portaudit

[RJ45]

hi,
actually I have many fetchaudit daily script running from previous days:

root    1310  0.0  0.1  1088  536  ??  I     6Apr04   0:00.02 /bin/sh
/usr/local/etc/periodic/daily/330.fetchaudit
root   68392  0.0  0.1  1088  536  ??  I     7Apr04   0:00.02 /bin/sh
/usr/local/etc/periodic/daily/330.fetchaudit
root   75805  0.0  0.1  1088  536  ??  I    Fri03AM   0:00.02 /bin/sh
/usr/local/etc/periodic/daily/330.fetchaudit
root   30120  0.0  0.1  1088  536  ??  I    Sat03AM   0:00.02 /bin/sh
/usr/local/etc/periodic/daily/330.fetchaudit
root   84915  0.0  0.1  1088  536  ??  I    Sun03AM   0:00.02 /bin/sh
/usr/local/etc/periodic/daily/330.fetchaudit

looks liek the traffic is due to this because I Stopped hte processes and
the traffic stopped as well...

thanks

Rick


On Tue, 13 Apr 2004, Ion-Mihai Tetcu wrote:

> On Tue, 13 Apr 2004 14:04:04 -0600 (MDT)
> RJ45 <rj45 at slacknet.com> wrote:
> 
> > 
> > Hello,
> > I installed portaudit.
> > Since I installed it I noticed there are always ESTABLISHED connections to
> > some ftp servers:
> > 
> > tcp4       0     20  venus.51739            freebsd.utcluj.r.ftp
> > ESTABLISHED
> > tcp4       0     20  venus.49718            gort.ludd.ltu.se.ftp
> > ESTABLISHED
> > tcp4       0      6  venus.49706            www.freebsd.cz.ftp
> > ESTABLISHED
> > tcp4       0      6  venus.49688            gort.ludd.ltu.se.ftp
> > ESTABLISHED
> > tcp4       0     20  venus.49682            ftp.jpix.ad.jp.ftp
> > ESTABLISHED
> > 
> > and I noticed I have a constant traffic rate on my ADSL link of about
> > 20 Kb/sec inbound and 20 Kb/sec outbound, always day and night.
> > is it normal?
> 
> No. Edit /usr/local/etc/portaudit.conf and add something like:
> FETCH_BEFORE_ARGS=-vvv
> 
> after that do a ps and kill -9 the fetchaudit (or portaudit) process.
> 
> Watch your daily mail and send the output and the content of
> portaudit.conf.
> 
> But I doubt the the output traffic is portaudit fault.
> 
> -- 
> IOnut
> Unregistered ;) FreeBSD "user"
> 
>