On Wed, 2005-11-16 at 06:15 +0000, peter kostov wrote:
> Today I saw this on my FC3:
> [root@hst-1-98 ~]# netstat -ap --tcp
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address Foreign Address State
PID/Program name
> [snip]
> tcp 0 92672 hst-1-98.siriusbg.com:57358
server266.com:smtp ESTABLISHED 2997/jAFKvTwN007961
> [root@hst-1-98 ~]# ps -u root | grep 2997
> 2997 ? 00:00:01 sendmail
> Is that something that is sending mail without my
knowledge?
> That what worries me is the program name, and that I have not started any mail
program or sent mail today...
Don't worry, this is normal. Sendmail changes its cpmmand name to show
the progress it's making in handling mail. This then shows up in "ps"
and "netstat" listings as you've seen. Try "ps uaxww | grep
sendmail"
for example.
Paul.
--
Paul Howarth <paul(a)city-fan.org>