Linux

Hello Gurus,

Im troubleshooting a server in which it has a netboot partition from a "node0" and there is other system called "host0" . Every time host0 boots it gets by network the image from the n0.
So the thing is that on the n0 , where all the logs are stored from host0, in /var/log/messages appears the following string:

Code:

Oct 25 15:48:12 host0 exiting on signal 15
Oct 25 15:48:13 n0 xinetd[4946]: EXIT: tcpmux-server status=0 pid=22668 duration=7277(sec)
Oct 25 15:48:13 n0 xinetd[4946]: EXIT: shell status=0 pid=22365 duration=7340(sec)
Oct 25 15:48:25 n0 purr-daemon[5981]: [host0] Exit state: Running (Unpingable)
Oct 25 15:48:25 n0 purr-daemon[5981]: [host0] Enter state: Off or Unreachable
Oct 25 15:48:25 n0 purr-daemon[5981]: [Simple] No transitions for Running:AllUIsOff

As you can see, the first line, is clear that n0 issue host0 to turn off due to a timeout of a "purr-daemon" , so that question is: what is the purr-daemon on linux? and why is making the host0 to turn down unexpectedly.

My system is a CentOS 5.5

purr-daemon does not register anywhere. Because of that, I would guess it is malware.

purr-daemon could also be some homegrown software. From the logged messages I would guess, it does some sort of monitoring.