Hack or Legit?

Hello All,

I’m seeing on a couple of servers running the latest code the following in the /tmp directory.
Is this legit, or do we have a situation?

drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:09 jetty-0.0.0.0-58080-bridge.war-_administrator-any-3029991705234874527.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:29 jetty-0.0.0.0-58080-bridge.war-_administrator-any-7046035110756000655.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:08 jetty-0.0.0.0-58080-bridge.war-_agent-any-1330175760715336664.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:29 jetty-0.0.0.0-58080-bridge.war-_agent-any-6544979968769033707.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:09 jetty-0.0.0.0-58080-bridge.war-_client-any-3640585765646875318.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:29 jetty-0.0.0.0-58080-bridge.war-_client-any-3640997143956493397.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:08 jetty-0.0.0.0-58080-bridge.war-_communication_manager-any-1133106407189201365.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:29 jetty-0.0.0.0-58080-bridge.war-_communication_manager-any-2366815592709269425.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:29 jetty-0.0.0.0-58080-bridge.war-_default-any-7097149634532453399.dir
drwxr-xr-x 5 asterisk asterisk 4096 Mar 29 20:08 jetty-0.0.0.0-58080-bridge.war-_default-any-9029214543154883371.dir

This is a link to when the question was asked befor no definitive answer other than could be caused by isyphony

Thanks when I searched jetty info here, found one other link with no info.
This gives is the answer, related to isymphony.

Thanks!!

Do you use iSymphony ?

It is disabled, originally installed with core, then disabled.

then totally uninstall and delete it ( fwconsole or amportal) . it is hard to explain it as a "good thing " apart from chewing up memory and resources for no apparent reason, but Schmooze always makes a buck out of it :slight_smile:

Agreed!
Thanks!

What’s schmooze?

This is still showing up on the info for the Bria module?