6:08 p.m.
I wrote this one, is the one that sends the stats to stats.ovirt.org for awstats to
collect, maybe I should send the email somewhere else?
----- Original Message -----
From: "Eyal Edri" <eedri(a)redhat.com>
To: "Karsten 'quaid' Wade" <kwade(a)redhat.com>, "David
Caro" <dcaroest(a)redhat.com>
Cc: "infra" <infra(a)ovirt.org>
Sent: Sunday, December 15, 2013 9:52:35 PM
Subject: Re: Cron <root@linode01> /root/bin/send_stats.sh
which stats is this script collecting?
there is the stats.ovirt.org server that has stats on gerrit,ovirt.org,lists
and resources server.
that's a VM sitting on rackspace infra IIRC.
Eyal.
----- Original Message -----
> From: "Karsten 'quaid' Wade" <kwade(a)redhat.com>
> To: "infra" <infra(a)ovirt.org>
> Sent: Sunday, December 15, 2013 9:05:26 PM
> Subject: Fwd: Cron <root@linode01> /root/bin/send_stats.sh
>
> I presume I'm not the only one getting this. I believe the script is one
> that I wrote to backup the stats to another machine.
>
> Is this something we can safely turn off? Meaning, stats are now being
> gathered and backed-up in another way?
>
>
> -------- Original Message --------
> Subject: Cron <root@linode01> /root/bin/send_stats.sh
> Date: Sat, 14 Dec 2013 18:00:02 -0500 (EST)
> From: root(a)linode01.ovirt.org (Cron Daemon)
> To: root(a)linode01.ovirt.org
>
> Sending logs to a host far far away
> Processing logfile /var/log/httpd/access_log-20131213.gz
> Pseudo-terminal will not be allocated because stdin is not a terminal.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on
> ssh:notty
> There were 10940 failed login attempts since the last successful login.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> /var/log/httpd/access_log-20131213.gz sent to
> stats.ovirt.org:/var/log/awstats/linode01.ovirt.org/
> Processing logfile /var/log/httpd/lists.ovirt.org-access_log-20131213.gz
> Pseudo-terminal will not be allocated because stdin is not a terminal.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on
> ssh:notty
> There were 10940 failed login attempts since the last successful login.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> /var/log/httpd/lists.ovirt.org-access_log-20131213.gz sent to
> stats.ovirt.org:/var/log/awstats/lists.ovirt.org/
> Processing logfile
> /var/log/httpd/resources.ovirt.org-access_log-20131213.gz
> Pseudo-terminal will not be allocated because stdin is not a terminal.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on
> ssh:notty
> There were 10940 failed login attempts since the last successful login.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> /var/log/httpd/resources.ovirt.org-access_log-20131213.gz sent to
> stats.ovirt.org:/var/log/awstats/resources.ovirt.org/
> And they lived happily ever after
>
>
>
>
> _______________________________________________
> Infra mailing list
> Infra(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/infra
>