Date: Tue, 13 Apr 2004 23:51:43 +0300 From: Ion-Mihai Tetcu <itetcu@apropo.ro> To: RJ45 <rj45@slacknet.com> Cc: freebsd-questions@freebsd.org Subject: Re: portaudit Message-ID: <20040413235143.4c2cb911@it.buh.cameradicommercio.ro> In-Reply-To: <Pine.LNX.4.21.0404131401220.1330-100000@slacknet.slacknet.com> References: <Pine.LNX.4.21.0404131401220.1330-100000@slacknet.slacknet.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 13 Apr 2004 14:04:04 -0600 (MDT) RJ45 <rj45@slacknet.com> wrote: > > Hello, > I installed portaudit. > Since I installed it I noticed there are always ESTABLISHED connections to > some ftp servers: > > tcp4 0 20 venus.51739 freebsd.utcluj.r.ftp > ESTABLISHED > tcp4 0 20 venus.49718 gort.ludd.ltu.se.ftp > ESTABLISHED > tcp4 0 6 venus.49706 www.freebsd.cz.ftp > ESTABLISHED > tcp4 0 6 venus.49688 gort.ludd.ltu.se.ftp > ESTABLISHED > tcp4 0 20 venus.49682 ftp.jpix.ad.jp.ftp > ESTABLISHED > > and I noticed I have a constant traffic rate on my ADSL link of about > 20 Kb/sec inbound and 20 Kb/sec outbound, always day and night. > is it normal? No. Edit /usr/local/etc/portaudit.conf and add something like: FETCH_BEFORE_ARGS=-vvv after that do a ps and kill -9 the fetchaudit (or portaudit) process. Watch your daily mail and send the output and the content of portaudit.conf. But I doubt the the output traffic is portaudit fault. -- IOnut Unregistered ;) FreeBSD "user"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040413235143.4c2cb911>