[Freedombox-discuss] Traffic in/out of FreedomBox I can't explain.

[Daddy]

Hello!

I'm not an expert, but you should be able to check processes which originate this connection with something like:

netstat -tulnp
ss -tulnp

Also this walk through blog post seems to be relevant to your situation:

https://hacklido.com/blog/233-investigating-unknown-ports-and-services-on-linux-system

D. 

On July 25, 2024 2:04:47 AM GMT+02:00, "A. F. Cano via Freedombox-discuss" <freedombox-discuss at alioth-lists.debian.net> wrote:
>
>Hi,
>
>This is similar to the unexplained traffic I had noticed before to/from
>the coturn app, but it is now disabled.  It is happening (per iftop)
>to/from this address and port:
>
>pool-108-50-237-254.nwrknj.fios.verizon.net:50983
>
>but no useful informationg comes out of a search.
>
>This is what iftop says:
>
>c-XX-XX-XXX-XXX.hsd1.nj.comcast.net:https  => pool-108-50-237-254.nwrknj.fios.verizon.net:50983                                  35.4Kb  38.3Kb  36.2Kb
>                                           <=    25.9Kb  26.6Kb  25.1Kb
>
>I'm not running anything that justifies this level of I/O.  Does anyone
>have any idea what this might be and how to stop it?  I realize it says
>https so it might be one of the many tabs I have open in multiple
>browsers, but I'd certainly like to know what information is being sent.
>I certainly did not explicitly connect to that "pool" site.  The
>anonymized XX-XX-XXX_XXX address is the address of the primary interface
>of the FreedomBox.
>
>Thanks.
>
>Augustine
>
>_______________________________________________
>Freedombox-discuss mailing list
>Freedombox-discuss at alioth-lists.debian.net
>https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/freedombox-discuss/attachments/20240725/a73e21b0/attachment.htm>