From owner-freebsd-questions@FreeBSD.ORG  Tue Apr 13 21:04:29 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3643216A4CF
	for <freebsd-questions@freebsd.org>;
	Tue, 13 Apr 2004 21:04:29 -0700 (PDT)
Received: from buh.cameradicommercio.ro (buh.cameradicommercio.ro
	[81.196.25.19])	by mx1.FreeBSD.org (Postfix) with ESMTP id 425B343D49
	for <freebsd-questions@freebsd.org>;
	Tue, 13 Apr 2004 21:04:26 -0700 (PDT)
	(envelope-from itetcu@apropo.ro)
Received: by buh.cameradicommercio.ro (Postfix, from userid 1002)
	id 1D60C6235; Wed, 14 Apr 2004 00:09:02 +0300 (EEST)
Received: by buh.cameradicommercio.ro (Postfix, from userid 1002)
	id 43C5960DB; Tue, 13 Apr 2004 23:50:08 +0300 (EEST)
Received: by buh.cameradicommercio.ro (Postfix, from userid 1002)
	id 5F6626255; Tue, 13 Apr 2004 23:50:20 +0300 (EEST)
Received: from it.buh.cameradicommercio.ro (it.buh.cameradicommercio.ro
	[192.168.0.10])	by buh.cameradicommercio.ro (Postfix) with ESMTP
	id 98AF0622D; Tue, 13 Apr 2004 23:48:31 +0300 (EEST)
Received: from localhost (localhost.buh.cameradicommercio.ro [127.0.0.1])
	by it.buh.cameradicommercio.ro (Postfix) with ESMTP
	id E9864213; Tue, 13 Apr 2004 23:51:43 +0300 (EEST)
Received: from it.buh.cameradicommercio.ro ([127.0.0.1])port 10024)
	with ESMTP id 00979-10; Tue, 13 Apr 2004 23:51:43 +0300 (EEST)
Received: from it.buh.cameradicommercio.ro (localhost.buh.cameradicommercio.ro
	[127.0.0.1])	by it.buh.cameradicommercio.ro (Postfix) with SMTP
	id 5917D1CE; Tue, 13 Apr 2004 23:51:43 +0300 (EEST)
Date: Tue, 13 Apr 2004 23:51:43 +0300
From: Ion-Mihai Tetcu <itetcu@apropo.ro>
To: RJ45 <rj45@slacknet.com>
Message-Id: <20040413235143.4c2cb911@it.buh.cameradicommercio.ro>
In-Reply-To: <Pine.LNX.4.21.0404131401220.1330-100000@slacknet.slacknet.com>
References: <Pine.LNX.4.21.0404131401220.1330-100000@slacknet.slacknet.com>
X-Mailer: Sylpheed version 0.9.10claws (GTK+ 1.2.10; i386-portbld-freebsd5.2)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new at it.buh.cameradicommercio.ro
cc: freebsd-questions@freebsd.org
Subject: Re: portaudit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Apr 2004 04:04:29 -0000

On Tue, 13 Apr 2004 14:04:04 -0600 (MDT)
RJ45 <rj45@slacknet.com> wrote:

> 
> Hello,
> I installed portaudit.
> Since I installed it I noticed there are always ESTABLISHED connections to
> some ftp servers:
> 
> tcp4       0     20  venus.51739            freebsd.utcluj.r.ftp
> ESTABLISHED
> tcp4       0     20  venus.49718            gort.ludd.ltu.se.ftp
> ESTABLISHED
> tcp4       0      6  venus.49706            www.freebsd.cz.ftp
> ESTABLISHED
> tcp4       0      6  venus.49688            gort.ludd.ltu.se.ftp
> ESTABLISHED
> tcp4       0     20  venus.49682            ftp.jpix.ad.jp.ftp
> ESTABLISHED
> 
> and I noticed I have a constant traffic rate on my ADSL link of about
> 20 Kb/sec inbound and 20 Kb/sec outbound, always day and night.
> is it normal?

No. Edit /usr/local/etc/portaudit.conf and add something like:
FETCH_BEFORE_ARGS=-vvv

after that do a ps and kill -9 the fetchaudit (or portaudit) process.

Watch your daily mail and send the output and the content of
portaudit.conf.

But I doubt the the output traffic is portaudit fault.

-- 
IOnut
Unregistered ;) FreeBSD "user"