Hi all, I don't know if this is the most pertinent ng, hope I'm not OT.
I've noticed strange tcp connections on netstat, belonging to esd (esound).
Now, I'm running gnome but have esd disabled, it gets started automatically
when I open Mozilla Firebird (vanilla build from mozilla.org)
Then sometimes looking at "$netstat -tunap" I get lines like these:
tcp 0 0 217.133.247.41:1574 212.243.221.198:80 ESTABLISHED 1848/MozillaFirebir
tcp 389 0 217.133.247.41:1546 212.243.221.198:80 ESTABLISHED 1862/esd
or like these:
tcp 1 0 217.133.247.41:1547 212.243.221.200:80 CLOSE_WAIT 1862/esd
tcp 390 0 217.133.247.41:1546 212.243.221.198:80 CLOSE_WAIT 1862/esd
tcp 1 0 217.133.247.41:1548 212.243.221.198:80 CLOSE_WAIT 1862/esd
tcp 1 0 217.133.247.41:1549 212.243.221.198:80 CLOSE_WAIT 1862/esd
tcp 1 0 217.133.247.41:1545 212.243.221.199:80 CLOSE_WAIT 1862/esd
Connections are always towards remote port 80. Usually a "$host remote-ip"
doesn't give any info, only one time I got the remote IP to be something
at akamai that I understand to be an adserver or content-server.
I guess the connections are all related to what I'm browsing or what
I've browsed, but why do they belong to esd? Does it make any sense??
esd is not listening on a tcp port, only on unix socket, and it gets
killed when I exit Mozilla Firebird, and so do the ESTABLISHED or
CLOSE_WAIT connections, they all disappear when I exit the browser.
Thanks for any hint.
|