I can't find where this job is running from! I uninstalled cacti
and deleted all directories and such associated with it, but there continues to be a rogue cronjob that I can't find and it's filling the var directory with logs.
I tried listing all cronjobs on the system with this:
Code:
for USER in `cut -d ":" -f1 </etc/passwd`; do crontab -u ${USER} -l 1>/dev/null 2>&1; if [ ! ${?} -ne 0 ]; then echo -en "--- crontab for ${USER} ---\n$(crontab -u ${USER} -l)\n"; fi; done
It reports all the jobs I found manually. Here's a log sample from mail
that points to a rogue cacti cronjob:
Code:
From www-data@manny.fakedomain.org Wed Mar 24 15:35:01 2010
Date: Wed, 24 Mar 2010 15:35:01 -0700
From: root@manny.fakedomain.org (Cron Daemon)
To: root@manny.fakedomain.org
Subject: Cron <www-data@fakedomain> php /usr/share/cacti/site/poller.php >/dev/null 2>/var/log/cacti/poller-error.log
Content-Type: text/plain; charset=UTF-8
X-Cron-Env: <MAILTO=root>
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/var/www>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=www-data>
/bin/sh: /var/log/cacti/poller-error.log: No such file or directory
I looked at www-data's crontab entries and they are lacking in substance
to the point of not existing.
Any ideas?
Thanks for reading!
Bub
