Linux - NewbieThis Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place!
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Hi. I just installed my linux early this year and I am totally new to it. There's this question I've been meaning to ask regarding my net connections. Is it normal to have a TTL upto 119:59:59? Can somebody please explain it to me or you can direct me to a post,forum, or a site regarding this matter.
first off, thanks for pointing out this cool utility... never seen it before.. It appears to be legitimate for persistent connections. I leave my IRC, gmail, some ssh sessions open from the time I boot and i've got large TTLs from all of those connections.
If you're unsure where those connections are going to, you can ease your mind a little by doing a nslookup on the IP to see who owns it. If you recognize the domain as something you use regularly then it should be ok.
The IP you showed us is registered to www.grc.com.
Code:
$ nslookup 4.79.142.202
Server: 68.105.28.11
Address: 68.105.28.11#53
Non-authoritative answer:
202.142.79.4.in-addr.arpa name = www.grc.com.
Authoritative answers can be found from:
79.4.in-addr.arpa nameserver = ns1.Level3.net.
79.4.in-addr.arpa nameserver = ns2.Level3.net.
ns1.Level3.net internet address = 209.244.0.1
ns2.Level3.net internet address = 209.244.0.2
thanks for pointing that its actually called as persistent connections. you see, I use it in tandem with other few apps whenever I'm surfing online. is it also normal that when you are surfing or when you opened 3 tabs on your browser, that a 4th ip address connects to port 80 with a persistent connection? it doesn't show that its one of the ip addresses you just visited with your browser using showip extension.
When you look at a web page, there can be many many other IPs access than just what's in the address bar. Any of the content on that page can come from any source really, creating multiple additional tcp connections.
But if you are suspicious of a connection being shown in iptstate that doesn't correlate to an opened web page, use nslookup to try and determine what that host name is.
Did you try that for this '4th ip' ? What was the result, and the web pages you were visiting?
@Admiral Beotch
I did try nslookup on that other ip, it seems that its of another member of my isp. I dunno, maybe I'm just so paranoid, but it usually connects whenever I'm surfing or browsing a website and whenever it did come my pc got hang or become so slow then I have to reboot. I could say that its a regular visitor coz I oftentimes see that on iptstate.
@ceantuco
sorry I'm not good at linux tarball installation process, but maybe its lacking on its dependencies. what's the whole error/process says?
+------------------------------------------------------------+
| Welcome to IP Tables State by Phil Dibowitz |
| |
| PLEASE read the LICENSE and the README for important info. |
| |
| You may also wish to read the README for install info, |
| the WISHLIST for upcoming features, BUGS for known bugs |
| and info on bug reports, and the Changelog to find out |
| what's new. |
| |
| Let's compile... |
+------------------------------------------------------------+
g++ -g -Wall -O2 iptstate.cc -o iptstate -lncurses
iptstate.cc: In function ‘void build_table(const flags_t&, const filters_t&, std::vector<t able_t, std::allocator<table_t> >&, counters_t&, max_t&)’:
iptstate.cc:809: error: ‘strerror’ was not declared in this scope
iptstate.cc: In function ‘int src_sort(const void*, const void*)’:
iptstate.cc:1969: error: ‘memcmp’ was not declared in this scope
iptstate.cc: In function ‘int dst_sort(const void*, const void*)’:
iptstate.cc:1974: error: ‘memcmp’ was not declared in this scope
make: *** [iptstate] Error 1
then I try:
# make install
/usr/bin/install -D --mode=755 iptstate /usr/sbin/iptstate
/usr/bin/install: cannot stat `iptstate': No such file or directory
make: *** [install] Error 1
I checked the README file and as pre-installation step says:
Make sure you have some version of curses installed (for most users
this is probably ncurses). Note that if you are using vendor packages
you will most likely need the packaged with '-dev' on the end of of
it (i.e. ncurses-dev).
I checked the README file and as pre-installation step says:
Make sure you have some version of curses installed (for most users
this is probably ncurses). Note that if you are using vendor packages
you will most likely need the packaged with '-dev' on the end of of
it (i.e. ncurses-dev).
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.