On Wed, 2005-11-16 at 06:15 +0000, peter kostov wrote:
Today I saw this on my FC3:
[root@hst-1-98 ~]# netstat -ap --tcp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
PID/Program name
[snip]
tcp 0 92672 hst-1-98.siriusbg.com:57358 server266.com:smtp ESTABLISHED
2997/jAFKvTwN007961
[root@hst-1-98 ~]# ps -u root | grep 2997
2997 ? 00:00:01 sendmail
Is that something that is sending mail without my knowledge?
That what worries me is the program name, and that I have not started any mail program or
sent mail today...
Don't worry, this is normal. Sendmail changes its cpmmand name to show
the progress it's making in handling mail. This then shows up in "ps"
and "netstat" listings as you've seen. Try "ps uaxww | grep
sendmail"
for example.
Paul.
--
Paul Howarth <paul(a)city-fan.org>