james92 Posted March 11, 2014 Share Posted March 11, 2014 i installed an image of kali on an odroid xu done a lsof -i and havnt got a clue what this connection is gnome-pan 3960 root 14u IPv4 11405 0t0 TCP kali:50818->a92-123-72-120.deploy.akamaitechnologies.com:http (ESTABLISHED) when im sitting on my laptop witch is running kali and do lsof -i i get the following COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAMEdhclient 3335 root 6u IPv4 10571 0t0 UDP *:bootpc dhclient 3335 root 20u IPv4 10557 0t0 UDP *:47913 dhclient 3335 root 21u IPv6 10558 0t0 UDP *:37012 when i start my odroid up i get root@kali:~# lsof -i COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAMEdhclient 3045 root 8u IPv4 5906 0t0 UDP *:bootpc dhclient 3045 root 20u IPv4 5889 0t0 UDP *:49623 dhclient 3045 root 21u IPv6 5890 0t0 UDP *:32345 ntpd 3377 ntp 16u IPv4 5985 0t0 UDP *:ntp ntpd 3377 ntp 17u IPv6 5986 0t0 UDP *:ntp ntpd 3377 ntp 18u IPv4 5992 0t0 UDP kali:ntp ntpd 3377 ntp 19u IPv4 5993 0t0 UDP kali:ntp ntpd 3377 ntp 20u IPv6 5994 0t0 UDP [fe80::1c65:37ff:fe41:5dc9]:ntp ntpd 3377 ntp 21u IPv6 5995 0t0 UDP localhost:ntp gnome-pan 3960 root 14u IPv4 11405 0t0 TCP kali:50818->a92-123-72-120.deploy.akamaitechnologies.com:http (ESTABLISHED)vino-serv 3984 root 15u IPv6 10989 0t0 TCP *:5900 (LISTEN)vino-serv 3984 root 16u IPv4 10990 0t0 TCP *:5900 (LISTEN) vino-serv 3984 root 17u IPv6 9974 0t0 TCP *:5800 (LISTEN) and on both of them im not doing anything just booted and done lsof -i still learning all this stuff so go easy on me ha :) Quote Link to comment Share on other sites More sharing options...
james92 Posted March 11, 2014 Author Share Posted March 11, 2014 (edited) and also when i connect to the internet on my laptop and watch the connections being made with etherape thers none when im not doin anything but when im on the odroid its communicating with a few diffrent places heres a list of shit and i havnt started the browser or anything ns0.fredprod.com relay.imagine.ie scott.tssg.org tbag.heanet.ie 149.157.192.5 193.1.31.66 54.229.222.210 54.194.18.100 duno if im being paro ha :D Edited March 11, 2014 by james92 Quote Link to comment Share on other sites More sharing options...
THCMinister Posted March 11, 2014 Share Posted March 11, 2014 I think you are being paranoid. These are Broadcasts from the Network Time Protocol Daemon and the DHCP Client. Syncing time and communicating dhcp information/requests. dhclient 3045 root 8u IPv4 5906 0t0 UDP *:bootpc dhclient 3045 root 20u IPv4 5889 0t0 UDP *:49623 dhclient 3045 root 21u IPv6 5890 0t0 UDP *:32345 ntpd 3377 ntp 16u IPv4 5985 0t0 UDP *:ntp ntpd 3377 ntp 17u IPv6 5986 0t0 UDP *:ntp ntpd 3377 ntp 18u IPv4 5992 0t0 UDP kali:ntp ntpd 3377 ntp 19u IPv4 5993 0t0 UDP kali:ntp ntpd 3377 ntp 20u IPv6 5994 0t0 UDP [fe80::1c65:37ff:fe41:5dc9]:ntp ntpd 3377 ntp 21u IPv6 5995 0t0 UDP localhost:ntp Do you have something on your panel bar that conastantly display some sort of network info? gnome-pan 3960 root 14u IPv4 11405 0t0 TCP kali:50818->a92-123-72-120.deploy.akamaitechnologies.com:http (ESTABLISHED) This is from have a service listening on your machine(port 5900 is VNC, Ubuntu which is what Kali is based off of, uses vino-server for remote desktop)vino-serv 3984 root 15u IPv6 10989 0t0 TCP *:5900 (LISTEN)vino-serv 3984 root 16u IPv4 10990 0t0 TCP *:5900 (LISTEN) Quote Link to comment Share on other sites More sharing options...
james92 Posted March 11, 2014 Author Share Posted March 11, 2014 thanks for your reply im delighted to know i was just being paro :D ha i just dont like seeing my shit connecting to big companys makes me paroooo Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.