Conection monitor

[chejose]

Is there a way to know who/what is using the internet connection? This morning, since over a half hour ago, the modem is indicating a high level of activity even though the PC was not being used. I have a fast connection (1 G) so that much activity has me concerned. What is going on? If it is downloading something it must be BIG... and Fedora did not ask permission to download anything.

To summarize: is there a way to know just what is using the modem?

Thanks

[pete_1967]

You can use Wireshark for example to sniff and record your network traffic.

[leigh123linux]

Is there a way to know who/what is using the internet connection? This morning, since over a half hour ago, the modem is indicating a high level of activity even though the PC was not being used. I have a fast connection (1 G) so that much activity has me concerned. What is going on? If it is downloading something it must be BIG... and Fedora did not ask permission to download anything.

To summarize: is there a way to know just what is using the modem?

Thanks

Have you got the yum auto update daemon active,

su -
system-config-services

it's near the bottom of the list

[jtravnick]

pete,
Will wireshark work to see if anyone else is accesing a wireless network? I know my neaghbor can hit my router as he has told me he has. Even asks if he can use it when ever his windows needs to be redone. But before I lock it down im wondering if anyone else is hitting it. Havnt realy woryed about it before since this is a small town and not many neaghbors.

Jim

[chejose]

OK, I installed Wireshark, and see that a process UDP is using the internet. It has been going for a good hour now.
I know that Fedora is supposed to be safe, but could it be that "someone" is using my computer for their own ends? If so, how can I pin it down?

[leigh123linux]

OK, I installed Wireshark, and see that a process UDP is using the internet. It has been going for a good hour now.
I know that Fedora is supposed to be safe, but could it be that "someone" is using my computer for their own ends? If so, how can I pin it down?

another way to see active processes is "lsof" it's in the core repo so it is easy to install.

Fedora 6 download.fedora.redhat.com/pub/fedora/linux/core/6/x86_64/os/Fedora/RPMS/lsof-4.78-3.x86_64.rpm
Fedora 6 download.fedora.redhat.com/pub/fedora/linux/core/6/i386/os/Fedora/RPMS/lsof-4.78-3.i386.rpm

su -
yum install lsof

http://www.builderau.com.au/program/unix/soa/Track_network_connections_with_LSOF_on_Linux/0,339024638,320268166,00.htm

debian-leigh:/home/leigh# lsof -i
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
portmap 3070 daemon 3u IPv4 8088 UDP *:sunrpc
portmap 3070 daemon 4u IPv4 8089 TCP *:sunrpc (LISTEN)
inetd 3468 root 4u IPv4 8690 TCP *:auth (LISTEN)
cupsd 3595 root 1u IPv4 8876 TCP localhost:ipp (LISTEN)
cupsd 3595 root 3u IPv4 8879 UDP *:ipp
exim4 3636 Debian-exim 3u IPv4 10137 TCP localhost:smtp (LISTEN)
avahi-dae 3732 avahi 13u IPv4 10656 UDP *:mdns
avahi-dae 3732 avahi 14u IPv4 10657 UDP *:32768
rpc.statd 3815 statd 3u IPv4 10783 UDP *:32769
rpc.statd 3815 statd 6u IPv4 10773 UDP *:1023
rpc.statd 3815 statd 7u IPv4 10786 TCP *:60599 (LISTEN)
dhclient 3870 root 5u IPv4 10974 UDP *:bootpc
firefox-b 9894 leigh 37u IPv4 24170 TCP 192.168.1.2:37700->216.239.59.103:www (ESTABLISHED)
firefox-b 9894 leigh 48u IPv4 24406 TCP 192.168.1.2:44940->216.239.59.104:www (ESTABLISHED)
firefox-b 9894 leigh 49u IPv4 24407 TCP 192.168.1.2:44941->216.239.59.104:www (ESTABLISHED)
firefox-b 9894 leigh 53u IPv4 24673 TCP 192.168.1.2:33862->c17-ss-2-lb.cnet.com:www (ESTABLISHED)
firefox-b 9894 leigh 55u IPv4 24681 TCP 192.168.1.2:60452->217.20.16.80:www (ESTABLISHED)
firefox-b 9894 leigh 57u IPv4 24682 TCP 192.168.1.2:60453->217.20.16.80:www (ESTABLISHED)
debian-leigh:/home/leigh#

[pete_1967]

OK, I installed Wireshark, and see that a process UDP is using the internet. It has been going for a good hour now.
I know that Fedora is supposed to be safe, but could it be that "someone" is using my computer for their own ends? If so, how can I pin it down?

Unless you've secured your wireless connection, it's equivalent to leaving your front door open: anyone can walk in and do what ever they want in your house.

[chejose]

Right, Pete. I fully agree. When this box ran wndows I had antivirus and firewall. But what is the "correct" way to secure Fedora?