Strange foreign connections

[Mike Tancsa]

What does 
netstat -na
sockstat
show ?  I would not trust the DNS lookups in case someone is playing
around with hosts/DNS

	---Mike


On Wed, 02 Feb 2005 11:01:42 -0600, in sentex.lists.freebsd.questions
you wrote:

>While running netstat I found these entries:
>
>Active Internet connections (including servers)
>Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)
>tcp4       0      0  localhost.52730        undernet1.blueyo.ircd   
>ESTABLISHED
>tcp4       0      0  localhost.52398        minotor.spale.co.ircd    
>ESTABLISHED
>tcp4       0      0  localhost.60635        bagan2.srce.hr.ircd       
>ESTABLISHED
> 
>
>  The foreign addresses all show ircd at the end,  but there is no irc 
>clients or servers running and irc ports are blocked at the firewall.
>Does anyone have any idea what might be going on here?
>
>Gene
>
>_______________________________________________
>freebsd-questions at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"