Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Hello, i'm running fedora core 2 on my server with grsec.
netstat -ape doesn't give me pid/program name.
tcp 0 0 Founder.domain.tld:33827 194.14.236.50:ircd ESTABLISHED mirac 2147483647 -
tcp 1 1 GS.domain.tld:8000 213.243.60.75:62968 LAST_ACK root 0 -
tcp 0 0 82.96.95.199:52864 61.6.39.100:6669 ESTABLISHED mirac 2147483647 -
tcp 1 1 GS.domain.tld:8000 dsl.static85105677:1958 LAST_ACK root 0 -
tcp 0 0 GS.domain.tld:54964 irc.avalonworks.ca:6669 ESTABLISHED magosa 2147483647 -
tcp 0 0 Founder.domain.tld:51710 irc.freenet.de:6669 ESTABLISHED magosa 2147483647 -
tcp 0 0 domain.tld:36819 irc.dal:afs3-fileserver ESTABLISHED gokaye 2147483647 -
tcp 0 0 GS.domain.tld:8000 85.101.118.65:1499 TIME_WAIT root 0 -
tcp 0 0 domain.tld:32960 61.6.39.100:ircd ESTABLISHED master 2147483647 -
tcp 0 0 domain.tld:57533 61.6.39.100:ircd ESTABLISHED kanka 2147483647 -
tcp 0 0 owned.by.domain.tld:42246 66.90.90.50:ircd ESTABLISHED redmoon 2147483647 -
tcp 0 0 Su.Kum.Bok.domain.tld:39519 61.6.39.100:6668 ESTABLISHED dark 2147483647 -
tcp 0 0 channel.domain.tld:47606 irc.dal.net:6666 ESTABLISHED ankara 2147483647 -
tcp 0 0 No.smoking.domain.tld:57846 irc.freenet.de:ircd ESTABLISHED magosa 2147483647 -
tcp 0 0 Secret.domain.tld:54430 irc.dal.net:ircd ESTABLISHED sad 2147483647 -
tcp 0 0 Hacked.by.darklor:60748 61.6.39.100:ircd ESTABLISHED kanka 2147483647 -
tcp 0 0 domain.tld:46555 61.6.39.100:6669 ESTABLISHED awrupa 2147483647 -
tcp 0 0 Errorus.nickname.:39347 61.6.39.100:ircd ESTABLISHED jaws 2147483647 -
tcp 0 0 domain.tld:41451 61.6.39.100:ircd ESTABLISHED aquarius 2147483647 -
tcp 0 0 sucuklu.yumurta.domain.tld:47417 61.6.39.100:ircd ESTABLISHED sntj 2147483647 -
tcp 0 0 domain.tld:42076 61.6.39.100:6668 ESTABLISHED dark 2147483647 -
tcp 0 0 Errorus.nickname.:50368 irc.dal:afs3-fileserver ESTABLISHED gokaye 2147483647 -
tcp 0 0 DJ.domain.tld:8000 dsl.dynamic8597125:3264 TIME_WAIT root 0 -
tcp 0 0 include.codes.h.d:33044 61.6.39.100:ircd ESTABLISHED darklord 2147483647 -
tcp 0 0 Access.denied.domain.tld:41383 61.6.39.100:ircd ESTABLISHED sntj 2147483647 -
tcp 0 0 GS.domain.tld:44242 irc.inet.tele.dk:6669 ESTABLISHED magosa 2147483647 -
tcp 0 0 domain.tld:7021 85.96.112.212:1159 ESTABLISHED rumeli 2147483647 -
tcp 0 0 domain.tld:34772 irc.dal:afs3-fileserver ESTABLISHED gokaye 2147483647 -
tcp 0 0 GS.domain.tld:34193 The.End.domain.tld:2324 ESTABLISHED magosa 2147483647 -
tcp 0 0 domain.tld:32869 61.6.39.100:ircd ESTABLISHED santaj 2147483647 -
tcp 0 3976 domain.tld:7779 195.174.210.89:2455 ESTABLISHED root 2147483647 -
tcp 0 0 The.End.domain.tld:2324 GS.domain.tld:34193 ESTABLISHED magosa 2147483647 -
tcp 0 0 GS.domain.tld:51359 irc.dal:afs3-fileserver ESTABLISHED magosa 2147483647 -
tcp 1 1 FB.domain.tld:8000 dsl.static85105499:1747 LAST_ACK root 0 -
tcp 0 0 Metal.domain.tld:35808 61.6.39.100:ircd ESTABLISHED hybrid 2147483647 -
tcp 0 0 1f.u.c4n.r34d.th1:44347 61.6.39.100:ircd ESTABLISHED goksal 2147483647 -
tcp 0 0 IPv6.domain.tld:53376 irc.dal:afs3-fileserver ESTABLISHED magosa 2147483647 -
tcp 0 0 Pistol.domain.tld:51845 61.6.39.100:ircd ESTABLISHED jaws 2147483647 -
tcp 0 0 This.persons.host:35857 scweb-dtc1s-0.shou:http ESTABLISHED tutku 2147483647 -
these all are different processes but their inode numer are same "2147483647". I googled a bit but i couldn't find anything about it. What's the meaning of these ? What should i do ? Is there a way to reset these table ?
yes i'm running it from root. I have 3 perl scripts those use netstat as root. May it be the problem? But i have those scripts on my Fedora Core 1 server too and they work without problem. Anyway may cause this ?
I found the similar suspicious activity on my system recently using netstat. Connections from the ircd port on three servers to the same process, whose name was "-". I found the SUCkit had gotten onto my system with chkrootkit. The only advice I can give is the same as others - reformat, reinstall.
Similar experiences on listed elsewhere on this forum.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
Are you running that netstat command as root?
