On Fri, Apr 17, 2009 at 07:59:22PM +0100, Nuno Magalhães wrote: > # netstat -l | grep ftp > udp 0 0 *:tftp *:* For future reference: at this point you should have run: netstat -lp | grep tftp which would have exposed the guilty process -- Tzafrir Cohen | tzafrir@jabber.org | VIM is http://tzafrir.org.il | | a Mutt's tzafrir@cohens.org.il | | best ICQ# 16849754 | | friend