Discussion Locked

ftp request to a Linux box every 5 min.

0 helpful
1 reply
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

A windows 2000 box is issuing ftp requests to a linux box every five minutes. Where's it coming from? How do I stop it?

One entry from /var/log/secure log file on the linux server. The IP address XXX.XXX.XXX.XXX corresponds to the W2K system in question.

Jul 24 13:54:42 linuxbox xinetd[607]: START: ftp pid=2541 from=XXX.XXX.XXX.XXX
Jul 24 13:54:43 arial xinetd[607]: EXIT: ftp pid=2541 duration=1(sec)

Any ideas?
Rafael.

1 reply

by timwalsh

Since it seems that you have control over the Win2K computer in question, that would be the place to start.

You need to look and see what processes are running on the Win2K box.

A plain vanilla Win2K installation doesn't issue ftp requests to anyplace on it's own. Also, since ftp requests are normally sent to specific locations, some process or application has to target your ftp server.

Is your linux server by chance a DNS server? If so, it might be possible that whatever process that is generating the ftp requests is hitting your server for resolution of the true destination address.

This discussion is closed to new replies.