From owner-freebsd-questions@FreeBSD.ORG  Wed Feb  2 17:44:41 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3D81916A4CE
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 17:44:41 +0000 (GMT)
Received: from mail24.sea5.speakeasy.net (mail24.sea5.speakeasy.net
	[69.17.117.26])	by mx1.FreeBSD.org (Postfix) with ESMTP id 0307643D3F
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 17:44:41 +0000 (GMT)
	(envelope-from listmail@filn.net)
Received: (qmail 16532 invoked from network); 2 Feb 2005 17:44:40 -0000
Received: from dsl093-017-017.msp1.dsl.speakeasy.net (HELO [192.168.200.43])
	(listmail@filn.net@[66.93.17.17])
	(envelope-sender <listmail@filn.net>)AES256-SHA encrypted SMTP
	for <listmail@Bomgardner.net>; 2 Feb 2005 17:44:40 -0000
Message-ID: <42011180.7060800@filn.net>
Date: Wed, 02 Feb 2005 11:44:32 -0600
From: Tim Erlin <listmail@filn.net>
User-Agent: Mozilla Thunderbird 1.0 (X11/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Gene <listmail@Bomgardner.net>
References: <42010776.2050908@Bomgardner.net>
In-Reply-To: <42010776.2050908@Bomgardner.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: "freebsd-questions@FreeBSD. ORG" <freebsd-questions@freebsd.org>
Subject: Re: Strange foreign connections
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Feb 2005 17:44:41 -0000

Gene wrote:
> While running netstat I found these entries:
> 
> Active Internet connections (including servers)
> Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)
> tcp4       0      0  localhost.52730        undernet1.blueyo.ircd   
> ESTABLISHED
> tcp4       0      0  localhost.52398        minotor.spale.co.ircd    
> ESTABLISHED
> tcp4       0      0  localhost.60635        bagan2.srce.hr.ircd       
> ESTABLISHED
> 
>  The foreign addresses all show ircd at the end,  but there is no irc 
> clients or servers running and irc ports are blocked at the firewall.
> Does anyone have any idea what might be going on here?

You might try running 'sockstat' to get more info about these 
connections. It will provide you with user, command and PID info for 
each connected socket.

--Tim

> Gene
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"
> 
>