You are not logged in.

#1 2014-07-04 13:17:01

Tom B
Member
Registered: 2014-01-15
Posts: 187
Website

Why does Pepper Flash Plugin create lots of TCP connections?

If I load Chrome, and check netstat, withotut even going onto a site that uses flash, the flash plugin creates a lot of TCP connections. Is this normal? It seems odd to me:

tcp        0      0 arch:34420              we-in-f193.1e100.:https TIME_WAIT   -                   
tcp      348      0 arch:47540              we-in-f84.1e100.n:https ESTABLISHED 25557/libpepflashpl 
tcp      396      0 arch:47660              lhr08s03-in-f8.1e:https ESTABLISHED 25557/libpepflashpl 
tcp        0    127 arch:49281              we-in-f188.1e10:hpvroom ESTABLISHED 25557/libpepflashpl 
tcp      380      0 arch:34367              lhr08s03-in-f15.1:https ESTABLISHED 25557/libpepflashpl 
tcp      380      0 arch:53827              lhr08s03-in-f1.1e:https ESTABLISHED 25557/libpepflashpl 
tcp        0    212 arch:34373              lhr08s03-in-f15.1:https ESTABLISHED 25557/libpepflashpl 
tcp        0    779 arch:38494              lhr08s03-in-f3:www-http ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:57550              lhr08s03-in-f5.1e:https TIME_WAIT   -                   
tcp      380      0 arch:53826              lhr08s03-in-f1.1e:https ESTABLISHED 25557/libpepflashpl                 
tcp        0      0 arch:46990              lhr08s03-in-f7.1e:https TIME_WAIT   -                   
tcp        0      0 arch:36127              lhr08s03-in-f31.1:https TIME_WAIT   -                   
tcp        0      0 arch:59687              we-in-f95.1e100.n:https ESTABLISHED 25557/libpepflashpl 
tcp        0    212 arch:34374              lhr08s03-in-f15.1:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:47539              we-in-f84.1e100.n:https ESTABLISHED 25557/libpepflashpl 
tcp        0    212 arch:34371              lhr08s03-in-f15.1:https ESTABLISHED 25557/libpepflashpl 
tcp        0    212 arch:34370              lhr08s03-in-f15.1:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:59653              we-in-f95.1e100.n:https TIME_WAIT   -                   
tcp        0      0 arch:53816              lhr08s03-in-f7:www-http TIME_WAIT   -                   
tcp        0    212 arch:34372              lhr08s03-in-f15.1:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:53811              lhr08s03-in-f9.1e:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:46979              lhr08s03-in-f7.1e:https TIME_WAIT   -                   
tcp        0      0 arch:47502              we-in-f84.1e100.n:https TIME_WAIT   -                   
tcp      380      0 arch:34375              lhr08s03-in-f15.1:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:48365              lhr08s03-in-f17.1:https TIME_WAIT   -                   
tcp        0      0 arch:53830              lhr08s03-in-f1.1e:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:59647              we-in-f95.1e100.n:https TIME_WAIT   -                   
tcp        0      0 arch:34347              lhr08s03-in-f15.1:https TIME_WAIT   -                   
tcp        0      0 arch:47665              lhr08s03-in-f8.1e:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:49284              we-in-f188.1e10:hpvroom ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:49244              we-in-f188.1e10:hpvroom TIME_WAIT   -                   
tcp      380      0 arch:53806              lhr08s03-in-f9.1e:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:47665              lhr08s03-in-f8.1e:https ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:49284              we-in-f188.1e10:hpvroom ESTABLISHED 25557/libpepflashpl 
tcp        0      0 arch:49244              we-in-f188.1e10:hpvroom TIME_WAIT   -                   

I ask this because my credit card details were compromised online and I'm trying to work out if it's something on my PC or one of the websites I've used (Although I've only purchased from large sites).

Last edited by Tom B (2014-07-04 14:56:38)

Offline

#2 2014-07-04 13:37:39

ugjka
Member
From: Latvia
Registered: 2014-04-01
Posts: 1,885
Website

Re: Why does Pepper Flash Plugin create lots of TCP connections?

Edit: I have bunch of them too. What the hell is going on?

tcp        0      0 EsiModrs:59849          arn06s01-in-f31.1:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:39314          arn06s01-in-f2:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:48771          a23-43-139-27.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:37532          a23-78-101-109:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:55037          64.233.165.188:hpvroom  ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:47386          muc03s07-in-f9.1e:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:59738          162-96.amazon.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:33113          91.225.248.80:www-http  ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:55388          s3-1-w.amazona:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:45141          69.25.24.24:www-http    ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:49109          86.201.deploy.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:47702          176.32.99.77:www-http   ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:46654          arn06s01-in-f6.1e:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:57680          mojofarm.media:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:40665          74.122.143.16:www-http  ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:37530          a23-78-101-109:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:48320          2.23.145.169:www-http   ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:34805          ghs-vip-any-c2:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:59736          162-96.amazon.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:48976          86.201.deploy.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:36737          arn02s05-in-f31.1:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:43151          185.29.134.89:www-http  ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:34803          ghs-vip-any-c2:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:59735          162-96.amazon.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:34802          ghs-vip-any-c2:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:40855          arn06s01-in-f1.1e:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:34801          ghs-vip-any-c2:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:56245          lb-in-f95.1e100.n:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:34804          ghs-vip-any-c2:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:37525          a23-78-101-109:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:36954          fa-in-f84.1e100.n:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:59729          162-96.amazon.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:38986          arn06s01-in-f0.1e:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:35872          muc03s07-in-f8.1e:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:42889          muc03s07-in-f6:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:34245          arn06s01-in-f12.1:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:54206          fa-in-f105.1e100.:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:43018          muc03s07-in-f6:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:47704          176.32.99.77:www-http   ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:39567          93.184.216.146:https    ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:48999          86.201.deploy.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:47703          176.32.99.77:www-http   ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:50619          162-75.amazon.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:34806          ghs-vip-any-c2:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:49988          176.32.98.118:www-http  ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:37526          a23-78-101-109:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:47565          muc03s07-in-f7.1e:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:48770          a23-43-139-27.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:37524          a23-78-101-109:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:60697          176.32.100.230:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:37797          86.207.deploy.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:59728          162-96.amazon.:www-http ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:56377          lb-in-f95.1e100.n:https ESTABLISHED 590/libpepflashplay 
tcp        0      0 EsiModrs:48977          86.201.deploy.:www-http ESTABLISHED 590/libpepflashplay 

Last edited by ugjka (2014-07-04 13:52:28)


https://ugjka.net
"It is easier to fool people, than to convince them that they've been fooled" ~ Dr. Andrea Love

Offline

#3 2014-07-04 15:16:20

Tom B
Member
Registered: 2014-01-15
Posts: 187
Website

Re: Why does Pepper Flash Plugin create lots of TCP connections?

If you run netstat with the -W option, most of them seem to be going to canonical??

tcp        0      0 localhost.localdomain:ipp *:*                     LISTEN      -                   
tcp        0      0 localhost.localdomain:15550 *:*                     LISTEN      -                   
tcp        0      0 *:mysql                 *:*                     LISTEN      -                   
tcp        1      0 arch:45268              host217-rangeB-google-ggc.cdn.thlon.isp.sky.com:https CLOSE_WAIT  2177/libpepflashpla 
tcp        1      0 arch:45060              lhr08s03-in-f24.1e100.net:https CLOSE_WAIT  2177/libpepflashpla 
tcp        0      0 arch:41318              74.125.206.188:hpvroom  ESTABLISHED 2177/libpepflashpla 
tcp      380      0 arch:43482              lhr08s03-in-f31.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:43684              wildcard-launchpad-net.banana.canonical.com:https ESTABLISHED 2177/libpepflashpla 
tcp      380      0 arch:49875              lhr08s03-in-f23.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:40203              lhr08s03-in-f2.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:44122              host247-rangeB-google-ggc.cdn.thlon.isp.sky.com:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:34628              we-in-f95.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      1 arch:43687              wildcard-launchpad-net.banana.canonical.com:https SYN_SENT    2177/libpepflashpla 
tcp      380      0 arch:40204              lhr08s03-in-f2.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp      380      0 arch:53997              lhr08s03-in-f9.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        1      0 arch:51359              we-in-f193.1e100.net:https CLOSE_WAIT  2177/libpepflashpla 
tcp        0      0 arch:54921              we-in-f84.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0    517 arch:43685              wildcard-launchpad-net.banana.canonical.com:https ESTABLISHED 2177/libpepflashpla 
tcp      380      0 arch:49877              lhr08s03-in-f23.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp      396      0 arch:55889              lhr08s03-in-f4.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:34626              we-in-f95.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp      380      0 arch:45055              lhr08s03-in-f24.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        1      0 arch:54932              we-in-f84.1e100.net:https CLOSE_WAIT  2177/libpepflashpla 
tcp        1      0 arch:40209              lhr08s03-in-f2.1e100.net:https CLOSE_WAIT  2177/libpepflashpla 
tcp        0      0 arch:34625              we-in-f95.1e100.net:https TIME_WAIT   -                   
tcp        1      0 arch:32794              lhr08s03-in-f3.1e100.net:https CLOSE_WAIT  2177/libpepflashpla 
tcp        0      0 arch:59056              lhr08s03-in-f30.1e100.net:https ESTABLISHED -                   
tcp        0      0 arch:41203              launchpad-net.nutmeg.canonical.com:https ESTABLISHED -                   
tcp        0      0 arch:43688              wildcard-launchpad-net.banana.canonical.com:https ESTABLISHED -                   
tcp        0      0 arch:49872              lhr08s03-in-f23.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:32795              lhr08s03-in-f3.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:43686              wildcard-launchpad-net.banana.canonical.com:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:55890              lhr08s03-in-f4.1e100.net:https TIME_WAIT   -                   
tcp        0      0 arch:43689              wildcard-launchpad-net.banana.canonical.com:https ESTABLISHED -                   
tcp        0      0 arch:41117              lhr08s03-in-f0.1e100.net:www-http ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:43500              lhr08s03-in-f31.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp        0      0 arch:51357              we-in-f193.1e100.net:https ESTABLISHED 2177/libpepflashpla 
tcp6       0      0 [::]:ipp                [::]:*                  LISTEN      -                   
tcp6       0      0 [::]:cslistener         [::]:*                  LISTEN      1149/java           
tcp6       0      0 [::]:ndmp               [::]:*                  LISTEN      1149/java           
tcp6       0      0 [::]:www-http           [::]:*                  LISTEN      -                   

Offline

#4 2014-07-10 12:07:05

Tom B
Member
Registered: 2014-01-15
Posts: 187
Website

Re: Why does Pepper Flash Plugin create lots of TCP connections?

Is there a viable alternative to pepper flash? I'm not sure I'm comfortable with it continually calling home to canonical.

Offline

#5 2014-07-10 12:17:09

WorMzy
Administrator
From: Scotland
Registered: 2010-06-16
Posts: 12,623
Website

Re: Why does Pepper Flash Plugin create lots of TCP connections?

Lightspark, gnash, shumway.. none work particularly brilliantly, and I don't think they're compatible with Chrom{e,ium}.


Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

Offline

#6 2014-07-10 20:27:38

graysky
Wiki Maintainer
From: :wq
Registered: 2008-12-01
Posts: 10,697
Website

Re: Why does Pepper Flash Plugin create lots of TCP connections?

Tom B wrote:

If I load Chrome, and check netstat, withotut even going onto a site that uses flash, the flash plugin creates a lot of TCP connections.

What switches are you using to generate that output?


CPU-optimized Linux-ck packages @ Repo-ck  • AUR packagesZsh and other configs

Offline

#7 2014-07-11 16:24:59

Tom B
Member
Registered: 2014-01-15
Posts: 187
Website

Re: Why does Pepper Flash Plugin create lots of TCP connections?

netstat -Wpt, p being the switch that shows the program name.

Offline

Board footer

Powered by FluxBB