Netstat reports static IP connection
When running netstat on my SuSE 10 box, I got this strange reading of static ip connections: netstat -N -p tcp 0 0 pluto.local.d:cmmdriver static-ip-217-172-:7557 ESTABLISHED 10097/java tcp 0 0 pluto.loc:pkt-krb-ipsec static-ip-217-172-:7557 ESTABLISHED 10097/java Looking at the process list: # ps aux | grep java klerai 10097 0.0 0.4 225928 2440 ? Sl Mar02 0:02 /usr/lib/jvm/jre/bin/java -classpath /opt/kde3/share/apps/kjava/kjava.jar -Djava.security.manager=org.kde.kjas.server.KJASSecurityManager -Djava.security.policy=/opt/kde3/share/apps/kjava/kjava.policy org.kde.kjas.server.Main What does this mean? Is there a calling home function in the java module? -- Rainer Klein
On Monday 06 March 2006 01:09, Rainer Klein wrote:
When running netstat on my SuSE 10 box, I got this strange reading of static ip connections:
netstat -N -p tcp 0 0 pluto.local.d:cmmdriver static-ip-217-172-:7557 ESTABLISHED 10097/java tcp 0 0 pluto.loc:pkt-krb-ipsec static-ip-217-172-:7557 ESTABLISHED 10097/java
Looking at the process list:
# ps aux | grep java klerai 10097 0.0 0.4 225928 2440 ? Sl Mar02 0:02 /usr/lib/jvm/jre/bin/java -classpath /opt/kde3/share/apps/kjava/kjava.jar -Djava.security.manager=org.kde.kjas.server.KJASSecurityManager -Djava.security.policy=/opt/kde3/share/apps/kjava/kjava.policy org.kde.kjas.server.Main
What does this mean? Is there a calling home function in the java module?
Of course not. kjas is the KDE java sandbox. Inside it is where java applets run when you go to a web page that has a java applet. If you look at your browser, would it by any chance be running an applet at this time? By the way, try "netstat -tupan" instead, for a more complete readout. The hostname alone (static-ip-217-172-whatever the rest is, it's not complete) does not resolve unless you know the domain. With these parameters you'll get the numeric IP of the connection and you can look it up to see where it actually is
On Monday 06 March 2006 12:00, Anders Johansson wrote:
On Monday 06 March 2006 01:09, Rainer Klein wrote:
When running netstat on my SuSE 10 box, I got this strange reading of static ip connections:
netstat -N -p tcp 0 0 pluto.local.d:cmmdriver static-ip-217-172-:7557 ESTABLISHED 10097/java tcp 0 0 pluto.loc:pkt-krb-ipsec static-ip-217-172-:7557 ESTABLISHED 10097/java
Looking at the process list:
# ps aux | grep java klerai 10097 0.0 0.4 225928 2440 ? Sl Mar02 0:02 /usr/lib/jvm/jre/bin/java -classpath /opt/kde3/share/apps/kjava/kjava.jar -Djava.security.manager=org.kde.kjas.server.KJASSecurityManager -Djava.security.policy=/opt/kde3/share/apps/kjava/kjava.policy org.kde.kjas.server.Main
What does this mean? Is there a calling home function in the java module?
Of course not.
kjas is the KDE java sandbox. Inside it is where java applets run when you go to a web page that has a java applet. If you look at your browser, would it by any chance be running an applet at this time?
By the way, try "netstat -tupan" instead, for a more complete readout. The hostname alone (static-ip-217-172-whatever the rest is, it's not complete) does not resolve unless you know the domain. With these parameters you'll get the numeric IP of the connection and you can look it up to see where it actually is
Anders, great thanks for your advice. Due to "netstat -tupan", I was able to track down the connected host. And by closing an reopen all my tabbed web pages in Konqueror I located the responsible page. In case it is of further interests, this is the respected web page: http://www.deepamehta.de/install/client/ And this is the applet's host connection: 60.181.172.217.in-addr.arpa domain name pointer static-ip-217-172-181-60.inaddr.intergenia.de. -- Rainer
participants (2)
-
Anders Johansson
-
Rainer Klein