What djsmiley2k meant by "swapping" is that your computer is constantly moving data back and forth between the RAM and swap partition. That constant movement of data beteen RAM and swap partition tends to happen in systems with low amounts of RAM (512MB or lower). Since you said that the computer that was having problems have a small quantity of RAM, it's likelly that it's just running out of RAM. This can happen even without an active internet connection (it's mstly dependent on how heavy are the programs you use). First solution would be to add more RAM, or if you can't, replace your DE to something lighter (LXDE or fluxbox) and try replacing some of your apps with lighter ones (Firefox with midori, Evolution with claws, OO.org with abiword, etc). That way your apps use less RAM and the swapping decreases (or stop completelly).

Ok.. Sounds like I run "su -" to get into root..
then after the OS has booted up, I run "free"..
Then after I've clicked up a few bookmarks, and the hd activity starts going wild, I types in "free" again as root.. but I doubt it's a good plan to be running in root while on the Net.. especially when some bully is messing in the OS... I would probably end up having to Dban the hd, and reinstall the OS.. That doesn't sound like good advice at all... Is it..?

I hope you mean run "iotop" as root..?
I suppose I should surf "iotop", to find what it is, and how it's used...

"iptraf" installed..
It says "iptraf" is already installed...


I don't see any "IP-Tables" in systems tools.. so I'm trying a reboot, hoping that pulls things together..?

I managed once to get IP-Tables working in an early Ubuntu, but not since..
In Ubuntu, IP-Tables showed in "systems tools>internet"...

if all you are doing as the root user is to run " free" there is NO problem with that
THAT IS WHY there is a "su" or "su -"
just DO NOT use the ( not recommended ) root login to the gui hack

with fedora 14 ( i am guessing at that ) the DEFAULT is to have SELinux set to enforcing
and the firewall is set to stealth block EVERYTHING


the " issue " you are describing sounds like the DEFAULT indexing is DOING what it is supposed to do , index EVERYTHING .
for a modern 1 TB ( becoming the norm ) this WILL take a lot of time and system resources
also if there are a bunch of photos then Gnome WILL use A LOT of cup cycles and ram to make thumbnails -- also will take time


your " hd going crazy " is most likely that !!


for SE NOT TO HAVE INFORMED you that something is not " right"
-- NO SELinuxTroubleShooer warnings
-- NO Rkhunter or chkrootkit "found" warnings when YOU RAN THEM -- you did RIGHT !!!!!!
-- NO suspicious " non standard " ( just "found" on the net " ) rpm's were installed BY YOU as "root"

then i do not think you were "hacked"

Iptools is installed and running in any default Fedora install. If you haven't turned it off it ought to be running. Which specific files have been uploaded? When you write that this happens when you click on several bookmarks, do you mean that you have several tabs going? Do you get the same result when you have several tabs of pages that are not bookmarked?

You don't need to be root to run free or iotop, only iptraf. As for reading about how iotop is used, that's a good idea, but keep in mind that simply typing iotop will suffice to get a basic picture of what's going on.

As for iptraf specifically, just enter the command as root, then hit any key to get rid of the splash page, then select "IP traffic monitor" (I think it's selected by default, so simply hitting enter should do the trick), then select your network interface and you're done.

Then.. how is it that "indexing" only starts after I've clicked into the culprit's website.. and stops when I pull the Internet wire..?

Sometimes I listen deeply into the sound a hd makes, to make a sound-memory of what it's doing when it does different processes.. like how in W-98 I could hear trojans causing the hd to makes sounds like cyber "lagoon waves".. The more trojans, the longer the "waves crashing on the shore" sounds... The sounds the hd's make during the incidents aren't the same sounds F-14 indexing makes... Each OS has it's own distinct "hd-songs"... I'm hearing my files uploading.. and I'm trying to find the right software, and install it, to peak at the leak, and to patch it.. knowing that the "hungry mindless carnivores and parasites", in Internet-land, are like "a hundred gaping mouths, forever in feeding-frenzy suckling mode", believing everything they find is something to eat... I'm merely trying to "pry the parasite off my vein", off my life... I ain't its meal.. and I ain't its mummy... It only thinks I am...

I'm working on trying to get IP-Tables on the go... But there's not much time left in a day, or a night, to get right into fixing the computer for hours and hours a day... I just don't have the hours.. I do have a bit of time and energy to spare in a day.. Running it in hobbies would be nice.. Being it in a war is not fun... There's a lot of work to do this winter... I suppose I'm searching for a "quick-fix"... I'm searching for an OS that has all its thrusters firing all at once... It ain't Fedora, yet... Maybe there's a big daddy OS out here that does it all like it should be done, in and from every corner of the OS's cloud... But for now I gotta either get this IP-Tables thing going, or just pull the plug, and forget the damn violent bully-saturated internet... They can't handle anything I say anyway... I say something new, and they freak, and suddenly it's as if I "kicked an anthill of fire-ants, and now they're all frantically skittering around searching for someone to sting and bite" in eliminating their new obsolescences, where they fed... Next thing I sees is them "sucking on my hd's veins, like a swamp-leach on ones leg", for more free input.. To them everything they notice that tastes good is "food"... They didn't even say "hello", and already it's a "pointy rape"... I just wants to "sour the milk", and lock them out of the rest of my life... I really don't want their sewage-class lives touching even near my life... They need be taught that not everything is their "warm-bawbaw & potty"...

I thinks we needs a second internet... One for all the garbage and toilet-class op's and psychotic players.. then I wouldn't have any mindless-cruds messing in my PC's OS...


I'll give it a good try to get this Fedora security thing into a "soft reliable security net", without holes.. but holes just seem to happen, like sit just happens...
...and when I gets the time, I'm gonna test-out these 20-ISO's of various other Linux distro's...


It ain't "indexing".. it's hungry web-parasites...

It ain't a hacker, it is indeed a sign to visit a doctor. Sorry I have to say that. You do not want to even look if there is a hacker on your system, you just want to believe it. Do you really think that any script-kiddie out there is only waiting for you to fire up your computer, so that they can have a look at your OS? By the way, it is physically impossible, that you can hear, what a program is actually doing on your harddisk.

Indexing makes the hd sounds be like "winding a grand father clock"..

Uploading pix-files and sound-files to the Internet has the same hd sounds and frequencies as uploading a flash..
You can't hear it on a new hd, but as hd's age they get a little noisy.. and if they are set out of the tower, with a silent cooling fan, and you have good high tones hearing, you can hear them, and you can determine the patterns the clicks make... Me thinks for some reason you don't want people to know this... Or you don't want you to know this..?

In one incident, the authorities were uploading my files from Ubuntu-910..
I complained in the next post, that the uploading was being done in approx 1-meg pulses every ten seconds, slowing down my machine.. A minute later the uploading frequency changed to 100k every ten seconds.. I complained again, and the uploading change to about 10k every five seconds... You know exactly what I mean...

I don't need your assistance.. please don't post in response to any of my future question, including this thread.. All you do is insult and blabber.. Go bug someone else... You don't have it to understand the problem on my side.. All you see is to defend the bad... I thinks you're a little ashamed of what you ID with in my previous posts.. It shows...

I wonders why you are so adamant about maintaining such attacks secret, and so strong on "smoke-screening" the facts..? Do you do such attacks in your employment..?

Please don't reply sir.. I really don't want to know.. Please just go away sir..
You and me just aren't compatible in any way.. Accept that.. ByeBye!

_______________



Indexing makes the hd sounds be like "winding a grand father clock"..

Uploading pix-files and sound-files to the Internet has the same hd sounds and frequencies as uploading a flash..

I know a little about being hacked.. My OS's were trashed by hacks over 50-times in 2010, by mindless psychotic kooks & ooks...

______________


I'm gonna get this ole IPTables thingawhozits working somehow one day, and block everything... this Fedora Linux beast is a lot of fun.. and more than reasonably secure.. I wish I had the time and resources to really learn it all... I wish I had a real computer...

Bottom-line: The hacks don't ever get any valuable data from my internet PC.. All they get is my tunes, my nudie-pix backgrounds, a few insulting posts and pix directed right at them, and bits of the 25 Linux OS ISO's in the downloads file... There's never anything of value on this hd but the OS... All private files are immediately sent to a flash, then deleted from the hd, and the flash removed, and plugged into the non-connected PC, and Clam-scanned... It works for me... This way the mindless kooks and ooks never touch my private data PC...

I'm gonna try an experiment.. I'll delete all personal files, but one background pix, from this Internet PC, then run in those culprit websites.. Maybe this is the answer to prevent the PC from running slow, whilst its being hacked with "super cookies", when there isn't anything to hack, but one 50k pix... I'll totally empty desktop and home file, starting a minute from now......

??? maybe- kinda of - sort of ???

on a windows system with a VERY fraged drive ...
A fragged MS windows boot loader -- NOW that IS very noisy on boot up

the default is set to a secure setting see the fedora documentation -- this is WELL documented
for Gnome for KDE and for the terminal
fedora is one of the MOST secure OS's .The default settings just out of the box are fine for 99% of users
now there is a "extra" level that SE and iptables can be set to -- the one that the NSA uses - the "tin foil hat " settings



cosmicbrat by chance are you the same user here called just "cosmic "and over on the UK site female first


now say if you were some one like ? say " Dr. Felten" then people are most likely "watching " but for the average "joe" NO . with maybe one exception - you might have 'ticked' off one of the s-kiddies over at 4chan


MOD- this thread serves no purpose any farther , please lock it

Last reply to you in any way: Up to my ignore list.

If you have a message for this forums moderators next time please use the "Report" button or shoot us an email TIA.


There is absolutely no value for the OP in posting something like this. If you want to quit posting just leave the thread alone, TIA.


@ALL: please only address the technical side of things and leave the rest be else please cease posting in this thread.


@cosmicbrat (cosmicb, really): It's clear you (with all due respect) experience difficulties on a different plane than technology can ever hope to solve. This makes it hard to separate technical issues (if any) arising from using older hardware from the clutter. From now on please only post your response to technical questions and leave out any accusations and observations that are not backed up by tool output or other technical data. I've also edited the thread title to reflect the fact this is more likely a performance issue and not some "cracker attack". In your next post please post the requested iotop and iptraf output and your /etc/sysconfig/iptables and yur /etc/sysconfig/iptables.

3 members found this post helpful.

There aren't any iotop files.. It's all zeros...

Total DISK READ: 0.00 B/s | Total DISK WRITE: 0.00 B/s
TID PRIO USER DISK READ DISK WRITE SWAPIN IO> COMMAND
1 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % init
2 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kthreadd]
3 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [ksoftirqd/0]
4 rt/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [migration/0]
5 rt/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [watchdog/0]
6 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [events/0]
7 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [cpuset]
8 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [khelper]
9 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [netns]
10 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [async/mgr]
11 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [pm]
12 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [sync_supers]
13 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [bdi-default]
14 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kintegrityd/0]
15 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kblockd/0]
16 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kacpid]
17 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kacpi_notify]
18 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kacpi_hotplug]
19 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [ata_aux]
20 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [ata_sff/0]
21 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [khubd]
22 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kseriod]
23 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kswapd0]
24 be/5 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [ksmd]
25 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [aio/0]
26 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [crypto/0]
1051 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % NetworkMa~anager.pid
2588 be/4 Dragonsp 0.00 B/s 0.00 B/s 0.00 % 0.00 % firefox
2589 be/4 Dragonsp 0.00 B/s 0.00 B/s 0.00 % 0.00 % firefox
2590 be/4 Dragonsp 0.00 B/s 0.00 B/s 0.00 % 0.00 % firefox
2591 be/4 Dragonsp 0.00 B/s 0.00 B/s 0.00 % 0.00 % firefox
32 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kpsmoused]
33 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kstriped]


I seems to stop there, and just keeps bouncing every 20-seconds...

__________________________


iptraf does nothing.. It seems to only monitor real-time activity.. I need the history...

__________________________


[root@Life ~]# /etc/sysconfig/iptables
-bash: /etc/sysconfig/iptables: Permission denied


__________________________


[root@Life ~]# /etc/sysconfig/iptables.
-bash: /etc/sysconfig/iptables.: No such file or directory


__________________________


Today at about 7:45 PM something hit the OS, making the mouse cursor flash inverted at about 4 times a second, and the screen lockup... Which one of your recommended security processes tells me who did what how..?

yes iptraf does monitor real time activity, the point being to watch whats happening as it happens and see if you really are being attacked or arent
i myself occasionally have seen where my computer locks up with the hard drive light solid on for no apparant reason on my computers but it doesn't appear in my case to be an attack

Whatever it was that messed up the cursor, and locked up the screen, took the OS a long time to fix as it rebooted.. [moderated]

I'm all over the place trying to find how to get IPTables working..
I installed almost everything in Yumex..
[moderated]


[moderated]



http://defindit.com/readme_files/iptables.html

http://www.google.com/search?q=how+t...+14&as_rights=

http://www.spinics.net/linux/fedora/...msg387691.html


How is anyone to understand any of all that..?

Why can't they just include this IPTables thingawhoozits in the install ISO's"..? [moderated] Please include a functioning IPTables in ISO install disks, [moderated] Some folks, very wise in other areas of life, just wants to switch the dern things on, and do PC stuff, without needing to know all what happens to all them thar little 1's and 0's in and all around the motherboards and hd's...

If you are using Firefox, and in your Preferences, Security settings, you have either or both of Block reported attack sites or Block reported web forgeries selected, your browser starts loading a large amount of site data from Google, the more you visit sites or keep tabs or windows open. This is just web site warning data stored in your profile, urlclassifier3.sqlite file, which Firefox helpfully creates, based on whatever pages it sees.

This file may grow to an enormous size (100 megabytes in a couple of hours of browsing), with no effective ways to limit its size other than disabling it altogether. Unticking the two checkboxes is enough. You can freely delete the file at any time, but if the boxes are ticked, it'll just download the data again. Search for "urlclassifier3.sqlite" on Google for further information.

You could untick the two checkboxes, restart Firefox, and see if it still starts trashing your hard drive and/or network or not. If not, you know exactly what causes the problem, and either switch to another browser, wait for Firefox guys to fix the slowdown and accept the slowdown in the mean time, or keep the attack/forgery site blocking disabled.

Personally, I'm not using the site blocking until they fix it: it's not worth the slowdown.

Nominal Animal