pls find the screen snapshot (ps -ef)...
root 19848 1330 0 04:02 ? 00:00:00 CROND
root 19849 19848 0 04:02 ? 00:00:00 /bin/bash /usr/bin/run-parts /etc/cron.daily
root 21155 19848 0 04:05 ? 00:00:00 bin/qmail-inject -a -- root
root 21275 19849 0 04:07 ? 00:00:00 /bin/sh /etc/cron.daily/logrotate
root 21276 19849 0 04:07 ? 00:00:00 awk -v progname=/etc/cron.daily/logrotate progname {????? print progname ":
root 21277 21275 48 04:07 ? 02:06:46 /usr/sbin/logrotate /etc/logrotate.conf
root 17970 2622 0 08:18 ? 00:00:00 sshd: root@pts/1
root 18231 17970 0 08:18 pts/1 00:00:00 -bash
root 32363 21277 0 08:27 ? 00:00:00 /bin/sh /tmp/logrotate.IlEB6w /var/log/snort/alert.1.gz.6.gz.5.gz.2.gz
root 32364 32363 0 08:27 ? 00:00:00 /bin/sh /etc/init.d/snortd restart
root 32394 32364 0 08:27 ? 00:00:00 /bin/sh /etc/init.d/snortd start
root 32406 18231 0 08:27 pts/1 00:00:00 ps -ef
root 32408 32394 0 08:27 ? 00:00:00 initlog -q -c /usr/sbin/snort -D -i ppp0 -u snort -g snort -c /etc/snort/snor
root 32409 32408 0 08:27 ? 00:00:00 /usr/sbin/snort -D -i ppp0 -u snort -g snort -c /etc/snort/snort.conf
i don't know why what this is happened to me...
the server uptime is extremely high, i dont have any idea, what i can do is to issue the kill -9 21277 logrotate process.
pls advise.
0 Replies
790 Views