[plug] strange network activity?

[Deeþan Chakravarthy]

Rob Dunne wrote:
> Hi Pluggers,
>
> I have a lot of strange activity on a newly set up machine on my home 
> network. I installed jnettop and had a look at it.
>
> the machine is 192.168.1.102, 192.168.1.100 is anther machine on the 
> network, and iConnectAccess621 is the modem, But
> what are all the others? How can i find what is being transferred?
>
> 192.168.176.230 <-> 192.168.1.102
> 192.168.176.72 <-> 192.168.1.102
> 192.168.175.202 <-> 192.168.1.102
> 192.168.176.12 <-> 192.168.1.102
> iConnectAccess621 <-> 192.168.181.238
> 192.168.176.158 <-> 192.168.1.102
> 192.168.253.249 <-> 192.168.1.102
> 192.168.254.201 <-> 192.168.1.102
> 192.168.255.153 <-> 192.168.1.102
> 192.168.1.100 <-> 192.168.103.128
> 192.168.254.96 <-> 192.168.1.102
> 192.168.254.95 <-> 192.168.1.102
> 192.168.1.100 <-> 192.168.103.129
Try tcpdump.. netstat.. figure out the pid of the process responsible 
for the traffic..  look at /proc directory for more details about the 
process.. hope that helps.

-- 
Deepan 
Sudoku Solver: http://sudoku-solver.net/