[NBLUG/talk] Servers rebooting every hour

Bob Blick bbblick at sbcglobal.net
Tue Feb 5 22:43:57 PST 2008


Troy Arnold wrote:

> Still, I'd put my beer on a script or a process that isn't behaving as
> intended.  

Chances are good that's the type of problem it is.

> So, before you pull your hair out looking for that amazingly stealthy
> rootkit, checkout the files in /var/spool/crontabs and/or shutdown
> crond/atd... and hell, maybe even recursively grep the filesystem for
> 'reboot'

Killing cron doesn't stop it. Besides, the 60:35 repeat sounds like 60
minutes plus boot time.

-Bob




More information about the talk mailing list