FTP problems, narrowing down
Posted: Fri 31 Jul 2009 4:22 am
Ok, after Cumulus has been running for a couple of days, the FTP upload once again stopped. I didn't have logging enabled, so I enabled it without restarting the app. It never even started to create a log. I then noticed some other peculiar behaviour of the computer pointing at network issues. So I executed a "netstat -a -p tcp" in a console window, only to find out that every single port on the computer had an application listening. I then quit Cumulus, and the ports became free again.
This leaves two options:
1. The Cumulus install I have downloaded has been security compromised and is carrying a trojan load (unknown to the avast virus scanner I have installed)
2. More likely: A programming "feature" is causing Cumulus to listen on all sorts of ports. Note that I have ftp uploads, wunderground as well as PWS uploads enabled.
Cheers
- Balt
P.S. This is "netstat -a -p tcp" output without Cumulus running:
ctive Connections
Proto Local Address Foreign Address State
TCP EeePC:ssh EeePC:0 LISTENING
TCP EeePC:epmap EeePC:0 LISTENING
TCP EeePC:microsoft-ds EeePC:0 LISTENING
TCP EeePC:2869 EeePC:0 LISTENING
TCP EeePC:5800 EeePC:0 LISTENING
TCP EeePC:5900 EeePC:0 LISTENING
TCP EeePC:ssh yeti.atnf.csiro.au:62351 ESTABLISHED
TCP EeePC:netbios-ssn EeePC:0 LISTENING
TCP EeePC:1025 px-in-f101.google.com:http ESTABLISHED
TCP EeePC:1027 a-61-9-193-135.deploy.akamaitechnologies.com:http ESTABLISHED
TCP EeePC:5900 yeti.atnf.csiro.au:50368 ESTABLISHED
TCP EeePC:1030 EeePC:0 LISTENING
TCP EeePC:1053 localhost:27015 ESTABLISHED
TCP EeePC:5152 EeePC:0 LISTENING
TCP EeePC:5354 EeePC:0 LISTENING
TCP EeePC:27015 EeePC:0 LISTENING
TCP EeePC:27015 localhost:1053 ESTABLISHED
TCP EeePC:62514 EeePC:0 LISTENING
And this is the output after 10 minutes of Cumulus running:
Active Connections
Proto Local Address Foreign Address State
TCP EeePC:ssh EeePC:0 LISTENING
TCP EeePC:epmap EeePC:0 LISTENING
TCP EeePC:microsoft-ds EeePC:0 LISTENING
TCP EeePC:1045 EeePC:0 LISTENING
TCP EeePC:1046 EeePC:0 LISTENING
TCP EeePC:1047 EeePC:0 LISTENING
TCP EeePC:1048 EeePC:0 LISTENING
TCP EeePC:1049 EeePC:0 LISTENING
TCP EeePC:1050 EeePC:0 LISTENING
TCP EeePC:1051 EeePC:0 LISTENING
TCP EeePC:1052 EeePC:0 LISTENING
TCP EeePC:1054 EeePC:0 LISTENING
TCP EeePC:1055 EeePC:0 LISTENING
TCP EeePC:1056 EeePC:0 LISTENING
TCP EeePC:1057 EeePC:0 LISTENING
TCP EeePC:1058 EeePC:0 LISTENING
TCP EeePC:1059 EeePC:0 LISTENING
TCP EeePC:1060 EeePC:0 LISTENING
TCP EeePC:1061 EeePC:0 LISTENING
TCP EeePC:1062 EeePC:0 LISTENING
TCP EeePC:1063 EeePC:0 LISTENING
TCP EeePC:1064 EeePC:0 LISTENING
TCP EeePC:1065 EeePC:0 LISTENING
TCP EeePC:1066 EeePC:0 LISTENING
TCP EeePC:1067 EeePC:0 LISTENING
TCP EeePC:1068 EeePC:0 LISTENING
TCP EeePC:1069 EeePC:0 LISTENING
TCP EeePC:1070 EeePC:0 LISTENING
TCP EeePC:1071 EeePC:0 LISTENING
TCP EeePC:1072 EeePC:0 LISTENING
TCP EeePC:1073 EeePC:0 LISTENING
TCP EeePC:1099 EeePC:0 LISTENING
TCP EeePC:1100 EeePC:0 LISTENING
TCP EeePC:1101 EeePC:0 LISTENING
TCP EeePC:1102 EeePC:0 LISTENING
TCP EeePC:1103 EeePC:0 LISTENING
TCP EeePC:1104 EeePC:0 LISTENING
TCP EeePC:1105 EeePC:0 LISTENING
TCP EeePC:1106 EeePC:0 LISTENING
TCP EeePC:1107 EeePC:0 LISTENING
TCP EeePC:1108 EeePC:0 LISTENING
TCP EeePC:kpop EeePC:0 LISTENING
TCP EeePC:1110 EeePC:0 LISTENING
TCP EeePC:1111 EeePC:0 LISTENING
TCP EeePC:1112 EeePC:0 LISTENING
TCP EeePC:1113 EeePC:0 LISTENING
TCP EeePC:1114 EeePC:0 LISTENING
TCP EeePC:1115 EeePC:0 LISTENING
TCP EeePC:1116 EeePC:0 LISTENING
TCP EeePC:1117 EeePC:0 LISTENING
TCP EeePC:1118 EeePC:0 LISTENING
TCP EeePC:1119 EeePC:0 LISTENING
TCP EeePC:1120 EeePC:0 LISTENING
TCP EeePC:1121 EeePC:0 LISTENING
TCP EeePC:1122 EeePC:0 LISTENING
TCP EeePC:1123 EeePC:0 LISTENING
TCP EeePC:1124 EeePC:0 LISTENING
TCP EeePC:1125 EeePC:0 LISTENING
TCP EeePC:1126 EeePC:0 LISTENING
TCP EeePC:1127 EeePC:0 LISTENING
TCP EeePC:2869 EeePC:0 LISTENING
TCP EeePC:5800 EeePC:0 LISTENING
TCP EeePC:5900 EeePC:0 LISTENING
TCP EeePC:ssh yeti.atnf.csiro.au:62351 ESTABLISHED
TCP EeePC:netbios-ssn EeePC:0 LISTENING
TCP EeePC:1085 cds836.lax.llnw.net:http ESTABLISHED
TCP EeePC:5900 yeti.atnf.csiro.au:50368 ESTABLISHED
TCP EeePC:1030 EeePC:0 LISTENING
TCP EeePC:1053 localhost:27015 ESTABLISHED
TCP EeePC:5152 EeePC:0 LISTENING
TCP EeePC:5354 EeePC:0 LISTENING
TCP EeePC:27015 EeePC:0 LISTENING
TCP EeePC:27015 localhost:1053 ESTABLISHED
TCP EeePC:62514 EeePC:0 LISTENING
balt@EeePC /cygdrive/c/Program Files/Cumulus
This leaves two options:
1. The Cumulus install I have downloaded has been security compromised and is carrying a trojan load (unknown to the avast virus scanner I have installed)
2. More likely: A programming "feature" is causing Cumulus to listen on all sorts of ports. Note that I have ftp uploads, wunderground as well as PWS uploads enabled.
Cheers
- Balt
P.S. This is "netstat -a -p tcp" output without Cumulus running:
ctive Connections
Proto Local Address Foreign Address State
TCP EeePC:ssh EeePC:0 LISTENING
TCP EeePC:epmap EeePC:0 LISTENING
TCP EeePC:microsoft-ds EeePC:0 LISTENING
TCP EeePC:2869 EeePC:0 LISTENING
TCP EeePC:5800 EeePC:0 LISTENING
TCP EeePC:5900 EeePC:0 LISTENING
TCP EeePC:ssh yeti.atnf.csiro.au:62351 ESTABLISHED
TCP EeePC:netbios-ssn EeePC:0 LISTENING
TCP EeePC:1025 px-in-f101.google.com:http ESTABLISHED
TCP EeePC:1027 a-61-9-193-135.deploy.akamaitechnologies.com:http ESTABLISHED
TCP EeePC:5900 yeti.atnf.csiro.au:50368 ESTABLISHED
TCP EeePC:1030 EeePC:0 LISTENING
TCP EeePC:1053 localhost:27015 ESTABLISHED
TCP EeePC:5152 EeePC:0 LISTENING
TCP EeePC:5354 EeePC:0 LISTENING
TCP EeePC:27015 EeePC:0 LISTENING
TCP EeePC:27015 localhost:1053 ESTABLISHED
TCP EeePC:62514 EeePC:0 LISTENING
And this is the output after 10 minutes of Cumulus running:
Active Connections
Proto Local Address Foreign Address State
TCP EeePC:ssh EeePC:0 LISTENING
TCP EeePC:epmap EeePC:0 LISTENING
TCP EeePC:microsoft-ds EeePC:0 LISTENING
TCP EeePC:1045 EeePC:0 LISTENING
TCP EeePC:1046 EeePC:0 LISTENING
TCP EeePC:1047 EeePC:0 LISTENING
TCP EeePC:1048 EeePC:0 LISTENING
TCP EeePC:1049 EeePC:0 LISTENING
TCP EeePC:1050 EeePC:0 LISTENING
TCP EeePC:1051 EeePC:0 LISTENING
TCP EeePC:1052 EeePC:0 LISTENING
TCP EeePC:1054 EeePC:0 LISTENING
TCP EeePC:1055 EeePC:0 LISTENING
TCP EeePC:1056 EeePC:0 LISTENING
TCP EeePC:1057 EeePC:0 LISTENING
TCP EeePC:1058 EeePC:0 LISTENING
TCP EeePC:1059 EeePC:0 LISTENING
TCP EeePC:1060 EeePC:0 LISTENING
TCP EeePC:1061 EeePC:0 LISTENING
TCP EeePC:1062 EeePC:0 LISTENING
TCP EeePC:1063 EeePC:0 LISTENING
TCP EeePC:1064 EeePC:0 LISTENING
TCP EeePC:1065 EeePC:0 LISTENING
TCP EeePC:1066 EeePC:0 LISTENING
TCP EeePC:1067 EeePC:0 LISTENING
TCP EeePC:1068 EeePC:0 LISTENING
TCP EeePC:1069 EeePC:0 LISTENING
TCP EeePC:1070 EeePC:0 LISTENING
TCP EeePC:1071 EeePC:0 LISTENING
TCP EeePC:1072 EeePC:0 LISTENING
TCP EeePC:1073 EeePC:0 LISTENING
TCP EeePC:1099 EeePC:0 LISTENING
TCP EeePC:1100 EeePC:0 LISTENING
TCP EeePC:1101 EeePC:0 LISTENING
TCP EeePC:1102 EeePC:0 LISTENING
TCP EeePC:1103 EeePC:0 LISTENING
TCP EeePC:1104 EeePC:0 LISTENING
TCP EeePC:1105 EeePC:0 LISTENING
TCP EeePC:1106 EeePC:0 LISTENING
TCP EeePC:1107 EeePC:0 LISTENING
TCP EeePC:1108 EeePC:0 LISTENING
TCP EeePC:kpop EeePC:0 LISTENING
TCP EeePC:1110 EeePC:0 LISTENING
TCP EeePC:1111 EeePC:0 LISTENING
TCP EeePC:1112 EeePC:0 LISTENING
TCP EeePC:1113 EeePC:0 LISTENING
TCP EeePC:1114 EeePC:0 LISTENING
TCP EeePC:1115 EeePC:0 LISTENING
TCP EeePC:1116 EeePC:0 LISTENING
TCP EeePC:1117 EeePC:0 LISTENING
TCP EeePC:1118 EeePC:0 LISTENING
TCP EeePC:1119 EeePC:0 LISTENING
TCP EeePC:1120 EeePC:0 LISTENING
TCP EeePC:1121 EeePC:0 LISTENING
TCP EeePC:1122 EeePC:0 LISTENING
TCP EeePC:1123 EeePC:0 LISTENING
TCP EeePC:1124 EeePC:0 LISTENING
TCP EeePC:1125 EeePC:0 LISTENING
TCP EeePC:1126 EeePC:0 LISTENING
TCP EeePC:1127 EeePC:0 LISTENING
TCP EeePC:2869 EeePC:0 LISTENING
TCP EeePC:5800 EeePC:0 LISTENING
TCP EeePC:5900 EeePC:0 LISTENING
TCP EeePC:ssh yeti.atnf.csiro.au:62351 ESTABLISHED
TCP EeePC:netbios-ssn EeePC:0 LISTENING
TCP EeePC:1085 cds836.lax.llnw.net:http ESTABLISHED
TCP EeePC:5900 yeti.atnf.csiro.au:50368 ESTABLISHED
TCP EeePC:1030 EeePC:0 LISTENING
TCP EeePC:1053 localhost:27015 ESTABLISHED
TCP EeePC:5152 EeePC:0 LISTENING
TCP EeePC:5354 EeePC:0 LISTENING
TCP EeePC:27015 EeePC:0 LISTENING
TCP EeePC:27015 localhost:1053 ESTABLISHED
TCP EeePC:62514 EeePC:0 LISTENING
balt@EeePC /cygdrive/c/Program Files/Cumulus