It is currently Mon, 25 Sep 2023 12:01:04 GMT

Author Message
 Help with an FTP question
Hi there
    I had an anonymous ftp server running. While the server was running i
noticed a large transfer going , so i check the incoming dir. Nothing there.
But, a df showed me that more than 40% of the slice had been used. I couldnt
find those files using the extra space anywhere.

Prior to this ( a few hours) i had ftp requests for '/etc/pw.db' and
'gethostbyname' that were
refused  and socket not connected respectively.

 Meanwhile, the transfer is still going on 30 minutes later. I killed the
ftpd, and snooped around. I ended up deleting the incoming dir.

When i did this i found out where the 40% of the slice was being used. The
thing is, they(all the files) were all invisible to root. How is this

What can i do to prevent this, besides not run the ftpd? Any thoughts would
be appreciated.

 Fri, 31 Oct 2003 00:00:20 GMT   
 Help with an FTP question
Note that comp.unix.bsd.freebsd.misc is a better newsgroup to try, if
possible; comp.unix.bsd.freebsd is poorly propagated and accordingly
lightly populated.

Several possibilities.  Assuming you are really correct in what you
say, it's probably that the files aren't linked into the filesystem
any more but are still open.  It's also possible that the machine was
hacked, but that is a relatively distant possibility.  Before getting
worried about these things, I'd recommend rebooting to make sure that
the disk state resynchronizes.  

You can't do much to avoid it until you figure out what "it" is.  You
don't actually know what happened.  The only other note is that I
wouldn't advise allowing anonymous uploads at all...

Good luck.

 Sat, 01 Nov 2003 21:15:32 GMT   
 Help with an FTP question

It sounds like a process was writing into the directory you removed.  If you do
a du, the output most likely shows the correct amount of disk usage. Try using
either lsof or fstat to find out if there is a process is "writing" into the
old directory, otherwise, on your next reboot, the system will report


 Sun, 02 Nov 2003 02:23:18 GMT   
   [ 3 post ] 

Similar Threads

1. Help! - FTP Questions

2. Help getting complete Red Hat install via FTP and a Minilinux Question

3. Please help with FTP question.

4. FTP questions Please Help

5. FTP Script question, please help !

6. ftp access question - please help

7. PLEASE HELP ftp question

8. ftp login messages setup question, HELP please

9. help with ftp - newbie question

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by ST Software