When I use unmenu I see the following yet I don't have those files open anywhere on  my systems in the house - what does the following lines mean then?

 

shfs    2417 root    4r  REG    9,4    4755730 37017 /mnt/disk4/files/pictures

shfs    2417 root    6r  REG    9,4    664636 28767 /mnt/disk4/files/pictures/

shfs    2417 root    7r  REG    9,4    5163579 37027 /mnt/disk4/files/pictures

shfs    2417 root    8r  REG    9,4    653053 28768 /mnt/disk4/files/pictures/

shfs    2417 root    9r  REG    9,4    675706 28769 /mnt/disk4/files/pictures/

shfs    2417 root  10r  REG    9,4    5147094 37029 /mnt/disk4/files/pictures

shfs    2417 root  11r  REG    9,4    624529 28770 /mnt/disk4/files/pictures

shfs    2417 root  12r  REG    9,4    5374747 37030 /mnt/disk4/files/pictures

shfs    2417 root  18r  REG    9,4    5139139 37037 /mnt/disk4/files/pictures/

shfs    2417 root  70r  REG    9,4    122406 28348 /mnt/disk4/files/pictures/

Have you forwarded any ports on your router?

enter "netstat"

Have you forwarded any ports on your router?

 

No I haven't....

 

I ended up killing the PID id but still don't know what was going on.

Have you forwarded any ports on your router?

 

No I haven't....

 

I ended up killing the PID id but still don't know what was going on.

"shfs" is the process that creates the "user-shares"

 

It apparently had file descriptors open to /mnt/disk4/pictures  (the directory)

(no idea why, other than it might have been the last thing accessed from windows.)

 

If you killed shfs, odds are you no longer have access to user-shares.  (until you next start the array)

 

Joe L.

Joe -

There were pictures open in different folders but I didn't have them open. When I kept selecting "open files" randomly different pics were open. Then later last night before I killed of the PID it just sat there with about 6 different pics open but didn't same to change  like it had.

There were pictures open in different folders but I didn't have them open. When I kept selecting "open files" randomly different pics were open.

That sounds like a computer on the network was indexing the folder and / or building thumbnails.

Thinking it may have been my HTPC - TV was on but it may have been doing something in the background with WMC.

"netstat" will show all network connects to the server. This will determine what clients are accessing the server and if there is a security breach.