OK...I don't know if this will help, but here goes. It's the system event log for what I think were the offending days.
Jul 20 00:00:00 linux /USR/SBIN/CRON[15173]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 20 00:28:30 linux -- MARK --
Jul 20 00:48:30 linux -- MARK --
Jul 20 00:59:00 linux /USR/SBIN/CRON[17301]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 01:00:00 linux /USR/SBIN/CRON[17317]: (root) CMD (/sbin/evlogmgr -c "severity=DEBUG")
Jul 20 01:28:30 linux -- MARK --
Jul 20 01:48:30 linux -- MARK --
Jul 20 01:59:00 linux /USR/SBIN/CRON[19029]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 02:00:00 linux /USR/SBIN/CRON[19071]: (root) CMD (/sbin/evlogmgr -c 'age > "30d"')
Jul 20 02:28:30 linux -- MARK --
Jul 20 02:48:30 linux -- MARK --
Jul 20 02:59:00 linux /USR/SBIN/CRON[21429]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 02:59:00 linux /USR/SBIN/CRON[21431]: (root) CMD (online_update )
Jul 20 03:28:30 linux -- MARK --
Jul 20 03:48:30 linux -- MARK --
Jul 20 03:59:00 linux /USR/SBIN/CRON[24093]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 04:14:00 linux /USR/SBIN/CRON[24684]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.daily)
Jul 20 04:18:00 linux su: (to nobody) root on none
Jul 20 04:18:00 linux su: pam_unix2: session started for user nobody, service su
Jul 20 04:20:41 linux su: pam_unix2: session finished for user nobody, service su
Jul 20 04:48:30 linux -- MARK --
Jul 20 04:59:00 linux /USR/SBIN/CRON[26107]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 05:28:30 linux -- MARK --
Jul 20 05:48:30 linux -- MARK --
Jul 20 05:59:00 linux /USR/SBIN/CRON[26874]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 06:00:00 linux /USR/SBIN/CRON[26900]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 20 06:28:30 linux -- MARK --
Jul 20 06:48:30 linux -- MARK --
Jul 20 06:59:00 linux /USR/SBIN/CRON[27409]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 07:28:30 linux -- MARK --
Jul 20 07:48:30 linux -- MARK --
Jul 20 07:59:00 linux /USR/SBIN/CRON[27812]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 08:28:30 linux -- MARK --
Jul 20 08:48:30 linux -- MARK --
Jul 20 08:59:00 linux /USR/SBIN/CRON[28484]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 09:28:30 linux -- MARK --
Jul 20 09:48:30 linux -- MARK --
Jul 20 09:59:00 linux /USR/SBIN/CRON[29852]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 10:28:30 linux -- MARK --
Jul 20 10:48:30 linux -- MARK --
Jul 20 10:59:00 linux /USR/SBIN/CRON[31391]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 11:28:30 linux -- MARK --
Jul 20 11:48:30 linux -- MARK --
Jul 20 11:59:00 linux /USR/SBIN/CRON[328]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 12:00:00 linux /USR/SBIN/CRON[376]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 20 12:28:30 linux -- MARK --
Jul 20 12:48:30 linux -- MARK --
Jul 20 12:59:00 linux /USR/SBIN/CRON[2022]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 13:28:30 linux -- MARK --
Jul 20 13:48:30 linux -- MARK --
Jul 20 13:59:00 linux /USR/SBIN/CRON[3741]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 14:28:30 linux -- MARK --
Jul 20 14:48:30 linux -- MARK --
Jul 20 14:59:00 linux /USR/SBIN/CRON[5347]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 15:28:30 linux -- MARK --
Jul 20 15:48:30 linux -- MARK --
Jul 20 15:59:00 linux /USR/SBIN/CRON[7112]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 16:03:11 linux su: (to root) joey on /dev/pts/0
Jul 20 16:03:11 linux su: pam_unix2: session started for user root, service su
Jul 20 16:06:20 linux su: pam_unix2: session finished for user root, service su
Jul 20 16:09:35 linux kdm[23545]: pam_unix2: session finished for user joey, service xdm
Jul 20 16:09:35 linux resmgr[1240]: accepted connection from user root
Jul 20 16:09:35 linux resmgr[1240]: disconnect from root
Jul 20 16:09:35 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Excess frees: 13 frees, 12 allocs
Jul 20 16:09:35 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Excess frees: 14 frees, 12 allocs
Jul 20 16:09:35 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Attempt to free NULL pointer
Jul 20 16:09:35 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Excess frees: 15 frees, 12 allocs
Jul 20 16:09:37 linux kernel: agpgart: Device is in legacy mode, falling back to 2.x
Jul 20 16:09:37 linux kernel: agpgart: Putting AGP V2 device at 00:00.0 into 1x mode
Jul 20 16:09:37 linux kernel: agpgart: Putting AGP V2 device at 01:00.0 into 1x mode
Jul 20 16:09:47 linux kdm[7469]: fatal IO error 32 (Broken pipe)
Jul 20 16:09:47 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Excess frees: 17 frees, 16 allocs
Jul 20 16:09:47 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Excess frees: 18 frees, 16 allocs
Jul 20 16:09:47 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Excess frees: 19 frees, 16 allocs
Jul 20 16:09:47 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Attempt to free NULL pointer
Jul 20 16:09:47 linux kernel: [drm:radeon_ioremapfree:mappings] *ERROR* Excess frees: 20 frees, 16 allocs
Jul 20 16:09:47 linux init: Switching to runlevel: 6
Jul 20 16:09:49 linux kernel: bootsplash: status on console 0 changed to on
Jul 20 16:09:49 linux kernel: bootsplash: silent jpeg found.
Jul 20 16:09:50 linux smpppd[1729]: terminating on signal 15
Jul 20 16:09:51 linux sshd[1412]: Received signal 15; terminating.
Jul 20 16:09:54 linux kernel: usbserial.c: USB Serial deregistering driver Generic
Jul 20 16:09:54 linux kernel: usb.c: deregistering driver serial
Jul 20 16:09:54 linux kernel: Kernel logging (proc) stopped.
Jul 20 16:09:54 linux kernel: Kernel log daemon terminating.
Jul 20 16:09:55 linux exiting on signal 15
Jul 20 16:11:55 linux syslogd 1.4.1: restart.
Jul 20 16:11:55 linux pppd[1079]: Plugin pppoe.so loaded.
Jul 20 16:11:55 linux pppd[1079]: PPPoE Plugin Initialized
Jul 20 16:11:55 linux pppd[1079]: Plugin passwordfd.so loaded.
Jul 20 16:11:55 linux pppd[1079]: pppd 2.4.1 started by root, uid 0
Jul 20 16:11:55 linux pppd[1079]: Sending PADI
Jul 20 16:11:57 linux /etc/hotplug/usb.rc[1163]: loaded HCD: usb-uhci
Jul 20 16:11:59 linux kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jul 20 16:11:59 linux kernel: Inspecting /boot/System.map-2.4.21-231-athlon
Jul 20 16:12:00 linux kernel: Loaded 21352 symbols from /boot/System.map-2.4.21-231-athlon.
Jul 20 16:12:00 linux kernel: Symbols match kernel version 2.4.21.
Jul 20 16:12:00 linux kernel: Loaded 395 symbols from 18 modules.
Jul 20 16:12:00 linux kernel: bootsplash: silent jpeg found.
Jul 20 16:12:00 linux kernel: 3c59x: Donald Becker and others.
www.scyld.com/network/vortex.html
Jul 20 16:12:00 linux kernel: See Documentation/networking/vortex.txt
Jul 20 16:12:00 linux kernel: 00:0d.0: 3Com PCI 3c900 Cyclone 10Mbps TPO at 0xd400. Vers LK1.1.16
Jul 20 16:12:00 linux kernel: 00:01:02:59:72:f1, IRQ 9
Jul 20 16:12:00 linux kernel: product code 4257 rev 00.4 date 05-27-00
Jul 20 16:12:00 linux kernel: Internal config register is 1800000, transceivers 0x8.
Jul 20 16:12:00 linux kernel: 8K byte-wide RAM 5:3 Rx:Tx split, autoselect/Autonegotiate interface.
Jul 20 16:12:00 linux kernel: MII transceiver found at address 24, status 182d.
Jul 20 16:12:00 linux kernel: Enabling bus-master transmits and whole-frame receives.
Jul 20 16:12:00 linux kernel: 00:0d.0: scatter/gather enabled. h/w checksums enabled
Jul 20 16:12:00 linux kernel: CSLIP: code copyright 1989 Regents of the University of California
Jul 20 16:12:00 linux kernel: PPP generic driver version 2.4.2
Jul 20 16:12:00 linux kernel: raw1394: /dev/raw1394 device initialized
Jul 20 16:12:00 linux kernel: usb.c: registered new driver usbdevfs
Jul 20 16:12:00 linux kernel: usb.c: registered new driver hub
Jul 20 16:12:00 linux kernel: usb-uhci.c: $Revision: 1.275 $ time 16:07:10 Jun 28 2004
Jul 20 16:12:00 linux kernel: usb-uhci.c: High bandwidth mode enabled
Jul 20 16:12:00 linux kernel: usb-uhci.c: USB UHCI at I/O 0xdc00, IRQ 10
Jul 20 16:12:00 linux kernel: usb-uhci.c: Detected 2 ports
Jul 20 16:12:00 linux kernel: usb.c: new USB bus registered, assigned bus number 1
Jul 20 16:12:00 linux kernel: hub.c: USB hub found
Jul 20 16:12:00 linux kernel: hub.c: 2 ports detected
Jul 20 16:12:00 linux kernel: usb-uhci.c: USB UHCI at I/O 0xd800, IRQ 10
Jul 20 16:12:00 linux kernel: usb-uhci.c: Detected 2 ports
Jul 20 16:12:00 linux kernel: usb.c: new USB bus registered, assigned bus number 2
Jul 20 16:12:00 linux kernel: hub.c: USB hub found
Jul 20 16:12:00 linux kernel: hub.c: 2 ports detected
Jul 20 16:12:00 linux kernel: usb-uhci.c: v1.275:USB Universal Host Controller Interface driver
Jul 20 16:12:00 linux kernel: uhci.c: USB Universal Host Controller Interface driver v1.1
Jul 20 16:12:00 linux kernel: mice: PS/2 mouse device common for all mice
Jul 20 16:12:04 linux kernel: ACPI: Power Button (FF) [PWRF]
Jul 20 16:12:04 linux kernel: ACPI: Sleep Button (CM) [SLPB]
Jul 20 16:12:04 linux kernel: ACPI: Processor [CPU1] (supports C1, 16 throttling states)
Jul 20 16:12:04 linux kernel: IPsec Security Association Database (SADB): initialized.
Jul 20 16:12:04 linux kernel: IPsec Security Policy Database (SPD): initialized.
Jul 20 16:12:04 linux kernel: IPsec PF_KEY V2: initialized
Jul 20 16:12:04 linux kernel: IPv6 v0.8 (usagi-cvs/IPsec6 based StS) for NET4.0
Jul 20 16:12:04 linux kernel: IPv6 over IPv4 tunneling driver
Jul 20 16:12:05 linux sshd[1464]: Server listening on :: port 22.
Jul 20 16:12:06 linux kernel: isapnp: Scanning for PnP cards...
Jul 20 16:12:06 linux kernel: isapnp: No Plug & Play device found
Jul 20 16:12:07 linux kernel: parport0: PC-style at 0x378 (0x778) [PCSPP,TRISTATE]
Jul 20 16:12:07 linux kernel: parport_pc: Via 686A parallel port: io=0x378
Jul 20 16:12:07 linux kernel: lp0: using parport0 (polling).
Jul 20 16:12:08 linux kernel: usb.c: registered new driver serial
Jul 20 16:12:08 linux kernel: usbserial.c: USB Serial support registered for Generic
Jul 20 16:12:08 linux kernel: usbserial.c: USB Serial Driver core v1.4
Jul 20 16:12:09 linux kernel: bootsplash: silent jpeg found.
Jul 20 16:12:10 linux smpppd[1760]: smpppd version 1.06 started
Jul 20 16:12:13 linux kernel: isapnp: Scanning for PnP cards...
Jul 20 16:12:13 linux kernel: isapnp: No Plug & Play device found
Jul 20 16:12:13 linux /etc/hotplug/net.agent[1475]: No HW description found ... exiting
Jul 20 16:12:15 linux kernel: eth0: no IPv6 routers present
Jul 20 16:12:16 linux /usr/sbin/cron[1961]: (CRON) STARTUP (fork ok)
Jul 20 16:12:20 linux modprobe: modprobe: Can't locate module char-major-226
Jul 20 16:12:20 linux last message repeated 3 times
Jul 20 16:12:21 linux kernel: Linux agpgart interface v0.99 (c) Jeff Hartmann
Jul 20 16:12:21 linux kernel: agpgart: Maximum main memory to use for agp memory: 941M
Jul 20 16:12:21 linux kernel: agpgart: Detected Via Twister-K/KT133x/KM133 chipset
Jul 20 16:12:21 linux kernel: agpgart: AGP aperture is 64M @ 0xe0000000
Jul 20 16:12:21 linux kernel: [drm] AGP 0.99 aperture @ 0xe0000000 64MB
Jul 20 16:12:21 linux kernel: [drm] Initialized radeon 1.7.0 20020828 on minor 0
Jul 20 16:12:21 linux kernel: agpgart: Device is in legacy mode, falling back to 2.x
Jul 20 16:12:21 linux kernel: agpgart: Putting AGP V2 device at 00:00.0 into 1x mode
Jul 20 16:12:21 linux kernel: agpgart: Putting AGP V2 device at 01:00.0 into 1x mode
Jul 20 16:12:21 linux kernel: Linux video capture interface: v1.00
Jul 20 16:13:02 linux kdm[2028]: pam_unix2: session started for user joey, service xdm
Jul 20 16:13:02 linux resmgr[1290]: accepted connection from user root
Jul 20 16:13:02 linux resmgr[1290]: disconnect from root
Jul 20 16:13:03 linux gconfd (joey-2109): starting (version 2.2.1), pid 2109 user 'joey'
Jul 20 16:13:03 linux gconfd (joey-2109): Resolved address "xml:readonly:/etc/opt/gnome/gconf/gconf.xml.mandatory" to a read-only config source at position 0
Jul 20 16:13:03 linux gconfd (joey-2109): Resolved address "xml:readonly:/etc/opt/gnome/gconf/preconf/gconf.xml.defaults" to a read-only config source at position 1
Jul 20 16:13:03 linux gconfd (joey-2109): Resolved address "xml:readwrite:/home/joey/.gconf" to a writable config source at position 2
Jul 20 16:13:03 linux gconfd (joey-2109): Exiting
Jul 20 16:13:04 linux gconfd (joey-2113): starting (version 2.2.1), pid 2113 user 'joey'
Jul 20 16:13:04 linux gconfd (joey-2113): Resolved address "xml:readonly:/etc/opt/gnome/gconf/gconf.xml.mandatory" to a read-only config source at position 0
Jul 20 16:13:04 linux gconfd (joey-2113): Resolved address "xml:readonly:/etc/opt/gnome/gconf/preconf/gconf.xml.defaults" to a read-only config source at position 1
Jul 20 16:13:04 linux gconfd (joey-2113): Resolved address "xml:readwrite:/home/joey/.gconf" to a writable config source at position 2
Jul 20 16:13:09 linux kernel: ide-floppy driver 0.99.newide
Jul 20 16:13:09 linux kernel: hdc: attached ide-cdrom driver.
Jul 20 16:13:09 linux kernel: hdc: ATAPI 52X CD-ROM drive, 128kB Cache
Jul 20 16:13:09 linux kernel: Uniform CD-ROM driver Revision: 3.12
Jul 20 16:13:09 linux kernel: cdrom: This disc doesn't have any tracks I recognize!
Jul 20 16:31:54 linux -- MARK --
Jul 20 16:34:31 linux kernel: spurious 8259A interrupt: IRQ7.
Jul 20 16:39:11 linux su: (to root) joey on /dev/pts/1
Jul 20 16:39:11 linux su: pam_unix2: session started for user root, service su
Jul 20 16:42:11 linux su: pam_unix2: session finished for user root, service su
Jul 20 16:46:01 linux pppd[1079]: Connecting PPPoE socket: 00:00:00:00:00:00 0000 0x8089a40
Jul 20 16:46:01 linux pppd[1079]: Couldn't get channel number: Transport endpoint is not connected
Jul 20 16:46:01 linux pppd[1079]: Doing disconnect
Jul 20 16:46:01 linux pppd[1079]: Exit.
Jul 20 16:59:00 linux /USR/SBIN/CRON[6291]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 17:04:08 linux su: (to root) joey on /dev/pts/0
Jul 20 17:04:08 linux su: pam_unix2: session started for user root, service su
Jul 20 17:07:26 linux su: pam_unix2: session finished for user root, service su
Jul 20 17:11:46 linux su: FAILED SU (to root) joey on /dev/pts/0
Jul 20 17:12:10 linux su: (to root) joey on /dev/pts/0
Jul 20 17:12:10 linux su: pam_unix2: session started for user root, service su
Jul 20 17:13:42 linux kernel: Non-volatile memory driver v1.2
Jul 20 17:13:43 linux kernel: end_request: I/O error, dev 02:00 (floppy), sector 0
Jul 20 17:13:46 linux last message repeated 3 times
Jul 20 17:13:46 linux kernel: cdrom: open failed.
Jul 20 17:14:27 linux su: pam_unix2: session finished for user root, service su
Jul 20 17:31:54 linux -- MARK --
Jul 20 17:51:54 linux -- MARK --
Jul 20 17:59:00 linux /USR/SBIN/CRON[8631]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 18:00:00 linux /USR/SBIN/CRON[8674]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 20 18:11:54 linux -- MARK --
Jul 20 18:31:54 linux -- MARK --
Jul 20 18:51:54 linux -- MARK --
Jul 20 18:59:00 linux /USR/SBIN/CRON[11376]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 19:11:54 linux -- MARK --
Jul 20 19:31:54 linux -- MARK --
Jul 20 19:51:54 linux -- MARK --
Jul 20 19:59:00 linux /USR/SBIN/CRON[13118]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 20:11:54 linux -- MARK --
Jul 20 20:31:54 linux -- MARK --
Jul 20 20:51:54 linux -- MARK --
Jul 20 20:59:00 linux /USR/SBIN/CRON[13683]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 21:11:54 linux -- MARK --
Jul 20 21:31:54 linux -- MARK --
Jul 20 21:51:54 linux -- MARK --
Jul 20 21:59:00 linux /USR/SBIN/CRON[17066]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 22:00:38 linux modprobe: modprobe: Can't locate module sound-service-1-3
Jul 20 22:00:38 linux modprobe: modprobe: Can't locate module sound-service-2-3
Jul 20 22:00:38 linux modprobe: modprobe: Can't locate module sound-service-3-3
Jul 20 22:01:07 linux modprobe: modprobe: Can't locate module sound-service-1-3
Jul 20 22:01:08 linux modprobe: modprobe: Can't locate module sound-service-2-3
Jul 20 22:01:08 linux modprobe: modprobe: Can't locate module sound-service-3-3
Jul 20 22:02:31 linux modprobe: modprobe: Can't locate module sound-service-1-3
Jul 20 22:02:31 linux modprobe: modprobe: Can't locate module sound-service-2-3
Jul 20 22:02:32 linux modprobe: modprobe: Can't locate module sound-service-3-3
Jul 20 22:07:51 linux modprobe: modprobe: Can't locate module sound-service-1-3
Jul 20 22:07:51 linux modprobe: modprobe: Can't locate module sound-service-2-3
Jul 20 22:07:51 linux modprobe: modprobe: Can't locate module sound-service-3-3
Jul 20 22:31:54 linux -- MARK --
Jul 20 22:51:54 linux -- MARK --
Jul 20 22:59:00 linux /USR/SBIN/CRON[20321]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 20 23:11:54 linux -- MARK --
Jul 20 23:31:54 linux -- MARK --
Jul 20 23:51:54 linux -- MARK --
Jul 20 23:59:00 linux /USR/SBIN/CRON[23201]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 00:00:00 linux /USR/SBIN/CRON[23219]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 21 00:11:54 linux -- MARK --
Jul 21 00:31:54 linux -- MARK --
Jul 21 00:51:54 linux -- MARK --
Jul 21 00:59:00 linux /USR/SBIN/CRON[25967]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 01:00:00 linux /USR/SBIN/CRON[25997]: (root) CMD (/sbin/evlogmgr -c "severity=DEBUG")
Jul 21 01:11:54 linux -- MARK --
Jul 21 01:31:54 linux -- MARK --
Jul 21 01:51:54 linux -- MARK --
Jul 21 01:59:00 linux /USR/SBIN/CRON[28617]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 02:00:00 linux /USR/SBIN/CRON[28679]: (root) CMD (/sbin/evlogmgr -c 'age > "30d"')
Jul 21 02:11:54 linux -- MARK --
Jul 21 02:31:54 linux -- MARK --
Jul 21 02:51:54 linux -- MARK --
Jul 21 02:59:00 linux /USR/SBIN/CRON[31622]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 02:59:00 linux /USR/SBIN/CRON[31624]: (root) CMD (online_update )
Jul 21 03:11:54 linux -- MARK --
Jul 21 03:31:54 linux -- MARK --
Jul 21 03:51:54 linux -- MARK --
Jul 21 03:59:00 linux /USR/SBIN/CRON[2076]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 04:11:54 linux -- MARK --
Jul 21 04:14:00 linux /USR/SBIN/CRON[2847]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.daily)
Jul 21 04:19:02 linux su: (to nobody) root on none
Jul 21 04:19:02 linux su: pam_unix2: session started for user nobody, service su
Jul 21 04:22:43 linux su: pam_unix2: session finished for user nobody, service su
Jul 21 04:51:54 linux -- MARK --
Jul 21 04:59:00 linux /USR/SBIN/CRON[5529]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 05:11:55 linux -- MARK --
Jul 21 05:31:55 linux -- MARK --
Jul 21 05:51:55 linux -- MARK --
Jul 21 05:59:00 linux /USR/SBIN/CRON[8550]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 06:00:00 linux /USR/SBIN/CRON[8609]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 21 06:11:55 linux -- MARK --
Jul 21 06:31:55 linux -- MARK --
Jul 21 06:51:55 linux -- MARK --
Jul 21 06:59:00 linux /USR/SBIN/CRON[11581]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 07:11:55 linux -- MARK --
Jul 21 07:31:55 linux -- MARK --
Jul 21 07:51:55 linux -- MARK --
Jul 21 07:59:00 linux /USR/SBIN/CRON[14960]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 08:11:55 linux -- MARK --
Jul 21 08:31:55 linux -- MARK --
Jul 21 08:51:55 linux -- MARK --
Jul 21 08:59:00 linux /USR/SBIN/CRON[17978]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 09:11:55 linux -- MARK --
Jul 21 09:31:55 linux -- MARK --
Jul 21 09:51:55 linux -- MARK --
Jul 21 09:59:00 linux /USR/SBIN/CRON[21221]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 10:11:55 linux -- MARK --
Jul 21 10:31:55 linux -- MARK --
Jul 21 10:51:55 linux -- MARK --
Jul 21 10:59:00 linux /USR/SBIN/CRON[24643]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 11:11:55 linux -- MARK --
Jul 21 11:31:55 linux -- MARK --
Jul 21 11:51:55 linux -- MARK --
Jul 21 11:59:00 linux /USR/SBIN/CRON[28347]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 12:00:00 linux /USR/SBIN/CRON[28359]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 21 12:11:55 linux -- MARK --
Jul 21 12:31:55 linux -- MARK --
Jul 21 12:51:55 linux -- MARK --
Jul 21 12:59:00 linux /USR/SBIN/CRON[32064]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 13:11:55 linux -- MARK --
Jul 21 13:31:55 linux -- MARK --
Jul 21 13:51:55 linux -- MARK --
Jul 21 13:59:00 linux /USR/SBIN/CRON[2775]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 14:11:55 linux -- MARK --
Jul 21 14:31:55 linux -- MARK --
Jul 21 14:51:55 linux -- MARK --
Jul 21 14:59:00 linux /USR/SBIN/CRON[5818]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 15:11:55 linux -- MARK --
Jul 21 15:31:55 linux -- MARK --
Jul 21 15:51:55 linux -- MARK --
Jul 21 15:59:00 linux /USR/SBIN/CRON[8937]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 16:11:55 linux -- MARK --
Jul 21 16:31:55 linux -- MARK --
Jul 21 16:51:55 linux -- MARK --
Jul 21 16:59:00 linux /USR/SBIN/CRON[12108]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 17:11:55 linux -- MARK --
Jul 21 17:31:55 linux -- MARK --
Jul 21 17:51:55 linux -- MARK --
Jul 21 17:59:00 linux /USR/SBIN/CRON[15323]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 18:00:00 linux /USR/SBIN/CRON[15361]: (root) CMD ( /usr/lib/sa/sa2 -A #update reports every 6 hour)
Jul 21 18:11:55 linux -- MARK --
Jul 21 18:31:55 linux -- MARK --
Jul 21 18:51:55 linux -- MARK --
Jul 21 18:59:00 linux /USR/SBIN/CRON[18542]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 19:11:55 linux -- MARK --
Jul 21 19:31:55 linux -- MARK --
Jul 21 19:51:55 linux -- MARK --
Jul 21 19:59:00 linux /USR/SBIN/CRON[21885]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 20:11:55 linux -- MARK --
Jul 21 20:31:55 linux -- MARK --
Jul 21 20:51:55 linux -- MARK --
Jul 21 20:59:00 linux /USR/SBIN/CRON[25359]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 21:11:55 linux -- MARK --
Jul 21 21:31:55 linux -- MARK --
Jul 21 21:51:55 linux -- MARK --
Jul 21 21:59:00 linux /USR/SBIN/CRON[28604]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 22:11:55 linux -- MARK --
Jul 21 22:31:55 linux -- MARK --
Jul 21 22:51:55 linux -- MARK --
Jul 21 22:53:54 linux su: (to root) joey on /dev/pts/0
Jul 21 22:53:54 linux su: pam_unix2: session started for user root, service su
Jul 21 22:56:55 linux su: pam_unix2: session finished for user root, service su
Jul 21 22:59:00 linux /USR/SBIN/CRON[31816]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
Jul 21 23:00:30 linux modprobe: modprobe: Can't locate module sound-service-1-3
Jul 21 23:00:30 linux modprobe: modprobe: Can't locate module sound-service-2-3
Jul 21 23:00:30 linux modprobe: modprobe: Can't locate module sound-service-3-3
Jul 21 23:01:19 linux su: (to root) joey on /dev/pts/0
Jul 21 23:01:19 linux su: pam_unix2: session started for user root, service su
Jul 21 23:10:19 linux su: pam_unix2: session finished for user root, service su
Jul 21 23:31:55 linux -- MARK --
Jul 21 23:51:55 linux -- MARK --
Jul 21 23:59:00 linux /USR/SBIN/CRON[2446]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)