is this something to worry about: connection to smtp from a program called: jAFKvTwN007961

[Paul Howarth]

On Wed, 2005-11-16 at 06:15 +0000, peter kostov wrote:
> Today I saw this on my FC3:
> 
> [root at hst-1-98 ~]# netstat -ap --tcp
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
> 
> [snip]
> 
> tcp        0  92672 hst-1-98.siriusbg.com:57358 server266.com:smtp          ESTABLISHED 2997/jAFKvTwN007961
> 
> [root at hst-1-98 ~]# ps -u root | grep 2997
>  2997 ?        00:00:01 sendmail
> 
> Is that something that is sending mail without my knowledge?
> That what worries me is the program name, and that I have not started any mail program or sent mail today...

Don't worry, this is normal. Sendmail changes its cpmmand name to show
the progress it's making in handling mail. This then shows up in "ps"
and "netstat" listings as you've seen. Try "ps uaxww | grep sendmail"
for example.

Paul.
-- 
Paul Howarth <paul at city-fan.org>