Date: Thu, 23 Jun 2005 13:26:23 -0400 From: Chuck Swiger <cswiger@mac.com> To: ruben@bloemgarten.demon.nl Cc: FreeBSD-questions@FreeBSD.org Subject: Re: stat running as www weirdness - genarting INCOMING traffic Message-ID: <42BAF0BF.8000200@mac.com> In-Reply-To: <20050623013109.EFAD843D1F@mx1.FreeBSD.org> References: <20050623013109.EFAD843D1F@mx1.FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Ruben Bloemgarten wrote: > I’m seeing weirdness of stat opening up port 4000+ and generating/receiving > enormous amounts of incoming traffic i.e. 400Gb over a 24hour time > period.Does this sound familiar to anyone ? Thanks for any brain usage not > my own. Insufficient data. From which port(s) to which port(s), and are the IP addresses on the other side the same or a random range (which would imply your machine has been hacked and is scanning outwards). Showing a tcpdump of a few example connections would be really useful. -- -Chuck
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42BAF0BF.8000200>