Re: weired logs

[Michael <codejodler@gmx.ch>]

> What is port 2703 ? 
Nothing special.

Well tor seems to be assembling quite some networking infrastructure.
Utility http servers like privoxy or eisfair (used with TOR) can be configured to connect through unusual ports. Astaro anti-spam update also used port 2703.
If you really need to track it install wireshark. 
Or use simple commandline tools like ps, ping, whois, nmap.

# ping c105.cloudmark.comrk.com
PING c105.cloudmark.com (208.83.136.25) 56(84) bytes of data.
From 64.95.143.66 icmp_seq=5 Packet filtered
From 64.95.143.66 icmp_seq=11 Packet filtered
From 64.95.143.66 icmp_seq=12 Packet filtered

# whois 208.83.136.25

OrgName:    Cloudmark, Inc. 
OrgID:      CLOUD-2
Address:    128 King St.
City:       San Francisco
StateProv:  CA
PostalCode: 94107
Country:    US

# whois  64.95.143.66

Internap Network Services PNAP-05-2000 (NET-64-94-0-0-1) 
                                  64.94.0.0 - 64.95.255.255
CloudMark INAP-SJE-CLOUDMARK-1064 (NET-64-95-143-64-1) 
                                  64.95.143.64 - 64.95.143.71


http://www.cloudmark.com/

"Anti-spam, Anti-virus and Anti-phishing for Service Providers"


hth


 m°