[cobalt-users] Netstat Report Question: portsentry???

[Wayne Sagar <wsagar@xxxxxxxx>]

Hopefully this is not too far OT...

When watching a series of netstat reports (netstat -c) I notice some
interesting connects, or attempts.

It seems that the search engines are having a hard time connecting, as well
as proxy servers.. below are a couple of examples of what I'm seeing (my
server name changed to protect the innocent)

tcp        0      0 www.mine.co:www proxy1-external.o:26749 TIME_WAIT

tcp        0      0 www.mine.co:www j200.inktomi.com:34274  TIME_WAIT

In fact, if I sit there long enough I never see any ESTABLISHED message
from these two types of connects. It does not seem to be be a connectivity
problem, other connects are quite fast in going from TIME_WAIT to ESTABILSHED

Could this be something going on with portsentry? I don't see any connects
from the IP's in the hosts.deny or logcheck report (which is mostly full of
attempts at port 137)

TIA
Wayne