From owner-freebsd-questions@FreeBSD.ORG Wed Jun 4 18:25:42 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EA3C31065677 for ; Wed, 4 Jun 2008 18:25:42 +0000 (UTC) (envelope-from bahamasfranks@gmail.com) Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.245]) by mx1.freebsd.org (Postfix) with ESMTP id 99EF58FC1E for ; Wed, 4 Jun 2008 18:25:42 +0000 (UTC) (envelope-from bahamasfranks@gmail.com) Received: by an-out-0708.google.com with SMTP id b33so56182ana.13 for ; Wed, 04 Jun 2008 11:25:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:reply-to :sender:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition:x-google-sender-auth; bh=2w5gtHJqdKZZYx7R7To15AM3wJrHwhfSjBGxRRq47PI=; b=KgUgUZG0iVk9hDC0x3DeZlqU740bUnC0Zxd6p4H6Gf2/QFEhtbOVMmRK3DOI7o6ymS 6ge5TzpZq6uW/xewYlsjae2yaWNJl03F+GHUj7wXMWETmEwk8VzraLQL03kTz6Z0vd2Z YJ+bXwgA8sywQNUq2MZuhgrdHO/IjnDoG/nns= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:reply-to:sender:to:subject:mime-version :content-type:content-transfer-encoding:content-disposition :x-google-sender-auth; b=FQaz55uxEJRNEFTRhk+m0Orrbd9yjyXziI4Zy2icTpRLH17F03v9nwmRTPYlZR114n pnj1eJpxrhe2oWyctZHOqjhxZinjUVxjmHXfbZC7nR6aLnbudTdd4s8llT2BQKFVxmJX mC7lyLU+SBUItpJadOy6X//cFvPFM2l/TCN/k= Received: by 10.100.33.4 with SMTP id g4mr377655ang.111.1212603941823; Wed, 04 Jun 2008 11:25:41 -0700 (PDT) Received: by 10.101.71.15 with HTTP; Wed, 4 Jun 2008 11:25:41 -0700 (PDT) Message-ID: <539c60b90806041125s6b2fc0cbqbba52225d27e4583@mail.gmail.com> Date: Wed, 4 Jun 2008 11:25:41 -0700 From: "Steve Franks" Sender: bahamasfranks@gmail.com To: "FreeBSD Mailing List" MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Google-Sender-Auth: b86ec95969885725 Subject: intrusion? find is thrashing my disk every time I boot. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: stevefranks@ieee.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jun 2008 18:25:43 -0000 I'm really no security expert. I don't leave the system up 24/7, and I'm on a US DSL connection with a bunch of windows boxes. Seems to be a recent phenomena, I've started experiencing disk thrashing I can hear across the room. ps and top report cvslockd has been responsible for the thrashing (which usually occurs at a specific time of day (~1 am MST)), but now, find is doing the thrashing at boot every time (within the last week at least). Needless to say, I haven't changed the system in any way during that week. On windows, I'd just assume this to be normal behavior, but on FreeBSD, it's got me worried... I presume the security section of the manual has a good into to detecting intruders, but first I'm interested if there is a legitimate reason for find to be torturing my disk. I don't run much on my system - apache, cvs, portsnap, ssh, that's about it. Thanks, Steve