- 论坛徽章:
- 0
|
原帖由 eric-guo 于 2007-4-3 11:50 发表于 1楼
下面是messages文件所显示的内容:
Start up of circular syslogging
Version $Revision: 1.4 $ - Compiled on: Oct 26 2006
Max log size: 10000000
***** Log Wrap Point *****
Apr 1 ...
==================
我目前看不出什么异常,下面这个是ubuntu的crontab:
root@zhao-desktop:/etc/cron.daily# cat /etc/crontab
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file.
# This file also has a username field, that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily
47 6 * * 7 root test -x /usr/sbin/anacron || run-parts --report /etc/cron.weekly
52 6 1 * * root test -x /usr/sbin/anacron || run-parts --report /etc/cron.monthly
#
每小时的17分时动作/etc/cron.hourly目录,每天6点25分动作cron.daily等等……等等
Apr 2 06:25:02 localhost su[23134]: + ??? root:nobody
Apr 2 06:25:02 localhost su[23134]: (pam_unix) session opened for user nobody by (uid=0)
这个应该是crond用nobody的权限替换root执行任务。
至于
Apr 1 08:27:03 localhost -- MARK --
Apr 1 08:47:03 localhost -- MARK --
Apr 1 09:07:03 localhost -- MARK --
每隔20分动作一次,应该是sysklogd程序加了一个-m的参数,
-m interval
The syslogd logs a mark timestamp regularly. The default inter‐\r
val between two -- MARK -- lines is 20 minutes. This can be
changed with this option. Setting the interval to zero turns it
off entirely. |
|