Forum Discussion

jos521_154775's avatar
jos521_154775
Icon for Altostratus rankAltostratus
May 16, 2014

May 16 20:40:01 sccp crond[422]: USER root pid 14994 cmd /usr/sbin/ntpclient -c 1 -s -h 127.2.0.2 >/dev/null 2>&1

what is it ? And how to avoid it ? Can you tell me how to make the NTP to update automatic? now,I should update by myself on the MANAGER-WEBSITE. Thankyou !

 

10 Replies

  • 127.2.0.2 is host. i understand it is cron job which synchronizes time between sccp/aom and host. i do not think it is a good idea to remove it.

    if you do not want to have it in log, you can custom syslog-ng confiugration.

    LTM 9.4.2+: Custom Syslog Configuration by Deb Allen

    https://devcentral.f5.com/s/articles/LTM-9-4-2-Custom-Syslog-Configuration

    [root@ve11a:Active:In Sync] config  cat /etc/hosts
     
     THIS IS AN AUTO-GENERATED FILE -- DO NOT EDIT!!!
     
     Use the tmsh shell utility to make changes to the system configuration.
     For more information, see tmsh -a help sys global-settings.
    127.0.0.1       localhost.localdomain localhost ve11a.acme.local
    127.2.0.1       sccp aom AOM
    127.2.0.2       ve11a.acme.local
    127.1.1.2       tmm
    127.1.1.3       tmm1
    192.168.1.11    ve11a.acme.local
    • jos521_154775's avatar
      jos521_154775
      Icon for Altostratus rankAltostratus
      This is my config,please give me some advices~ thank you . [root@3600:Active] config cat /etc/issue BIG-IP 9.4.8 Build 355.0 Kernel \r on an \m [root@3600:Active] config cat bigip_sys.conf shell write partition Common ntp { servers 172.16.10.254 timezone "Asia/Shanghai" } syslog { include " destination remote_server { udp(\"172.16.10.41\" port (514)); }; filter f_alllogs { level (notice...emerg); }; log { source(local); filter(f_alllogs); destination(remote_server); };" }
  • Do you have an NTP server defined under System -> Configuration -> Device -> NTP?

     

    If somebody put something in the crontab, you can remove it by running 'crontab -e' from bash shell as root and removing the entry.

     

    • jos521_154775's avatar
      jos521_154775
      Icon for Altostratus rankAltostratus
      Thank you for your answer. This is my crontab: [root@3600:Active] config crontab -l cron tab for root 1-59/30 * * * * /usr/bin/diskmonitor It's seem not have the relative crontab-list? thank you anymore. And I have done it "have an NTP server defined under System -> Configuration -> Device -> NTP" , but the F5's system-time is not all right .I should refresh it through the http button "UPDATE"
  • 127.2.0.2 is host. i understand it is cron job which synchronizes time between sccp/aom and host. i do not think it is a good idea to remove it.

    if you do not want to have it in log, you can custom syslog-ng confiugration.

    LTM 9.4.2+: Custom Syslog Configuration by Deb Allen

    https://devcentral.f5.com/articles/ltm-942-custom-syslog-configuration
    [root@ve11a:Active:In Sync] config  cat /etc/hosts
    
     THIS IS AN AUTO-GENERATED FILE -- DO NOT EDIT!!!
    
     Use the tmsh shell utility to make changes to the system configuration.
     For more information, see tmsh -a help sys global-settings.
    127.0.0.1       localhost.localdomain localhost ve11a.acme.local
    127.2.0.1       sccp aom AOM
    127.2.0.2       ve11a.acme.local
    127.1.1.2       tmm
    127.1.1.3       tmm1
    192.168.1.11    ve11a.acme.local
    
    • jos521_154775's avatar
      jos521_154775
      Icon for Altostratus rankAltostratus
      This is my config,please give me some advices~ thank you . [root@3600:Active] config cat /etc/issue BIG-IP 9.4.8 Build 355.0 Kernel \r on an \m [root@3600:Active] config cat bigip_sys.conf shell write partition Common ntp { servers 172.16.10.254 timezone "Asia/Shanghai" } syslog { include " destination remote_server { udp(\"172.16.10.41\" port (514)); }; filter f_alllogs { level (notice...emerg); }; log { source(local); filter(f_alllogs); destination(remote_server); };" }
  • e.g.

     config
    
    [root@ve11a:Active:In Sync] config  tmsh list sys syslog
    sys syslog {
        include "
    destination remote_server {
      udp(\"172.28.24.1\" port (514));
    };
    filter f_alllogs_except_ntpclient {
     level (notice...emerg)
     and not match(\"ntpclient\");
    };
    log {
     source(local);
     filter(f_alllogs_except_ntpclient);
     destination(remote_server);
    };"
    }
    
     test
    
    [root@ve11a:Active:In Sync] config  logger -p local0.notice before
    [root@ve11a:Active:In Sync] config  logger -p local0.notice "USER root pid 12583 cmd /usr/sbin/ntpclient -c 1 -s -h 127.2.0.2 >/dev/null 2>&1"
    [root@ve11a:Active:In Sync] config  logger -p local0.notice after
    
     remote syslog
    
    [root@centos1 ~] nc -l -u 514
    <133>May 18 21:18:16 ve11a root: before
    <133>May 18 21:18:23 ve11a root: after
    
  • e.g.

     config
    
    [root@ve11a:Active:In Sync] config  tmsh list sys syslog
    sys syslog {
        include "
    destination remote_server {
      udp(\"172.28.24.1\" port (514));
    };
    filter f_alllogs_except_ntpclient {
     level (notice...emerg)
     and not match(\"ntpclient\");
    };
    log {
     source(local);
     filter(f_alllogs_except_ntpclient);
     destination(remote_server);
    };"
    }
    
     test
    
    [root@ve11a:Active:In Sync] config  logger -p local0.notice before
    [root@ve11a:Active:In Sync] config  logger -p local0.notice "USER root pid 12583 cmd /usr/sbin/ntpclient -c 1 -s -h 127.2.0.2 >/dev/null 2>&1"
    [root@ve11a:Active:In Sync] config  logger -p local0.notice after
    
     remote syslog
    
    [root@centos1 ~] nc -l -u 514
    <133>May 18 21:18:16 ve11a root: before
    <133>May 18 21:18:23 ve11a root: after