LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 11-03-2016, 02:00 PM   #1
GeeIraffe
LQ Newbie
 
Registered: Nov 2016
Posts: 7

Rep: Reputation: Disabled
Meaning of strange router entries


I am concerned by the following cron.info entries on my router log
which occur every 5 minutes with computers on,off, day or night.
Hardware:
Motorola SB 6141, Belkin AC1200 (neither purchased from Comcast).
Computers use Linux Mint 17.3 OS.
Do you have any ideas and should I be concerned?
Cron.info examples:

Nov 3 01:30:01 router cron.info crond[2310]: crond: USER root pid 24846 cmd killall -SIGUSR2 nlinkd
Nov 3 01:30:01 router cron.info crond[2310]: crond: USER root pid 24848 cmd /usr/scripts/mem_sync
Nov 3 01:35:01 router cron.info crond[2310]: crond: USER root pid 24900 cmd /usr/scripts/mem_sync
Nov 3 01:40:01 router cron.info crond[2310]: crond: USER root pid 24950 cmd /usr/scripts/mem_sync
Nov 3 01:45:01 router cron.info crond[2310]: crond: USER root pid 24998 cmd /usr/scripts/mem_sync
Nov 3 01:50:01 router cron.info crond[2310]: crond: USER root pid 25048 cmd /usr/scripts/mem_sync
Nov 3 01:55:01 router cron.info crond[2310]: crond: USER root pid 25098 cmd /usr/scripts/mem_sync
Nov 3 02:00:01 router cron.info crond[2310]: crond: USER root pid 25146 cmd killall -SIGUSR2 nlinkd
Nov 3 02:00:01 router cron.info crond[2310]: crond: USER root pid 25148 cmd /usr/scripts/mem_sync
Nov 3 02:05:01 router cron.info crond[2310]: crond: USER root pid 25198 cmd /usr/scripts/mem_sync
Nov 3 02:10:01 router cron.info crond[2310]: crond: USER root pid 25250 cmd /usr/scripts/mem_sync
Nov 3 02:15:02 router cron.info crond[2310]: crond: USER root pid 25300 cmd /usr/scripts/mem_sync
Nov 3 02:20:01 router cron.info crond[2310]: crond: USER root pid 25352 cmd /usr/scripts/mem_sync
Nov 3 02:25:01 router cron.info crond[2310]: crond: USER root pid 25402 cmd /usr/scripts/mem_sync
Nov 3 02:30:01 router cron.info crond[2310]: crond: USER root pid 25452 cmd killall -SIGUSR2 nlinkd
 
Old 11-04-2016, 03:11 PM   #2
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,849

Rep: Reputation: 161Reputation: 161
What's output of "crontab -l"? It list user's crontab.
 
Old 11-04-2016, 08:04 PM   #3
GeeIraffe
LQ Newbie
 
Registered: Nov 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Cron in router log

There is nothing listed in crontab -l, either as user (me) or as the root
The cron entries continue, even when all the computers are disconnected from the router and its only connection is to the Motorola modem with the connection to Comcast. So I do not think it comes from our computers.
 
Old 11-04-2016, 08:15 PM   #4
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,300
Blog Entries: 28

Rep: Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134Reputation: 6134
It's a shot in the dark, but is there a /usr/scripts/mem_sync on your system(s)?
 
Old 11-04-2016, 08:18 PM   #5
Emerson
LQ Sage
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~amd64
Posts: 7,661

Rep: Reputation: Disabled
There is system crontab /etc/crontab.
 
Old 11-04-2016, 09:31 PM   #6
GeeIraffe
LQ Newbie
 
Registered: Nov 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Thank you for your ideas. These are the latest results from my working with these ideas:
I do not have /usr/scripts/mem_sync on any of my systems. In fact I do not even have /usr/scripts
Also I do not have /etc/crontab but do have /etc/cron.d, cron.daily, cron.hourly, cron.monthly, and cron.weekly. Just to be sure it does not come from one of the files in these folders, I looked in each of the files contained in these folders. There was no reference to "/usr/scripts/mem_sync". Also the cron router entries occur even when there are no connections to the router except the comcast modem.
 
Old 11-04-2016, 09:37 PM   #7
Emerson
LQ Sage
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~amd64
Posts: 7,661

Rep: Reputation: Disabled
Sounds real suspicious to me, can you reload the OS? OpenWrt perhaps?
 
Old 11-04-2016, 10:02 PM   #8
GeeIraffe
LQ Newbie
 
Registered: Nov 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Emerson, I thought of reloading but before reloading I would like to be sure that would correct the issue because of all the work to reload 6 computers.
I have set the router back to factory defaults and reconfigured the LAN and wireless networks, yet the entries continue to appear in the log. Seems hard to think this is coming from a computer when the entries continue even though all computers are disconnected from the router?
 
Old 11-04-2016, 10:17 PM   #9
Emerson
LQ Sage
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~amd64
Posts: 7,661

Rep: Reputation: Disabled
If your router is compromised factory defaults won't fix it.
 
Old 11-11-2016, 04:03 PM   #10
GeeIraffe
LQ Newbie
 
Registered: Nov 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Cron in router log

well no answers and it still occurring. Does not slow my network down at all and no strange attachment to my router. Still I do not know why the entries. I am thinking of just dumping the router
 
Old 11-19-2016, 02:44 PM   #11
GeeIraffe
LQ Newbie
 
Registered: Nov 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
new info on meaning of strange router entries

Thank you, everyone.
After much testing etc. I determined that the cron entries disappear when the comcast cable is detached from the modem (the modem and router are still on). In all the differnet configurations that I tried, this is the only time the cron entries did not occur. So it seems the cron entries must be coming from comcast. I guess I'll talk to them, if I can reach anyone there.
Any other thoughts?
 
Old 11-19-2016, 02:59 PM   #12
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
It's the cronjobs running on your router, not on your client systems.
 
Old 11-19-2016, 08:12 PM   #13
GeeIraffe
LQ Newbie
 
Registered: Nov 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
thank you descendant_command,
How can I stop this running or should I bother trying to stop it? It started for the first time on Oct 29. It does not seem to slow our internet but it fills the log files. It seems I cannot access the jobs on my router.
 
Old 11-20-2016, 03:24 AM   #14
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Quote:
Originally Posted by GeeIraffe View Post
How can I stop this running
By deleting/disabling the cronjobs.
Quote:
or should I bother trying to stop it?
No idea.
Quote:
It started for the first time on Oct 29.
That would concern me.
You didn't make any changes to the router or logging level?
Quote:
It does not seem to slow our internet but it fills the log files. It seems I cannot access the jobs on my router.
You would likely need to log in via ssh or telnet to access a shell on the router.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Meaning of entries in /proc/pid/cpu sun_sun Programming 12 11-24-2007 11:11 PM
Meaning of entries in /proc/pid/cpu sun_sun Linux - General 1 11-22-2007 03:09 PM
Strange log entries crashsystems Linux - Hardware 4 07-27-2006 03:43 PM
strange tripwire entries schentor Linux - Security 6 11-16-2005 01:37 PM
Strange log entries. forand Linux - Security 7 03-25-2003 03:20 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 04:20 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration