I've noticed a strange established TCP connection (from unknown host) to portmaper which lasts for days, but apparently there is no traffic. I can see the following: # netstat -t tcp 0 0 MYHOST:sunrpc 211.250.216.195:691 ESTABLISHED # lsof portmap 158 root 5u IPv4 110899 TCP MYHOST:sunrpc->211.250.216.195:691 (ESTABLISHED) # tcpdump -n -i eth0 dst port 111 and not src net MYNET shows no traffic from the host Shouldn't kernel close the connection after 3 days of inactivity? (it should be rejected by tcp-wrappers in the first place ...) Please CC to me. -Igor Mozetic - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org
