process start question

[dandan123]

When I do a ps -ef I find this among other things -

root 574 573 0 May 20 ? 0:01 /usr/sbin/ntpdate -s -w 172.10.xxx.xx

How do I find out how this process was initiated ? I've searched through /etc/rc1.d /etc/rc2.d and /etc/rc3.d and did not find anything.

 

[SamBones]

What version of Solaris is it?

On my Solaris 9 or older, the file should be in [tt]/etc/init.d/xntpd[/tt]. And there should be a hard link [tt]/etc/rc2.d/S74xntpd[/tt].

If it's Solaris 10, it's managed by the service management facility (smf) under the service identifier [tt]svc:/network/ntp:default[/tt]. Type [tt]svcs[/tt] to see if it's there.

 

[huebs]

[tt]/etc/init.d/xntp[/tt] does run ntpdate, if you have defined a server in /etc/inet/ntp.conf, before starting xntpd.

If you have Solaris 10, smf runs ntp as network/ntp.

 

[huebs]

Aaahhh, by 1 minute, Sam !!!

 

[KenCunningham]

I guess it could also be started manually following a reboot?

 

[Annihilannic]

What is PID 573, it's parent?

Try a ptree 574.

Annihilannic.

 

[dandan123]

Thanks for your responses.

It's /etc/init.d/xntpd (not xntp) by the way.

But it looked as if someone started it manually and pointed it to the wrong ip address.

Thanks.