Netstat showing bonobo-activation connection to rkhunter mailserver

conn-fused · 03-01-2006, 03:07 PM

I recently installed rkhunter on a Mdk2006 system. After installing and running it, I happened to run "netstat -pantu".

One of the lines this returned was:

Code:

Proto   Recv-Q   Send-Q   Local Address           Foreign Address State         PID/Program

tcp     1        0        <my external ip>:45595  62.177.200.5:80  CLOSED_WAIT   13224/bonobo-activa

ps ax | grep 13224
... /usr/lib/bonobo-activation-server --ac-activate --ior-output-fd=44

So what is bonobo-activation doing communicating with 62.177.200.5 (which, BTW, is mail.rkhunter.nl)?

Do I need this program on my system at all?

unSpawn · 03-02-2006, 10:40 AM

So what is bonobo-activation doing communicating with 62.177.200.5
Beats me. Maybe run a sniffer if you're really really interested in that HTTP traffic.

Do I need this program on my system at all?
If you feel adventurous why not try to uninstall it? You'll find out soon enough if it's necessary...
]# rpm-ls-descr libbonobo
Bonobo is a component system based on CORBA, used by the GNOME desktop.