| 1 |
On Wednesday 05 May 2010 00:17:09 Mick wrote: |
| 2 |
> Hi All, |
| 3 |
> |
| 4 |
> I am getting a bit confused from the messages that I receive in my gmail |
| 5 |
> account sent from my crontab. |
| 6 |
> |
| 7 |
> First, is related to the title which is: |
| 8 |
> |
| 9 |
> Cron <root@mylaptop> test -x /usr/sbin/run-crons && /usr/sbin/run-crons |
| 10 |
> |
| 11 |
> I am not sure what this "test -x" part represents? |
| 12 |
> |
| 13 |
> |
| 14 |
> The second question is related to the output of chkrootkit, which is run by |
| 15 |
> the cron.weekly and emails stuff that don't make much sense to me: |
| 16 |
> ========================================== |
| 17 |
> $Ld$ Ll$(Lt$0HÄ8ÃAWAVAUIýATUSHH°èHAÇHÝHL$ØMäITMt$(HÒtdfDIt$ |
| 18 |
> Hötm½(Ht8fLïèHþÿÿITHÃHÆLïèHßèHîHÅ(It$ |
| 19 |
> HuÊIMôIÆ(HÒu¢DÿèH1À[]A\A]A^A_ÃLæLïèþÿÿëÊLïH5H421ÒèoþÿÿDÿèëÃDS1öH°H;èHß[éCop |
| 20 |
> yright (C) the VideoLAN VLC media player developersLicensed under the terms |
| 21 |
> of the GNU General Public License, version 2 or later.Freebox TV listing |
| 22 |
> (French ISP free.fr services)http/shout- |
| 23 |
> winamp://www.shoutcast.com/sbin/newxml.phtmlhttp/shout- |
| 24 |
> winamp://www.shoutcast.com/sbin/newtvlister.phtml?alltv=1http://mafreebox.f |
| 25 |
> reebox.fr/freeboxtv/playlist.m3uhttp://www.canalplus.fr/index.php?pid=1784s |
| 26 |
> houtshoutcast- limitShoutcastShoutcast radio |
| 27 |
> listingsservices_discoveryshoutcastShoutcastTVShoutcast TV |
| 28 |
> listingsshoutcasttvfrenchtvFrench TVFreeboxfreeboxStarting FreeboxStarting |
| 29 |
> FrenchTVStarting ShoutTVStarting ShoutRadiono-playlist- |
| 30 |
> autostartItemAddedShoutcast RadioShoutcast TVFreebox TVvlc://nopCanal +Les |
| 31 |
> Guignolshttp-forward-cookieszRL«ACF0lsJG ,A¤,A¼,AÔ)AìOG0$OL@4DûBBB |
| 32 |
> E(A0A8D@| GCC: (Gentoo 4.3.4 p1.0, pie-10.1.5) |
| 33 |
> 4.3.4.symtab.strtab.shstrtab.rela.text.data.bss.rodata.str1.8.rodata.str1.1 |
| 34 |
> .rela.data.rel.ro.local.rela.eh_frame.comment.note.GNU- stack @&12@2s |
| 35 |
> ========================================== |
| 36 |
> |
| 37 |
> Now I happened to notice that the above legible references to vlc are from |
| 38 |
> the "services discovery" list that the vlc player shows under |
| 39 |
> Media/Services. Not sure what they are doing in chckrootkit ... is it |
| 40 |
> telling me that it just scanned all such content? When I run it manually |
| 41 |
> it looks just the same and follows a long output following "Searching for |
| 42 |
> suspect PHP files..." I am not sure I understand why chkrootkit is |
| 43 |
> emailing these to me and if I need to do something about it. |
| 44 |
|
| 45 |
cron captures the output from any program it runs. If there is any output at |
| 46 |
all, it will mail it to you. In this case, something launched by run-crons is |
| 47 |
spewing something to STDOUT and you are getting it in your inbox. |
| 48 |
|
| 49 |
As to what it means, well it looks like garbage. So you will have to run the |
| 50 |
chkrootkit program yourself and debug how it is going wrong and fix it. This, |
| 51 |
of course, has nothing whatsoever to do with cron itself. |
| 52 |
|
| 53 |
The output looks like standard banner garbage that apps often write to the |
| 54 |
terminal when launched. I suspect an omitted "> /dev/null" somewhere |
| 55 |
|
| 56 |
|
| 57 |
-- |
| 58 |
alan dot mckinnon at gmail dot com |
Archives