On Fri, Feb 6, 2015 at 12:11 AM, Hartmut Figge <[email protected]> wrote: > Greetings, > > after noticing huge downloads circa ever 2 minutes naturally I wanted to > stop that. :) After a reboot followed by startx which opened icewm I > issued the command > sudo ngrep -t -d net0 | tee system-ngrep_log.txt > in a xterm and waited for one occurrence. > > Full log: www.triffids.de/pub/tmp/system-ngrep_log.txt.gz (5,6MB) > > How to determine the culprit? > > Hartmut >
Port 995 there indicates SSL POP mail. If you don't know/recall what process is polling for that, a run of "netstat -p" while it's active should give the pid and name for it. If I recall, "netstat -p" might need root. -- Poison [BLX] Joshua M. Murphy
