From: Allen Kistler on
Geir wrote:
> September Storm wrote:
>
>> They should be in /var/spool/cron/<usernamehere> You can grep that
>> directory's files.
>
> /var/spool/cron/crontab/root contains a line:
>
> */5 * * * * myscript
>
> which seems to me to only be run every 5 minutes. Isn't it so? There
> is no other file under /var/spool/cron
>
> However syslog and messages show a certain htmlgend which is run every
> minute. However I don't have a clue from which script this is run (I
> want to stop it :-)
>
> So what do I do?

Does your syslog explicitly say that it's cron that runs htmlgend?
If it doesn't say it's cron, then it's something other than cron.

A simple web search shows that htmlgend is part of the wview package.
You could find that package and remove the whole thing. It's got some
docs of its own, too.
From: André Gillibert on
Geir <geir02(a)gmail.com> wrote:
> The Natural Philosopher wrote:
> >
> > It may not be cron at all.
> >
> > See what daemons are lurking that you do not recognise..
> >
> > If you can catch it, netstat will reveal what process is binding to a
> > socket.
>
> See above post. It seems to be a certain htmlgend. I have found the
> file, but how do I find out its settings and eventually stop it?
>

htmlgend looks like a daemon name. In that case, it's permanently running

$ pidof htmlgend

Should output its PID.

Or:
$ ps -A|grep htmlgen

Daemons are usually launched from a System-V-like services initialization system.
Search for a htmlgen or htmlgend script in /etc/init.d/.
$ ls /etc/init.d/htmlgen*
If it's there, then, you can cleanly stop the daemon with:
$ /etc/init.d/htmlgen stop # assuming the service script is named htmlgen

But, the next time the computer reboots, htmlgen would be run again.
That's why you've to disable this service.
Assuming you've a Debian system you should use update-rc.d to do that.
<http://wiki.linuxquestions.org/wiki/Update-rc.d>
(On red hat systems, it's chkconfig)

A short description of Sys-V style init may help you:
<http://docs.kde.org/stable/en/kdeadmin/ksysv/what-is-sysv-init.html>

PS: There may be crontabs in /etc/cron.d, /etc/cron.{hourly,daily,weekly,monthly}
--
André Gillibert
From: Bit Twister on
On Mon, 21 Sep 2009 10:03:09 +0200, Geir wrote:
>
> However syslog and messages show a certain htmlgend which is run every
> minute. However I don't have a clue from which script this is run (I
> want to stop it :-)

I do not do Debian, but you might see if there is something in
/etc/cron.d/
From: Jeremy Nicoll - news posts on
Geir <geir02(a)gmail.com> wrote:

> However we are unable to find the annoying script. /etc/crontab does
> not contain any user-added stuff.

I can't answer that, but would like to ask a question of my own that is
maybe related.

Is there not (or can there not be) some central syslog on a linux system
that shows every system command that's being issued, along with things like
its process id and the process id of the issuer if that's different?

I'm thinking in terms of - say - an MVS or S/390's system log?


--
Jeremy C B Nicoll - my opinions are my own.

Email sent to my from-address will be deleted. Instead, please reply
to newsreplynnn(a)wingsandbeaks.org.uk replacing "nnn" by "284".
From: Lew Pitcher on
On September 21, 2009 10:51, in comp.os.linux.misc, Jeremy Nicoll - news
posts (jn.nntp.scrap004(a)wingsandbeaks.org.uk) wrote:

> Geir <geir02(a)gmail.com> wrote:
>
>> However we are unable to find the annoying script. /etc/crontab does
>> not contain any user-added stuff.
>
> I can't answer that, but would like to ask a question of my own that is
> maybe related.
>
> Is there not (or can there not be) some central syslog on a linux system
> that shows every system command that's being issued, along with things
> like its process id and the process id of the issuer if that's different?
>
> I'm thinking in terms of - say - an MVS or S/390's system log?

There are different logs for different purposes.

There is a general purpose system logging facility (syslogd(8)) that is very
sysadmin-configurable. Each Linux distribution configures it a bit
differently, directing logs for different subsystems and priorities to
different files. You will usually find a /var/log/syslog, which seems to be
the general catch-all log file.

However, syslogd(8) logs are not process-accounting logs. syslog only
records the textual data that process voluntarily log. It does not capture
start and stop information, and does not capture processes that do not log.

In a Linux system, the sysadmin /can/ activate "Process accounting" (see
accton(8) and sa(8) for information), which records the start and
termination of every process in the system. Note that most
distributions /do not/ activate this by default. Process accounting takes a
lot of data space, and records continuously. Thus, if process
accounting /is/ enabled, frequent regular purging of accounting data is
necessary.

There is no centralized generalized system log like MVS' syslog.

--
Lew Pitcher

Master Codewright & JOAT-in-training | Registered Linux User #112576
http://pitcher.digitalfreehold.ca/ | GPG public key available by request
---------- Slackware - Because I know what I'm doing. ------