Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In my access.log I see requests coming from and retrieving server's "/" and then all of graphics and CSS referenced in it. This happens regularly, every 5 minutes.

I want to find out what, why and how runs wget like this.

I changed "referer" in /etc/wgetrc to verify it's local wget executable making these calls, it is. Couldn't find anything suspicious in crontab. The server is running munin-node. Could a munin plugin be doing this?

share|improve this question

Oh, OK, it's Munin's http_loadtime plugin. It's a plugin to graph httpresponse time of a specific page. Defaults to using wget and grabbing "http://localhost/". Mystery solved :-)

share|improve this answer
atop's service mode can help answer "what was running back during that ten minute slice" questions. – Tobu Oct 11 '12 at 14:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.