Unknown network activity every 5 minutes

[Thomas Taylor]

On Wednesday 12 October 2005 06:18, McGuffey, David wrote:
> Have just started working with FC4 (after several years of working Solaris
> and Windows efforts), and noticed that I'm getting network activity every 5
> minutes, even when no one is logged onto the system.  It appears that a
> process is waking up every 5 minutes and checking something--maybe DNS.  It
> is a fresh install of FC4 desktop load, with SELinux and the firewall
> enabled, and the latest updates via yum.  The machine sits behind a
> separate firewall with rules that allow no externally originated
> connections.  It is also on its a lone machine on its own isolated internal
> network, with no connections allowed from other machines in the internal
> network.
>
> Where is network activity logged?  If it isn't currently being logged, what
> actions do I take to log this kind of activity?  What process might be
> doing this?
>
> Dave McGuffey
> Principal Information System Security Engineer
> SETA, Transformational Satellite Program
> SAIC, Columbia, MD 21046
> 410.859.1165 (w) // 301.801.9752 (c)

In addition to Paul and Andys replies, you might check out whether cron is 
scheduling some job every 5 minutes.  Look in /etc/crontab.

HTH,
Tom

-- 
Tom Taylor
Linux user #263467
Federal Way, WA
Iraq war: 1,955 US soldiers dead and counting