On Sun, 02 Mar 2008 14:24:30 +0000, Mike -- EMAIL IGNORED wrote: > On Sun, 02 Mar 2008 18:00:45 +1030, Tim wrote: > > [...] >> >> What security software? Doesn't it have some way to tell you what is >> making the access? If you can catch it in the act, yourself, using >> extra parameters with the netstat command can reveal the program doing >> so. e.g. netstat -tuevp >> >> But, like others, I'd suspect it's a FTP YUM mirror being checked. >> >> >> >> Mirror mirror, on the web, who's the updatesed of all... >> > [...] > The security software is stuff I wrote using libipq. I could add the > netstat -tuevp , but I'll wait to see if iptables catches anything. > > BTW, I just got this: > > [root]# rpm -q vim > rpmdb: Lock table is out of available locker entries rpmdb: Unknown > locker ID: 956 > error: db4 error(22) from db->close: Invalid argument error: cannot > open Packages index using db3 - Cannot allocate memory (12) error: > cannot open Packages database in /var/lib/rpm package vim is not > installed > > What should I do about it? > > Thanks, > Mike. The copy and paste does odd things; I hope this looks better: [root]# rpm -q vim rpmdb: Lock table is out of available locker entries rpmdb: Unknown locker ID: 956 error: db4 error(22) from db->close: Invalid argument error: cannot open Packages index using db3 - Cannot allocate memory (12) error: cannot open Packages database in /var/lib/rpm package vim is not installed Mike,

What security software? Doesn't it have some way to tell you what is making the access? If you can catch it in the act, yourself, using extra parameters with the netstat command can reveal the program doing so. e.g. netstat -tuevp But, like others, I'd suspect it's a FTP YUM mirror being checked. Mirror mirror, on the web, who's the updatesed of all...

On Sun, 2008-03-02 at 03:45 +0000, Mike -- EMAIL IGNORED wrote:

/sbin/service yum-updatesd stop /sbin/chkconfig yum-updatesd off Are you sure that it is yum-updatesd that is creating the ftp connections? Craig