From owner-freebsd-stable@FreeBSD.ORG Fri Sep 5 01:12:14 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1B0357CC for ; Fri, 5 Sep 2014 01:12:14 +0000 (UTC) Received: from www81.your-server.de (www81.your-server.de [213.133.104.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CDE7D1FA5 for ; Fri, 5 Sep 2014 01:12:13 +0000 (UTC) Received: from [92.76.80.218] (helo=michael-think) by www81.your-server.de with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1XPi4L-0000sU-Bv for freebsd-stable@freebsd.org; Fri, 05 Sep 2014 03:12:05 +0200 Content-Type: text/plain; charset=iso-8859-15; format=flowed; delsp=yes Date: Fri, 05 Sep 2014 03:11:57 +0200 Subject: 10.0 sftp/sshd no longer times out? To: "FreeBSD Stable Mailing List" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: "Michael Ross" Message-ID: User-Agent: Opera Mail/1.0 (Win32) X-Authenticated-Sender: gmx@ross.cx X-Virus-Scanned: Clear (ClamAV 0.98.4/19337/Thu Sep 4 23:45:43 2014) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Sep 2014 01:12:14 -0000 Hello, I just noticed something strange on my 10.0 r269088 system, with ssh at OpenSSH_6.6.1p1, OpenSSL 1.0.1h-freebsd 5 Jun 2014: I have 28 blocks like this in ps output: 0 869 739 0 20 0 86428 3732 select Is - 0:00,05 sshd: michael [priv] (sshd) 1001 872 869 0 20 0 86428 3732 select I - 0:00,13 sshd: michael@notty (sshd) 1001 873 872 0 30 0 23584 0 pause IWs - 0:00,00 csh -c /usr/libexec/sftp-server 1001 875 873 0 20 0 50244 3092 select I - 0:00,01 /usr/libexec/sftp-server and sockstat show the corresponding sockets as connected: michael sshd 8737 3 tcp4 x.x.x.x:22 188.96.33.76:42205 michael sshd 8737 4 stream -> ?? root sshd 8734 3 tcp4 x.x.x.x:22 188.96.33.76:42205 root sshd 8734 5 stream -> ?? 188.96.33.76 was my office ip address from the 22nd to the 28th of July. In fact, all ip addresses I connected from since 25th of July still show output as above. Shouldn't these connections have timed out by now, and the sftp-server / sshd connection exited? I upgraded this system from 9.2 to 10.0 on the 25th of July, never seen this before. Am I overlooking something here? Michael