HH-Steven

Well-Known Member
Aug 29, 2004
282
0
166
cPanel Access Level
Root Administrator
Been cleaning out the server recently (getting rid of rogue accounts etc) and noticed the following on logwatch emails i receive :

Code:
Dropped 618 packets on interface eth0
Which then goes on to list them all.

also :

Code:
Connections:
   Service imap:
      127.0.0.1: 170 Time(s)

**Unmatched Entries**
Cp-Wrap[22700]: CP-Wrapper v1.2 resuming normal operations 
Cp-Wrap[22700]: Pushing "32028 COUNTDBS" to '/usr/local/cpanel/bin/mysqladmin'
for UID: 32028 
Cp-Wrap[22700]: CP-Wrapper terminated without error 
Cp-Wrap[22704]: CP-Wrapper v1.2 resuming normal operations 
Cp-Wrap[22704]: Pushing "32028 LISTDBS" to '/usr/local/cpanel/bin/postgresadmin'
I find that it lists 200+ of these, mainly :

usr/local/cpanel/bin/mysqladmin

usr/local/cpanel/bin/postgresadmin

usr/local/cpanel/bin/ftpadmin

repeated over and over.


Are these anything to be concerned about? or is that just a standard report?

I have afp and bfd installed if that makes a difference.

Thanks.
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,437
33
473
Go on, have a guess
All perfectly normal. The dropped packets are from APF, the last lot are just cPanel logins and termintations as users navigate around cPanel.
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,437
33
473
Go on, have a guess
fs-uk said:
Bloody hell chirpy, 6 minute reply? thats got to be a record, you following me?

But thanks nonetheless, puts my mind at rest.
:) I always reply from the latest to the oldest of New Posts, so it may appear as though I'm stalking you... :p