From: Holger.VanKoll@SWISSCOM.COM
Date: Fri May 07 2004 - 13:24:50 EDT
well; wtmp gets written after login
so, in any case, clients log in every 6 seconds.
there are ftp-clients at least on windows that log in for every file to
transfer - you could see this if you set syslog to debug
the old ftp-daemons on your server very probably come because the
clients crash.
I dont see anything that you can do on your side.
you could dump the traffic on port 21 (its noch much because the
transfer itself isnt done there) to help the clients fix their problems,
at least
-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of
Green, Simon
Sent: Friday, May 07, 2004 1:16 PM
To: aix-l@Princeton.EDU
Subject: Dead FTP connections filling up wtmp
On one of my servers, (AIX 4.3.3.0_08), wtmp keeps growing and filling
up /var. About every six seconds there's a new entry in there for an
FTP connection.
On the server, there are lots (12 at the moment) of ftpd instances
running:
some of them fairly old. (Not very old, because the server was booted a
couple of days ago.) On the servers that the FTP connections supposedly
come from there are no ftp processes at all.
I assume that something has happened at the remote end, where the ftp
sessions were started, and ftp was stopped without terminating the
session correctly.
Has anybody had any similar experience?
Is there anything I can do to get more information which might be useful
in finding out exactly what has happened here?
-- Simon Green Altria ITSC Europe Ltd AIX-L Archive at https://new-lists.princeton.edu/listserv/aix-l.html <https://new-lists.princeton.edu/listserv/aix-l.html> New to AIX? http://publib-b.boulder.ibm.com/redbooks.nsf/portals/UNIX <http://publib-b.boulder.ibm.com/redbooks.nsf/portals/UNIX> N.B. Unsolicited email from vendors will not be appreciated. Please post all follow-ups to the list.
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:54 EDT