Page 1 of 2 12 LastLast
Results 1 to 10 of 15

Thread: I just opened one (just one) Chromium browser to Yahoo dot com and I see this netstat

Hybrid View

  1. #1
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

    I just opened one (just one) Chromium browser to Yahoo dot com and I see this netstat

    I just opened one (just one) Chromium browser to Yahoo dot com and I see the following netstat -a report with 19 established
    connections and I wonder why so many "established" when I only opened one browser?!
    root@Microknoppix:/home/knoppix# netstat -a
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State
    tcp 0 0 Microknoppix:ipp *:* LISTEN
    tcp 243 0 Microknoppix:33956 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:45502 69.25.24.26:https ESTABLISHED
    tcp 0 0 Microknoppix:36332 mia07s35-in-f99.1:https ESTABLISHED
    tcp 0 0 Microknoppix:35411 l1.ycs.vip.dxs.ya:https ESTABLISHED
    tcp 0 0 Microknoppix:40574 ir2.fp.vip.ne1.ya:https ESTABLISHED
    tcp 0 0 Microknoppix:56689 ok-in-f147.1e100.:https ESTABLISHED
    tcp 0 0 Microknoppix:41777 mia07s26-in-f2.1e:https ESTABLISHED
    tcp 0 0 Microknoppix:36537 adtechus-ssp-ums-:https CLOSE_WAIT
    tcp 0 0 Microknoppix:33957 mpr2.ngd.vip.bf1.:https TIME_WAIT
    tcp 0 0 Microknoppix:58497 mia07s25-in-f110.:https ESTABLISHED
    tcp 0 0 Microknoppix:54188 pr-east.pbp.vip.b:https CLOSE_WAIT
    tcp 0 0 Microknoppix:40678 24.143.206.211:https ESTABLISHED
    tcp 0 0 Microknoppix:40829 mia07s25-in-f10.1:https ESTABLISHED
    tcp 1 0 Microknoppix:49830 66.230.183.3:https CLOSE_WAIT
    tcp 0 0 Microknoppix:37140 yts2.yql.vip.gq1.:https ESTABLISHED
    tcp 0 0 Microknoppix:58527 mia07s25-in-f110.:https ESTABLISHED
    tcp 0 0 Microknoppix:33951 mpr2.ngd.vip.bf1.:https TIME_WAIT
    tcp 243 0 Microknoppix:33954 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:36329 mia07s35-in-f99.1:https ESTABLISHED
    tcp 0 0 Microknoppix:33950 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:54522 r5.ycpi.vip.dxs.y:https ESTABLISHED
    tcp 243 0 Microknoppix:33955 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:48394 mia07s24-in-f10.1:https ESTABLISHED
    tcp 0 0 Microknoppix:47713 r2.ycpi.vip.gq1.y:https ESTABLISHED
    tcp 0 0 Microknoppix:33953 mpr2.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:59580 beap-csc.adx.vip.:https TIME_WAIT
    tcp 0 0 Microknoppix:57079 mia07s27-in-f3.1e:https ESTABLISHED
    tcp 0 0 Microknoppix:45538 mia07s35-in-f14.1:https ESTABLISHED
    tcp 0 0 Microknoppix:41450 yk-in-f95.1e100.n:https ESTABLISHED
    tcp 0 0 Microknoppix:42308 mpr1.ngd.vip.bf1.:https CLOSE_WAIT
    tcp 0 0 Microknoppix:33850 a104-73-27-225.de:https ESTABLISHED
    tcp 1 0 Microknoppix:37126 72.21.91.29:http CLOSE_WAIT
    tcp6 0 0 localhost:ipp [::]:* LISTEN
    udp 0 0 *:bootpc *:*
    udp 0 0 *:mdns *:*
    udp 0 0 *:18817 *:*
    udp6 0 0 [::]:44157 [::]:*
    raw6 0 0 [::]:ipv6-icmp [::]:*

  2. #2
    Member registered user
    Join Date
    Jun 2005
    Posts
    38
    I have also seen as many as 30 established connections when I only had "two" Chromium browsers open.

  3. #3
    Senior Member registered user
    Join Date
    Dec 2008
    Location
    Mysore, India
    Posts
    275
    Sorry for the unsolicited thinking aloud. I thought at first that may be this is because Chromium has no script protection included. Tested with my version in Knoppix 7.2.0. My system has just the desired ports and protocols open. Could you check in ksysguard please?

  4. #4
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

    I am looking at ksysguard now and it has become my next favorite enjoyment!

    Quote Originally Posted by rajibando View Post
    Sorry for the unsolicited thinking aloud. I thought at first that may be this is because Chromium has no script protection included. Tested with my version in Knoppix 7.2.0. My system has just the desired ports and protocols open. Could you check in ksysguard please?
    here is the shell, and when I type ksysguard and click the Enter key, the command-line interface shows the following:

    knoppix@Microknoppix:~$ ksysguard Got bus address: "unix:abstract=/tmp/dbus-UUqLI7jxMD,guid=5c851277612407c7ac463ea0557906f2" Connected to accessibility bus at: "unix:abstract=/tmp/dbus-UUqLI7jxMD,guid=5c851277612407c7ac463ea0557906f2" Registered DEC: true Registered event listener change listener: true QSpiAccessible::accessibleEvent not handled: "8008" obj: QObject(0x0) " invalid interface!" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x82ad968, name = "file") "file" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x82ad968, name = "file") "file" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x832a888, name = "view") "view" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x832a888, name = "view") "view" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x832b1f0, name = "settings") "settings" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x832b1f0, name = "settings") "settings" QSpiAccessible::accessibleEvent not handled: "6" obj: KMenu(0x832bc78, name = "help") "help" QSpiAccessible::accessibleEvent not handled: "7" obj: KMenu(0x832bc78, name = "help") "help" QSpiAccessible::accessibleEvent not handled: "6" obj: QMenu(0x828d5a8 "" QSpiAccessible::accessibleEvent not handled: "7" obj: QMenu(0x828d5a8 >>>>>>>>>

    Plus 156 more consecutive lines, following continuously, that all look exactly the same and read exactly like this:

    QSpiAccessible::accessibleEvent not handled: "8008" obj: QObject(0x0) " invalid interface!"

    I have never used ksysguard before you introduced it to me today. The GUI for ksysguard is also available for me to see and ksysguard has now become my next favorite enjoyment. I did not understand all of the stdout after I typed ksysguard but I wanted to include it here for you to see. I respect and admire your help! (I used 1024x768 resolution)



    -----
    Little format by mod

    Formatting suggestions:
    Use double "new line" for new section.

    You can use the "Go Advanced" button to have more abilities to format the posting; before sending your posting use "Preview" to see how it looks like.

    If "noscript" (within Iceweasel/Firefox) is active for http://knoppix.net/forum/ disable it for this website; otherwise you cannot use the format abilities. Do not use Chrome/Chromium!

    Below the editor area is the "Additional Options" area. With "Attachments → Manage Attachments" you can upload images and after this insert them in your posting.
    Last edited by Werner P. Schulz; 06-11-2015 at 07:52 AM.

  5. #5
    Senior Member registered user
    Join Date
    Dec 2008
    Location
    Mysore, India
    Posts
    275
    Don't you worry about the terminal values. You must focus on ksysguard GUI. First, run chromium.

    First check which ports are open, and take a note.

    check if you have ad blocker and noscript processes running.

    Then in ksysguard find the processes that has those ports open and try to correspond them with processes running in ksysguard.

    If not running (ad... and noscript), you add them immediately in chromium. Watch netstat. Close chromium. Wait.

    After that again run chromium.

    Watch netstat.

    Next, find the processes that has those ports open and try to correspond them with processes running in ksysguard.

    See if those questionable ports are open now.

    This is far better done in multi-terminal using top, watch, and some judiciously chosen codes. If you come from Unix there will be an enormous added advantage.

    Well, I can't write all the brainwaves coming in right now. But in time, with experience, you will understand blocking the irregular ports. And, CAUTION: Don't even play with ksysguard until you understand its workings. Otherwise, you are likely to crash your system. Just Observe, that's all!

    And please, format your texts, otherwise it is very difficult for members (definitely for me) to differentiate your texts from the terminal API outputs.

    There is one really benevolent person here who is watching. He will take note and, if he thinks, he will intervene and if required, will even format your posts. There are really some nice people here. Try to help them help you.
    Last edited by rajibando; 06-11-2015 at 07:41 AM.

  6. #6
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

  7. #7
    Moderator Moderator
    Join Date
    Nov 2010
    Location
    Germany/ Dietzenbach
    Posts
    1,124
    Quote Originally Posted by buymystock View Post
    Does ksysguard gui show which ports are open or do I nmap -p 1-65535 192.168.1 ? When I do nmap -p 1-65535 192.168.1, the CLI stdout shows the following ....
    Didn't you read my appendix to your posting #4?

  8. #8
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

    I did read your reply on my posting # 4. However...

    1. Quote Originally Posted by Werner P. Schulz View Post
      Didn't you read my appendix to your posting #4?
    2. I did read, with much respect and admiration as well, your reply to my posting # 4.
    3. I have started to experience feelings of preference for the "Go-Advanced" button after I click the "Reply" or "Reply With Quote" buttons.
    4. when I sent in the screen photo of my text file, I had not learned, yet, how to use the Go-Advanced button (and all of the little icons displayed at the top of the page that appears after I click on this button). Very comprehensive and thorough listing of helpful icon links on that page. Thanks!

  9. #9
    Senior Member registered user
    Join Date
    Dec 2008
    Location
    Mysore, India
    Posts
    275
    First, post whether you know Unix/'Linux CLI'.

    You won't find unless you use grep in CLI. Then make a script with 'do while' to call nmap every 500 millisecond with sleep. Then you will see what is changing in real time.

    I guess you know, but if you are not from unix background, then use gnome-nettool.

    No direct process name, but the two info can be correlated. Find which ports are used for what purposes. You will understand.

  10. #10
    Member registered user
    Join Date
    Jun 2005
    Posts
    38

    I know some Linux CLI (some).

    Quote Originally Posted by rajibando View Post
    First, post whether you know Unix/'Linux CLI'.

    You won't find unless you use grep in CLI. Then make a script with 'do while' to call nmap every 500 millisecond with sleep. Then you will see what is changing in real time.

    I guess you know, but if you are not from unix background, then use gnome-nettool.
    No direct process name, but the two info can be correlated. Find which ports are used for what purposes. You will understand.

    1. I know that command-line interface involves
      typing Linux commands in a shell and clicking the "Enter" key after typing the command; I like this way of making things happen in Linux.
    2. I have used Knoppix since version 3.1 in 2003.
    3. gnome-nettool is becoming very flattering and I am using it now since you suggested it. It's great!
    4. With the information that you have sent to me, I will have plenty of learning to keep me busy for a considerable amount of time in the time that follows the present time.
    5. Blessings
    6. Bye now, and Cheers! Thanks!
    Last edited by buymystock; 06-11-2015 at 10:14 AM. Reason: clairification

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


IBM S822LC 8335-GCA Power 8 2U Server 2xPower8 TESTED picture

IBM S822LC 8335-GCA Power 8 2U Server 2xPower8 TESTED

$695.00



IBM 520 8203-E4A Power Systems Server PowerPC Dual-Core 4.2GHZ 16GB SEE NOTES picture

IBM 520 8203-E4A Power Systems Server PowerPC Dual-Core 4.2GHZ 16GB SEE NOTES

$240.00



IBM x3650 M3, 7945-AC1, 40GB, XEON e5507, 2.26ghz x2 with RAID Card, No HDD picture

IBM x3650 M3, 7945-AC1, 40GB, XEON e5507, 2.26ghz x2 with RAID Card, No HDD

$149.40



IBM System X3650 M4 Server 2x Xeon  32 GB RAM NO HDD NO OS picture

IBM System X3650 M4 Server 2x Xeon 32 GB RAM NO HDD NO OS

$215.00



IBM System x3650 M3 7945AC1 Server INTEL XEON E5620 2.4GHz 4GB picture

IBM System x3650 M3 7945AC1 Server INTEL XEON E5620 2.4GHz 4GB

$59.00



IBM System X3100 M5 (PN: 5457-AC1) Server picture

IBM System X3100 M5 (PN: 5457-AC1) Server

$225.00



IBM X3200 M3 Tower Server Intel Xeon X3450 2.67GHz 2GB 2*500 Gb Hdd Linux AS IS picture

IBM X3200 M3 Tower Server Intel Xeon X3450 2.67GHz 2GB 2*500 Gb Hdd Linux AS IS

$60.00



IBM System x3250 M3 4251PAB Server Intel Xeon X3430 2.4GHz 4GB SEE NOTES picture

IBM System x3250 M3 4251PAB Server Intel Xeon X3430 2.4GHz 4GB SEE NOTES

$18.13



IBM 8203-E4A pSeries 520 6-Bay Server System Power6 2 Core 4.2GHz 4GB No HD picture

IBM 8203-E4A pSeries 520 6-Bay Server System Power6 2 Core 4.2GHz 4GB No HD

$240.00



Lot of 24 IBM 4U QPI Server Cables 59Y4797 Used, Untested, Genuine IBM Products picture

Lot of 24 IBM 4U QPI Server Cables 59Y4797 Used, Untested, Genuine IBM Products

$250.00