Re: [Dorset] dorset Digest, Vol 360, Issue 5
I would appreciate any advise and help on networking. (they say a little knowledge is a dangerous thing). I have been running etherape and it shows that my Linux system is sending out a lot of packets to IP addresses. I do do not have anything running (that I know of) and disconnecting from the Internet shows that these connections are still shown, but they are removed after time-outs occur. Doing a 'netstat -a' shows a lot of connected states. (even tho' I have unplugged the router connection to the Internet). (I have run 'transmission' for a torrent download some time back which may be the cause of the connections, but that is not running). It would appear that somewhere, something is trying to re-establish connections to the systems out on the Internet. I would expect to have no connections, especially when I have nothing communicating to the Internet. (maybe things like the update manager). My Linux build is the Ultimate Edition 2.8 - Ubuntu 10 based) Brian M -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
Re: [Dorset] dorset Digest, Vol 360, Issue 5
On 26/11/10 17:10, Brian R Masterman wrote: I have been running etherape and it shows that my Linux system is sending out a lot of packets to IP addresses. I do do not have anything running (that I know of) and disconnecting from the Internet shows that these connections are still shown, but they are removed after time-outs occur. Doing a 'netstat -a' shows a lot of connected states. (even tho' I have unplugged the router connection to the Internet). Hi Brian- Can you post the output of:- sudo netstat -ape | egrep '^tcp|udp|Proto' John -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
Re: [Dorset] dorset Digest, Vol 360, Issue 5
On Friday 26 November 2010, Andrew R Paterson wrote: On Friday 26 November 2010, Brian R Masterman wrote: I would appreciate any advise and help on networking. (they say a little knowledge is a dangerous thing). I have been running etherape and it shows that my Linux system is sending out a lot of packets to IP addresses. I do do not have anything running (that I know of) and disconnecting from the Internet shows that these connections are still shown, but they are removed after time-outs occur. Doing a 'netstat -a' shows a lot of connected states. (even tho' I have unplugged the router connection to the Internet). (I have run 'transmission' for a torrent download some time back which may be the cause of the connections, but that is not running). It would appear that somewhere, something is trying to re-establish connections to the systems out on the Internet. I would expect to have no connections, especially when I have nothing communicating to the Internet. (maybe things like the update manager). My Linux build is the Ultimate Edition 2.8 - Ubuntu 10 based) Brian M -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue Hi Brian, netstat -ape should show the pids of the offending processes/ Regards Andy Oh and you can also try your luck with lsof: e.g. lsof -i TCP:39895 to see what pid owns tcp/39895 man lsof is your friend -- Andy Paterson -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
Re: [Dorset] Next Bournemouth meet?
On Wed, 2010-11-24 at 07:54 +, Natalie Hooper wrote: Has a date been decided for the next Bournemouth meet? Is the plan still to meet at The Broadway on a non-karaoke night? You asked the question, and a few suggestions have been made. Please take an executive decision and tell us where to meet, then Terry can post it. I can't make it, I have the care and feeding of Mother-in-law from Tuesday 7th. Peter M. -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
Re: [Dorset] network problems
Seems that I may have found part of the problem. I had ktorrent running as a automatically startup application. I have also enabled my Firestarter but still find that 'netstat -a' shows a lot of connections that I cannot explain. Doing a; netstat -pta | egrep LISTEN shows; tcp0 0 linux:mysql*:* LISTEN 1408/mysqld tcp0 0 *:www *:* LISTEN 1954/apache2 tcp0 0 *:ssh *:* LISTEN 1109/sshd tcp0 0 linux:ipp *:* LISTEN 1132/cupsd tcp0 0 *:gdomap*:* LISTEN 1489/gdomap tcp6 0 0 [::]:ssh[::]:* LISTEN 1109/sshd tcp6 0 0 linux:ipp [::]:* LISTEN 1132/cupsd Which I would expect, but; netstat -a | egrep CONNECTED | wc -l Shows; 566 So my big question is what are all these connections that are established? Brian M -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
Re: [Dorset] network problems
tcp 0 0 linux:mysql *:* LISTEN 1408/mysqld tcp 0 0 *:www *:* LISTEN 1954/apache2 tcp 0 0 *:ssh *:* LISTEN 1109/sshd tcp 0 0 linux:ipp *:* LISTEN 1132/cupsd tcp 0 0 *:gdomap *:* LISTEN 1489/gdomap tcp6 0 0 [::]:ssh [::]:* LISTEN 1109/sshd tcp6 0 0 linux:ipp [::]:* LISTEN 1132/cupsd So my big question is what are all these connections that are established? mysqld is, as the process name suggest, the mysql database daemon running. apache2 I believe is a http server daemon, but I may be wrong on that point. sshd is used for remotely logging into your computer via ssh. cupsd is the Common Unix Printer Settings daemon, managing printers, and apparently also looking for network printers The only one I can't identify is gdomap, but there's the identities of the remaining culprit processes. -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
Re: [Dorset] network problems
On Friday 26 November 2010 22:04:06 StarLion wrote: tcp 0 0 linux:mysql *:* LISTEN 1408/mysqld tcp 0 0 *:www *:* LISTEN 1954/apache2 tcp 0 0 *:ssh *:* LISTEN 1109/sshd tcp 0 0 linux:ipp *:* LISTEN 1132/cupsd tcp 0 0 *:gdomap *:* LISTEN 1489/gdomap tcp6 0 0 [::]:ssh [::]:* LISTEN 1109/sshd tcp6 0 0 linux:ipp [::]:* LISTEN 1132/cupsd So my big question is what are all these connections that are established? mysqld is, as the process name suggest, the mysql database daemon running. apache2 I believe is a http server daemon, but I may be wrong on that point. sshd is used for remotely logging into your computer via ssh. cupsd is the Common Unix Printer Settings daemon, managing printers, and apparently also looking for network printers The only one I can't identify is gdomap, but there's the identities of the remaining culprit processes. -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue gdomap details http://linux.die.net/man/8/gdomap Tim -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
Re: [Dorset] network problems
On Friday 26 November 2010 21:55:09 Brian R Masterman wrote: Seems that I may have found part of the problem. I had ktorrent running as a automatically startup application. I have also enabled my Firestarter but still find that 'netstat -a' shows a lot of connections that I cannot explain. Doing a; netstat -pta | egrep LISTEN shows; tcp0 0 linux:mysql*:* LISTEN 1408/mysqld tcp0 0 *:www *:* LISTEN 1954/apache2 tcp0 0 *:ssh *:* LISTEN 1109/sshd tcp0 0 linux:ipp *:* LISTEN 1132/cupsd tcp0 0 *:gdomap*:* LISTEN 1489/gdomap tcp6 0 0 [::]:ssh[::]:* LISTEN 1109/sshd tcp6 0 0 linux:ipp [::]:* LISTEN 1132/cupsd Which I would expect, but; netstat -a | egrep CONNECTED | wc -l Shows; 566 So my big question is what are all these connections that are established? Brian M Further to my last e-mail I THINK netstat -a | egrep CONNECTED | wc-l list all the ports which are in use by programs running on your PC, try netstat -ape Which gives a full list all these program, can somebody confirm I am right Tim -- Next meeting: Somewhere quiet, Bournemouth, ???day 2010-12-?? 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How to Report Bugs Effectively: http://goo.gl/4Xue
