[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: differences between iptstate and netstat



On Wed, Sep 18, 2002 at 02:31:36PM -0300, Peter Cordes wrote:
>  Are you running a firewall with iptables connection tracking?  

Well, yes. I didn't know iptstate would work otherwise.

> Are the
> extra connections (that don't show up in netstat) from internal addresses to
> external addresses?  (i.e. neither end of the connection is your firewall's
> IP addr?)

No. They are all external connections to port 80. Nothing about them looks
particularly invalid, but I can't correlate them. Not entirely anyway.
 
>  If so, then that's normal.  netstat only shows connections from the local
> machine.  iptstate reports the state of the netfilter connection tracking
> stuff.

Yes, one of the things I am wondering is if it remembers connections for a 
longer time for some reason. Still doesn't figure because I have them
sitting in ESTABLISHED when there is no corresponding one on the netstat.



Reply to: