On Sunday 15 August 2010 21:34:33 Dale wrote: > Hi folks, > > I been noticing the past few weeks that something is communicating with > Yahoo at these addresses: > > cs210p2.msg.sp1.yahoo.com > > rdis.msg.vip.sp1.yahoo.com > > I thought it was Kopete getting some info, profile pics maybe, from the > server. Thing is, it does this for a really long time. It is also > SENDING data as well. I have no idea why it is doing this or what it is > sending. I closed the Kopete app but the data still carries on. This > "transfer" has been going for a while now and the only way I can stop it > is to stop the network, wait a minute or two for it to time out and then > restart the network. > > Anybody have any idea what the heck this is? Is Yahoo up to something? > Some new security issue that I haven't heard of?
What does your netstat show with respect to ports being used and what does tcpdump/tcpflow show? If it is Yahoo, you should see things that are relevant and hopefully make sense. -- Regards, Mick
signature.asc
Description: This is a digitally signed message part.
