On Wed, 2005-11-16 at 06:15 +0000, peter kostov wrote: > Today I saw this on my FC3: > > [root@hst-1-98 ~]# netstat -ap --tcp > Active Internet connections (servers and established) > Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name > > [snip] > > tcp 0 92672 hst-1-98.siriusbg.com:57358 server266.com:smtp ESTABLISHED 2997/jAFKvTwN007961 > > [root@hst-1-98 ~]# ps -u root | grep 2997 > 2997 ? 00:00:01 sendmail > > Is that something that is sending mail without my knowledge? > That what worries me is the program name, and that I have not started any mail program or sent mail today... Don't worry, this is normal. Sendmail changes its cpmmand name to show the progress it's making in handling mail. This then shows up in "ps" and "netstat" listings as you've seen. Try "ps uaxww | grep sendmail" for example. Paul. -- Paul Howarth <paul@xxxxxxxxxxxx>
