Prev: sneakemail no longer free :(
Next: apple '' one to one'' is a rip-off???
From: Jim on 5 Dec 2009 14:13
With no apps open, I'm still geting a small trickle of network activity
(as viewed by iStat Menus). This isn't normal.

How can I find out what's causing this? The only new software recently
has been Transmission, which isn't running.

netstat -p tcp isn't showing anything I'd personally get concerned by,
but for reference:

uther:~ jim$ netstat -p tcp
Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address
(state)
tcp4 0 0 localhost.5204 localhost.49359
ESTABLISHED
tcp4 0 0 localhost.49359 localhost.5204
ESTABLISHED
tcp4 0 0 localhost.5204 localhost.49358
ESTABLISHED
tcp4 0 0 localhost.49358 localhost.5204
ESTABLISHED
tcp4 0 0 localhost.5204 localhost.49357
ESTABLISHED
tcp4 0 0 localhost.49357 localhost.5204
ESTABLISHED




Any thoughts?

Jim
--
"Microsoft admitted its Vista operating system was a 'less good
product' in what IT experts have described as the most ambitious
understatement since the captain of the Titanic reported some
slightly damp tablecloths." http://www.thedailymash.co.uk/
From: Ian McCall on 5 Dec 2009 14:26
On 2009-12-05 19:13:40 +0000, jim(a)magrathea.plus.com (Jim) said:

> With no apps open, I'm still geting a small trickle of network activity
> (as viewed by iStat Menus). This isn't normal.
>
> How can I find out what's causing this? The only new software recently
> has been Transmission, which isn't running.
>
> netstat -p tcp isn't showing anything I'd personally get concerned by,
> but for reference:
>
> uther:~ jim$ netstat -p tcp
> Active Internet connections
> Proto Recv-Q Send-Q Local Address Foreign Address
> (state)
> tcp4 0 0 localhost.5204 localhost.49359
> ESTABLISHED
> tcp4 0 0 localhost.49359 localhost.5204
> ESTABLISHED
> tcp4 0 0 localhost.5204 localhost.49358
> ESTABLISHED
> tcp4 0 0 localhost.49358 localhost.5204
> ESTABLISHED
> tcp4 0 0 localhost.5204 localhost.49357
> ESTABLISHED
> tcp4 0 0 localhost.49357 localhost.5204
> ESTABLISHED

netstat -anp |grep 5204, then ps auxww |grep <pid> ?


Cheers,
Ian

From: Ian McCall on 5 Dec 2009 14:26
On 2009-12-05 19:26:04 +0000, Ian McCall <ian(a)eruvia.org> said:
> netstat -anp |grep 5204, then ps auxww |grep <pid> ?

(should mention - I know you did a netstat, but without the n it can
miss it if its a well-known port and netstat translates it to
descriptive text)


Cheers,
Ian

From: Chris Ridd on 5 Dec 2009 14:34
On 2009-12-05 19:13:40 +0000, Jim said:

> With no apps open, I'm still geting a small trickle of network activity
> (as viewed by iStat Menus). This isn't normal.
>
> How can I find out what's causing this? The only new software recently
> has been Transmission, which isn't running.
>
> netstat -p tcp isn't showing anything I'd personally get concerned by,
> but for reference:
>
> uther:~ jim$ netstat -p tcp
> Active Internet connections
> Proto Recv-Q Send-Q Local Address Foreign Address
> (state)
> tcp4 0 0 localhost.5204 localhost.49359
> ESTABLISHED
> tcp4 0 0 localhost.49359 localhost.5204
> ESTABLISHED
> tcp4 0 0 localhost.5204 localhost.49358
> ESTABLISHED
> tcp4 0 0 localhost.49358 localhost.5204
> ESTABLISHED
> tcp4 0 0 localhost.5204 localhost.49357
> ESTABLISHED
> tcp4 0 0 localhost.49357 localhost.5204
> ESTABLISHED

The first hit for port 5204 was for some windows worm. MyDoom? No VMs
running? Run "lsof -i4:5204" to see what processes are doing the
talking. (The "4" is for IPv4.)

--
Chris

From: Chris Ridd on 5 Dec 2009 14:35
On 2009-12-05 19:26:04 +0000, Ian McCall said:

> netstat -anp |grep 5204, then ps auxww |grep <pid> ?

Netstat's -p option is Linux-only. It doesn't work on Macs anyway.
--
Chris

 |  Next  |  Last
Pages: 1 2 3
Prev: sneakemail no longer free :(
Next: apple '' one to one'' is a rip-off???