Results 1 to 7 of 7

Thread: System Monitor reveals possible network intrusion?

  1. #1
    Join Date
    Feb 2010
    Beans
    55
    Distro
    Ubuntu 12.04 Precise Pangolin

    Post System Monitor reveals possible network intrusion?

    Hi. i am posting this here because the title fits and I don't want to duplicate it with a new thread. I don't intend to hijack this thread, but if anyone thinks my post should not be here, pls tell me and I'll post it somewhere else.

    The Network History bar in System Monitor shows 2-5KiB/s being received continuously even though my browser is closed and there are no downloads or torrents that I have initiated:


    Screenshot from 2014-02-10 04:22:53.jpg


    When I checked the running processes I discovered the following process, mission-control-5, and I opened the properties window. Over a period of about ten seconds, the process changed itself twice, from [gnome-shell], to [tracker-miner-fs], then to [mission-control-5], after which the window abruptly closed itself:

















    Is this weird or what?!!


    I have been using Ubuntu for five years and never noticed a problem with security. The only possible recent event that I can think of is that I installed the Tor browser about a week ago. Could that be a possible cause?
    Last edited by michael2009; February 10th, 2014 at 02:56 AM. Reason: Pictures too small

  2. #2
    Join Date
    Jul 2008
    Location
    The Left Coast of the USA
    Beans
    Hidden!
    Distro
    Kubuntu

    Re: System Monitor reveals possible network intrusion?

    Moved to its own thread.
    The Community Java Wiki * The Community ATI Driver Wiki * Find what you need in the Ubuntu Community wikis

    And seeing the terror on the faces of the people, QIII did speak to them, saying "Fear not the Terminal, for it is a road both swift and secure to the Great Mysteries of Linux without passing through the dangers of The Land of Ten Thousand Competing Desktop Environments."

  3. #3
    Join Date
    Feb 2014
    Beans
    44

    Re: System Monitor reveals possible network intrusion?

    Don't you just love all the hidden extra goodies that ubuntu decide to throw into their OS?
    Code:
    $ apt-file search mission-control-5
    ...
    telepathy-mission-control-5: /usr/lib/telepathy/mission-control-5
    ...
    i havent yet tried to 'sudo apt-get purge telepathy-mission-control-5' usually these things are so
    integrated that you'll end up uninstalling half the OS. I usuall just move the file to my garbage directory
    Code:
    sudo mv /usr/lib/telepathy/mission-control-5 ~/garbage-bins/
    you'll find this one floating around there too probably
    Code:
    $ apt-file search ubuntu-geoip-provider
    geoclue-ubuntu-geoip: /usr/lib/ubuntu-geoip/ubuntu-geoip-provider
    again, mv

  4. #4
    Join Date
    Feb 2010
    Beans
    55
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: System Monitor reveals possible network intrusion?

    Hi. Thanks QIII.

    Umm... Thanks for the reply fugu2. The command didn't work ...

    ~$ sudo mv /usr/lib/telepathy/mission-control-5 ~/garbage-bins/
    [sudo] password for admin:
    mv: cannot create regular file `/home/admin/garbage-bins/': Not a directory

    I checked the processes again. So what is [tracker-miner-fs] ??? :

    Screenshot from 2014-02-10 09:37:23.png





































    I have also noticed that the RAM is currently using over 1GB, which is way above normal for just running the browser.

    I am planning to wipe and reformat the whole disk, and go for a new install, following the security pages advice. I cannot afford to waste time with suspicious internet activity eating into my limited quota of 5GB. The only problem is that I have a lot of useful packages installed and I haven't worked out how to save them. I have a very slow internet connection here, no broadband, so I do not want to have to download them all over again.

    Any advice?

  5. #5
    Join Date
    Mar 2006
    Location
    Williams Lake
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: System Monitor reveals possible network intrusion?

    If you have limited bandwidth, I'd suggest you install one of the other Ubuntu flavours, as they don't include as many applications that phone home. Try Xubuntu or Lubuntu.

    As far as saving the packages for applications you have downloaded and installed, if you haven't run:

    Code:
    sudo apt-get clean
    all the archived packages are located in /var/cache/apt/archives. You can copy them all to another location for usage later.

  6. #6
    Join Date
    Feb 2010
    Beans
    55
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: System Monitor reveals possible network intrusion?

    Thanks cariboo907. I checked the apt archives, there are some recently installed packages there. I use bleachbit quite often, so I think I probably removed most of the packages I installed a while back.

    I used to have lubuntu installed on an old laptop, but I much prefer Ubuntu LTS. This is a new laptop, with 2GB RAM, and it worked just great with the GNOME desktop, until now. A clean install is what I need. Thanks anyway.

  7. #7
    Join Date
    Feb 2014
    Beans
    44

    Re: System Monitor reveals possible network intrusion?

    Quote Originally Posted by michael2009 View Post
    Umm... Thanks for the reply fugu2. The command didn't work ...
    ~$ sudo mv /usr/lib/telepathy/mission-control-5 ~/garbage-bins/
    [sudo] password for admin:
    mv: cannot create regular file `/home/admin/garbage-bins/': Not a directory

    I checked the processes again. So what is [tracker-miner-fs] ??? :
    Sorry i forgot you need to create a directory garbage-bins before you move stuff into it
    (or you can move it anywhere really, just so the startup program can't find it)
    Code:
    $ mkdir ~/garbage-bins
    I'm not sure what [tracker-miner-fs] is...
    Code:
    $ apt-file search tracker-miner-fs
    libtracker-miner-0.14-dev: /usr/include/tracker-0.14/libtracker-miner/tracker-miner-fs.h
    tracker-dbg: /usr/lib/debug/usr/lib/tracker/tracker-miner-fs
    tracker-miner-fs: /etc/xdg/autostart/tracker-miner-fs.desktop
    tracker-miner-fs: /usr/lib/tracker/tracker-miner-fs
    tracker-miner-fs: /usr/share/doc/tracker-miner-fs/changelog.Debian.gz
    tracker-miner-fs: /usr/share/doc/tracker-miner-fs/copyright
    tracker-miner-fs: /usr/share/lintian/overrides/tracker-miner-fs
    tracker-miner-fs: /usr/share/man/man1/tracker-miner-fs.1.gz
    tracker-miner-fs
    metadata database, indexer and search tool - filesystem indexer

    This package contains the tracker indexer for indexing your files and folders.

    Tracker is an advanced framework for first class objects with associated
    metadata and tags. It provides a one stop solution for all metadata, tags,
    shared object databases, search tools and indexing.
    You should try and
    Code:
    $ man tracker-miner-fs
    Last edited by fugu2; February 11th, 2014 at 03:43 AM.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •