[8.910][MYTH] Restart ntpd_running counter

Hi All

I am getting quite a lot ntpd_running counter restarts as per below

2012:03:26-08:46:18 ***** selfmonng[3564]: I check Failed increment ntpd_running counter 1 - 3

2012:03:26-09:14:34 ***** selfmonng[3564]: I check Failed increment ntpd_running counter 1 - 3

2012:03:26-14:57:41 ***** selfmonng[3564]: I reloading all checks

2012:03:26-14:57:41 ***** selfmonng[3564]: T Loading Selfmonitoring Checks complete  new=0 failed=0 retained=74 dropped=0

2012:03:26-14:57:41 ***** selfmonng[3564]: T read config file '/etc/selfmonng.conf'

2012:03:26-18:25:08 ***** selfmonng[3564]: I check Failed increment ntpd_running counter 1 - 3

Maybe this is related to the ones below:

https://community.sophos.com/products/unified-threat-management/astaroorg/f/75/t/63989
https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/21516

Thanks

0 kbr over 13 years ago

You can safely ignore this.

selfmon checks (up to three times) if a process (eg. ntpd) is still running. The reason why we test three times is that, if a test fails you cannot safely say whether it's the tests fault (eg. not waiting long enough for a reply) or if the tested service/daemon is indeed unavailable. From your logs you can see that the check succeeds on the second try.

Here's a snippet from a log where the ntpd was indeed not running (I stopped it with killall ntpd on the console).


2012:03:27-11:07:06 kbr1 selfmonng[3922]: I check Failed increment ntpd_running counter 1 - 3

2012:03:27-11:07:11 kbr1 selfmonng[3922]: I check Failed increment ntpd_running counter 2 - 3

2012:03:27-11:07:16 kbr1 selfmonng[3922]: W check Failed increment ntpd_running counter 3 - 3

2012:03:27-11:07:16 kbr1 selfmonng[3922]: NTP (network time synchronization) daemon not running - restarted

2012:03:27-11:07:16 kbr1 selfmonng[3922]: W NOTIFYEVENT Name=ntpd_running Level=INFO Id=147 sent

2012:03:27-11:07:16 kbr1 selfmonng[3922]: W triggerAction: 'cmd'

2012:03:27-11:07:16 kbr1 selfmonng[3922]: W actionCmd(+):  '/var/mdw/scripts/ntp restart'

2012:03:27-11:07:16 kbr1 selfmonng[3922]: W child returned status: exit='0' signal='0'

So, as long as you don't get any notifications, there is no problem.

Cheers,
Kai