Unusal netstat result

marzugal · #1 21st March 2005, 01:00 AM

Hey just did a netstat -tupa with this result '134.70-85-88.reverse.t:http' ther was about 15 of these at once.
anyone know of what this might be?
cheers

w5set · #2 21st March 2005, 01:38 AM

if that's not part of your local (which I doubt) network address bank, or your own IP address, or a vpn connection you setup. I would consider seeing where it might resolve to with a name lookup.
This is on a personal computer and not a server is it? And doesn't boot from a server either does it?

marzugal · #3 21st March 2005, 01:43 AM

Its on a fresh install "workstation" option with system tools developer tools etc connected to dynalink adsl router.

w5set · #4 21st March 2005, 01:47 AM

then the IP could just resolve to an update site--reverse the address given to 88.85.70.134 and see where it goes.

w5set · #5 21st March 2005, 01:52 AM

Is the computer doing an update while it says this?

marzugal · #6 21st March 2005, 01:53 AM

Its the the minus signs between 70-80-88 that has me confused ? 134.70-85-88
^ ^

marzugal · #7 21st March 2005, 01:56 AM

no its fully updated I only update with yum all unneeded services turned off

w5set · #8 21st March 2005, 02:00 AM

Bring up etheral and see what kind of traffic is coming/going if any.
How long have you been connected since installing?

marzugal · #9 21st March 2005, 02:03 AM

about 8 hours all up

w5set · #10 21st March 2005, 02:06 AM

I would use ethereal and monitor it for a bit.
Do you have a Firewall running?

marzugal · #11 21st March 2005, 02:08 AM

yep firestarter the router is firewalled as well cheers for your help w5set