Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 02 Feb 2005 11:44:32 -0600
From:      Tim Erlin <listmail@filn.net>
To:        Gene <listmail@Bomgardner.net>
Cc:        "freebsd-questions@FreeBSD. ORG" <freebsd-questions@freebsd.org>
Subject:   Re: Strange foreign connections
Message-ID:  <42011180.7060800@filn.net>
In-Reply-To: <42010776.2050908@Bomgardner.net>
References:  <42010776.2050908@Bomgardner.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Gene wrote:
> While running netstat I found these entries:
> 
> Active Internet connections (including servers)
> Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)
> tcp4       0      0  localhost.52730        undernet1.blueyo.ircd   
> ESTABLISHED
> tcp4       0      0  localhost.52398        minotor.spale.co.ircd    
> ESTABLISHED
> tcp4       0      0  localhost.60635        bagan2.srce.hr.ircd       
> ESTABLISHED
> 
>  The foreign addresses all show ircd at the end,  but there is no irc 
> clients or servers running and irc ports are blocked at the firewall.
> Does anyone have any idea what might be going on here?

You might try running 'sockstat' to get more info about these 
connections. It will provide you with user, command and PID info for 
each connected socket.

--Tim

> Gene
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"
> 
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42011180.7060800>