On Sun, 02 Mar 2008 18:00:45 +1030, Tim wrote: [...] > > What security software? Doesn't it have some way to tell you what is > making the access? If you can catch it in the act, yourself, using > extra parameters with the netstat command can reveal the program doing > so. e.g. netstat -tuevp > > But, like others, I'd suspect it's a FTP YUM mirror being checked. > > > > Mirror mirror, on the web, who's the updatesed of all... > [...] The security software is stuff I wrote using libipq. I could add the netstat -tuevp , but I'll wait to see if iptables catches anything. BTW, I just got this: [root]# rpm -q vim rpmdb: Lock table is out of available locker entries rpmdb: Unknown locker ID: 956 error: db4 error(22) from db->close: Invalid argument error: cannot open Packages index using db3 - Cannot allocate memory (12) error: cannot open Packages database in /var/lib/rpm package vim is not installed What should I do about it? Thanks, Mike.