Networking :: Connection Out From Unknown Process?
Apr 6, 2010
If I look at firestarter actve connections I see that there are several connections from me to some dynamic ip, on various ports. I have no idea what that is.1. How to find which process is doing this connection ?2This is sure nothing good, how to kill /block connection
I'm pinging a certain website and what happens is that each time the ping process freezes for an unknown reason ca. 10-15 sec then it starts to ping. Note that only this particular domain causes this hanging and Ctrl-c seems to have no effect at all! The domain is niteco. So far I've tried several independent linux systems all with the same result however other non-linux systems ping normally.
Several of our servers that do not have direct exposure to the Internet have the following entry appearing in their respective /var/log/secure files.Are these messages harmless? If so, is there any way or reason to suppress their appearing in the log files?
Quite often (but not always) I'm getting this when I try to shutdown:
I looked at 'top' for a while and didn't see anything obvious, but there's always stuff running there that I don't necessarily know about. Looking at 'processes' using 'system monitor', I found a zombie'd process called 'runbackschedule'. Could this be it?
Maybe someone can shed some light on this process that is running. It is using my CPU about 100% since there are 2 instances of it running with about 50% used by each.abc_sieve_2.10_i686-pc-linux-gnuI've never noticed it running before and don't think I've installed anything except updates.
I am seeing an unknown internet connection both send and receive of about 5kbits that seems to happen every 15 seconds or so. I noticed this the other day and rebooted. It went away but I noticed it again. Nothing shows in the System monitor under processes. I can close all programs and it still seems to happen. What is the best way to track down what is causing this connection, and how to tell what it is connecting to?
start working with SA+Amavis+clamd+postfix+dovecot.will be my filter:spamassassin+amavisd-new+clamd. 1 Server will be my mail server: postfix+dovecot. Like u see, the emails from the outside reach first the filter, latter the mailbox. Now, I have seen in my log files, that if I receive a email to a "unknown user", the filter doesn't detect this and process the email and send it to the mail server. Exist a way to setup the filter to first check if the user exist and them apply all hard work and latter send the email to the mail server
"(process:325): GLib-WARNING **: getpwuid_r(): failed due to unknown user id (0)"
It comes after choosing language, when the Ubuntu start-up logo shows with the 5 dut under it. I am trying to install Ubuntu Netbook on a little Compaq Mini.
When i try to install Ubuntu 11.04 or try without installing i get graphics like this:[URL] same with older versions, and on older versions i used to get this error: (process:257):GLib-Warning**:getpwuid_r():failed due to unknown user id(0) but on new version it dosent appear. My graphics card is: GeForce 7600GT MSI.
i just tried to install Ubuntu Netbook 10.04 on my old Amilo Lifebook P Series. But after the boot screen and the choice to install Ubuntu i get stuck at the Ubuntu screen with the little dots on the bottom If I hit esc i can see the warning (process 257): GLib-WARNING **: getpwuid_(r) failed due to unknown user id (0)
I have the following problem. I want to find out connection between process and socket. When I type to the terminal the following command netstat -anpetu so I get the following output:
[Code]....
As you can see just some connection have assign PID/Programme. How can I find out Program of this socket without PID/programme. like this 0.0.0.0:52472? Certainly I know that some port are well-known but there are a lot of unknown ports(like 8307 3350 and so on).
My machine seems to be constantly downloading/uploading something. Not much - 1KiB/s - 50KiB/s, but it is bugging me.Is there a tool to see what process is using the network connection?
When installing build-essential and ubuntu-restricted-extras the internet connection was interrupted. How can I force re-installation in terminal? I'm looking all over for the commands but I can't find them. If i just type "sudo apt-get install build-essential ubuntu-restricted-extras" it returns the message that they are both up to date. I know one of them was interrupted and needs to be finished.
I have this problem for a month now. Some apache process that appears rather slowly using 100% cpu for each core. Today I watch some logs in apache2, namely other_vhosts_access.log and discover this server:8181 127.0.0.1 - - [13/Aug/2011:12:34:52 +0200] "OPTIONS * HTTP/1.0" 200 136 "-" "Apache (internal dummy connection)" On 8181 I have google sitemap generator running but I have it for over a year and it never make any problems.
If I uncheck and recheck "Enable Networking" in the Network Manager Applet 0.7.996 I would expect the wired network to disconnect (which it does) and reconnect (which it does NOT). So I tried sudo ifdown eth0 and got
Quote:
Ignoring unknown interface eth0=eth0.
ifconfig tells me
Quote:
eth0 Link encap:Ethernet HWaddr 00:25:64:e8:18:2c inet addr:192.168.0.112 Bcast:192.168.0.255 Mask:255.255.255.0 inet6 addr: fe80::225:64ff:fee8:182c/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
[code]....
so I am at a loss. How do I stop and restart the network interface short of rebooting the machine?
I tried posting this before and I'm not sure what happened but I don't think it worked, so if it did please forgive the double post.am very very new to centOS and linux in general. I just want to setup a test web server that more closely mirrors our actual web server that is hosted by rackspace. I've installed centOS and tried to setup Apache, PHP and MySQL from a guide on the web using Yum. When I go to localhost in the web browser I'm able to see the default apache page. However when I create a php page it's just blank.When I look at the apache error logs I get this: PHP Warning: Unknown: failed to open stream: Permission denied in Unknown on line 0
I've been searching alot on the internet and I know the issue is permission related, but I don't know how to fix it. I've seen some forum posts that say you need to use the chmod 775 command on the /var/www/html folder.Currently when I do ls -l /var/www/html it returns
-rw------- 1 root root 19 May 5 13:16 index.php -rw------- 1 root root 19 May 5 13:15 index.php~
I'm sure that this isn't correct but like I said I don't know much about how to set permissions or who the owner needs to be. I've done alot of searching and seen similar posts, but no one seems to explain it clearly.
I am using ubuntu 9.10 and I still cannot figure out this thing. I work behind a proxy managed by my university. Now, I cannot ping the other users on my network although they can ping me. Not to mention, I also cannot ping [URL]... It says : ping: unknown host [URL]... But I can ping the proxy server.
I installed a wireless card and it does see the card but when i do a iwscan I get this.I get a lot of IE: Unknown:This is on Ubuntu 10.10 server with no GUI. I setup scripts to take down and change the interface then put it back up but for this card it does not work.I have two other wireless devices that do work but i would like to remove then and replace them with this one.The other two are USB Wifi Sticks.I am setting this PC to replace a Wifi Router.
I noticed a huge data transfer to my computer. I wasn't downloading anything big, I have just opened Firefox, Thunderbird etc. It stopped after a minute but I'd like to know, what that was - this wasn't the first time something like this happened. I promptly started Wireshark and captured a few packets, all of them look like this:
[code]...
I tried to look at [URL]... but that webpage does not work. what the traffic might be caused by? Couldn't anyone hacked my pc?
I am using Ubuntu Server and would like to recieve an email once a day listing mac address's that have requested an ip address that are not in my list of known mac address's.
lookup=`grep $mac /root/dhcp.macs`
#This does not work as the first entry mac1 will be okay but mac2 and mac3 will not
#It will try to use mac2 as the file to look in which won't exist
#I need to make it loop through for each line of the variable and add that to the lookup value diff $mac $lookup
#I think this should differentiate known from unknown if i can get a lookup value
I'm trying to create a PAN (Personal Area Network) using a laptop (Siragon ML-1040) and my desktop computer, but I get the Connection Refused (111) error.
Blueman doesn't detect any network service between the two computers unless I start PAND on one of them and then it detects the NAP service. That, only after I enable the NAP/Workgroup services on the Services submenu in Blueman. However, it doesn't work neither with the NM plugins or without them (dhclient and that other one I can't remember the name of).
Any clues over here? I'm using pand 4.91 and blueman.
Its a case of ".... wireless network connection active but still not internet connection .."I am using WEP - 128 key ... Works when I connect directly using ethernet cable ... but not wireless (pci and wireless router)
I'm trying to do a SSH connection between my home and work PC both machines are running ubuntu 10.04. I have read all the comunity documentation at [URL] from Work PC. I went on to the web site what is my ip address and noted down the number, From Home i opened a terminal and typed: pnig (ip address). to which their was no reply, now i'm assuming i need to configure the works router to except connection requests, is this Correct?
Also what information do i need from my works network and how do i get it? I understand that I need the routers expernal ip address, but how do i referiance a specified computer after that address? What program do i use in ubunu and how is that information applied to it?
When I have video running and the video stops, I see that the connection is destroyed in about 5 seconds, which is what I want. If, rather than stopping the video, I pull the plug, I have seen it take 350 and 380 seconds before the connection is destroyed. Why is there such a large difference in the time to destroy a video connection between stopping the video and pulling the plug on it when using net filter connection tracking? How can I shorten the time for the connection to get destroyed when pulling the plug?
I have two linux laptops. Currently, I'm using both of them at work, side-by-side. Now the problem is, I'm connected to a wireless router, but the wireless only works on one of the laptops. So I'm stuck with one laptop that has no access to the internet. Both machines do, however, have working ethernet nic cards. So, I was wondering if I could use the laptop with the wireless connection to share the internet connection with my other linux machine and access the internet on both of them. Or as an alternative, just use the internet on the machine without wireless and be able to switch back and forth, that would increase my productivity like 30 fold.