This may sound like a newbie question, but I just could figure why:

I just drop my server at the colo center, then come home ssh on the server, then chech the networking

netstat -tap

on the last line, it shows like this:

tcp 0 888 www.circleshare.com:ssh cpe-76-170-3-174.s:wlanauth ESTABLISHED 3253/0

So basically it tells me that I ssh on server "www.circleshare.com".
Before this, I have never even heard of this circleshare.com, I wonder why it shows up like that. It is complete fresh copy CentOS5, installed last night.

So I went through and tried to find keyword "circleshare":

httpd configuration files
sshd configuration files

So far, I have found no where on my server setup files containing this "circleshare".

Very confused at this point, could someone enlighten me a bit ?
Thanks in advance !


PS. I have another server at godadday which show correct connection info like this:

tcp 0 1844 ip-123-123-123-123.ip.s:ssh cpe-76-170-3-174.socal:3545 ESTABLISHED -

Your box has tried to resolve its IP address (through whatever DNS server it uses) and it has come back with www.circleshare.com. When I use dig on that domain I get an IP address of 82.98.86.173 and when I use host on that IP address I get www173.sedoparking.com.

As far as I can tell it just means your server's IP address doesn't resolve to a domain name - should it? You can check this by connecting via ssh to your server, checking your server's IP address and running host 82.98.86.173 (assuming that is the IP address).

To GiLead:
Thanks, that helps a lot :-)

Does that mean if I don't assign a domain name to the ip, DNS will just throw back the old data?

Pretty much, yes. Depending on the arrangement you have with your provider you could let them do the registration/DNS for your domain or you could go elsewhere. I registered my domains with different providers here and set up custom accounts with dyndns.com. My ISP doesn't get involved with it at all.

You can also add the -n option to netstat so it just displays numerical values (or --numeric-hosts, --numeric-ports, or --numeric-users).