Funny network traffic

[ms1234]

I am seeing a lot of funny traffic on port 80 on interface eth1 on my computer. Traffic can spike to 900kb/s but usually stays at around 50-60k/s. Run iptraf which revealed some of the sites. Checked them out and found that they were some Romaninan educational site, some Slovenian ftp, even some linux site. When I start etherape the traffic stops... Logs show absolutly nothing.

Reinstall Fedora 8?

[ms1234]

Seems like paranoia is setting in. Most of the ip's seem to be repo addresses when searching with google about the host name.

[ms1234]

Ah, found the reason. Run yum update and it complained that another process is already running. Apparently it had had crasched or was stuck and trying to check different mirrors.

[marko]

Was yum-updatesd running? You can check with

chkconfig --list yum-updatesd

Mark

[Evil_Bert]

As root, run

netstat -aenp

and it will give you the process names of apps connected to the network. Yum and yum-updatesd show as Python (as they're both scripted in Python).

[thirdlibrea]

There's a checksum problem with the comps-f8.xml metadata file for the updates repo, which is causing a retry on all mirrors... turn yum-updatesd off and then reboot.

Anyone out there with an idea when this will be fixed?

[Datu Puti]

heh, so that's what's going on with yum-updatesd. i always turn it and the helper off and use yum manually. i don't even remember the last time i used graphical stuff like puplet or pirut.

-dan

[ms1234]

Yes, it was yum-updatesd. I'm apparently getting overly paranoid in my old days Thanks for the info

[thirdlibrea]

The updates repo metadata file issue is now fixed. Was able to update without any problems.