Strange foreign connections

Tim Erlin listmail at filn.net
Wed Feb 2 09:44:41 PST 2005


Gene wrote:
> While running netstat I found these entries:
> 
> Active Internet connections (including servers)
> Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)
> tcp4       0      0  localhost.52730        undernet1.blueyo.ircd   
> ESTABLISHED
> tcp4       0      0  localhost.52398        minotor.spale.co.ircd    
> ESTABLISHED
> tcp4       0      0  localhost.60635        bagan2.srce.hr.ircd       
> ESTABLISHED
> 
>  The foreign addresses all show ircd at the end,  but there is no irc 
> clients or servers running and irc ports are blocked at the firewall.
> Does anyone have any idea what might be going on here?

You might try running 'sockstat' to get more info about these 
connections. It will provide you with user, command and PID info for 
each connected socket.

--Tim

> Gene
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"
> 
> 


More information about the freebsd-questions mailing list