cupsd and httpd restarting every Sunday at 4:02

kmasaryk · 06-05-2008, 02:24 PM

I see cupsd and httpd restarting every Sunday at 04:02 on all of my RHEL4 servers. I've looked at all the /etc/cron.* directories including the /etc/crontab and can't see what's causing the restarts. I've also looked in /var/spool/cron/ and see no files. Anyone have an idea of where else to look?

Code:

[root]# cat crontab
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

# run-parts
01 * * * * root run-parts /etc/cron.hourly
02 4 * * * root run-parts /etc/cron.daily
22 4 * * 0 root run-parts /etc/cron.weekly
42 4 1 * * root run-parts /etc/cron.monthly



[root]# ls /etc/cron.*
/etc/cron.deny

/etc/cron.d:

/etc/cron.daily:
00-logwatch         0anacron   prelink  slocate.cron
00-makewhatis.cron  logrotate  rpm      tmpwatch

/etc/cron.hourly:

/etc/cron.monthly:
0anacron

/etc/cron.weekly:
00-makewhatis.cron  0anacron

cmnorton · 06-05-2008, 04:14 PM

Start with the log files, /var/log/messages and /var/log/syslog.

You said you looked through all the cron directories, so you should have caught anyone's crontab in /var/spool/cron/crontabs.

You may have to write a small shell script daemon to go look for httpd restarting. Those are the only things that come to mind.