Re: [vox-tech] cron - not at a different time (fwd)
on Wed, Mar 03, 2004 at 03:56:05PM -0800, Jeff Newmiller ([EMAIL PROTECTED]) wrote: > I accidentally sent this only to Peter... here it is for the record: > > On Wed, 3 Mar 2004, Peter Jay Salzman wrote: > > > On Wed 03 Mar 04, 12:04 PM, Jeff Newmiller <[EMAIL PROTECTED]> said: > > [...] > > > > If cron and anacron are both installed in Debian, /etc/crontab is > > > configured to skip daily/weekly/monthly processing, because > > > /etc/anacrontab specifies those as well, and if your machine is regularly > > > shut down, then anacron is better suited to handle it. What burns me is > > > that one _or_ the other should be installed... someone must have decided > > > that cron was good for some things and anacron good for others and wanted > > > both installed... leaving you erroneously thinking you were having some > > > effect by editing the daily entry in /etc/crontab. > > > > > > In their defense, though, the solution _is_ right there in the line you > > > edited... > > > > i'm still don't understand -- how does anacron know when, that is the > > *time* (not the date) to run? > > This puzzled me too.. thanks to Steve Wormley for pointing me to the > solution: > > Vixie cron processes three sets of crontabs... /etc/crontab, individual > crontabs (/var/spool/cron/username), and any crontabs found in > /etc/cron.d/. anacron is invoked periodically by a line in > /etc/cron.d/anacron, and uses the period specs in /etc/anacrontab and > last-executed timestamps in /var/spool/anacron/* to determine whether > enough time has passed that it should invoke the daily/weekly/monthly > processing. less /usr/share/doc/cron/README.anacron Peace. -- Karsten M. Self <[EMAIL PROTECTED]>http://kmself.home.netcom.com/ What Part of "Gestalt" don't you understand? Geek for hire: http://kmself.home.netcom.com/resume.html signature.asc Description: Digital signature
Re: [vox-tech] cron - not at a different time
Go read my other post. It's in the vox list archives. It came from the list. On Wed, Mar 03, 2004 at 01:42:12PM -0800, Mark K. Kim wrote: > It's not from the list. > > I'm pretty sure it's someone on our list who got infected, though. I, > too, received such trogen from [EMAIL PROTECTED] This trogen seems > to be shuffling various addresses together to come up with some clever > "From:" line that looks legit. > > If any of you use Windows, has a bunch of LUGOD people's addresses in your > addressbook, and have someone from livepenguin.com in your addressbook, > you're the culprit. Get a email trogen filter. > > BTW, just 'cuz it's on the mailing archive doesn't necessarily mean it was > sent through the mailing list. It just means the mailing archive received > the e-mail, and whatever method used to determine its legitness got > passed. > > -Mark > > > On Wed, 3 Mar 2004, Peter Jay Salzman wrote: > > > On Wed 03 Mar 04, 10:07 AM, Ken Bloom <[EMAIL PROTECTED]> said: > > > > > > >ps- is there a new virus? all of a sudden, starting from last night > > > >i've gotten a huge ton of emails that say things like: > > > > > > > > Arggghh, I hate plaintext! > > > > > > > > Here is your excel file. > > > > > > > > I don't bite, weah! > > > > > > > > Your file is attached. > > > > > > > >i normally don't see viruses because i filter based on executable > > > >strings in every win32 executable. but these viruses seem to be > > > >carrying .zip and .pif payloads which are getting past my filter. > > > > > > > >also, i just got a bounced email, with MY email address on it. it said: > > > > > > > > I know about you! > > > > > > > >and it was addressed to [EMAIL PROTECTED], a US senator's > > > >office. holy cow. i sure hope the secret service doesn't come after > > > >me! ;-) > > > > > > > >pete > > > > > > > > > > ClamAV is filtering that virus out for me. I installed ClamAV yesterday > > > morning to handle that problem - apparently the school's virus checker > > > hasn't updated to recognize that virus yet. I also got one from vox (which > > > I trust so I don't usually subject it to spam and virus filtering). Perhaps > > > we need a virus scanner on the lists even for subscribed members. > > > > ken, > > > > from vox? or do you mean forged to look like it came from vox? i don't > > recall seeing one from the list... > > > > i know how to filter based on attachment content (since the content is > > just part of the body). i need to google for how you filter based on > > attachment name. i don't recall there being any headers declaring the > > name of attachments... > > > > pete > > > > > > -- > > Make everything as simple as possible, but no simpler. -- Albert Einstein > > GPG Instructions: http://www.dirac.org/linux/gpg > > GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D > > ___ > > vox-tech mailing list > > [EMAIL PROTECTED] > > http://lists.lugod.org/mailman/listinfo/vox-tech > > > > -- > Mark K. Kim > AIM: markus kimius > Homepage: http://www.cbreak.org/ > Xanga: http://www.xanga.com/vindaci > Friendster: http://www.friendster.com/user.jsp?id=13046 > PGP key fingerprint: 7324 BACA 53AD E504 A76E 5167 6822 94F0 F298 5DCE > PGP key available on the homepage > ___ > vox-tech mailing list > [EMAIL PROTECTED] -- I usually have a GPG digital signature included as an attachment. See http://www.gnupg.org/ for info about these digital signatures. My key was last signed 10/14/2003. If you use GPG *please* see me about signing the key. * My computer can't give you viruses by email. *** signature.asc Description: Digital signature
Re: [vox-tech] cron - not at a different time (fwd)
I accidentally sent this only to Peter... here it is for the record: On Wed, 3 Mar 2004, Peter Jay Salzman wrote: > On Wed 03 Mar 04, 12:04 PM, Jeff Newmiller <[EMAIL PROTECTED]> said: [...] > > If cron and anacron are both installed in Debian, /etc/crontab is > > configured to skip daily/weekly/monthly processing, because > > /etc/anacrontab specifies those as well, and if your machine is regularly > > shut down, then anacron is better suited to handle it. What burns me is > > that one _or_ the other should be installed... someone must have decided > > that cron was good for some things and anacron good for others and wanted > > both installed... leaving you erroneously thinking you were having some > > effect by editing the daily entry in /etc/crontab. > > > > In their defense, though, the solution _is_ right there in the line you > > edited... > > i'm still don't understand -- how does anacron know when, that is the > *time* (not the date) to run? This puzzled me too.. thanks to Steve Wormley for pointing me to the solution: Vixie cron processes three sets of crontabs... /etc/crontab, individual crontabs (/var/spool/cron/username), and any crontabs found in /etc/cron.d/. anacron is invoked periodically by a line in /etc/cron.d/anacron, and uses the period specs in /etc/anacrontab and last-executed timestamps in /var/spool/anacron/* to determine whether enough time has passed that it should invoke the daily/weekly/monthly processing. > i see references to the last date job X ran in /etc/anacrontab. You do? Those should be in /var/spool/anacron/* ... for example: --- /var/spool/anacron/cron.daily/ --- 20040303 -- and /etc/anacrontab should have time interval specifications: --- /etc/anacrontab --- # /etc/anacrontab: configuration file for anacron # See anacron(8) and anacrontab(5) for details. SHELL=/bin/sh PATH=/sbin:/bin:/usr/sbin:/usr/bin # These replace cron's entries 1 5 cron.daily nice run-parts --report /etc/cron.daily 7 10 cron.weekly nice run-parts --report /etc/cron.weekly 30 15 cron.monthly nice run-parts --report /etc/cron.monthly --- as documented in man anacrontab. > i understand that anacron prolly looks at these dates when it first > runs. Every time it runs. > i don't see any mention of anacron in /etc/crontab. how does it run > after bootup? um, /etc/init.d/anacron? I realize now that anacron cannot run separately from cron... but this is still an absurdly complicated system just to get things to run periodically. Also, why retain /etc/crontab at all if /etc/cron.d is going to be used? --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
It's not from the list. I'm pretty sure it's someone on our list who got infected, though. I, too, received such trogen from [EMAIL PROTECTED] This trogen seems to be shuffling various addresses together to come up with some clever "From:" line that looks legit. If any of you use Windows, has a bunch of LUGOD people's addresses in your addressbook, and have someone from livepenguin.com in your addressbook, you're the culprit. Get a email trogen filter. BTW, just 'cuz it's on the mailing archive doesn't necessarily mean it was sent through the mailing list. It just means the mailing archive received the e-mail, and whatever method used to determine its legitness got passed. -Mark On Wed, 3 Mar 2004, Peter Jay Salzman wrote: > On Wed 03 Mar 04, 10:07 AM, Ken Bloom <[EMAIL PROTECTED]> said: > > > > >ps- is there a new virus? all of a sudden, starting from last night > > >i've gotten a huge ton of emails that say things like: > > > > > > Arggghh, I hate plaintext! > > > > > > Here is your excel file. > > > > > > I don't bite, weah! > > > > > > Your file is attached. > > > > > >i normally don't see viruses because i filter based on executable > > >strings in every win32 executable. but these viruses seem to be > > >carrying .zip and .pif payloads which are getting past my filter. > > > > > >also, i just got a bounced email, with MY email address on it. it said: > > > > > > I know about you! > > > > > >and it was addressed to [EMAIL PROTECTED], a US senator's > > >office. holy cow. i sure hope the secret service doesn't come after > > >me! ;-) > > > > > >pete > > > > > > > ClamAV is filtering that virus out for me. I installed ClamAV yesterday > > morning to handle that problem - apparently the school's virus checker > > hasn't updated to recognize that virus yet. I also got one from vox (which > > I trust so I don't usually subject it to spam and virus filtering). Perhaps > > we need a virus scanner on the lists even for subscribed members. > > ken, > > from vox? or do you mean forged to look like it came from vox? i don't > recall seeing one from the list... > > i know how to filter based on attachment content (since the content is > just part of the body). i need to google for how you filter based on > attachment name. i don't recall there being any headers declaring the > name of attachments... > > pete > > > -- > Make everything as simple as possible, but no simpler. -- Albert Einstein > GPG Instructions: http://www.dirac.org/linux/gpg > GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D > ___ > vox-tech mailing list > [EMAIL PROTECTED] > http://lists.lugod.org/mailman/listinfo/vox-tech > -- Mark K. Kim AIM: markus kimius Homepage: http://www.cbreak.org/ Xanga: http://www.xanga.com/vindaci Friendster: http://www.friendster.com/user.jsp?id=13046 PGP key fingerprint: 7324 BACA 53AD E504 A76E 5167 6822 94F0 F298 5DCE PGP key available on the homepage ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed, 3 Mar 2004, Peter Jay Salzman wrote: > On Wed 03 Mar 04, 11:28 AM, Jeff Newmiller <[EMAIL PROTECTED]> said: > > On Wed, 3 Mar 2004, Ken Herron wrote: > > > > > --On Wednesday, March 03, 2004 10:11:10 -0800 Peter Jay Salzman > > > <[EMAIL PROTECTED]> wrote: > > > > > > >> > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > > > >> /etc/cron.daily > > > >> > > > >> That line will only launch "run-parts" if /usr/sbin/anacron doesn't > > > >> exist. Does /usr/sbin/anacron exist? > > > > > > > > ken, > > > > > > > > yeah, it does exist. daily definitely runs. it just runs at a time i > > > > wasn't expecting. > > > > > > My point was that if /usr/sbin/anacron exists, then the crontab line > > > above will not run cron.daily. You say that /usr/sbin/anacron exists, so > > > cron.daily is not being launched as a result of the above crontab line. > > > That means something else is running it. Something like anacron, for > > > example. > > > > This list is great. This explains a longstanding puzzle (to me) of how > > (and to some extent why) both cron and anacron are installed on my debian > > box. > > > > Now that I see how it works, I am not too impressed with this kludge, > > though... this is a deceptively obtuse configuration duplication between > > these two packages. > > ok, maybe i'm slow, but i don't understand why that line will only > launch if /usr/sbin/anacron doesn't exist. > > /etc/init.d/cron gets run upon startup. the only test i see is: > >test -f /usr/sbin/cron || exit 0 > > it doesn't look look for /usr/sbin/anacron. what am i missing? That is not the test in question. Search for anacron in your original email. If cron and anacron are both installed in Debian, /etc/crontab is configured to skip daily/weekly/monthly processing, because /etc/anacrontab specifies those as well, and if your machine is regularly shut down, then anacron is better suited to handle it. What burns me is that one _or_ the other should be installed... someone must have decided that cron was good for some things and anacron good for others and wanted both installed... leaving you erroneously thinking you were having some effect by editing the daily entry in /etc/crontab. In their defense, though, the solution _is_ right there in the line you edited... --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed 03 Mar 04, 11:56 AM, Samuel N. Merritt <[EMAIL PROTECTED]> said: > On Wed, Mar 03, 2004 at 11:40:24AM -0800, Peter Jay Salzman wrote: > > On Wed 03 Mar 04, 11:28 AM, Jeff Newmiller <[EMAIL PROTECTED]> said: > > > On Wed, 3 Mar 2004, Ken Herron wrote: > > > > > > > --On Wednesday, March 03, 2004 10:11:10 -0800 Peter Jay Salzman > > > > <[EMAIL PROTECTED]> wrote: > > > > > > > > >> > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > > > > >> /etc/cron.daily > > > > >> > > > > >> That line will only launch "run-parts" if /usr/sbin/anacron doesn't > > > > >> exist. Does /usr/sbin/anacron exist? > > > > > > > > > > ken, > > > > > > > > > > yeah, it does exist. daily definitely runs. it just runs at a time i > > > > > wasn't expecting. > > > > > > > > My point was that if /usr/sbin/anacron exists, then the crontab line > > > > above will not run cron.daily. You say that /usr/sbin/anacron exists, so > > > > cron.daily is not being launched as a result of the above crontab line. > > > > That means something else is running it. Something like anacron, for > > > > example. > > > > > > This list is great. This explains a longstanding puzzle (to me) of how > > > (and to some extent why) both cron and anacron are installed on my debian > > > box. > > > > > > Now that I see how it works, I am not too impressed with this kludge, > > > though... this is a deceptively obtuse configuration duplication between > > > these two packages. > > > > ok, maybe i'm slow, but i don't understand why that line will only > > launch if /usr/sbin/anacron doesn't exist. > > The shell uses short-circuit evaluation on conditionals. When it sees > A || B > it first evaluates A. Then if A is true, the value of the whole > conditional has to be true, so B never even gets evaluated. > > So, if "test -e /usr/sbin/anacron" is true because anacron is installed, > then the shell doesn't bother with "run-parts --report /etc/cron.daily" > because it has already figured out the value of the conditional. > > On the other hand, if "test -e /usr/sbin/anacron" is false, then the > shell is looking at (false || "run-parts --report /etc/cron.daily"), > which evaluates to whatever the right-hand side evaluates to. aiiieee if i told you what going through my head, you wouldn't believe me. ok. ken, jeff, sam. sorry. i'll shut up now. pete -- Make everything as simple as possible, but no simpler. -- Albert Einstein GPG Instructions: http://www.dirac.org/linux/gpg GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed, Mar 03, 2004 at 11:40:24AM -0800, Peter Jay Salzman wrote: > On Wed 03 Mar 04, 11:28 AM, Jeff Newmiller <[EMAIL PROTECTED]> said: > > On Wed, 3 Mar 2004, Ken Herron wrote: > > > > > --On Wednesday, March 03, 2004 10:11:10 -0800 Peter Jay Salzman > > > <[EMAIL PROTECTED]> wrote: > > > > > > >> > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > > > >> /etc/cron.daily > > > >> > > > >> That line will only launch "run-parts" if /usr/sbin/anacron doesn't > > > >> exist. Does /usr/sbin/anacron exist? > > > > > > > > ken, > > > > > > > > yeah, it does exist. daily definitely runs. it just runs at a time i > > > > wasn't expecting. > > > > > > My point was that if /usr/sbin/anacron exists, then the crontab line > > > above will not run cron.daily. You say that /usr/sbin/anacron exists, so > > > cron.daily is not being launched as a result of the above crontab line. > > > That means something else is running it. Something like anacron, for > > > example. > > > > This list is great. This explains a longstanding puzzle (to me) of how > > (and to some extent why) both cron and anacron are installed on my debian > > box. > > > > Now that I see how it works, I am not too impressed with this kludge, > > though... this is a deceptively obtuse configuration duplication between > > these two packages. > > ok, maybe i'm slow, but i don't understand why that line will only > launch if /usr/sbin/anacron doesn't exist. The shell uses short-circuit evaluation on conditionals. When it sees A || B it first evaluates A. Then if A is true, the value of the whole conditional has to be true, so B never even gets evaluated. So, if "test -e /usr/sbin/anacron" is true because anacron is installed, then the shell doesn't bother with "run-parts --report /etc/cron.daily" because it has already figured out the value of the conditional. On the other hand, if "test -e /usr/sbin/anacron" is false, then the shell is looking at (false || "run-parts --report /etc/cron.daily"), which evaluates to whatever the right-hand side evaluates to. > /etc/init.d/cron gets run upon startup. the only test i see is: > >test -f /usr/sbin/cron || exit 0 > > it doesn't look look for /usr/sbin/anacron. what am i missing? > > pete > > -- > Make everything as simple as possible, but no simpler. -- Albert Einstein > GPG Instructions: http://www.dirac.org/linux/gpg > GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D -- Samuel Merritt OpenPGP key is at http://meat.andcheese.org/~spam/spam_at_andcheese_dot_org.asc Information about PGP can be found at http://www.mindspring.com/~aegreene/pgp/ pgp0.pgp Description: PGP signature
Re: [vox-tech] cron - not at a different time
On Wed 03 Mar 04, 11:28 AM, Jeff Newmiller <[EMAIL PROTECTED]> said: > On Wed, 3 Mar 2004, Ken Herron wrote: > > > --On Wednesday, March 03, 2004 10:11:10 -0800 Peter Jay Salzman > > <[EMAIL PROTECTED]> wrote: > > > > >> > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > > >> /etc/cron.daily > > >> > > >> That line will only launch "run-parts" if /usr/sbin/anacron doesn't > > >> exist. Does /usr/sbin/anacron exist? > > > > > > ken, > > > > > > yeah, it does exist. daily definitely runs. it just runs at a time i > > > wasn't expecting. > > > > My point was that if /usr/sbin/anacron exists, then the crontab line > > above will not run cron.daily. You say that /usr/sbin/anacron exists, so > > cron.daily is not being launched as a result of the above crontab line. > > That means something else is running it. Something like anacron, for > > example. > > This list is great. This explains a longstanding puzzle (to me) of how > (and to some extent why) both cron and anacron are installed on my debian > box. > > Now that I see how it works, I am not too impressed with this kludge, > though... this is a deceptively obtuse configuration duplication between > these two packages. ok, maybe i'm slow, but i don't understand why that line will only launch if /usr/sbin/anacron doesn't exist. /etc/init.d/cron gets run upon startup. the only test i see is: test -f /usr/sbin/cron || exit 0 it doesn't look look for /usr/sbin/anacron. what am i missing? pete -- Make everything as simple as possible, but no simpler. -- Albert Einstein GPG Instructions: http://www.dirac.org/linux/gpg GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed, 3 Mar 2004, Ken Herron wrote: > --On Wednesday, March 03, 2004 10:11:10 -0800 Peter Jay Salzman > <[EMAIL PROTECTED]> wrote: > > >> > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > >> /etc/cron.daily > >> > >> That line will only launch "run-parts" if /usr/sbin/anacron doesn't > >> exist. Does /usr/sbin/anacron exist? > > > > ken, > > > > yeah, it does exist. daily definitely runs. it just runs at a time i > > wasn't expecting. > > My point was that if /usr/sbin/anacron exists, then the crontab line > above will not run cron.daily. You say that /usr/sbin/anacron exists, so > cron.daily is not being launched as a result of the above crontab line. > That means something else is running it. Something like anacron, for > example. This list is great. This explains a longstanding puzzle (to me) of how (and to some extent why) both cron and anacron are installed on my debian box. Now that I see how it works, I am not too impressed with this kludge, though... this is a deceptively obtuse configuration duplication between these two packages. --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: Worm (was Re: [vox-tech] cron - not at a different time)
On Wednesday 03 March 2004 10:50 am, Ryan wrote: > On Wednesday 03 March 2004 10:25 am, Jeff Newmiller > jdnewmil-at-dcn.davis.ca.us |lugod| wrote: > > > Seriously... these emails are cropping up so much in the last day that > > this has to be a worm. I haven't seen any analyses of this one, though. > > http://sophos.com/virusinfo/articles/bagles.html Interesting. The zip file is encrypted and so has no signature. What I'd really like to do is reject all emails containing zip files, subject to a whitelist of mail servers. However Postfix seems to have no direct support for that. -- Rod ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On 2004.03.03 10:13, Peter Jay Salzman wrote:
On Wed 03 Mar 04, 10:07 AM, Ken Bloom <[EMAIL PROTECTED]> said:
>
> >ps- is there a new virus? all of a sudden, starting from last night
> >i've gotten a huge ton of emails that say things like:
> >
> > Arggghh, I hate plaintext!
> >
> > Here is your excel file.
> >
> > I don't bite, weah!
> >
> > Your file is attached.
> >
> >i normally don't see viruses because i filter based on executable
> >strings in every win32 executable. but these viruses seem to be
> >carrying .zip and .pif payloads which are getting past my filter.
> >
> >also, i just got a bounced email, with MY email address on it. it
said:
> >
> > I know about you!
> >
> >and it was addressed to [EMAIL PROTECTED], a US senator's
> >office. holy cow. i sure hope the secret service doesn't come after
> >me! ;-)
> >
> >pete
> >
>
> ClamAV is filtering that virus out for me. I installed ClamAV yesterday
> morning to handle that problem - apparently the school's virus checker
> hasn't updated to recognize that virus yet. I also got one from vox
(which
> I trust so I don't usually subject it to spam and virus filtering).
Perhaps
> we need a virus scanner on the lists even for subscribed members.
ken,
from vox? or do you mean forged to look like it came from vox? i don't
recall seeing one from the list...
i know how to filter based on attachment content (since the content is
just part of the body). i need to google for how you filter based on
attachment name. i don't recall there being any headers declaring the
name of attachments...
pete
It was forged to look like it came from [EMAIL PROTECTED], and it wound
up in my lugod folder (which matches the following condition in maildrop):
if (/^Reply-To: *vox.*lugod/:h || \
/^Subject: .*\[vox/:h )
{
to $MAILBOX/lugod
}
therefore, I conclude it was actually sent *to* the list.
Moreover, it's in the vox archive at:
http://www.lugod.org/mailinglists/archives/vox/2004-03/msg00014.html
--
I usually have a GPG digital signature included as an attachment.
See http://www.gnupg.org/ for info about these digital signatures.
My key was last signed 10/14/2003. If you use GPG *please* see me about
signing the key. * My computer can't give you viruses by email. ***
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
--On Wednesday, March 03, 2004 10:11:10 -0800 Peter Jay Salzman <[EMAIL PROTECTED]> wrote: > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report /etc/cron.daily That line will only launch "run-parts" if /usr/sbin/anacron doesn't exist. Does /usr/sbin/anacron exist? ken, yeah, it does exist. daily definitely runs. it just runs at a time i wasn't expecting. My point was that if /usr/sbin/anacron exists, then the crontab line above will not run cron.daily. You say that /usr/sbin/anacron exists, so cron.daily is not being launched as a result of the above crontab line. That means something else is running it. Something like anacron, for example. -- "Grand Funk Railroad paved the way for Jefferson Airplane, which cleared the way for Jefferson Starship. The stage was now set for the Alan Parsons Project, which I believe was some sort of hovercraft." - Homer Simpson Kenneth Herron[EMAIL PROTECTED] 916-366-7338 ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: Worm (was Re: [vox-tech] cron - not at a different time)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 03 March 2004 10:25 am, Jeff Newmiller jdnewmil-at-dcn.davis.ca.us |lugod| wrote: > Seriously... these emails are cropping up so much in the last day that > this has to be a worm. I haven't seen any analyses of this one, though. http://sophos.com/virusinfo/articles/bagles.html - -- PGP/GPG Fingerprint: 3B30 C6BE B1C6 9526 7A90 34E7 11DF 44F3 7217 7BC7 On pgp.mit.edu, import with `gpg --keyserver pgp.mit.edu --recv-key 72177BC7` Also available at http://www.XXX/~ryan/ryan_at_mother_dot_com.asc -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQFARij8Ed9E83IXe8cRAhY3AKCMfrGAzpKNYALEdTwhvmPP+C7tWwCgofgk 96U6U7X0Jz3bQJMHTjSINR4= =k9AW -END PGP SIGNATURE- ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
At 10:06 AM 3/3/2004, you wrote: I just got a message from "[EMAIL PROTECTED]" with an apparent zip file attached. Here's what it says: "Looking forward for a response :P password: 17468 AttachedFile.zip" I got it too! I'm betting it's some sort of malware (zipping them is apparently the latest trick to getting them past mail scanners), but I'm NOT testing that theory as I'm on a Windows box at work. --n twn ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Worm (was Re: [vox-tech] cron - not at a different time)
On Wed, 3 Mar 2004, Robert G. Scofield wrote: > On Wednesday 03 March 2004 09:43, Peter Jay Salzman wrote: > > > > ps- is there a new virus? all of a sudden, starting from last night > > i've gotten a huge ton of emails that say things like: > > > >Arggghh, I hate plaintext! > > > >Here is your excel file. > > > >I don't bite, weah! > > > >Your file is attached. > > > > i normally don't see viruses because i filter based on executable > > strings in every win32 executable. but these viruses seem to be > > carrying .zip and .pif payloads which are getting past my filter. > > I just got a message from "[EMAIL PROTECTED]" with an apparent zip file > attached. Here's what it says: > > "Looking forward for a response :P > > password: 17468 > AttachedFile.zip" > > Does anyone know what this is all about? You are supposed to open the zipfile using the password and run the contents. ;) Seriously... these emails are cropping up so much in the last day that this has to be a worm. I haven't seen any analyses of this one, though. --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed 03 Mar 04, 10:07 AM, Ken Bloom <[EMAIL PROTECTED]> said: > > >ps- is there a new virus? all of a sudden, starting from last night > >i've gotten a huge ton of emails that say things like: > > > > Arggghh, I hate plaintext! > > > > Here is your excel file. > > > > I don't bite, weah! > > > > Your file is attached. > > > >i normally don't see viruses because i filter based on executable > >strings in every win32 executable. but these viruses seem to be > >carrying .zip and .pif payloads which are getting past my filter. > > > >also, i just got a bounced email, with MY email address on it. it said: > > > > I know about you! > > > >and it was addressed to [EMAIL PROTECTED], a US senator's > >office. holy cow. i sure hope the secret service doesn't come after > >me! ;-) > > > >pete > > > > ClamAV is filtering that virus out for me. I installed ClamAV yesterday > morning to handle that problem - apparently the school's virus checker > hasn't updated to recognize that virus yet. I also got one from vox (which > I trust so I don't usually subject it to spam and virus filtering). Perhaps > we need a virus scanner on the lists even for subscribed members. ken, from vox? or do you mean forged to look like it came from vox? i don't recall seeing one from the list... i know how to filter based on attachment content (since the content is just part of the body). i need to google for how you filter based on attachment name. i don't recall there being any headers declaring the name of attachments... pete -- Make everything as simple as possible, but no simpler. -- Albert Einstein GPG Instructions: http://www.dirac.org/linux/gpg GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed 03 Mar 04, 10:07 AM, Ken Herron <[EMAIL PROTECTED]> said: > > > --On Wednesday, March 03, 2004 04:38:35 -0800 Peter Jay Salzman > <[EMAIL PROTECTED]> wrote: > > >25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > /etc/cron.daily > > That line will only launch "run-parts" if /usr/sbin/anacron doesn't > exist. Does /usr/sbin/anacron exist? ken, yeah, it does exist. daily definitely runs. it just runs at a time i wasn't expecting. pete -- Make everything as simple as possible, but no simpler. -- Albert Einstein GPG Instructions: http://www.dirac.org/linux/gpg GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On 2004.03.03 09:43, Peter Jay Salzman wrote: On Wed 03 Mar 04, 9:32 AM, Ken Bloom <[EMAIL PROTECTED]> said: > > On 2004.03.03 09:18, Peter Jay Salzman wrote: > >On Wed 03 Mar 04, 9:00 AM, Ken Bloom <[EMAIL PROTECTED]> said: > >> > >> On 2004.03.03 04:38, Peter Jay Salzman wrote: > >> >cron is running sometime around 7:30am: > >> > > >> > 8646 ?SN 0:00 run-parts --report /etc/cron.daily > >> > 8651 ?SN 0:00 /bin/sh /etc/cron.daily/checksecurity > >> > 8678 ?SN 0:00 /usr/bin/perl /usr/sbin/checksecurity > >> > 8714 ?SN 0:00 /bin/sh > >/usr/share/checksecurity/check-setuid > >> > 8724 ?RN 0:06 find / /boot /var /usr/local /home /data > >-xdev > >> >( -fal > >> > 8725 ?SN 0:00 sort > >> > 8733 ?R 0:00 xterm -class UXTerm -title uxterm -u8 > >> >[EMAIL PROTECTED] date > >> >Wed Mar 03 7:37 AM > >> > > >> > > >> >yet, i think it should at 4:25am if i have my fields correct: > >> > > >> > > >> >SHELL=/bin/sh > >> >PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin > >> > > >> >17 * * * * root run-parts --report /etc/cron.hourly > >> >25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > >> >/etc/cron.daily > >> >47 6 * * 7 root test -e /usr/sbin/anacron || run-parts --report > >> >/etc/cron.weekly > >> >52 6 1 * * root test -e /usr/sbin/anacron || run-parts --report > >> >/etc/cron.monthly > >> > > >> > > >> >why is the daily cron running at 7:30am? > >> > >> What time did you start up the machine? The cron jobs will run through > >> anacron shortly after startup if they haven't been run in a certain > >time > > > >> period. Seeing as how my computer is always shutdown at 4:25am, my > >daily > > > >> cronjobs always run shortly after I start up. If I started up the > >machine > >> at 7:25, they'd run at about 7:30. > > > >ken, that's a good guess. unfortunately, this machine has been up ever > >since i replaced the CPU fans (one of which died, and the other one > >sounded like a wailing ghost). that was about 12 days ago... > > I know you recently moved from Davis to the east coast. Did you remember to > change the timezone on the machine when you moved? heh. ken, that was an excellent idea, but unfortunately, i did. :-) pete ps- is there a new virus? all of a sudden, starting from last night i've gotten a huge ton of emails that say things like: Arggghh, I hate plaintext! Here is your excel file. I don't bite, weah! Your file is attached. i normally don't see viruses because i filter based on executable strings in every win32 executable. but these viruses seem to be carrying .zip and .pif payloads which are getting past my filter. also, i just got a bounced email, with MY email address on it. it said: I know about you! and it was addressed to [EMAIL PROTECTED], a US senator's office. holy cow. i sure hope the secret service doesn't come after me! ;-) pete ClamAV is filtering that virus out for me. I installed ClamAV yesterday morning to handle that problem - apparently the school's virus checker hasn't updated to recognize that virus yet. I also got one from vox (which I trust so I don't usually subject it to spam and virus filtering). Perhaps we need a virus scanner on the lists even for subscribed members. -- I usually have a GPG digital signature included as an attachment. See http://www.gnupg.org/ for info about these digital signatures. My key was last signed 10/14/2003. If you use GPG *please* see me about signing the key. * My computer can't give you viruses by email. *** pgp0.pgp Description: PGP signature
Re: [vox-tech] cron - not at a different time
--On Wednesday, March 03, 2004 04:38:35 -0800 Peter Jay Salzman <[EMAIL PROTECTED]> wrote: 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report /etc/cron.daily That line will only launch "run-parts" if /usr/sbin/anacron doesn't exist. Does /usr/sbin/anacron exist? -- "Grand Funk Railroad paved the way for Jefferson Airplane, which cleared the way for Jefferson Starship. The stage was now set for the Alan Parsons Project, which I believe was some sort of hovercraft." - Homer Simpson Kenneth Herron[EMAIL PROTECTED] 916-366-7338 ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wednesday 03 March 2004 09:43, Peter Jay Salzman wrote: > > ps- is there a new virus? all of a sudden, starting from last night > i've gotten a huge ton of emails that say things like: > >Arggghh, I hate plaintext! > >Here is your excel file. > >I don't bite, weah! > >Your file is attached. > > i normally don't see viruses because i filter based on executable > strings in every win32 executable. but these viruses seem to be > carrying .zip and .pif payloads which are getting past my filter. I just got a message from "[EMAIL PROTECTED]" with an apparent zip file attached. Here's what it says: "Looking forward for a response :P password: 17468 AttachedFile.zip" Does anyone know what this is all about? Bob ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed 03 Mar 04, 9:32 AM, Ken Bloom <[EMAIL PROTECTED]> said: > > On 2004.03.03 09:18, Peter Jay Salzman wrote: > >On Wed 03 Mar 04, 9:00 AM, Ken Bloom <[EMAIL PROTECTED]> said: > >> > >> On 2004.03.03 04:38, Peter Jay Salzman wrote: > >> >cron is running sometime around 7:30am: > >> > > >> > 8646 ?SN 0:00 run-parts --report /etc/cron.daily > >> > 8651 ?SN 0:00 /bin/sh /etc/cron.daily/checksecurity > >> > 8678 ?SN 0:00 /usr/bin/perl /usr/sbin/checksecurity > >> > 8714 ?SN 0:00 /bin/sh > >/usr/share/checksecurity/check-setuid > >> > 8724 ?RN 0:06 find / /boot /var /usr/local /home /data > >-xdev > >> >( -fal > >> > 8725 ?SN 0:00 sort > >> > 8733 ?R 0:00 xterm -class UXTerm -title uxterm -u8 > >> >[EMAIL PROTECTED] date > >> >Wed Mar 03 7:37 AM > >> > > >> > > >> >yet, i think it should at 4:25am if i have my fields correct: > >> > > >> > > >> >SHELL=/bin/sh > >> >PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin > >> > > >> >17 * * * * root run-parts --report /etc/cron.hourly > >> >25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > >> >/etc/cron.daily > >> >47 6 * * 7 root test -e /usr/sbin/anacron || run-parts --report > >> >/etc/cron.weekly > >> >52 6 1 * * root test -e /usr/sbin/anacron || run-parts --report > >> >/etc/cron.monthly > >> > > >> > > >> >why is the daily cron running at 7:30am? > >> > >> What time did you start up the machine? The cron jobs will run through > >> anacron shortly after startup if they haven't been run in a certain > >time > > > >> period. Seeing as how my computer is always shutdown at 4:25am, my > >daily > > > >> cronjobs always run shortly after I start up. If I started up the > >machine > >> at 7:25, they'd run at about 7:30. > > > >ken, that's a good guess. unfortunately, this machine has been up ever > >since i replaced the CPU fans (one of which died, and the other one > >sounded like a wailing ghost). that was about 12 days ago... > > I know you recently moved from Davis to the east coast. Did you remember to > change the timezone on the machine when you moved? heh. ken, that was an excellent idea, but unfortunately, i did. :-) pete ps- is there a new virus? all of a sudden, starting from last night i've gotten a huge ton of emails that say things like: Arggghh, I hate plaintext! Here is your excel file. I don't bite, weah! Your file is attached. i normally don't see viruses because i filter based on executable strings in every win32 executable. but these viruses seem to be carrying .zip and .pif payloads which are getting past my filter. also, i just got a bounced email, with MY email address on it. it said: I know about you! and it was addressed to [EMAIL PROTECTED], a US senator's office. holy cow. i sure hope the secret service doesn't come after me! ;-) pete -- Make everything as simple as possible, but no simpler. -- Albert Einstein GPG Instructions: http://www.dirac.org/linux/gpg GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed 03 Mar 04, 9:24 AM, Jeff Newmiller <[EMAIL PROTECTED]> said: > On Wed, 3 Mar 2004, Ken Bloom wrote: > > > > > On 2004.03.03 04:38, Peter Jay Salzman wrote: > > > cron is running sometime around 7:30am: > > > > > > 8646 ?SN 0:00 run-parts --report /etc/cron.daily > > > 8651 ?SN 0:00 /bin/sh /etc/cron.daily/checksecurity > > > 8678 ?SN 0:00 /usr/bin/perl /usr/sbin/checksecurity > > > 8714 ?SN 0:00 /bin/sh /usr/share/checksecurity/check-setuid > > > 8724 ?RN 0:06 find / /boot /var /usr/local /home /data -xdev > > > ( -fal > > > 8725 ?SN 0:00 sort > > > 8733 ?R 0:00 xterm -class UXTerm -title uxterm -u8 > > > [EMAIL PROTECTED] date > > > Wed Mar 03 7:37 AM > > > > > > > > > yet, i think it should at 4:25am if i have my fields correct: > > > > > > > > > SHELL=/bin/sh > > > PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin > > > > > > 17 * * * * root run-parts --report /etc/cron.hourly > > > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > > > /etc/cron.daily > > > 47 6 * * 7 root test -e /usr/sbin/anacron || run-parts --report > > > /etc/cron.weekly > > > 52 6 1 * * root test -e /usr/sbin/anacron || run-parts --report > > > /etc/cron.monthly > > > > > > > > > why is the daily cron running at 7:30am? > > > > What time did you start up the machine? The cron jobs will run through > > anacron shortly after startup if they haven't been run in a certain time > > period. Seeing as how my computer is always shutdown at 4:25am, my daily > > cronjobs always run shortly after I start up. If I started up the machine > > at 7:25, they'd run at about 7:30. > > Another thought... did you use the "crontab -e" command to make the > change to the crontab file? excuse my ignorance. for some reason, this is stuff that just doesn't get stored into my long term memory... from the top of /etc/crontab: # Unlike any other crontab you don't have to run the `crontab' # command to install the new version when you edit this file. maybe i forgot to restart cron (is that necessary)? i thought i did. anyhow, i *definitely* restarted it just now and added another daily system cron to print out date into /etc/cron.diagnostic. i've been waking up very early lately. i'll see what happens and report tomorrow morning... pete -- Make everything as simple as possible, but no simpler. -- Albert Einstein GPG Instructions: http://www.dirac.org/linux/gpg GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed 03 Mar 04, 9:00 AM, Ken Bloom <[EMAIL PROTECTED]> said: > > On 2004.03.03 04:38, Peter Jay Salzman wrote: > >cron is running sometime around 7:30am: > > > > 8646 ?SN 0:00 run-parts --report /etc/cron.daily > > 8651 ?SN 0:00 /bin/sh /etc/cron.daily/checksecurity > > 8678 ?SN 0:00 /usr/bin/perl /usr/sbin/checksecurity > > 8714 ?SN 0:00 /bin/sh /usr/share/checksecurity/check-setuid > > 8724 ?RN 0:06 find / /boot /var /usr/local /home /data -xdev > >( -fal > > 8725 ?SN 0:00 sort > > 8733 ?R 0:00 xterm -class UXTerm -title uxterm -u8 > >[EMAIL PROTECTED] date > >Wed Mar 03 7:37 AM > > > > > >yet, i think it should at 4:25am if i have my fields correct: > > > > > >SHELL=/bin/sh > >PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin > > > >17 * * * * root run-parts --report /etc/cron.hourly > >25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > >/etc/cron.daily > >47 6 * * 7 root test -e /usr/sbin/anacron || run-parts --report > >/etc/cron.weekly > >52 6 1 * * root test -e /usr/sbin/anacron || run-parts --report > >/etc/cron.monthly > > > > > >why is the daily cron running at 7:30am? > > What time did you start up the machine? The cron jobs will run through > anacron shortly after startup if they haven't been run in a certain time > period. Seeing as how my computer is always shutdown at 4:25am, my daily > cronjobs always run shortly after I start up. If I started up the machine > at 7:25, they'd run at about 7:30. ken, that's a good guess. unfortunately, this machine has been up ever since i replaced the CPU fans (one of which died, and the other one sounded like a wailing ghost). that was about 12 days ago... wierd! pete -- Make everything as simple as possible, but no simpler. -- Albert Einstein GPG Instructions: http://www.dirac.org/linux/gpg GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On Wed, 3 Mar 2004, Ken Bloom wrote: > > On 2004.03.03 04:38, Peter Jay Salzman wrote: > > cron is running sometime around 7:30am: > > > > 8646 ?SN 0:00 run-parts --report /etc/cron.daily > > 8651 ?SN 0:00 /bin/sh /etc/cron.daily/checksecurity > > 8678 ?SN 0:00 /usr/bin/perl /usr/sbin/checksecurity > > 8714 ?SN 0:00 /bin/sh /usr/share/checksecurity/check-setuid > > 8724 ?RN 0:06 find / /boot /var /usr/local /home /data -xdev > > ( -fal > > 8725 ?SN 0:00 sort > > 8733 ?R 0:00 xterm -class UXTerm -title uxterm -u8 > > [EMAIL PROTECTED] date > > Wed Mar 03 7:37 AM > > > > > > yet, i think it should at 4:25am if i have my fields correct: > > > > > > SHELL=/bin/sh > > PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin > > > > 17 * * * * root run-parts --report /etc/cron.hourly > > 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > > /etc/cron.daily > > 47 6 * * 7 root test -e /usr/sbin/anacron || run-parts --report > > /etc/cron.weekly > > 52 6 1 * * root test -e /usr/sbin/anacron || run-parts --report > > /etc/cron.monthly > > > > > > why is the daily cron running at 7:30am? > > What time did you start up the machine? The cron jobs will run through > anacron shortly after startup if they haven't been run in a certain time > period. Seeing as how my computer is always shutdown at 4:25am, my daily > cronjobs always run shortly after I start up. If I started up the machine > at 7:25, they'd run at about 7:30. Another thought... did you use the "crontab -e" command to make the change to the crontab file? --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
Re: [vox-tech] cron - not at a different time
On 2004.03.03 09:18, Peter Jay Salzman wrote: On Wed 03 Mar 04, 9:00 AM, Ken Bloom <[EMAIL PROTECTED]> said: > > On 2004.03.03 04:38, Peter Jay Salzman wrote: > >cron is running sometime around 7:30am: > > > > 8646 ?SN 0:00 run-parts --report /etc/cron.daily > > 8651 ?SN 0:00 /bin/sh /etc/cron.daily/checksecurity > > 8678 ?SN 0:00 /usr/bin/perl /usr/sbin/checksecurity > > 8714 ?SN 0:00 /bin/sh /usr/share/checksecurity/check-setuid > > 8724 ?RN 0:06 find / /boot /var /usr/local /home /data -xdev > >( -fal > > 8725 ?SN 0:00 sort > > 8733 ?R 0:00 xterm -class UXTerm -title uxterm -u8 > >[EMAIL PROTECTED] date > >Wed Mar 03 7:37 AM > > > > > >yet, i think it should at 4:25am if i have my fields correct: > > > > > >SHELL=/bin/sh > >PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin > > > >17 * * * * root run-parts --report /etc/cron.hourly > >25 4 * * * root test -e /usr/sbin/anacron || run-parts --report > >/etc/cron.daily > >47 6 * * 7 root test -e /usr/sbin/anacron || run-parts --report > >/etc/cron.weekly > >52 6 1 * * root test -e /usr/sbin/anacron || run-parts --report > >/etc/cron.monthly > > > > > >why is the daily cron running at 7:30am? > > What time did you start up the machine? The cron jobs will run through > anacron shortly after startup if they haven't been run in a certain time > period. Seeing as how my computer is always shutdown at 4:25am, my daily > cronjobs always run shortly after I start up. If I started up the machine > at 7:25, they'd run at about 7:30. ken, that's a good guess. unfortunately, this machine has been up ever since i replaced the CPU fans (one of which died, and the other one sounded like a wailing ghost). that was about 12 days ago... I know you recently moved from Davis to the east coast. Did you remember to change the timezone on the machine when you moved? -- I usually have a GPG digital signature included as an attachment. See http://www.gnupg.org/ for info about these digital signatures. My key was last signed 10/14/2003. If you use GPG *please* see me about signing the key. * My computer can't give you viruses by email. *** pgp0.pgp Description: PGP signature
Re: [vox-tech] cron - not at a different time
On 2004.03.03 04:38, Peter Jay Salzman wrote: cron is running sometime around 7:30am: 8646 ?SN 0:00 run-parts --report /etc/cron.daily 8651 ?SN 0:00 /bin/sh /etc/cron.daily/checksecurity 8678 ?SN 0:00 /usr/bin/perl /usr/sbin/checksecurity 8714 ?SN 0:00 /bin/sh /usr/share/checksecurity/check-setuid 8724 ?RN 0:06 find / /boot /var /usr/local /home /data -xdev ( -fal 8725 ?SN 0:00 sort 8733 ?R 0:00 xterm -class UXTerm -title uxterm -u8 [EMAIL PROTECTED] date Wed Mar 03 7:37 AM yet, i think it should at 4:25am if i have my fields correct: SHELL=/bin/sh PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 17 * * * * root run-parts --report /etc/cron.hourly 25 4 * * * root test -e /usr/sbin/anacron || run-parts --report /etc/cron.daily 47 6 * * 7 root test -e /usr/sbin/anacron || run-parts --report /etc/cron.weekly 52 6 1 * * root test -e /usr/sbin/anacron || run-parts --report /etc/cron.monthly why is the daily cron running at 7:30am? What time did you start up the machine? The cron jobs will run through anacron shortly after startup if they haven't been run in a certain time period. Seeing as how my computer is always shutdown at 4:25am, my daily cronjobs always run shortly after I start up. If I started up the machine at 7:25, they'd run at about 7:30. -- I usually have a GPG digital signature included as an attachment. See http://www.gnupg.org/ for info about these digital signatures. My key was last signed 10/14/2003. If you use GPG *please* see me about signing the key. * My computer can't give you viruses by email. *** ___ vox-tech mailing list [EMAIL PROTECTED] http://lists.lugod.org/mailman/listinfo/vox-tech
