On Fri, Feb 6, 2015 at 12:11 AM, Hartmut Figge h.fi...@gmx.de wrote:
Greetings,
after noticing huge downloads circa ever 2 minutes naturally I wanted to
stop that. :) After a reboot followed by startx which opened icewm I
issued the command
sudo ngrep -t -d net0 | tee system-ngrep_log.txt
in a xterm and waited for one occurrence.
Full log: www.triffids.de/pub/tmp/system-ngrep_log.txt.gz (5,6MB)
How to determine the culprit?
Hartmut
Port 995 there indicates SSL POP mail. If you don't know/recall what
process is polling for that, a run of netstat -p while it's active
should give the pid and name for it. If I recall, netstat -p might
need root.
--
Poison [BLX]
Joshua M. Murphy
