peckinpah Posted March 29, 2007 Author Report Share Posted March 29, 2007 Well, the phantom downloads continue. After about an hour online, I can't load web pages anymore because all my 3.5 kbs bandwidth is used up by this still-unidentified downloading process. I don't feel too good about this, and so I guess I will probably be ditching this distro if I can't figure out a way to control my system's download activity. It's kind of sad since the people who designed Mandriva did a lot of things to make it secure, but apparently this problem was not one of their priorities. Quote Link to comment Share on other sites More sharing options...
ianw1974 Posted March 29, 2007 Report Share Posted March 29, 2007 Run this command and post the output: netstat -tunlp that is a lowercase L between the n and p. We can then see if anything is obvious out of place. Quote Link to comment Share on other sites More sharing options...
peckinpah Posted March 29, 2007 Author Report Share Posted March 29, 2007 Should I run the command when I get the downloading activity? Or do you think it would be helpful to run the command when the activity is absent? I'm not having any downloading activity at the moment. Maybe I could run it once now, and then again while I'm having the problem, and post both outputs. Quote Link to comment Share on other sites More sharing options...
ianw1974 Posted March 29, 2007 Report Share Posted March 29, 2007 Do two test. First do when there is no activity, take a copy of it. And then later, when you have the activity, run it again. We can then compare the two, and see what appears, causing the problem. Quote Link to comment Share on other sites More sharing options...
peckinpah Posted March 29, 2007 Author Report Share Posted March 29, 2007 Thanks! Will do. Quote Link to comment Share on other sites More sharing options...
peckinpah Posted March 31, 2007 Author Report Share Posted March 31, 2007 OK Here it is: NO DOWNLOADING ACTITY: Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:2208 0.0.0.0:* LISTEN 1942/hpiod tcp 0 0 127.0.0.1:10026 0.0.0.0:* LISTEN 2970/master tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 2498/portmap tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 2808/X tcp 0 0 127.0.0.1:34097 0.0.0.0:* LISTEN 2071/python tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 2776/cupsd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2970/master tcp 0 0 0.0.0.0:33147 0.0.0.0:* LISTEN 2654/rpc.statd tcp 0 0 0.0.0.0:7741 0.0.0.0:* LISTEN 3011/lisa tcp 0 0 :::6000 :::* LISTEN 2808/X tcp 0 0 :::631 :::* LISTEN 2776/cupsd udp 0 0 0.0.0.0:32768 0.0.0.0:* 2657/avahi-daemon: udp 0 0 0.0.0.0:32770 0.0.0.0:* 2654/rpc.statd udp 0 0 0.0.0.0:7741 0.0.0.0:* 3011/lisa udp 0 0 0.0.0.0:710 0.0.0.0:* 2654/rpc.statd udp 0 0 0.0.0.0:5353 0.0.0.0:* 2657/avahi-daemon: udp 0 0 0.0.0.0:111 0.0.0.0:* 2498/portmap udp 0 0 0.0.0.0:631 0.0.0.0:* 2776/cupsd udp 0 0 :::32769 :::* 2657/avahi-daemon: DURING DOWNLOAD ACTIVITY Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:2208 0.0.0.0:* LISTEN 1892/hpiod tcp 0 0 127.0.0.1:33700 0.0.0.0:* LISTEN 2124/python tcp 0 0 127.0.0.1:10026 0.0.0.0:* LISTEN 2970/master tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 2452/portmap tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 2825/X tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 2823/cupsd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2970/master tcp 0 0 0.0.0.0:7741 0.0.0.0:* LISTEN 3011/lisa tcp 0 0 0.0.0.0:44541 0.0.0.0:* LISTEN 2594/rpc.statd tcp 0 0 :::6000 :::* LISTEN 2825/X tcp 0 0 :::631 :::* LISTEN 2823/cupsd udp 0 0 0.0.0.0:32768 0.0.0.0:* 2639/avahi-daemon: udp 0 0 0.0.0.0:32770 0.0.0.0:* 2594/rpc.statd udp 0 0 0.0.0.0:650 0.0.0.0:* 2594/rpc.statd udp 0 0 0.0.0.0:7741 0.0.0.0:* 3011/lisa udp 0 0 0.0.0.0:5353 0.0.0.0:* 2639/avahi-daemon: udp 0 0 0.0.0.0:111 0.0.0.0:* 2452/portmap udp 0 0 0.0.0.0:631 0.0.0.0:* I suspect the Firefox Quality Assurance Application may have something to do with it. The activity came back and the Firefox Quality thing came up several minutes later. Quote Link to comment Share on other sites More sharing options...
ianw1974 Posted March 31, 2007 Report Share Posted March 31, 2007 I'd be tempted to disable those features. Quote Link to comment Share on other sites More sharing options...
neddie Posted March 31, 2007 Report Share Posted March 31, 2007 Well, I know nothing about netstat but those lists look pretty much the same to me. Unless whatever it is that's using python is suddenly using its connection. My list is much shorter than yours but I also have entries for python. Are you sure something is swallowing your connection? Do you see a spike in gkrellm or something? I'm just wondering if it's swallowing your CPU instead, slowing everything down. Have you tried running "top" while it's behaving strangely, and seeing if anything is taking up a load of your Cpu? Quote Link to comment Share on other sites More sharing options...
ianw1974 Posted March 31, 2007 Report Share Posted March 31, 2007 Just looking at it again, I'd disable some services: chkconfig portmap off chkconfig lisa off chkconfig avahi-daemon off as you don't need these for normal operation. Portmap is for nfs shares, which I doubt your using unless you've configured it for access between two or more Linux systems. Lisa is network neighbourhood, so you can safely disable this and avahi-daemon is for mDNS/zeroconf discovery on the network, which is safe to disable as well. Maybe that might help a bit. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.