On 9/8/06, Rony ronbillypop@yahoo.co.uk wrote:
Hello All,
I got Mandriva 2006 and while everything is fine, since many days I notice that whenever I use thunderbird, it shows a lot of HDD activity and opening new messages and moving to the next ones is too slow, as the HDD shows busy activity. The /log/messages show the following report below as the activity takes place. I even downgraded from Thunderbird 1.5 to 1.0.6 but still same problem. Browsing is no problem. I even uninstalled clamv in case it was scanning mail but still same problem. Has my system got a linix based spyware? ( Calm down guys! ) What is the net activity below? I have set the mailbox to manual mail download only. Below is the log. Is this anything to do with the reiserfs?
Sep 8 22:01:26 mandrake06 kernel: Shorewall:net2all:DROP:IN=eth0 OUT= MAC= SRC=192.168.1.2 DST=192.168.1.255 LEN=198 TOS=0x00 PREC=0x00 TTL=64 ID=39 DF PROTO=UDP SPT=631 DPT=631 LEN=178 Sep 8 22:01:57 mandrake06 kernel: Shorewall:net2all:DROP:IN=eth0 OUT= MAC= SRC=192.168.1.2 DST=192.168.1.255 LEN=198 TOS=0x00 PREC=0x00 TTL=64 ID=40 DF PROTO=UDP SPT=631 DPT=631 LEN=178 Sep 8 22:02:31 mandrake06 kernel: Shorewall:net2all:DROP:IN=eth0 OUT= MAC= SRC=192.168.1.2 DST=192.168.1.255 LEN=198 TOS=0x00 PREC=0x00 TTL=64 ID=41 DF PROTO=UDP SPT=631 DPT=631 LEN=178
Dear Rony,
Port 631 is used by CUPS for the IPP(Internet Printing Protocol) broadcast. It's basically broadcasting to discover shared printers connected to systems on the same lan as you. I can also see that you have shorewall active, and these are log entries of shorewall telling you that it dropped such-and-such packets. And Relax, there is *NO* spyware activity evident on your system from the messages that you have posted.
Regards R. K. Rajeev
Regards,
Rony.
___________________________________________________________ Try the all-new Yahoo! Mail. "The New Version is radically easier to use" – The Wall Street Journal http://uk.docs.yahoo.com/nowyoucan.html