Cron <root at linode01> /root/bin/send_stats.sh

[Eyal Edri]

which stats is this script collecting?

there is the stats.ovirt.org server that has stats on gerrit,ovirt.org,lists and resources server.
that's a VM sitting on rackspace infra IIRC.

Eyal.

----- Original Message -----
> From: "Karsten 'quaid' Wade" <kwade at redhat.com>
> To: "infra" <infra at ovirt.org>
> Sent: Sunday, December 15, 2013 9:05:26 PM
> Subject: Fwd: Cron <root at linode01> /root/bin/send_stats.sh
> 
> I presume I'm not the only one getting this. I believe the script is one
> that I wrote to backup the stats to another machine.
> 
> Is this something we can safely turn off? Meaning, stats are now being
> gathered and backed-up in another way?
> 
> 
> -------- Original Message --------
> Subject: Cron <root at linode01> /root/bin/send_stats.sh
> Date: Sat, 14 Dec 2013 18:00:02 -0500 (EST)
> From: root at linode01.ovirt.org (Cron Daemon)
> To: root at linode01.ovirt.org
> 
> Sending logs to a host far far away
> Processing logfile /var/log/httpd/access_log-20131213.gz
> Pseudo-terminal will not be allocated because stdin is not a terminal.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on
> ssh:notty
> There were 10940 failed login attempts since the last successful login.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> /var/log/httpd/access_log-20131213.gz sent to
> stats.ovirt.org:/var/log/awstats/linode01.ovirt.org/
> Processing logfile /var/log/httpd/lists.ovirt.org-access_log-20131213.gz
> Pseudo-terminal will not be allocated because stdin is not a terminal.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on
> ssh:notty
> There were 10940 failed login attempts since the last successful login.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> /var/log/httpd/lists.ovirt.org-access_log-20131213.gz sent to
> stats.ovirt.org:/var/log/awstats/lists.ovirt.org/
> Processing logfile /var/log/httpd/resources.ovirt.org-access_log-20131213.gz
> Pseudo-terminal will not be allocated because stdin is not a terminal.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on
> ssh:notty
> There were 10940 failed login attempts since the last successful login.
> Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back
> to the address - POSSIBLE BREAK-IN ATTEMPT!
> /var/log/httpd/resources.ovirt.org-access_log-20131213.gz sent to
> stats.ovirt.org:/var/log/awstats/resources.ovirt.org/
> And they lived happily ever after
> 
> 
> 
> 
> _______________________________________________
> Infra mailing list
> Infra at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/infra
>