost cronjob Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-08 12:00 +0200
csiph-web