I have an issue with my server trying to ssh to another server and causing ssh timeouts in the process.

In /var/log/messages i see:

May 2 14:43:38 myserver01 kernel: ip4-fwh-net IN= OUT=eth0 SRC=myserver01ip DST=servertrying to connect to ip LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=22 DPT=34781 WINDOW=5792 RES=0x00 ACK URGP=0


These show up every 12 seconds or so for 5-20 min. While this is going on, the server is unreachable through ssh.

I thought sar was the issue but after disabling that, it did lower the times this happened, but the problem continues and this is the only thing we can see causing it in the logs.

Can anyone tell me how to find what is causing my machine to try to connect to this IP repeatedly, (i.e. cron job, etc...) and how to stop it.

Thanks in advance!