Skip to main content

Thread: something weird in squid

-

today listed open files "lsof" , found many strange connections connecting squid server

squid 8912 proxy 7r ipv4 6806316 udp *:50755
squid 8912 proxy 9w ipv4 6806319 tcp server.something:2222 (listen)
squid 8912 proxy 10w ipv4 6806320 udp *:icpv2
squid 8912 proxy 13u ipv4 6822211 tcp server.something:48249->208.99.83.44:www (established)
squid 8912 proxy 14u ipv4 6821998 tcp server.something:50798->a72-246-25-40.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 16u ipv4 6822177 tcp server.something:59176->a72-246-25-9.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 20u ipv4 6821966 tcp server.something:50076->a72-246-25-9.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 21u ipv4 6821967 tcp server.something:38532->a72-246-25-9.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 22u ipv4 6821968 tcp server.something:51559->a72-246-25-9.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 23u ipv4 6822001 tcp server.something:49299->yi-in-f101.1e100.net:www (established)
squid 8912 proxy 24u ipv4 6822256 tcp server.something:33461->8.12.130.30:www (established)
squid 8912 proxy 25u ipv4 6821976 tcp server.something:44044->a72-246-25-40.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 27u ipv4 6821979 tcp server.something:57653->a72-246-25-40.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 28u ipv4 6822127 tcp server.something:34493->a96-17-106-107.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 29u ipv4 6821987 tcp server.something:48602->208.88.176.118:www (established)
squid 8912 proxy 30u ipv4 6822212 tcp server.something:44381->208.99.83.44:www (established)
squid 8912 proxy 31u ipv4 6822213 tcp server.something:35419->208.99.83.44:www (established)
squid 8912 proxy 36u ipv4 6822012 tcp server.something:51649->a72-246-25-9.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 37u ipv4 6822095 tcp server.something:41088->a72-246-25-40.deploy.akamaitechnologies.com:www (established)
squid 8912 proxy 38u ipv4 6822251 tcp server.something:43708->208.88.176.118:www (established)
squid 8912 proxy 39u ipv4 6822226 tcp server.something:45909->208.99.83.44:www (established)
squid 8912 proxy 50u ipv4 6822170 tcp server.something:55075->a72-246-25-40.deploy.akamaitechnologies.com:www (established)


can please explain r these connections doing ? r using proxy server ? although listened on 2222 ports r using r weird , , :www @ end of host means?

the akamai connections microsoft, have , windows systems on network? other connections can whois lookup see are. whois in repositories. once installed, open terminal , type:

code:
whois 208.88.176.118
i got following result 1 of ip addresses in listing:

code:
whois  208.88.176.118 # # query terms ambiguous.  query assumed be: #     "n 208.88.176.118" # # use "?" help. #  # # following results may obtained via: # http://whois.arin.net/rest/nets;q=208.88.176.118?showdetails=true&showarin=false #  netrange:       208.88.176.0 - 208.88.183.255 cidr:           208.88.176.0/21 originas:       as32527 netname:        pmgi nethandle:      net-208-88-176-0-1 parent:         net-208-0-0-0-0 nettype:        direct assignment nameserver:     dns2.friendfinderinc.com nameserver:     dns1.friendfinderinc.com regdate:        2008-03-24 updated:        2008-12-22 ref:            http://whois.arin.net/rest/net/net-208-88-176-0-1   orgname:        friendfinder networks inc orgid:          frien-11 address:        220 humboldt ct city:           sunnyvale stateprov:      ca postalcode:     94089 country:        regdate:        2008-07-18 updated:        2009-07-07 ref:            http://whois.arin.net/rest/org/frien-11  orgtechhandle: cwu4-arin orgtechname:   wu, catherine  orgtechphone:  +1-408-745-5598  orgtechemail:  cwu@ffn.com orgtechref:    http://whois.arin.net/rest/poc/cwu4-arin  # # arin whois data , services subject terms of use # available at: https://www.arin.net/whois_tou.html


Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] something weird in squid


Ubuntu

Comments

Post a Comment

Popular posts from this blog

CS5 Adobe Media Encoder: Encode failed because the source duration is nil.

-
i've been running production premium on new windows 7 64bit, 6gb i7 system several weeks , haven't had issues exporting media encoder.   i installed trial version of dreamweaver without of add-on's thought might mess licensed installation.   every attempt export -> media -> queue get's following error in ameencodingerrorlog.txt   - source file: c:\users\rob\appdata\local\temp\someproject.prproj - output file: c:\users\rob\videos\someproject.mov - preset used: custom - video: - audio: - bitrate: - encoding time: 00:00:00 7/8/2010 10:14:34 : encoding failed ------------------------------------------------- encode failed because source duration nil.   doing export directly pp works without error, don't want wait each export complete.   any ideas other reinstall pp?   tia i noticed range selector triangles right next each other.   changed source range: work area   not sure why default set 0 range. doesn't remember last setting when selected entire sequ
Read more

cf_sql_integer vs cf_sql_bigint vs cf_sql_int??

-
i have id (primary key) set bigint in sql server. have query following: where whateverid = <cfqueryparam cfsqltype="cf_sql_integer" value="#url.id#"> i got invalid data type it. tried: where whateverid = <cfqueryparam cfsqltype="cf_sql_bigint" value="#url.id#"> i still got invalid data type it. tried: where whateverid = <cfqueryparam cfsqltype="cf_sql_int" value="#url.id#"> and worked. the weird thing cf_sql_int not listed being accepted: http://www.adobe.com/livedocs/coldfusion/5.0/cfml_reference/tags79.htm can explain me. > whateverid = <cfqueryparam cfsqltype="cf_sql_bigint" value="#url.id#"> what value of #url.id#? had no problems either using cf8. > weird thing cf_sql_int not listed being accepted: iirc, when pass in invalid sql type cf uses default: cf_sql_char, accepts anything. ms sql implicit convert() right type , why works. More discussions in Data
Read more

localhost/joomla15/administrator doesnt work - Joomla! Forum - community, help and support

-
hi, i'm starting , address http://localhost/joomla15/administrator doesn't work (it stays blank, no error or anything). wonder if have change in address or somewhere else. joomla installed through web-host dreamhost.com , didn't have much. i appreciate help. silvia http://localhost tells browser not go out internet use localized web server installed on pc. lack of better description, localized web server doing coding , test site development on local pc using software turns pc "local" web server; hence, term - localhost. you mentioned dreamhost.com installing joomla. assume mean installed joomla on hosting account? so need access joomla installation by: http://www.yourdomain.com/joomla15/administrator Board index Joomla! Older Version Support Joomla! 1.5 Installation 1.5
Read more