Arch Linux

abhidg

Member

From: City of Kol

Registered: 2006-07-01

Posts: 184

Website

[resolved] weird addresses in netstat output.

I just got this from netstat -a:

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 *:sunrpc                *:*                     LISTEN
tcp        0      0 *:5298                  *:*                     LISTEN
tcp       15      0 dawn.local:33041        tricia.gtlib.gatech:ftp CLOSE_WAIT
tcp        0      0 dawn.local:36481        im-in-f83.google.c:http ESTABLISHED
tcp       15      0 dawn.local:46760        packman-1.isc.org:ftp   CLOSE_WAIT
tcp        0      0 dawn.local:40858        im-in-f83.google.c:http TIME_WAIT
tcp        0      0 dawn.local:39532        packman-1.isc.org:ftp   ESTABLISHED
tcp        0      0 dawn.local:47796        po-in-f125.google.:5222 ESTABLISHED
tcp        0      0 dawn.local:36486        im-in-f83.google.c:http ESTABLISHED
tcp       15      0 dawn.local:36301        packman-1.isc.org:ftp   CLOSE_WAIT
tcp        0      0 *:ftp                   *:*                     LISTEN

I've never even heard of these sites; why is there any connection with them at all?
I first thought that it could be because of my browsing -- so i closed Firefox, yet these remain.

Is this normal/expected?
My laptop is behind a router (Linksys) and these ports are not open on the router.

edit: OK, I understand the 5222 one; that's due to pidgin, but i don't understand why isc.org
or gtlib.gatech. would be interested in my laptop I killed all these connections and after that
they are showing CLOSE_WAIT status, but before that some of them were showing ESTABLISHED.

Last edited by abhidg (2008-03-27 19:31:40)

wonder

Developer

From: Bucharest, Romania

Registered: 2006-07-05

Posts: 5,941

Website

Re: [resolved] weird addresses in netstat output.

type netstat -tap to see what program use that adress

-p, --program
       Show the PID and name of the program to which each socket belongs.

Last edited by wonder (2008-03-24 16:15:43)

---

Give what you have. To someone, it may be better than you dare to think.

abhidg

Member

From: City of Kol

Registered: 2006-07-01

Posts: 184

Website

Re: [resolved] weird addresses in netstat output.

Thanks! It seems that alunn is the one doing all these, but I've absolutely no idea why.