what backup system is my linux box using

Posted on 2011-10-31
Last Modified: 2012-05-12
I recently took over managing a linux server, a set of two actually, one for the web server and one for the mysql server. I'm a little rusty on linux command line, since I haven't had to use that for a while, but I only have ssh access to the servers, so I'm relearning.

I can see that there are backups being created on a mounted network share, but I'm having trouble finding out where in the system the script is that is running the backups, what backup program they are using, and how often it runs.

I've looked in the cron folder, the only one with anything in it is the cron.weekly, but none of those files seem to have anything to do with backup.

I'm hoping someone can point me in the right direction of how to discover what is being used to create the backups?

I've also been searching through the init.d files to see if anything jumps out. I also noticed that the backups are not compressed, it's just the files and directories copied over to the mounted share, that might be a clue? I've been looking through the installed software list, nothing jumps out at me, but it's a long list. I'm attaching the list in case someone more familiar might see something.

Question by:musickmann
    LVL 3

    Expert Comment

    try to find out the extension of the backup files. If its .tar then it means that tar command is used to create the backup files. Then you can search in the system to find out from which file that command is being fired.
    from root login use below command to find which file contains that file
    find / -name * -exec  grep tar  {} \ ;
    this will give the file that is being run with tar command.

    this is just an example, so like this you could use any command like cpio or some other program to take backup.

    so if you hav the extension, then you can find out more details.

    LVL 21

    Accepted Solution

    There are a lot of ways this can be happening, but first let's check other places that usually have cron files.

    It looks like you already checked everything in /etc/cron.*/*
    Another place to look for user cronjobs is /var/spool/cron/

    If the backup files are owned by a non-root user, that could help point you in the right direction as well -- just comb through their homedir.

    Try that stuff first then let's see where we stand.
    LVL 2

    Author Comment

    Thanks sugunakar...
    I think I edited the question since you read it, the backups are not compressed, they are just copies of the directories, and there aren't multiples, so it's overwriting, not adding additional copies. Also, it's going to a windows share mount, so I don't know about who owns the files.

    I looked in the location you suggested, there is a file there that contains a directive to run a shell script that appears to do the backups and some other things, so I think you are the winner here! Thanks so much!
    LVL 2

    Author Closing Comment

    Awesome response and quick!
    LVL 21

    Expert Comment


    Good to hear!

    Some advice -- instead of editing your original question, you should add replies to the thread instead with any updates (unless it's like a minute after the initial submission).  This will make it easier for the experts, and will get accurate answers for you sooner.
    LVL 2

    Author Comment

    Thanks. It was pretty close to the original submission, so I went for the edit this time, but I'll keep that in mind for the future.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    How to update Firmware and Bios in Dell Equalogic PS6000 Arrays and Hard Disks firmware update.
    Join Greg Farro and Ethan Banks from Packet Pushers ( and Greg Ross from Paessler ( for a discussion about smart network …
    Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
    Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now