[SOLVED] Just a question about netstat.

GreenFireFly · 03-24-2017, 09:19 AM

Hello Everyone,

When i close my browser and disconnect from the internet then i type

netstat -ano | grep ESTA

i see this ip 107.14.166.17:110

who can this be if i'm suppose to be offline?

audriusk · 03-24-2017, 09:41 AM

This is your email client connecting to mail server via POP3 protocol (port 110). It's not related to browser (which speaks to servers using HTTP protocol and ports 80 or 443) in any way.

See /etc/services for information which ports are used for which protocols.

spongetron · 03-24-2017, 09:45 AM

Port 110 is used by the Post Office Protocol (POP) and the ip 107.14.166.17 resolvs to "cdptpa-rochester-vip.email.rr.com".

Do you have a email client running?

coralfang · 03-24-2017, 09:57 AM

Use the -p switch, and it should give you the process name.
$ netstat -p
Eg;

Code:

Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 192.168.0.89:38208      lhr26s04-in-f14.1:https ESTABLISHED 1812/conky
tcp        0      0 192.168.0.89:38744      edge-star-mini-sh:https ESTABLISHED 1884/firefox
...

GreenFireFly · 03-26-2017, 09:21 PM

Hello Everyone,

Ok thanks for the info.

GreenFireFly · 04-05-2017, 02:24 PM

Hello Everyone,

Well i know who the ip address in the above post is.

It's Road Runner | anti-p2p activity 107.14.166.17:110

Jjanel · 04-05-2017, 04:11 PM

Maybe pgm? hasn't -yet- noticed eth0 disconnected[?]
From web-search: netstat ESTABLISHED but disconnected
http://superuser.com/questions/10219...is-unconnected

GreenFireFly · 04-05-2017, 07:21 PM

Hello Jianel,

Maybe. I was wondering why even when i did not have the browser open sometimes i would see that address. Now at least it's been block with peerguardian linux, which i got from the slackbuils.org.