This doesn't look good –- Cam Scanner---- listed under System Activity

ImCluless

Noticed this recently. Please Advise.

last pid: 21623; load averages: 0.01, 0.03, 0.04 up 0+01:38:15 20:08:44
82 processes: 5 running, 63 sleeping, 14 waiting

Mem: 232M Active, 438M Inact, 125M Wired, 97M Buf, 1058M Free
Swap: 4096M Total, 4096M Free

PID USERNAME PRI NICE SIZE RES STATE TIME WCPU COMMAND
11 root 155 ki31 0K 8K RUN 82:00 99.66% [idle]
7492 root 24 0 83724K 27760K piperd 0:00 1.27% php-fpm: pool lighty (php-fpm)
24746 root 52 20 10592K 2024K piperd 0:01 0.10% /bin/sh /var/db/rrd/updaterrd.sh
45965 root 20 0 522M 256M nanslp 2:33 0.00% /usr/local/bin/snort -R 51392 -D -l /var/log/
0 root -16 0 0K 96K swapin 0:43 0.00% [kernel{swapper}]
1655 root 20 0 358M 91532K bpf 0:22 0.00% /usr/local/bin/snort -R 49363 -D -l /var/log/
45965 root 20 0 522M 256M bpf 0:21 0.00% /usr/local/bin/snort -R 51392 -D -l /var/log/
1655 root 20 0 358M 91532K nanslp 0:11 0.00% /usr/local/bin/snort -R 49363 -D -l /var/log/
0 root -92 0 0K 96K - 0:10 0.00% [kernel{em0 taskq}]
12 root -92 - 0K 112K WAIT 0:10 0.00% [intr{irq21: rl0 acpi0}]
15456 root 20 0 17244K 7172K kqread 0:05 0.00% /usr/local/sbin/lighttpd -f /var/etc/lighty-w
4 root -16 - 0K 16K - 0:04 0.00% [cam{scanner}]
12 root -60 - 0K 112K WAIT 0:03 0.00% [intr{swi4: clock}]
5 root -16 - 0K 8K pftm 0:02 0.00% [pf purge]
246 root 20 0 83724K 20636K RUN 0:02 0.00% php-fpm: master process (/usr/local/lib/php-f
12 root -88 - 0K 112K WAIT 0:01 0.00% [intr{irq22: atapci1}]
19 root 16 - 0K 8K syncer 0:01 0.00% [syncer]
10887 root 20 0 10132K 1788K select 0:01 0.00% /usr/local/sbin/apinger -c /var/etc/apinger.c

pfSense is 2004 - 2015 by Electric

Nullity

Googling "freebsd cam" came up with some scsi controller thingamajig.

You could try dancing naked in front of your pfSense device and see if the "cam" process reacts.

ImCluless

Thank-you. I understand. I googled camscanner before I posted my question. It is quite a program used for lots of things including spyware. My belief is this is not a legitimate process that is part of a normal pfSense install. I am for someone to look at the above processes and correct me if I am wrong. Also nothing referencing this process appears in the forums. Thank you for reading this

Derelict

https://www.freebsd.org/cgi/man.cgi?query=cam&sektion=4&manpath=FreeBSD+10.1-RELEASE

KOM

Yeah, CAM has been the *nix disk access module since forever.

Gertjan

@ImCluless:

…. Also nothing referencing this process appears in the forums.

site:https://forum.pfsense.org CAM
As already explained above, CAM is a low level FreeBSD tool. You can see some traces in your DMESG log file:

cat /var/log/dmesg.boot | grep 'CAM'
(aprobe0:ata0:0:1:0): CAM status: CCB request completed with an error
(aprobe0:ata0:0:1:0): CAM status: Command timeout
(aprobe1:ata0:0:1:0): CAM status: CCB request completed with an error
(aprobe1:ata0:0:1:0): CAM status: CCB request completed with an error

It can be noisy when when FreeBSD has issues with your drive(s).

ImCluless

Thanks to all for the help…..

cmb

Yes, that's just part of the FreeBSD kernel, the SCSI/ATA subsystem. It's normal.

Nullity

Well, technology, more often than wanted, makes me a bit paranoid. Why is it whenever you jump to conclusions, those conclusions are rarely good?