Hi there.
I am running nagios on my network for the last 3 months without any problems. Just the other day one server has varios irc connections using the nagios user account. I monitor this server via nrpe and can’t figure why i havethese connections on this particular server.
netstat -ap | grep irc
tcp 0 0 app1.kc.local:44483 tampa.fl.us.undernet.o:ircd ESTABLISHED 19700/bash
tcp 0 0 app1.kc.local:41154 tampa.fl.us.undernet.o:ircd ESTABLISHED 19700/bash
tcp 0 0 app1.kc.local:60717 undernet.xs4all.nl:ircd ESTABLISHED 19700/bash
tcp 0 0 app1.kc.local:53857 irc2.saunal:afs3-fileserver ESTABLISHED 19700/bash
tcp 0 0 app1.kc.local:56648 irc2.saunal:afs3-fileserver ESTABLISHED 19700/bash
lsof -p 19700
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
bash 19700 nagios cwd DIR 8,3 4096 2433617 /home/nagios/,/.img
bash 19700 nagios rtd DIR 8,3 4096 2 /
bash 19700 nagios txt REG 8,3 492135 2433619 /home/nagios/,/.img/bash
bash 19700 nagios mem REG 8,3 125736 1688414 /lib/ld-2.5.so
bash 19700 nagios mem REG 8,3 1606812 1687312 /lib/libc-2.5.so
bash 19700 nagios mem REG 8,3 76400 1687323 /lib/libresolv-2.5.so
bash 19700 nagios mem REG 8,3 21876 1687333 /lib/libnss_dns-2.5.so
bash 19700 nagios mem REG 8,3 46680 1687335 /lib/libnss_files-2.5.so
bash 19700 nagios 0w REG 8,3 120 2433621 /home/nagios/,/.img/LinkEvents
bash 19700 nagios 1u IPv4 1968436 TCP app1.kc.local:44483->tampa.fl.us.undernet.org:ircd (ESTABLISHED)
bash 19700 nagios 2u IPv4 1969445 TCP app1.kc.local:50088->dana.basefreak.nl:6668 (SYN_SENT)
bash 19700 nagios 3u IPv4 1967620 UDP *:44284
bash 19700 nagios 4u IPv4 1968605 TCP app1.kc.local:60717->undernet.xs4all.nl:ircd (ESTABLISHED)
bash 19700 nagios 5u IPv4 1968819 TCP app1.kc.local:41154->tampa.fl.us.undernet.org:ircd (ESTABLISHED)
bash 19700 nagios 6u IPv4 1969640 TCP app1.kc.local:49817->london.uk.eu.undernet.org:6660 (SYN_SENT)
bash 19700 nagios 7u IPv4 1968444 TCP app1.kc.local:53857->irc2.saunalahti.fi:afs3-fileserver (ESTABLISHED)
Cheers,
J.
