The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

The service “p0f” appears to be down

Discussion in 'General Discussion' started by guillof, Oct 27, 2016.

Tags:
  1. guillof

    guillof Member

    Joined:
    Jul 30, 2014
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I'm receiving tons of email notifications. The subject is:

    [ip-172-31-x-xxx.ap-northeast-1.compute.internal] FAILED : p0f (172.31.x.xxx)


    That ip is not the one from my server anymore (it use to be), but still receiving those messages after I updated the ips, rebooted the server, etc.

    Any idea?
     
    #1 guillof, Oct 27, 2016
    Last edited by a moderator: Oct 27, 2016
  2. Vishnu Pradeep

    Vishnu Pradeep Registered

    Joined:
    Oct 9, 2016
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello Guillof,

    The alerts are due to enabling the "p0f" service from "service manager" in WHM/cPanel. This is used to monitor the services and alert if any services goes down. The alerts is usually send to "root" or "cpanel" user and is set to forward to your mail. This forwarding of mail is set in "Contact Manager" in WHM. As per your earlier post, I assume that the system mail accounts are still set to forward to your mail. Since you are not managing the server, please contact the responsible and remove this forwarder. Also, you could direct them to execute the following command to fix the issue, if you wish.
    -----------
    /usr/local/cpanel/scripts/check_cpanel_rpms --fix
    -----------

    Cheers,
    Vishnu Pradeep
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,288
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you verify if you migrated to a new server, or if you changed the IP address of the existing server? Could you review the email headers in the notification to verify which server the notification originates from?

    Thank you.
     
Loading...

Share This Page