Strange traffic originating from httpd

Peter Boosten peter at
Fri Sep 5 18:26:44 UTC 2008

Hi all,

Just today I noticed some strange UDP4 traffic from my webserver to an
IP address unknown to me, connecting to port 8000 (UDP).

Sockstat showed httpd (running as www) as the culprit.
Does anyone know what could cause this?

I run several websites (Joomla, Wordpress, Coppermine, Nucleus), so
maybe some plugin does this.

My setup:

FreeBSD 7 patch 4
Apache 2.2.9_3 (from ports)
PHP5.2.6 (not from ports)

Thanks in advance for your answers.


More information about the freebsd-questions mailing list