portaudit

[Ion-Mihai Tetcu]

On Tue, 13 Apr 2004 14:04:04 -0600 (MDT)
RJ45 <rj45 at slacknet.com> wrote:

> 
> Hello,
> I installed portaudit.
> Since I installed it I noticed there are always ESTABLISHED connections to
> some ftp servers:
> 
> tcp4       0     20  venus.51739            freebsd.utcluj.r.ftp
> ESTABLISHED
> tcp4       0     20  venus.49718            gort.ludd.ltu.se.ftp
> ESTABLISHED
> tcp4       0      6  venus.49706            www.freebsd.cz.ftp
> ESTABLISHED
> tcp4       0      6  venus.49688            gort.ludd.ltu.se.ftp
> ESTABLISHED
> tcp4       0     20  venus.49682            ftp.jpix.ad.jp.ftp
> ESTABLISHED
> 
> and I noticed I have a constant traffic rate on my ADSL link of about
> 20 Kb/sec inbound and 20 Kb/sec outbound, always day and night.
> is it normal?

No. Edit /usr/local/etc/portaudit.conf and add something like:
FETCH_BEFORE_ARGS=-vvv

after that do a ps and kill -9 the fetchaudit (or portaudit) process.

Watch your daily mail and send the output and the content of
portaudit.conf.

But I doubt the the output traffic is portaudit fault.

-- 
IOnut
Unregistered ;) FreeBSD "user"