[BlueOnyx:01641] Re: FTP default directory

[Jeff Folk]

On Jul 11, 2009, at 12:43 PM, Tjerk Hacquebord wrote:

> I still get these lines every time somebody tries to connect to the  
> FTP server.
>
> Jul 11 18:57:09 server3 xinetd[10741]: START: ftp pid=30145  
> from=*.*.*.*
> Jul 11 18:57:09 server3 proftpd[30145]: warning: "ProFTPD" address/ 
> port (*.*.*.*:21) already in use by "ProFTPD server"
> Jul 11 18:57:09 server3 proftpd[30145]: server3.hqmatics.com  
> (*.*.*.* [*.*.*.*]) - FTP session opened.
> Jul 11 18:57:27 server3 xinetd[10741]: START: ftp pid=30149  
> from=*.*.*.*
> Jul 11 18:57:27 server3 proftpd[30149]: warning: "ProFTPD" address/ 
> port (*.*.*.*:21) already in use by "ProFTPD server"
> Jul 11 18:57:27 server3 proftpd[30149]: server3.hqmatics.com  
> (*.*.*.* [*.*.*.*]) - FTP session opened.
> Jul 11 18:57:27 server3 proftpd[30149]: server3.hqmatics.com  
> (*.*.*.* [*.*.*.*]) - FTP session closed.
> Jul 11 18:57:27 server3 xinetd[10741]: EXIT: ftp status=0 pid=30149  
> duration=0(sec)
>

I do too, but don't have that many logins...

> 15 minutes… isn’t that the active monitor checking your FTP server?
>

It is indeed. The swatch cron job is triggering most of my log  
entries. You probably have them "on the 15s" as well.

>
> Tjerk Hacquebord
> ---
> tjerk at hqmatics.nl
> http://www.hqmatics.nl
>
>
>
> Van: blueonyx-bounces at blueonyx.it [mailto:blueonyx- 
> bounces at blueonyx.it] Namens Jeff Folk
> Verzonden: zaterdag 11 juli 2009 19:27
> Aan: BlueOnyx General Mailing List
> Onderwerp: [BlueOnyx:01638] Re: FTP default directory
>
> On Jul 11, 2009, at 9:58 AM, Michael Stauber wrote:
>
>
> Ah, ok. This confirms that - at one point or another - your Proftpd  
> was
> running in stand alone mode. But the chkconfig command we've run  
> earlier
> disabled it in all runlevels. Hence that ls command now the above  
> results.
> Which are fine.
>
> Do you still get the entries in your logfile?
>
>
> Yes I am... in the logwatch mail. I can't for the life of me find  
> those entries in a logfile, though. Strike that... it's in messages:
>
> Jul 11 12:15:05 box1 proftpd[8289]: warning: "ProFTPD" address/port  
> (75.14.24.114:21) already in use by "ProFTPD server"
> Jul 11 12:15:05 box1 proftpd[8289]: box1.qzoneinc.net  
> (127.0.0.1[127.0.0.1]) - FTP session opened.
> Jul 11 12:15:05 box1 proftpd[8289]: box1.qzoneinc.net  
> (127.0.0.1[127.0.0.1]) - FTP session closed.
>
> Every 15 minutes. I think I need to look in the cron jobs... cause  
> it appears it's being called locally.
>
> Jeff
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at blueonyx.it
> http://www.blueonyx.it/mailman/listinfo/blueonyx

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20090711/1d959c9c/attachment.html>