L'activité de mon disque dur m'inquiète !

Jeu 29 Nov 18:51:28 UTC 2007

jacques a écrit :
> Le Wed, 28 Nov 2007 09:47:40 -0500,
> Lami René <lami at webestrie.com> a écrit :
>   
>> Il y a de la documentation en français pour ce module, il n'y en a
>> qu'en anglais dans Aide et de plusieurs sources différentes ?
>>     
>
> Ce que je te proposais c'est de voir si les logs montraient 
> quelque chose de l'activité anormale de ton disque :
>
>  Dans un Terminal examine les logs durant quelques minutes :
>
>  tail -f /var/log/syslog
>
> et essaye de déterminer une ou des lignes relatvies à cette activité
>
> Si tu vois quelque chose tu fais ici un collé de ce que tu auras
> copié du terminal.
>
> Suis-je clair ? 
>   
>> Merci d'avance ?
>>     
>> L'ami René
>>     
>                         Jacques
>   
Bonjour Jacques,

Merci pour ton aide !

Notez que pour la période couverte par le log qui suit, je ne faisais
rien en même temps sur l'ordinateur, je ne faisais que regarder les log
s'ajouter dans la konsole et que Thunderbird était ouvert avec la
rédaction du présent courriel et que Firefox était ouvert, mais sans que
j'y touche.

Voici un premier exemple de ce que donne la commande tail -f
/var/log/syslog  :

Nov 29 13:15:02 PIII800 postfix/qmgr[9999]: 6A20D1447B:
from=<rene at info@WebEstrie.com>, size=733, nrcpt=1 (queue active)
Nov 29 13:15:03 PIII800 postfix/smtp[10772]: 6A20D1447B:
to=<rene at info@WebEstrie.com>, orig_to=<rene>,
relay=smtp2.cooptel.qc.ca[216.137.96.51]:25, delay=0.67,
delays=0.11/0.01/0.43/0.12, dsn=5.7.1, status=bounced (host
smtp2.cooptel.qc.ca[216.137.96.51] said: 550 5.7.1
<"rene at info"@WebEstrie.com>... Relaying denied. IP name possibly forged
[205.205.251.19] (in reply to RCPT TO command))
Nov 29 13:15:03 PIII800 postfix/cleanup[10770]: 13789144AC:
message-id=<20071129181503.13789144AC at PIII800>
Nov 29 13:15:03 PIII800 postfix/qmgr[9999]: 13789144AC: from=<>,
size=2706, nrcpt=1 (queue active)
Nov 29 13:15:03 PIII800 postfix/bounce[10773]: 6A20D1447B: sender
non-delivery notification: 13789144AC
Nov 29 13:15:03 PIII800 postfix/qmgr[9999]: 6A20D1447B: removed
Nov 29 13:15:03 PIII800 postfix/smtp[10772]: 13789144AC:
to=<rene at info@WebEstrie.com>,
relay=smtp2.cooptel.qc.ca[216.137.96.51]:25, delay=0.42,
delays=0.06/0/0.26/0.1, dsn=5.7.1, status=bounced (host
smtp2.cooptel.qc.ca[216.137.96.51] said: 550 5.7.1
<"rene at info"@WebEstrie.com>... Relaying denied. IP name possibly forged
[205.205.251.19] (in reply to RCPT TO command))
Nov 29 13:15:03 PIII800 postfix/qmgr[9999]: 13789144AC: removed
Nov 29 13:15:51 PIII800 kernel: [ 9965.556000] Inbound IN=ppp0 OUT= MAC=
SRC=200.24.171.178 DST=205.205.251.19 LEN=375 TOS=0x00 PREC=0x00 TTL=53
ID=50658 PROTO=UDP SPT=30648 DPT=1026 LEN=355
Nov 29 13:17:01 PIII800 /USR/SBIN/CRON[10785]: (root) CMD (   cd / &&
run-parts --report /etc/cron.hourly)
Nov 29 13:19:25 PIII800 kernel: [10179.528000] Inbound IN=ppp0 OUT= MAC=
SRC=24.64.18.225 DST=205.205.251.19 LEN=512 TOS=0x00 PREC=0x00 TTL=67
ID=20085 PROTO=UDP SPT=11787 DPT=1026 LEN=492
Nov 29 13:19:25 PIII800 kernel: [10179.540000] Inbound IN=ppp0 OUT= MAC=
SRC=24.64.18.225 DST=205.205.251.19 LEN=512 TOS=0x00 PREC=0x00 TTL=67
ID=20086 PROTO=UDP SPT=11787 DPT=1027 LEN=492
Nov 29 13:19:25 PIII800 kernel: [10179.548000] Inbound IN=ppp0 OUT= MAC=
SRC=24.64.18.225 DST=205.205.251.19 LEN=512 TOS=0x00 PREC=0x00 TTL=67
ID=20087 PROTO=UDP SPT=11787 DPT=1028 LEN=492
Nov 29 13:19:51 PIII800 kernel: [10205.908000] Inbound IN=ppp0 OUT= MAC=
SRC=24.65.2.55 DST=205.205.251.19 LEN=512 TOS=0x00 PREC=0x00 TTL=67
ID=40602 PROTO=UDP SPT=27190 DPT=1026 LEN=492
Nov 29 13:19:51 PIII800 kernel: [10205.916000] Inbound IN=ppp0 OUT= MAC=
SRC=24.65.2.55 DST=205.205.251.19 LEN=512 TOS=0x00 PREC=0x00 TTL=67
ID=40603 PROTO=UDP SPT=27190 DPT=1027 LEN=492
Nov 29 13:19:51 PIII800 kernel: [10205.924000] Inbound IN=ppp0 OUT= MAC=
SRC=24.65.2.55 DST=205.205.251.19 LEN=512 TOS=0x00 PREC=0x00 TTL=67
ID=40604 PROTO=UDP SPT=27190 DPT=1028 LEN=492
Nov 29 13:20:01 PIII800 /USR/SBIN/CRON[10824]: (rene) CMD (sh
/home/rene/.start_firestarter)
Nov 29 13:20:01 PIII800 postfix/pickup[9998]: 9CB531447B: uid=1000
from=<rene>
Nov 29 13:20:01 PIII800 postfix/cleanup[10833]: 9CB531447B:
message-id=<20071129182001.9CB531447B at PIII800>
Nov 29 13:20:01 PIII800 postfix/qmgr[9999]: 9CB531447B:
from=<rene at info@WebEstrie.com>, size=733, nrcpt=1 (queue active)
Nov 29 13:20:02 PIII800 postfix/smtp[10835]: 9CB531447B:
to=<rene at info@WebEstrie.com>, orig_to=<rene>,
relay=smtp2.cooptel.qc.ca[216.137.96.51]:25, delay=0.66,
delays=0.1/0.01/0.39/0.15, dsn=5.7.1, status=bounced (host
smtp2.cooptel.qc.ca[216.137.96.51] said: 550 5.7.1
<"rene at info"@WebEstrie.com>... Relaying denied. IP name possibly forged
[205.205.251.19] (in reply to RCPT TO command))
Nov 29 13:20:02 PIII800 postfix/cleanup[10833]: 477EE144AC:
message-id=<20071129182002.477EE144AC at PIII800>
Nov 29 13:20:02 PIII800 postfix/qmgr[9999]: 477EE144AC: from=<>,
size=2706, nrcpt=1 (queue active)
Nov 29 13:20:02 PIII800 postfix/bounce[10836]: 9CB531447B: sender
non-delivery notification: 477EE144AC
Nov 29 13:20:02 PIII800 postfix/qmgr[9999]: 9CB531447B: removed
Nov 29 13:20:02 PIII800 postfix/smtp[10835]: 477EE144AC:
to=<rene at info@WebEstrie.com>,
relay=smtp2.cooptel.qc.ca[216.137.96.51]:25, delay=0.48,
delays=0.01/0/0.36/0.1, dsn=5.7.1, status=bounced (host
smtp2.cooptel.qc.ca[216.137.96.51] said: 550 5.7.1
<"rene at info"@WebEstrie.com>... Relaying denied. IP name possibly forged
[205.205.251.19] (in reply to RCPT TO command))
Nov 29 13:20:02 PIII800 postfix/qmgr[9999]: 477EE144AC: removed
Nov 29 13:25:01 PIII800 /USR/SBIN/CRON[10866]: (rene) CMD (sh
/home/rene/.start_firestarter)
Nov 29 13:25:01 PIII800 postfix/pickup[9998]: CA29F1447B: uid=1000
from=<rene>
Nov 29 13:25:01 PIII800 postfix/cleanup[10875]: CA29F1447B:
message-id=<20071129182501.CA29F1447B at PIII800>
Nov 29 13:25:01 PIII800 postfix/qmgr[9999]: CA29F1447B:
from=<rene at info@WebEstrie.com>, size=733, nrcpt=1 (queue active)
Nov 29 13:25:02 PIII800 postfix/smtp[10877]: CA29F1447B:
to=<rene at info@WebEstrie.com>, orig_to=<rene>,
relay=smtp2.cooptel.qc.ca[216.137.96.51]:25, delay=0.81,
delays=0.13/0.01/0.54/0.12, dsn=5.7.1, status=bounced (host
smtp2.cooptel.qc.ca[216.137.96.51] said: 550 5.7.1
<"rene at info"@WebEstrie.com>... Relaying denied. IP name possibly forged
[205.205.251.19] (in reply to RCPT TO command))
Nov 29 13:25:02 PIII800 postfix/cleanup[10875]: 8E8CA144AC:
message-id=<20071129182502.8E8CA144AC at PIII800>
Nov 29 13:25:02 PIII800 postfix/qmgr[9999]: 8E8CA144AC: from=<>,
size=2706, nrcpt=1 (queue active)
Nov 29 13:25:02 PIII800 postfix/bounce[10878]: CA29F1447B: sender
non-delivery notification: 8E8CA144AC
Nov 29 13:25:02 PIII800 postfix/qmgr[9999]: CA29F1447B: removed
Nov 29 13:25:02 PIII800 postfix/smtp[10877]: 8E8CA144AC:
to=<rene at info@WebEstrie.com>,
relay=smtp2.cooptel.qc.ca[216.137.96.51]:25, delay=0.38,
delays=0.01/0/0.26/0.1, dsn=5.7.1, status=bounced (host
smtp2.cooptel.qc.ca[216.137.96.51] said: 550 5.7.1
<"rene at info"@WebEstrie.com>... Relaying denied. IP name possibly forged
[205.205.251.19] (in reply to RCPT TO command))
Nov 29 13:25:03 PIII800 postfix/qmgr[9999]: 8E8CA144AC: removed

Je présume que « qmgr, smtp, cleanup, bounce, kernel, /USR/SBIN/CRON,
pickup » sont des noms de module en action. Ils reviennent
périodiquement, mais je ne sais pas comment discerner leur utilité. La
seule chose qui me semble curieuse sont les lignes :

Nov 29 13:20:01 PIII800 /USR/SBIN/CRON[10824]: (rene) CMD (sh
/home/rene/.start_firestarter)
Nov 29 13:25:01 PIII800 /USR/SBIN/CRON[10866]: (rene) CMD (sh
/home/rene/.start_firestarter)

Pourquoi des lancements de Firestarter ?

Merci Jacques pour votre aide !

L'ami René