Date: Wed, 14 Apr 2004 12:26:37 -0600 (MDT) From: RJ45 <rj45@slacknet.com> To: Ion-Mihai Tetcu <itetcu@apropo.ro> Cc: freebsd-questions@freebsd.org Subject: Re: portaudit Message-ID: <Pine.LNX.4.21.0404141225560.29551-100000@slacknet.slacknet.com> In-Reply-To: <20040413235143.4c2cb911@it.buh.cameradicommercio.ro>
next in thread | previous in thread | raw e-mail | index | archive | help
hi, actually I have many fetchaudit daily script running from previous days: root 1310 0.0 0.1 1088 536 ?? I 6Apr04 0:00.02 /bin/sh /usr/local/etc/periodic/daily/330.fetchaudit root 68392 0.0 0.1 1088 536 ?? I 7Apr04 0:00.02 /bin/sh /usr/local/etc/periodic/daily/330.fetchaudit root 75805 0.0 0.1 1088 536 ?? I Fri03AM 0:00.02 /bin/sh /usr/local/etc/periodic/daily/330.fetchaudit root 30120 0.0 0.1 1088 536 ?? I Sat03AM 0:00.02 /bin/sh /usr/local/etc/periodic/daily/330.fetchaudit root 84915 0.0 0.1 1088 536 ?? I Sun03AM 0:00.02 /bin/sh /usr/local/etc/periodic/daily/330.fetchaudit looks liek the traffic is due to this because I Stopped hte processes and the traffic stopped as well... thanks Rick On Tue, 13 Apr 2004, Ion-Mihai Tetcu wrote: > On Tue, 13 Apr 2004 14:04:04 -0600 (MDT) > RJ45 <rj45@slacknet.com> wrote: > > > > > Hello, > > I installed portaudit. > > Since I installed it I noticed there are always ESTABLISHED connections to > > some ftp servers: > > > > tcp4 0 20 venus.51739 freebsd.utcluj.r.ftp > > ESTABLISHED > > tcp4 0 20 venus.49718 gort.ludd.ltu.se.ftp > > ESTABLISHED > > tcp4 0 6 venus.49706 www.freebsd.cz.ftp > > ESTABLISHED > > tcp4 0 6 venus.49688 gort.ludd.ltu.se.ftp > > ESTABLISHED > > tcp4 0 20 venus.49682 ftp.jpix.ad.jp.ftp > > ESTABLISHED > > > > and I noticed I have a constant traffic rate on my ADSL link of about > > 20 Kb/sec inbound and 20 Kb/sec outbound, always day and night. > > is it normal? > > No. Edit /usr/local/etc/portaudit.conf and add something like: > FETCH_BEFORE_ARGS=-vvv > > after that do a ps and kill -9 the fetchaudit (or portaudit) process. > > Watch your daily mail and send the output and the content of > portaudit.conf. > > But I doubt the the output traffic is portaudit fault. > > -- > IOnut > Unregistered ;) FreeBSD "user" > >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.21.0404141225560.29551-100000>