Linux - Newbie This Linux forum is for members that are new to Linux.
Notices
Welcome to
LinuxQuestions.org , a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free.
Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please
contact us . If you need to reset your password,
click here .
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a
virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month.
Click here for more info.
#1
LQ Newbie
Registered: Jun 2019
Posts: 29
Rep:
Will posting the results of netstat -nalp show if someone is remotely connected to my pc?
I have the results of 'netstat -nalp' and am trying to determine if someone is remotely connected to my computer. The suspected individual has hijacked my browser and it is possible they could have put something permanent on the OS when I was briefly in root while online. I was told they would have to get past the firewall first, but I forgot that maybe that is bypassed when they hijack the browser.
Last edited by 55sgu; 06-21-2019 at 03:22 AM .
Reason: clarify
#2
LQ Veteran
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,727
The -l option shows "only listening processes" suppressing actual connections. see
man netstat
Try
to see who is actually connected TO your server.
The man page will help you interpret the results, as well.
If you choose to post results (without the -l) just change the local IP address to something private, like 192.168.0.99. Use [code] tags when you post the output, please
Last edited by scasey; 06-21-2019 at 08:22 AM .
#3
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
Thanks Sean. Can you explain "code tags" for the output. I've used tags before like "netstat" "terminal"...
Last edited by 55sgu; 06-22-2019 at 04:59 AM .
Reason: added output and question
#4
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
~# netstat -nalp
#5
LQ Veteran
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,727
Code tags - an LQ posting thing.
Please edit your last two posts to put code tags around the content...makes things much more readable.
And you need to run the netstat commands as root, or with sudo, per the message in the response
I don't see any inbound connections in #3, 'tho it will be easier to read after you put [code] tags around it
Last edited by scasey; 06-22-2019 at 10:31 AM .
#6
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
Hi Sean. I looked at the example for code tags.
1... Could you show me 1 line whereby you insert code tags for the netstat output above so I know how to do it. This ie doesn't make sense for me for a netstat output. Thanks.
Code:
<script type="text/javascript">
<!--
alert("Hello world!");
//-->
</script>
2... Which command would I need to use to see if someone was connected to my computer "right before" I did the netstat command, in case they saw me starting to do it and jumped off/ dropped the connection before I could put it through or get the output from the terminal? I recall someone telling me you can see that if that has happened.
3... Do I have to have a browser open when I run the netstat command? I have networking open, but not a browser (if I recall) because I don't want to be in "root" with a browser open.
Thanks!
Last edited by 55sgu; 06-23-2019 at 08:38 AM .
Reason: added question bottom
#7
LQ Veteran
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,727
Quote:
Originally Posted by
55sgu
Hi Sean. I looked at the example for code tags.
1... Could you show me 1 line whereby you insert code tags for the netstat output above so I know how to do it. This ie doesn't make sense for me for a netstat output. Thanks.
Code:
<script type="text/javascript">
<!--
alert("Hello world!");
//-->
</script>
2... Which command would I need to use to see if someone was connected to my computer "right before" I did the netstat command, in case they saw me starting to do it and jumped off/ dropped the connection before I could put it through or get the output from the terminal? I recall someone telling me you can see that if that has happened.
3... Do I have to have a browser open when I run the netstat command? I have networking open, but not a browser (if I recall) because I don't want to be in "root" with a browser open.
Thanks!
1. Exactly the same way you did it with that code snippet: Put [code] before the first line an [/code] after the last line...or select the text and use the # tool on the tool bar.
2. Again, in the output you posted, I don't see any incoming connections...nor, even if there were, there's no way to detect what you're about to do, afaik. Best go back to that "someone" for an explaination.
3. No. In fact, having a browser open can muddy the waters, as it may show more outbound connections.
Code:
# netstat -tnp
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.0.55:40336 192.168.1.28:22 ESTABLISHED 17029/ssh
tcp 0 0 192.168.0.55:59380 172.217.11.74:443 TIME_WAIT -
tcp 0 0 192.168.0.55:46486 146.20.147.247:993 ESTABLISHED 11186/thunderbird
tcp 0 0 192.168.0.55:56642 192.168.1.26:143 ESTABLISHED 11186/thunderbird
tcp 0 0 192.168.0.55:51610 54.71.52.202:443 ESTABLISHED 10340/firefox-bin
tcp 0 0 192.168.0.55:56638 192.168.1.26:143 ESTABLISHED 11186/thunderbird
tcp 0 0 192.168.0.55:56390 192.168.1.28:22 ESTABLISHED 12973/ssh
tcp 0 0 192.168.0.55:46058 192.168.1.27:443 TIME_WAIT -
tcp 0 0 192.168.0.55:46056 192.168.1.27:443 TIME_WAIT -
tcp 0 0 192.168.0.55:41234 74.125.195.108:993 ESTABLISHED 11186/thunderbird
tcp 0 0 192.168.0.55:39312 146.20.147.247:993 ESTABLISHED 11186/thunderbird
tcp 0 0 192.168.0.55:34184 192.168.1.28:22 ESTABLISHED 22674/ssh
All those connections are outbound from this desktop. You can see which are firefox connections.
Inbound connections look like this (IP addresses are munged):
Code:
# netstat -tnp | sort
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.10.26:143 216.15.49.143:63342 ESTABLISHED 15579/dovecot/imap
tcp 0 0 192.168.10.26:143 70.175.57.100:56638 ESTABLISHED 2439/dovecot/imap
tcp 0 0 192.168.10.26:143 70.175.57.100:56642 ESTABLISHED 3227/dovecot/imap
tcp 0 0 192.168.10.26:143 72.208.32.56:59390 ESTABLISHED 30620/dovecot/imap
tcp 0 0 192.168.10.26:143 96.19.224.223:56674 ESTABLISHED 2404/dovecot/imap
tcp 0 0 192.168.10.26:143 96.19.224.223:64255 ESTABLISHED 2398/dovecot/imap
tcp 0 0 192.168.10.26:25 178.157.15.135:48666 TIME_WAIT -
tcp 0 0 192.168.10.26:25 192.243.228.190:19600 ESTABLISHED 2631/qmail-smtpd
tcp 0 0 192.168.10.26:25 192.243.228.191:47333 ESTABLISHED 2624/qmail-smtpd
tcp 0 0 192.168.10.26:25 216.139.147.16:22919 TIME_WAIT -
tcp 0 0 192.168.10.26:25 67.91.146.239:56878 ESTABLISHED 15084/qmail-smtpd
tcp 0 0 192.168.10.26:587 200.113.231.170:54061 ESTABLISHED 23449/qmail-smtpd
tcp 0 0 192.168.10.26:587 200.113.231.170:54523 ESTABLISHED 14312/qmail-smtpd
tcp 0 0 192.168.10.26:587 200.48.32.149:49771 ESTABLISHED 16915/qmail-smtpd
tcp 0 0 192.168.10.28:22 70.175.57.100:34184 ESTABLISHED 26633/sshd: root@pt
tcp 0 0 192.168.10.28:22 70.175.57.100:40336 ESTABLISHED 28147/sshd: root@pt
tcp 0 0 192.168.10.28:22 70.175.57.100:56390 ESTABLISHED 7964/sshd: root@pts
Note: If you have a browser open as an unprivileged user, then su to root in a terminal window, you will not change the permissions of the open browser window.
Last edited by scasey; 06-23-2019 at 11:21 AM .
#8
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
Hello Sean.
1... Is this the way you want "code tags"? The ie I gave above is directly from the site you posted - not my doing. (bottom of reply page)
2... With my computer, I am not able to print out "netstat -ntp" without opening a browser and creating a valid connection. If I do not have a live connection to a website, my printout for netstat will return nothing. The computer shouldn't run this way, but it does.
Therefore, it would be easy for someone connected to my computer remotely to see that I am going to do a netstat command. I can close the browser(s) before doing netstat, but then by doing that it is a giveaway that I am about to run a netstat command.
3... "Note: If you have a browser open as an unprivileged user, then su to root in a terminal window, you will not change the permissions of the open browser window."
Previously, I had been told that when you are root in a terminal, "#", that you are immediately in admin privileges and anyone can walk onto your computer and place something permanently on your OS, like malware. I'm not saying they are correct, but they sure were adamant about it, to say the least.
When it comes to being an "unprivileged user", if this is not in relation to the terminal, where on a chromium browser, would I be able to change the status of the user? My understanding was that it has to be done in terminal. This is why I did not do # for the output below, at least not yet. Thanks.
~$ netstat -tnp | sort
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (w/o servers)
Code:
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.0.99:46624 34.237.73.95:443 ESTABLISHED 3143/pell-cache --d
tcp 0 0 192.168.0.99:46772 34.237.73.95:443 ESTABLISHED 3143/pell-cache --d
tcp 0 0 192.168.0.99:59423 198.252.206.25:443 ESTABLISHED 3143/pell-cache --d
tcp 0 1 192.168.0.99:33212 54.75.239.212:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:34949 216.58.205.228:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:36578 216.58.206.14:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:36582 216.58.206.14:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:37738 216.58.205.227:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:41089 172.217.22.78:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:45504 172.217.16.206:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:53670 159.122.87.148:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58370 216.58.206.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58376 216.58.206.2:443 FIN_WAIT1 -
Truly, I appreciate the help!
Last edited by 55sgu; 06-24-2019 at 12:45 AM .
Reason: code tags
#9
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
netstat -ntp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
Code:
tcp 0 1 192.168.0.99:44936 216.58.201.226:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:46228 184.154.210.226:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:55355 216.58.213.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:36301 192.0.77.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:46286 184.154.210.226:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:45424 216.58.205.226:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:35160 66.117.28.86:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:50879 88.221.16.36:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:53924 169.61.15.5:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:51971 104.106.196.99:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:53540 35.156.70.210:80 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56639 104.86.130.168:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:43867 216.58.209.228:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:50266 35.241.23.116:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:36304 192.0.77.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:43869 216.58.209.228:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:49167 185.31.128.128:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56856 104.86.130.168:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:58440 151.101.1.69:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:53301 69.89.31.72:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:35163 66.117.28.86:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:34401 172.217.22.10:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:36303 192.0.77.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:60885 172.217.169.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56641 104.86.130.168:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:59596 143.204.192.21:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56645 104.86.130.168:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:48220 67.227.218.221:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:46285 184.154.210.226:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:45984 172.217.168.238:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:43857 179.60.195.12:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:50661 216.58.206.227:443 FIN_WAIT1 -
tcp 0 0 192.168.2.2:58673 198.252.206.25:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:46340 204.225.220.79:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:42038 108.177.15.157:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:54658 91.228.74.172:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:33031 31.13.64.35:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:59746 172.217.23.130:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:60497 151.101.17.111:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:48990 52.200.216.97:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:40256 67.55.84.68:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:46024 184.154.210.226:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:40259 67.55.84.68:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:52378 34.206.134.181:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:33660 151.101.37.6:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:54632 52.19.121.121:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:59597 143.204.192.21:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39717 172.217.169.35:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:39320 45.33.47.242:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:42259 216.58.213.130:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:48992 52.200.216.97:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:50278 35.241.23.116:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:46549 204.225.220.79:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:44935 216.58.201.226:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:39130 104.244.39.20:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:38874 162.247.242.20:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:51972 104.106.196.99:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58800 216.58.215.40:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:46043 184.154.210.226:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:39128 104.244.39.20:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:53975 104.25.251.109:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39187 185.60.218.24:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:33032 31.13.64.35:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:35621 216.58.207.66:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:52078 162.217.147.74:80 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:49171 52.200.216.97:443 FIN_WAIT2 -
tcp 0 1 192.168.0.99:38875 162.247.242.20:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:38142 216.58.207.78:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:50279 35.241.23.116:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58278 216.58.213.174:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:39325 45.33.47.242:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:49655 87.248.114.12:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:58438 151.101.1.69:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:50663 216.58.206.227:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:52079 162.217.147.74:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:54737 74.6.140.136:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:54738 74.6.140.136:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:49130 52.200.216.97:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:44216 204.10.147.16:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56642 104.86.130.168:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39215 143.204.192.80:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:55359 216.58.213.2:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:52087 162.217.147.74:80 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:48219 67.227.218.221:80 ESTABLISHED 1580/pell-cache --d
tcp 0 573 192.168.0.99:46677 204.225.220.79:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:53973 104.25.251.109:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:59599 143.204.192.21:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:43306 104.25.159.7:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:57115 192.0.76.3:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:53522 104.16.85.20:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:49127 52.200.216.97:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:46058 172.217.168.238:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:52137 162.217.147.74:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:33818 52.85.250.59:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39193 185.60.218.24:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:57079 35.227.248.159:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:40101 67.55.84.68:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:59085 69.192.79.185:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:46283 184.154.210.226:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:43431 104.25.159.7:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:58059 172.217.22.97:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:38872 162.247.242.20:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39715 172.217.169.35:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39700 34.230.166.25:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:33803 169.51.68.190:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:42012 185.100.85.10:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:46478 192.0.77.32:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:60000 34.249.86.253:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:38100 172.82.234.247:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:48027 52.212.129.89:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:38873 162.247.242.20:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:59999 34.249.86.253:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:46683 192.0.73.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:57116 192.0.76.3:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:46573 204.225.220.79:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:39214 143.204.192.80:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:36300 192.0.77.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:42896 151.101.1.69:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39219 45.33.47.242:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:37064 88.221.164.163:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:59416 204.79.197.200:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39189 185.60.218.24:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:37062 88.221.164.163:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:48222 67.227.218.221:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:44217 204.10.147.16:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:42481 172.217.17.65:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56817 208.93.105.173:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:33286 172.217.22.98:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:48221 67.227.218.221:80 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:52077 162.217.147.74:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:34344 107.22.215.20:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:51970 104.106.196.99:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:35778 172.217.16.194:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:50314 192.229.233.25:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:38101 172.82.234.247:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:33825 52.85.250.59:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:39701 34.230.166.25:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:53521 104.16.85.20:443 FIN_WAIT1 -
tcp 0 462 192.168.0.99:39191 185.60.218.24:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58801 216.58.215.40:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:57542 172.217.22.130:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:40734 172.217.22.34:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:39716 172.217.169.35:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:40121 67.55.84.68:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:58940 69.192.79.185:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:38876 162.247.242.20:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:50312 192.229.233.25:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:56638 104.86.130.168:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:39324 45.33.47.242:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:40258 67.55.84.68:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:51910 35.227.208.151:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:34343 107.22.215.20:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:48218 67.227.218.221:80 ESTABLISHED 1580/pell-cache --d
tcp 0 247 192.168.0.99:56814 208.93.105.173:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:42902 151.101.1.69:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:50882 88.221.16.36:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:38099 172.82.234.247:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:53700 13.32.123.249:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:46229 184.154.210.226:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:60966 172.217.169.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:46690 192.0.73.2:443 FIN_WAIT1 -
tcp 0 0 192.0.99:35779 172.217.16.194:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:53923 169.61.15.5:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.0.99:33658 172.217.21.225:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:59468 143.204.192.21:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:49128 52.200.216.97:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:40257 67.55.84.68:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:49129 52.200.216.97:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:32908 93.184.220.66:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:46670 204.225.220.79:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:53655 35.156.70.210:80 FIN_WAIT1 -
tcp 0 0 192.168.0.99:54647 91.228.74.172:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:46027 172.217.17.130:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56640 104.86.130.168:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:42017 185.100.85.10:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:54629 52.19.121.121:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:46843 104.96.148.23:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:33667 172.217.21.225:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.113.0.99:46021 184.154.210.226:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:48324 198.199.106.49:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:56867 104.86.130.168:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:59414 204.79.197.200:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58357 216.58.213.174:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:43423 104.25.159.7:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:52375 34.206.134.181:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:52321 162.217.147.74:80 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:48072 67.227.218.221:80 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:46284 184.154.210.226:443 ESTABLISHED 1580/pell-cache --d
tcp 0 0 192.168.0.99:53381 69.89.31.72:80 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:56905 151.101.38.110:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:37267 143.204.214.86:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:46022 184.154.210.226:443 FIN_WAIT1 -
tcp 0 0 192.168.0.99:60120 192.0.73.2:443 ESTABLISHED 1580/pell-cache --d
tcp 0 1 192.168.0.99:51879 104.106.196.99:443 FIN_WAIT1 -
Last edited by 55sgu; 06-24-2019 at 12:41 AM .
#10
LQ Veteran
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,727
Quote:
Originally Posted by
55sgu
Hello Sean.
That's because you're running netstat as your normal user, so you're only seeing the connections you're making.
To do what you're asking about, you need to run netstat as root.
Quote:
Therefore, it would be easy for someone connected to my computer remotely to see that I am going to do a netstat command. I don't know how long it would take for them to get off, I imagine immediately, but because of my computer issues, I have to first open the browser. I can close them before doing netstat, but then by doing that it is a giveaway that I am about to run a netstat command.
What you've said here only applies if someone pushes you away from the console...perhaps we should invite that someone to participate in this conversation.
Yes, one shouldn't just "be root" all the time, but to do what you're asking about, you need to run netstat as root using
su or
sudo
Quote:
~$ netstat -tnp | sortNot all processes could be identified, non-owned process info )
Code:
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.0.99:46624 34.237.73.95:443 ESTABLISHED 3143/pell-cache --d
tcp 0 0 192.168.0.99:46772 34.237.73.95:443 ESTABLISHED 3143/pell-cache --d
tcp 0 0 192.168.0.99:59423 198.252.206.25:443 ESTABLISHED 3143/pell-cache --d
tcp 0 1 192.168.0.99:33212 54.75.239.212:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:34949 216.58.205.228:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:36578 216.58.206.14:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:36582 216.58.206.14:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:37738 216.58.205.227:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:41089 172.217.22.78:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:45504 172.217.16.206:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:53670 159.122.87.148:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58370 216.58.206.2:443 FIN_WAIT1 -
tcp 0 1 192.168.0.99:58376 216.58.206.2:443 FIN_WAIT1 -
Truly, I appreciate the help!
(emphasis added).
AGAIN, there is no evidence there of anyone being connected to your computer. Run the command as root, without the browser open, and post the result. If it returns nothing, then you're good. There's no-one connected to your computer.
#11
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
Thanks Sean.
Last edited by 55sgu; 06-24-2019 at 01:20 AM .
#12
LQ Guru
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,309
You can run it as root using
sudo :
Code:
sudo netstat -ntp
sudo netstat -ntp | less
sudo netstat -ntp | awk '$6=="ESTABLISHED"' | less
sudo netstat -ntp | awk '$6=="ESTABLISHED" && $4!~/^127/' | less
And so on.
#13
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
Thanks TC. So, basically, I am just root for 'netstat' purposes, but not the outside world, or, including the outside world, but just for a split second?
Last edited by 55sgu; 06-24-2019 at 02:20 AM .
#14
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
sudo netstat -ntp
Active Internet connections (w/o servers)
Code:
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.0.99:53254 172.217.23.131:443 ESTABLISHED 3635/pell-cache --d
tcp 0 0 192.168.0.99 :39185 104.18.37.194:443 FIN_WAIT2 -
tcp 0 0 192.168.0.99 :57227 172.217.22.46:443 ESTABLISHED 3635/pell-cache –d
~$ sudo netstat -nalp
Active Internet connections (servers and established)
Code:
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.99 :53 0.0.0.0:* LISTEN 1777/dnsmasq
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2250/sshd
tcp 0 0 127.0.0.99 :631 0.0.0.0:* LISTEN 939/cupsd
tcp 0 0 192.168.0.99 :53254 172.217.23.131:443 ESTABLISHED 3635/pell-cache --d
tcp 0 0 192.168.0.99 :57227 172.217.22.46:443 FIN_WAIT2 -
tcp 0 0 192.168.0.99 :41513 216.58.207.46:443 ESTABLISHED 3635/pell-cache --d
tcp6 0 0 :::22 :::* LISTEN 2250/sshd
tcp6 0 0 ::1:631 :::* LISTEN 939/cupsd
udp 0 0 0.0.0.0:45254 0.0.0.0:* 1777/dnsmasq
udp 0 0 0.0.0.0:5353 0.0.0.0:* 3635/pell-cache --d
udp 0 0 0.0.0.0:5353 0.0.0.0:* 3635/pell-cache --d
udp 0 0 0.0.0.0:5353 0.0.0.0:* 3635/pell-cache --d
udp 0 0 0.0.0.0:5353 0.0.0.0:* 3635/pell-cache --d
udp 0 0 0.0.0.0:5353 0.0.0.0:* 972/avahi-daemon: r
udp 0 0 0.0.0.0:52189 0.0.0.0:* 972/avahi-daemon: r
udp 0 0 127.0.0.99 :53 0.0.0.0:* 1777/dnsmasq
udp 0 0 0.0.0.0:68 0.0.0.0:* 1765/dhclient
udp 0 0 0.0.0.0:68 0.0.0.0:* 1951/dhclient
udp 0 0 192.168.0.99 :123 0.0.0.0:* 2448/ntpd
udp 0 0 192.168.0.99 :123 0.0.0.0:* 2448/ntpd
udp 0 0 169.254.0.99 :123 0.0.0.0:* 2448/ntpd
udp 0 0 127.0.0.99 :123 0.0.0.0:* 2448/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:* 2448/ntpd
udp6 0 0 :::5353 :::* 3635/pell-cache --d
udp6 0 0 :::5353 :::* 3635/pell-cache --d
udp6 0 0 :::5353 :::* 972/avahi-daemon: r
udp6 0 0 :::53044 :::* 972/avahi-daemon: r
udp6 0 0 fe80::90c5:xxxxx:123 :::* 2448/ntpd
udp6 0 0 fe80::90c5:xxxxx:123 :::* 2448/ntpd
udp6 0 0 fe80::90c5:xxxxxx:123 :::* 2448/ntpd
udp6 0 0 ::1:123 :::* 2448/ntpd
udp6 0 0 :::123 :::* 2448/ntpd
raw6 0 0 :::58 :::* 7 916/NetworkManager
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node PID/Program name Path
unix 2 [ ACC ] STREAM LISTENING 10753 1019/Xorg /tmp/.X11-unix/X0
unix 17 [ ] DGRAM 769 1/init /run/systemd/journal/dev-log
unix 2 [ ACC ] STREAM LISTENING 772 1/init /run/systemd/fsck.progress
unix 2 [ ] DGRAM 774 1/init /run/systemd/journal/syslog
unix 2 [ ACC ] STREAM LISTENING 12767 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 2 [ ] DGRAM 13371 1080/wpa_supplicant /run/wpa_supplicant/wlan0
unix 2 [ ACC ] STREAM LISTENING 24142 2276/pulseaudio /var/run/pulse/dbus-socket
unix 2 [ ACC ] STREAM LISTENING 12368 916/NetworkManager /var/run/NetworkManager/private-dhcp
unix 3 [ ] SEQPACKET CONNECTED 39166 3635/pell-cache --d @00006
unix 2 [ ACC ] STREAM LISTENING 10752 1019/Xorg @/tmp/.X11-unix/X0
unix 2 [ ACC ] STREAM LISTENING 10857 1394/ssh-agent /tmp/ssh-QHWudq5KPpUz/agent.1363
unix 2 [ ACC ] STREAM LISTENING 7786 1/init /var/run/cups/cups.sock
unix 2 [ ACC ] STREAM LISTENING 7789 1/init /var/run/avahi-daemon/socket
unix 2 [ ACC ] STREAM LISTENING 7792 1/init /var/run/dbus/system_bus_socket
unix 2 [ ACC ] STREAM LISTENING 17788 1644/gnome-keyring- /run/user/1000/keyring/control
unix 2 [ ] DGRAM 11644 1074/systemd /run/user/1000/systemd/notify
unix 2 [ ACC ] STREAM LISTENING 11646 1074/systemd /run/user/1000/systemd/private
unix 3 [ ] DGRAM 1954 1/init /run/systemd/notify
unix 2 [ ACC ] STREAM LISTENING 1956 1/init /run/systemd/private
unix 2 [ ACC ] STREAM LISTENING 1961 1/init /run/systemd/journal/stdout
unix 6 [ ] DGRAM 1964 1/init /run/systemd/journal/socket
unix 2 [ ACC ] STREAM LISTENING 22724 2276/pulseaudio /run/pulse/native
unix 2 [ ACC ] STREAM LISTENING 37826 3635/pell-cache --d /tmp/.org.chromium.Chromium.ksN0dB/SingletonSocket
unix 2 [ ACC ] STREAM LISTENING 22728 2276/pulseaudio /run/pulse/cli
unix 2 [ ACC ] SEQPACKET LISTENING 744 1/init /run/udev/control
unix 2 [ ACC ] STREAM LISTENING 12781 1415/xfce4-session /tmp/.ICE-unix/1415
unix 2 [ ACC ] STREAM LISTENING 12780 1415/xfce4-session @/tmp/.ICE-unix/1415
unix 2 [ ] DGRAM 39770 4020/sudo
unix 2 [ ] STREAM CONNECTED 39767 4020/sudo
unix 3 [ ] SEQPACKET CONNECTED 40438 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 40437 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 42101 3919/gnome-pty-help
unix 3 [ ] STREAM CONNECTED 42100 3915/xfce4-terminal
unix 3 [ ] STREAM CONNECTED 39568 1415/xfce4-session @/tmp/.ICE-unix/1415
unix 3 [ ] STREAM CONNECTED 41084 3915/xfce4-terminal
unix 3 [ ] STREAM CONNECTED 39567 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 41083 3915/xfce4-terminal
unix 3 [ ] STREAM CONNECTED 42092 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 39566 3915/xfce4-terminal
unix 3 [ ] STREAM CONNECTED 39486 3807/chromium-brows
unix 3 [ ] STREAM CONNECTED 39485 3807/chromium-brows
unix 3 [ ] STREAM CONNECTED 40244 3807/chromium-brows
unix 3 [ ] STREAM CONNECTED 40243 3807/chromium-brows
unix 3 [ ] STREAM CONNECTED 40242 3807/chromium-brows
unix 3 [ ] STREAM CONNECTED 40241 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 40976 3807/chromium-brows
unix 3 [ ] STREAM CONNECTED 40975 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 39329 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 39328 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 37871 3676/chromium-brows
unix 3 [ ] STREAM CONNECTED 37870 3676/chromium-brows
unix 3 [ ] STREAM CONNECTED 36583 3676/chromium-brows
unix 3 [ ] STREAM CONNECTED 36582 3676/chromium-brows
unix 3 [ ] SEQPACKET CONNECTED 39317 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 39316 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36576 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 36575 3691/xfce4-notifyd
unix 3 [ ] STREAM CONNECTED 36573 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 36572 3691/xfce4-notifyd
unix 3 [ ] STREAM CONNECTED 38747 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 38745 3691/xfce4-notifyd
unix 3 [ ] STREAM CONNECTED 38746 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 38744 3691/xfce4-notifyd
unix 3 [ ] STREAM CONNECTED 39283 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 38740 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36557 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 39282 3676/chromium-brows
unix 3 [ ] STREAM CONNECTED 36555 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 39280 3676/chromium-brows
unix 3 [ ] STREAM CONNECTED 37817 2276/pulseaudio /run/pulse/native
unix 3 [ ] STREAM CONNECTED 39194 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 37816 3676/chromium-brows
unix 3 [ ] STREAM CONNECTED 37815 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36468 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36467 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 37814 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 37813 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36466 3676/chromium-brows
unix 3 [ ] STREAM CONNECTED 36465 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36460 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36459 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 37811 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 36458 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36456 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36455 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 39175 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 39174 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 36454 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 38642 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 39173 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 38638 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 39171 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 38637 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 39169 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 39168 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 39167 3653/chromium-brows
unix 3 [ ] SEQPACKET CONNECTED 39164 3635/pell-cache --d
unix 3 [ ] SEQPACKET CONNECTED 39163 3635/pell-cache --d
unix 3 [ ] STREAM CONNECTED 22848 2448/ntpd
unix 3 [ ] STREAM CONNECTED 22847 2448/ntpd
unix 2 [ ] DGRAM 24255 2448/ntpd
unix 3 [ ] STREAM CONNECTED 22104 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 22719 2276/pulseaudio
unix 2 [ ] DGRAM 22660 2276/pulseaudio
unix 3 [ ] STREAM CONNECTED 22658 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 21498 2277/bash
unix 3 [ ] STREAM CONNECTED 22656 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 21412 2276/pulseaudio
unix 3 [ ] STREAM CONNECTED 20303 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 19402 2250/sshd
unix 2 [ ] DGRAM 19865 1904/avahi-autoipd:
unix 2 [ ] DGRAM 16336 1777/dnsmasq
unix 3 [ ] STREAM CONNECTED 19518 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 16329 1777/dnsmasq
unix 2 [ ] DGRAM 18795 1765/dhclient
unix 3 [ ] STREAM CONNECTED 14892 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 15785 1644/gnome-keyring-
unix 2 [ ] DGRAM 15784 1644/gnome-keyring-
unix 3 [ ] STREAM CONNECTED 14883 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 17786 1644/gnome-keyring-
unix 3 [ ] STREAM CONNECTED 13946 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 11190 1533/obexd
unix 3 [ ] STREAM CONNECTED 13945 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 12984 1533/obexd
unix 2 [ ] DGRAM 12983 1533/obexd
unix 3 [ ] STREAM CONNECTED 12099 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13943 1533/obexd
unix 3 [ ] STREAM CONNECTED 12098 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13942 1533/obexd
unix 3 [ ] STREAM CONNECTED 12048 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 13863 1443/python3
unix 3 [ ] STREAM CONNECTED 13860 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 12041 1525/wrapper-1.0
unix 3 [ ] STREAM CONNECTED 12040 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 13859 1524/wrapper-1.0
unix 3 [ ] STREAM CONNECTED 12038 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 13858 1525/wrapper-1.0
unix 3 [ ] STREAM CONNECTED 11129 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 12037 1524/wrapper-1.0
unix 3 [ ] STREAM CONNECTED 13854 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 13853 1436/python3
unix 3 [ ] STREAM CONNECTED 13851 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 13850 1436/python3
unix 3 [ ] STREAM CONNECTED 11092 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11091 1443/python3
unix 3 [ ] STREAM CONNECTED 12031 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11090 1427/xfce4-panel
unix 3 [ ] STREAM CONNECTED 13839 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11070 1443/python3
unix 3 [ ] STREAM CONNECTED 13837 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 13836 1508/gvfs-goa-volum
unix 3 [ ] STREAM CONNECTED 11065 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 12010 1508/gvfs-goa-volum
unix 3 [ ] STREAM CONNECTED 11064 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 12009 1508/gvfs-goa-volum
unix 3 [ ] STREAM CONNECTED 12861 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 12860 1502/gvfs-afc-volum
unix 3 [ ] STREAM CONNECTED 11052 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13834 1502/gvfs-afc-volum
unix 3 [ ] STREAM CONNECTED 11051 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13833 1502/gvfs-afc-volum
unix 3 [ ] STREAM CONNECTED 13829 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 11050 1439/nm-applet
unix 3 [ ] STREAM CONNECTED 12003 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 13828 1496/gvfs-mtp-volum
unix 3 [ ] STREAM CONNECTED 13825 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 13824 1443/python3
unix 3 [ ] STREAM CONNECTED 11046 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13821 1496/gvfs-mtp-volum
unix 3 [ ] STREAM CONNECTED 11045 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13820 1496/gvfs-mtp-volum
unix 3 [ ] STREAM CONNECTED 11044 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 13814 1491/gvfs-gphoto2-v
unix 3 [ ] STREAM CONNECTED 11040 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13813 1491/gvfs-gphoto2-v
unix 3 [ ] STREAM CONNECTED 11039 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13812 1491/gvfs-gphoto2-v
unix 3 [ ] STREAM CONNECTED 11999 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11998 1462/gvfs-udisks2-v
unix 3 [ ] STREAM CONNECTED 12853 1415/xfce4-session @/tmp/.ICE-unix/1415
unix 3 [ ] STREAM CONNECTED 12852 1423/xfwm4
unix 3 [ ] STREAM CONNECTED 12850 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 11038 1443/python3
unix 3 [ ] STREAM CONNECTED 12848 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11035 1439/nm-applet
unix 3 [ ] STREAM CONNECTED 11995 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 12847 1439/nm-applet
unix 3 [ ] STREAM CONNECTED 11990 894/dbus-daemon /var/run/dbus/system_bus_socket
#15
LQ Newbie
Registered: Jun 2019
Posts: 29
Original Poster
Rep:
Code:
unix 3 [ ] STREAM CONNECTED 11032 1469/udisksd
unix 2 [ ] DGRAM 12846 1469/udisksd
unix 3 [ ] STREAM CONNECTED 12845 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11989 1438/polkit-gnome-a
unix 2 [ ] DGRAM 11988 1022/polkitd
unix 3 [ ] STREAM CONNECTED 11970 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 11969 1438/polkit-gnome-a
unix 3 [ ] STREAM CONNECTED 11968 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11967 1438/polkit-gnome-a
unix 3 [ ] STREAM CONNECTED 12838 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 10943 1462/gvfs-udisks2-v
unix 3 [ ] STREAM CONNECTED 10940 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 11950 1462/gvfs-udisks2-v
unix 3 [ ] STREAM CONNECTED 10939 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 11949 1462/gvfs-udisks2-v
unix 3 [ ] STREAM CONNECTED 11943 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11942 1431/xfdesktop
unix 3 [ ] STREAM CONNECTED 12836 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 12835 1452/gvfsd-fuse
unix 3 [ ] STREAM CONNECTED 10935 1415/xfce4-session @/tmp/.ICE-unix/1415
unix 3 [ ] STREAM CONNECTED 10934 1431/xfdesktop
unix 3 [ ] STREAM CONNECTED 11937 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 10932 1423/xfwm4
unix 3 [ ] STREAM CONNECTED 11934 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 10931 1447/gvfsd
unix 3 [ ] STREAM CONNECTED 10928 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 11933 1447/gvfsd
unix 3 [ ] STREAM CONNECTED 10927 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 11932 1447/gvfsd
unix 3 [ ] STREAM CONNECTED 13786 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 13785 1439/nm-applet
unix 3 [ ] STREAM CONNECTED 10925 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 13783 1438/polkit-gnome-a
unix 3 [ ] STREAM CONNECTED 11928 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 13781 1437/xfsettingsd
unix 3 [ ] STREAM CONNECTED 13777 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 13776 1437/xfsettingsd
unix 3 [ ] STREAM CONNECTED 10918 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 13752 1431/xfdesktop
unix 3 [ ] STREAM CONNECTED 13748 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 10917 1431/xfdesktop
unix 3 [ ] STREAM CONNECTED 13771 1415/xfce4-session @/tmp/.ICE-unix/1415
unix 3 [ ] STREAM CONNECTED 13747 1429/Thunar
unix 3 [ ] STREAM CONNECTED 11915 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 12817 1431/xfdesktop
unix 3 [ ] STREAM CONNECTED 11920 1415/xfce4-session @/tmp/.ICE-unix/1415
unix 3 [ ] STREAM CONNECTED 11914 1437/xfsettingsd
unix 3 [ ] STREAM CONNECTED 10915 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 11913 1437/xfsettingsd
unix 3 [ ] STREAM CONNECTED 10914 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 12816 1429/Thunar
unix 3 [ ] STREAM CONNECTED 10919 1415/xfce4-session @/tmp/.ICE-unix/1415
unix 3 [ ] STREAM CONNECTED 10913 1427/xfce4-panel
unix 3 [ ] STREAM CONNECTED 10910 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 11912 1437/xfsettingsd
unix 3 [ ] STREAM CONNECTED 10909 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 10908 1427/xfce4-panel
unix 3 [ ] STREAM CONNECTED 10904 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10903 1429/Thunar
unix 3 [ ] STREAM CONNECTED 10901 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 13727 1427/xfce4-panel
unix 3 [ ] STREAM CONNECTED 10896 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 13708 1423/xfwm4
unix 3 [ ] STREAM CONNECTED 11872 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 10875 1419/xfconfd
unix 3 [ ] STREAM CONNECTED 10871 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13705 1419/xfconfd
unix 3 [ ] STREAM CONNECTED 10870 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 13704 1419/xfconfd
unix 3 [ ] STREAM CONNECTED 11871 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 10869 1415/xfce4-session
unix 3 [ ] STREAM CONNECTED 13700 1398/dbus-daemon @/tmp/dbus-BWzSmpF7tZ
unix 3 [ ] STREAM CONNECTED 10868 1415/xfce4-session
unix 3 [ ] STREAM CONNECTED 11869 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10867 1415/xfce4-session
unix 3 [ ] STREAM CONNECTED 11865 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 10862 1397/dbus-launch
unix 3 [ ] STREAM CONNECTED 13694 1398/dbus-daemon
unix 3 [ ] STREAM CONNECTED 13693 1398/dbus-daemon
unix 3 [ ] STREAM CONNECTED 10859 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 12757 1397/dbus-launch
unix 3 [ ] STREAM CONNECTED 11648 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 13348 1080/wpa_supplicant
unix 2 [ ] DGRAM 13347 1080/wpa_supplicant
unix 3 [ ] STREAM CONNECTED 9212 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 11612 1080/wpa_supplicant
unix 2 [ ] DGRAM 12355 1074/systemd
unix 2 [ ] DGRAM 9204 1075/(sd-pam)
unix 3 [ ] STREAM CONNECTED 12339 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 11524 1074/systemd
unix 3 [ ] STREAM CONNECTED 9178 1019/Xorg @/tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 11447 1003/nodm
unix 3 [ ] STREAM CONNECTED 8150 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 10000 1019/Xorg
unix 3 [ ] STREAM CONNECTED 9024 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 8134 1022/polkitd
unix 2 [ ] DGRAM 10736 1003/nodm
unix 3 [ ] STREAM CONNECTED 9818 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 8889 984/systemd-logind
unix 2 [ ] DGRAM 8883 984/systemd-logind
unix 3 [ ] STREAM CONNECTED 9794 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 9788 984/systemd-logind
unix 3 [ ] STREAM CONNECTED 9634 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 10568 972/avahi-daemon: r
unix 3 [ ] STREAM CONNECTED 10564 974/avahi-daemon: c
unix 3 [ ] STREAM CONNECTED 10563 972/avahi-daemon: r
unix 2 [ ] DGRAM 10561 972/avahi-daemon: r
unix 3 [ ] STREAM CONNECTED 7958 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 10556 973/cron
unix 3 [ ] STREAM CONNECTED 9632 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 10493 939/cupsd
unix 2 [ ] DGRAM 9630 894/dbus-daemon
unix 3 [ ] STREAM CONNECTED 10499 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 9629 972/avahi-daemon: r
unix 3 [ ] STREAM CONNECTED 9546 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 10476 916/NetworkManager
unix 2 [ ] DGRAM 8868 916/NetworkManager
unix 3 [ ] STREAM CONNECTED 10396 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 7924 921/accounts-daemon
unix 3 [ ] STREAM CONNECTED 7922 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 8832 939/cupsd
unix 3 [ ] STREAM CONNECTED 10388 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 9453 921/accounts-daemon
unix 3 [ ] STREAM CONNECTED 8756 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 9396 916/NetworkManager
unix 3 [ ] STREAM CONNECTED 10383 894/dbus-daemon
unix 3 [ ] STREAM CONNECTED 10382 894/dbus-daemon
unix 3 [ ] STREAM CONNECTED 10384 894/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 7878 1/init
unix 3 [ ] STREAM CONNECTED 8738 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 10373 894/dbus-daemon
unix 2 [ ] DGRAM 5750 1951/dhclient
unix 2 [ ] DGRAM 5611 1/init
unix 2 [ ] DGRAM 4904 271/systemd-journal
unix 3 [ ] STREAM CONNECTED 5058 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 4790 258/haveged
unix 3 [ ] DGRAM 6764 1/init
unix 3 [ ] DGRAM 6763 1/init
unix 3 [ ] DGRAM 5355 241/systemd-udevd
unix 3 [ ] DGRAM 5354 241/systemd-udevd
unix 2 [ ] DGRAM 6683 241/systemd-udevd
unix 3 [ ] STREAM CONNECTED 5054 1/init /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 6666 241/systemd-udevd
All times are GMT -5. The time now is 07:56 AM .
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know .
