This I find again and again in syslog: Code: Oct 11 06:30:01 server-x proftpd: localhost (localhost[127.0.0.1]) - FTP session opened. Oct 11 06:30:01 server-x proftpd: localhost (localhost[127.0.0.1]) - FTP session closed. Oct 11 06:30:03 server-x proftpd: localhost - Fatal: unable to open incoming connection: Transport endpoint is not connected But proftp seem to work well. It seems that this: ist responsible for those entries because the entries appear every half an houre and exactly at strike the hour and 30 minutes pass to strike the hour. At that time the check_services.php ist startet by cron. What are that message mean? I don't want to comment out the responsible lines, I don't understand why it comes.