ghost crond

[kp2a]

[root@cacti etc]# tail -1 /var/log/cron
Jul 11 16:10:01 cacti crond[12934]: (cacti) CMD (php /var/www/cacti/poller.php &>/dev/null)

[root@cacti etc]# crontab -u cacti -l
no crontab for cacti

[root@cacti etc]# ps auxw | egrep 'cron|cacti'
root 12928 0.0 0.0 74856 1160 ? Ss 16:09 0:00 crond
root 23718 0.0 0.0 61212 808 pts/0 S+ 16:18 0:00 egrep cron|cacti

[root@cacti etc]# grep php /etc/crontab
###*/5 * * * * root php /var/www/html/cacti/poller.php > /usr/local/log/cacti/poller.log 2>&1

where is the CMD coming from ???

[root@cacti etc]# uname -i -r
2.6.18-238.9.1.el5 x86_64

[kp2a]

accidently caught at /5

[root@cacti etc]# ps auxw | grep crond
root 12928 0.0 0.0 74856 1160 ? Ss 16:09 0:00 crond
cacti 29114 0.0 0.0 102060 1568 ? S 16:25 0:00 crond
root 31985 0.0 0.0 61216 772 pts/0 S+ 16:25 0:00 grep crond

so user cacti is being launched every 5 minutes

[root@cacti ~]# atq
[root@cacti ~]#

nothing in at queue
nothing in crontab

[gandalf]

/etc/cron.d/cacti???
R.

[kp2a]

/etc/cron.d/cacti???
R.

yup! thanks!
put there by install

[gandalf]

which, indeed, now is my favorite location
R.