is this something to worry about: connection to smtp from a program called: jAFKvTwN007961

peter kostov fedora at light-bg.com
Wed Nov 16 20:49:19 UTC 2005


On Wed, 2005-11-16 at 08:43 +0000, Paul Howarth wrote:
> On Wed, 2005-11-16 at 06:15 +0000, peter kostov wrote:
> > Today I saw this on my FC3:
> > 
> > [root at hst-1-98 ~]# netstat -ap --tcp
> > Active Internet connections (servers and established)
> > Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
> > 
> > [snip]
> > 
> > tcp        0  92672 hst-1-98.siriusbg.com:57358 server266.com:smtp          ESTABLISHED 2997/jAFKvTwN007961
> > 
> > [root at hst-1-98 ~]# ps -u root | grep 2997
> >  2997 ?        00:00:01 sendmail
> > 
> > Is that something that is sending mail without my knowledge?
> > That what worries me is the program name, and that I have not started any mail program or sent mail today...
> 
> Don't worry, this is normal. Sendmail changes its cpmmand name to show
> the progress it's making in handling mail. This then shows up in "ps"
> and "netstat" listings as you've seen. Try "ps uaxww | grep sendmail"
> for example.
> 
> Paul.
> -- 
> Paul Howarth <paul at city-fan.org>

Thanks Paul, good to hear that!

Peter.

> 




More information about the fedora-list mailing list