Page 1 of 2 12 LastLast
Results 1 to 10 of 15

Thread: I just opened one (just one) Chromium browser to Yahoo dot com and I see this netstat

  1. #1
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

    I just opened one (just one) Chromium browser to Yahoo dot com and I see this netstat

    I just opened one (just one) Chromium browser to Yahoo dot com and I see the following netstat -a report with 19 established
    connections and I wonder why so many "established" when I only opened one browser?!
    root@Microknoppix:/home/knoppix# netstat -a
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State
    tcp 0 0 Microknoppix:ipp *:* LISTEN
    tcp 243 0 Microknoppix:33956 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:45502 69.25.24.26:https ESTABLISHED
    tcp 0 0 Microknoppix:36332 mia07s35-in-f99.1:https ESTABLISHED
    tcp 0 0 Microknoppix:35411 l1.ycs.vip.dxs.ya:https ESTABLISHED
    tcp 0 0 Microknoppix:40574 ir2.fp.vip.ne1.ya:https ESTABLISHED
    tcp 0 0 Microknoppix:56689 ok-in-f147.1e100.:https ESTABLISHED
    tcp 0 0 Microknoppix:41777 mia07s26-in-f2.1e:https ESTABLISHED
    tcp 0 0 Microknoppix:36537 adtechus-ssp-ums-:https CLOSE_WAIT
    tcp 0 0 Microknoppix:33957 mpr2.ngd.vip.bf1.:https TIME_WAIT
    tcp 0 0 Microknoppix:58497 mia07s25-in-f110.:https ESTABLISHED
    tcp 0 0 Microknoppix:54188 pr-east.pbp.vip.b:https CLOSE_WAIT
    tcp 0 0 Microknoppix:40678 24.143.206.211:https ESTABLISHED
    tcp 0 0 Microknoppix:40829 mia07s25-in-f10.1:https ESTABLISHED
    tcp 1 0 Microknoppix:49830 66.230.183.3:https CLOSE_WAIT
    tcp 0 0 Microknoppix:37140 yts2.yql.vip.gq1.:https ESTABLISHED
    tcp 0 0 Microknoppix:58527 mia07s25-in-f110.:https ESTABLISHED
    tcp 0 0 Microknoppix:33951 mpr2.ngd.vip.bf1.:https TIME_WAIT
    tcp 243 0 Microknoppix:33954 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:36329 mia07s35-in-f99.1:https ESTABLISHED
    tcp 0 0 Microknoppix:33950 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:54522 r5.ycpi.vip.dxs.y:https ESTABLISHED
    tcp 243 0 Microknoppix:33955 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:48394 mia07s24-in-f10.1:https ESTABLISHED
    tcp 0 0 Microknoppix:47713 r2.ycpi.vip.gq1.y:https ESTABLISHED
    tcp 0 0 Microknoppix:33953 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:59580 beap-csc.adx.vip.:https TIME_WAIT
    tcp 0 0 Microknoppix:57079 mia07s27-in-f3.1e:https ESTABLISHED
    tcp 0 0 Microknoppix:45538 mia07s35-in-f14.1:https ESTABLISHED
    tcp 0 0 Microknoppix:41450 yk-in-f95.1e100.n:https ESTABLISHED
    tcp 0 0 Microknoppix:42308 mpr1.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:33850 a104-73-27-225.de:https ESTABLISHED
    tcp 1 0 Microknoppix:37126 72.21.91.29:http CLOSE_WAIT
    tcp6 0 0 localhost:ipp [::]:* LISTEN
    udp 0 0 *:bootpc *:*
    udp 0 0 *:mdns *:*
    udp 0 0 *:18817 *:*
    udp6 0 0 [::]:44157 [::]:*
    raw6 0 0 [::]:ipv6-icmp [::]:*

  2. #2
    Member registered user
    Join Date
    Jun 2005
    Posts
    38
    I have also seen as many as 30 established connections when I only had "two" Chromium browsers open.

  3. #3
    Senior Member registered user
    Join Date
    Dec 2008
    Location
    Mysore, India
    Posts
    272
    Sorry for the unsolicited thinking aloud. I thought at first that may be this is because Chromium has no script protection included. Tested with my version in Knoppix 7.2.0. My system has just the desired ports and protocols open. Could you check in ksysguard please?

  4. #4
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

    I am looking at ksysguard now and it has become my next favorite enjoyment!

    Quote Originally Posted by rajibando View Post
    Sorry for the unsolicited thinking aloud. I thought at first that may be this is because Chromium has no script protection included. Tested with my version in Knoppix 7.2.0. My system has just the desired ports and protocols open. Could you check in ksysguard please?
    here is the shell, and when I type ksysguard and click the Enter key, the command-line interface shows the following:

    knoppix@Microknoppix:~$ ksysguard Got bus address: "unix:abstract=/tmp/dbus-UUqLI7jxMD,guid=5c851277612407c7ac463ea0557906f2" Connected to accessibility bus at: "unix:abstract=/tmp/dbus-UUqLI7jxMD,guid=5c851277612407c7ac463ea0557906f2" Registered DEC: true Registered event listener change listener: true QSpiAccessible::accessibleEvent not handled: "8008" obj: QObject(0x0) " invalid interface!" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x82ad968, name = "file") "file" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x82ad968, name = "file") "file" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x832a888, name = "view") "view" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x832a888, name = "view") "view" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x832b1f0, name = "settings") "settings" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x832b1f0, name = "settings") "settings" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x832bc78, name = "help") "help" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x832bc78, name = "help") "help" QSpiAccessible::accessibleEvent not handled: "6" obj: QMenu(0x828d5a8 "" QSpiAccessible::accessibleEvent not handled: "7" obj: QMenu(0x828d5a8 >>>>>>>>>

    Plus 156 more consecutive lines, following continuously, that all look exactly the same and read exactly like this:

    QSpiAccessible::accessibleEvent not handled: "8008" obj: QObject(0x0) " invalid interface!"

    I have never used ksysguard before you introduced it to me today. The GUI for ksysguard is also available for me to see and ksysguard has now become my next favorite enjoyment. I did not understand all of the stdout after I typed ksysguard but I wanted to include it here for you to see. I respect and admire your help! (I used 1024x768 resolution)



    -----
    Little format by mod

    Formatting suggestions:
    Use double "new line" for new section.

    You can use the "Go Advanced" button to have more abilities to format the posting; before sending your posting use "Preview" to see how it looks like.

    If "noscript" (within Iceweasel/Firefox) is active for http://knoppix.net/forum/ disable it for this website; otherwise you cannot use the format abilities. Do not use Chrome/Chromium!

    Below the editor area is the "Additional Options" area. With "Attachments → Manage Attachments" you can upload images and after this insert them in your posting.
    Last edited by Werner P. Schulz; 06-11-2015 at 07:52 AM.

  5. #5
    Senior Member registered user
    Join Date
    Dec 2008
    Location
    Mysore, India
    Posts
    272
    Don't you worry about the terminal values. You must focus on ksysguard GUI. First, run chromium.

    First check which ports are open, and take a note.

    check if you have ad blocker and noscript processes running.

    Then in ksysguard find the processes that has those ports open and try to correspond them with processes running in ksysguard.

    If not running (ad... and noscript), you add them immediately in chromium. Watch netstat. Close chromium. Wait.

    After that again run chromium.

    Watch netstat.

    Next, find the processes that has those ports open and try to correspond them with processes running in ksysguard.

    See if those questionable ports are open now.

    This is far better done in multi-terminal using top, watch, and some judiciously chosen codes. If you come from Unix there will be an enormous added advantage.

    Well, I can't write all the brainwaves coming in right now. But in time, with experience, you will understand blocking the irregular ports. And, CAUTION: Don't even play with ksysguard until you understand its workings. Otherwise, you are likely to crash your system. Just Observe, that's all!

    And please, format your texts, otherwise it is very difficult for members (definitely for me) to differentiate your texts from the terminal API outputs.

    There is one really benevolent person here who is watching. He will take note and, if he thinks, he will intervene and if required, will even format your posts. There are really some nice people here. Try to help them help you.
    Last edited by rajibando; 06-11-2015 at 07:41 AM.

  6. #6
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

  7. #7
    Senior Member registered user
    Join Date
    Dec 2008
    Location
    Mysore, India
    Posts
    272
    First, post whether you know Unix/'Linux CLI'.

    You won't find unless you use grep in CLI. Then make a script with 'do while' to call nmap every 500 millisecond with sleep. Then you will see what is changing in real time.

    I guess you know, but if you are not from unix background, then use gnome-nettool.

    No direct process name, but the two info can be correlated. Find which ports are used for what purposes. You will understand.

  8. #8
    Moderator Moderator
    Join Date
    Nov 2010
    Location
    Germany/ Dietzenbach
    Posts
    1,124
    Quote Originally Posted by buymystock View Post
    Does ksysguard gui show which ports are open or do I nmap -p 1-65535 192.168.1 ? When I do nmap -p 1-65535 192.168.1, the CLI stdout shows the following ....
    Didn't you read my appendix to your posting #4?

  9. #9
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

    I know some Linux CLI (some).

    Quote Originally Posted by rajibando View Post
    First, post whether you know Unix/'Linux CLI'.

    You won't find unless you use grep in CLI. Then make a script with 'do while' to call nmap every 500 millisecond with sleep. Then you will see what is changing in real time.

    I guess you know, but if you are not from unix background, then use gnome-nettool.
    No direct process name, but the two info can be correlated. Find which ports are used for what purposes. You will understand.

    1. I know that command-line interface involves
      typing Linux commands in a shell and clicking the "Enter" key after typing the command; I like this way of making things happen in Linux.
    2. I have used Knoppix since version 3.1 in 2003.
    3. gnome-nettool is becoming very flattering and I am using it now since you suggested it. It's great!
    4. With the information that you have sent to me, I will have plenty of learning to keep me busy for a considerable amount of time in the time that follows the present time.
    5. Blessings
    6. Bye now, and Cheers! Thanks!
    Last edited by buymystock; 06-11-2015 at 10:14 AM. Reason: clairification

  10. #10
    Senior Member registered user
    Join Date
    Dec 2008
    Location
    Mysore, India
    Posts
    272
    So you don't write scripts? You had better! I had given you a wonderful clue which you couldn't grasp
    I would now request you to please stop jumping from one query to another and plain- and simply observe.
    And as the mod said, stop using chromium. It is not a Debian/Standard Linux tool. It is a google tool, and is imperfect. Better use Firefox directly.
    Best, use Iceweasel. It is a Debian finish.
    Last, but not the least, please request the moderator to delete your multi-posts no. 6, 7 & 8. It is not required but shall confuse newbies.
    And post your understanding, realisation with lot of explanations, here, so that future users can learn from your experience. Please don't hide your findings.
    With lot of empathy, respect, and equality
    Last edited by rajibando; 06-11-2015 at 10:17 AM.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


IBM CS821 20-Core 2.827GHz 128Gb 1.92Tb SSD 1U Linux Server - 8005-12N Power 8 picture

IBM CS821 20-Core 2.827GHz 128Gb 1.92Tb SSD 1U Linux Server - 8005-12N Power 8

$479.96



IBM 8247-22L S822L 2 CPUs 256GB 12x Drives SFF Power8 Linux Server picture

IBM 8247-22L S822L 2 CPUs 256GB 12x Drives SFF Power8 Linux Server

$749.00



Red Hat Enterprise Linux 5 Server - New and Sealed picture

Red Hat Enterprise Linux 5 Server - New and Sealed

$19.99



Asus ESC4000 G3 Barebones 0GB HDD Linux picture

Asus ESC4000 G3 Barebones 0GB HDD Linux

$200.00



IBM E850 Power8 2x 12C 3.02GHz 512Gb 1.8Tb SAS 10GbE 16Gb Linux Server 8408-E8E picture

IBM E850 Power8 2x 12C 3.02GHz 512Gb 1.8Tb SAS 10GbE 16Gb Linux Server 8408-E8E

$799.96



1U BareMetal pfsense opnsense Router Firewall DNS Server 6x 10GB Ethernet Ports picture

1U BareMetal pfsense opnsense Router Firewall DNS Server 6x 10GB Ethernet Ports

$149.00



Dell PowerEdge R730xd Server 2.60Ghz 32-Core 64GB 800GB SSD Debian Linux picture

Dell PowerEdge R730xd Server 2.60Ghz 32-Core 64GB 800GB SSD Debian Linux

$880.25



IBM Power 9 S922 8-Core 3.4-3.9Ghz 128Gb DDR4 2U Linux Server - 9009-22a picture

IBM Power 9 S922 8-Core 3.4-3.9Ghz 128Gb DDR4 2U Linux Server - 9009-22a

$3439.96



IBM System X 3250 M5 Single Xeon Quad Core E3-1220 v3 @3.1GHz,8GB RAM,Linux SUSE picture

IBM System X 3250 M5 Single Xeon Quad Core E3-1220 v3 @3.1GHz,8GB RAM,Linux SUSE

$199.87



POGO Linux WEBWARE 1150 Rack-Mount Server Pentium 4 2.8GHz 512MB - No Drives picture

POGO Linux WEBWARE 1150 Rack-Mount Server Pentium 4 2.8GHz 512MB - No Drives

$179.99