Date: Fri, 05 Sep 2008 20:38:12 +0200 From: "Peter Boosten" <peter@boosten.org> To: freebsd-questions@freebsd.org Subject: Re: Strange traffic originating from httpd Message-ID: <20080905203812.57681dffjf1gfhxc@www.boosten.org> In-Reply-To: <48C1738E.8030206@boosten.org> References: <48C1738E.8030206@boosten.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Quoting "Peter Boosten" <peter@boosten.org>: > Hi all, > > Just today I noticed some strange UDP4 traffic from my webserver to an > IP address unknown to me, connecting to port 8000 (UDP). > > Sockstat showed httpd (running as www) as the culprit. > Does anyone know what could cause this? > > I run several websites (Joomla, Wordpress, Coppermine, Nucleus), so > maybe some plugin does this. > [snip] Oke, did some checks and found the following: the UDP connection is initiated once when anyone visits one of the Wordpress sites. A tcpdump shows that the IP address of the visiting client is transmitted to that external site, so probably it's one of the plugins: - Akismet - WP-Shortstat - Wassup - WPsyslog I'm going to ask in the Wordpress groups. Apologies for the polution :-) Peter -- http://www.boosten.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080905203812.57681dffjf1gfhxc>