is this something to worry about: connection to smtp from a program called: jAFKvTwN007961

[peter kostov]

Today I saw this on my FC3:

[root at hst-1-98 ~]# netstat -ap --tcp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name

[snip]

tcp        0  92672 hst-1-98.siriusbg.com:57358 server266.com:smtp          ESTABLISHED 2997/jAFKvTwN007961

[root at hst-1-98 ~]# ps -u root | grep 2997
 2997 ?        00:00:01 sendmail

Is that something that is sending mail without my knowledge?
That what worries me is the program name, and that I have not started any mail program or sent mail today...

Thanks, Peter

-- 
Peter Kostov, webdesigner, photographer
Sofia, Bulgaria

Home sites - www.webdesign.light-bg.com
           - www.light-bg.com