Re: [cobalt-developers] /var/log/messages process every 15 minutes

["Gerald Waugh" <gerald@xxxxxxxxx>]

"njd 76" <njd76@xxxxxxxxxxx> wrote
> I keep getting these every 15 minutes in my /var/log/messages. What does it
> mean? Should i be worried here...
> Sep 26 20:30:02 NAME proftpd[30964]: xxx.xxx.com
> (localhost[xxx.xxx.xxx.xxx]) - FTP session opened.
>
> Sep 26 20:30:02 NAME proftpd[30964]: xxx.xxx.com
> (localhost[xxx.xxx.xxx.xxx]) - FTP session closed.
>
> Sep 26 20:30:05 NAME telnetd[30969]: ttloop: read: Broken pipe
>
This type of a question belongs on the users list:
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

The first two messages are from active monitor, it's checking to see if ftp is
working.
And you do not have to xxx localhost it's the same IP on all machines
127.0.0.1
The last one is from telnetd, and I hope this machine is not connected to the
Internet.
If it is then prepare to do a restore, it's probably been hacked!
go to this url and get ssh installed and turn telnet OFF!
http://pkg.nl.cobalt.com/

HTH Gerald