On Sunday 20 July 2008 22:31:22 John Horne wrote: > On Sun, 2008-07-20 at 22:04 +0100, Anne Wilson wrote: > > On Sunday 20 July 2008 21:23:52 Stephen Harris wrote: > > > What does > > > find /var/spool/cron -type f ! -size 0 > > > show? > > > > Does that mean 'not = size 0'? > > Yes. > > > I can't think of anything that explains this. I have a 6-month-old > > CentOS 5.2 install, with nothing out of the ordinary, as far as I can > > recall. > > Your previous message showed: > > -rw------- 1 root root 0 Jul 7 16:07 /var/spool/cron/nobody > > This will be the last modification date/time, and possibly the creation > date/time if the file was not modified at all. So something around July > 7 presumably caused it. If you have the old /var/log/messages files from > around that date, then looking through those might show something. As > might a /var/log/yum.log file which could indicate if something was > automatically installed. > > > /var/log/yum.log shows nothing between 3rd and 11th June. Jun 03 16:04:30 Updated: commoncpp2.i386 1.6.2-1.el5.rf Jun 11 17:33:22 Updated: clamav-db.i386 0.93.1-1.el5.rf Jun 11 17:33:28 Updated: clamav.i386 0.93.1-1.el5.rf Jun 11 17:33:29 Updated: clamd.i386 0.93.1-1.el5.rf The oldest /var/log/messages only goes back to June 22. Anne -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 197 bytes Desc: This is a digitally signed message part. URL: <http://lists.centos.org/pipermail/centos/attachments/20080721/eac54b54/attachment-0005.sig>