is this something to worry about: connection to smtp from a program called: jAFKvTwN007961
peter kostov
fedora at light-bg.com
Wed Nov 16 20:49:19 UTC 2005
On Wed, 2005-11-16 at 08:43 +0000, Paul Howarth wrote:
> On Wed, 2005-11-16 at 06:15 +0000, peter kostov wrote:
> > Today I saw this on my FC3:
> >
> > [root at hst-1-98 ~]# netstat -ap --tcp
> > Active Internet connections (servers and established)
> > Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
> >
> > [snip]
> >
> > tcp 0 92672 hst-1-98.siriusbg.com:57358 server266.com:smtp ESTABLISHED 2997/jAFKvTwN007961
> >
> > [root at hst-1-98 ~]# ps -u root | grep 2997
> > 2997 ? 00:00:01 sendmail
> >
> > Is that something that is sending mail without my knowledge?
> > That what worries me is the program name, and that I have not started any mail program or sent mail today...
>
> Don't worry, this is normal. Sendmail changes its cpmmand name to show
> the progress it's making in handling mail. This then shows up in "ps"
> and "netstat" listings as you've seen. Try "ps uaxww | grep sendmail"
> for example.
>
> Paul.
> --
> Paul Howarth <paul at city-fan.org>
Thanks Paul, good to hear that!
Peter.
>
More information about the fedora-list
mailing list